Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/d734fa-6e83-4683-bf49-87122b514e69/1/WYjwhVxEeNG5Srio1tnZxRHzFCY.mft
File:                     WYjwhVxEeNG5Srio1tnZxRHzFCY.mft (raw, json)
Hash identifier:          pFI1t4g1v1Lnul3UHKdlPG+AOyR46IrhHqMnxpeTdDo=
Subject key identifier:   43:D7:6E:99:AF:DA:83:05:F8:D3:C2:28:35:2D:32:55:F2:0C:A6:30
Authority key identifier: 59:88:F0:85:5C:44:78:D1:B9:4A:B8:A8:D6:D9:D9:C5:11:F3:14:26
Certificate issuer:       /CN=5988f0855c4478d1b94ab8a8d6d9d9c511f31426
Certificate serial:       01962E9867E7E808C11552E3FD4CECE2DCD2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WYjwhVxEeNG5Srio1tnZxRHzFCY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e1/d734fa-6e83-4683-bf49-87122b514e69/1/WYjwhVxEeNG5Srio1tnZxRHzFCY.mft
Manifest number:          0BA0
Signing time:             Sun 13 Apr 2025 10:01:01 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:01 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:01 +0000
Files and hashes:         1: WYjwhVxEeNG5Srio1tnZxRHzFCY.crl (hash: RjkiWPMIUH8gI+HzynRekY+EaaXpTSKA/jivhUDAgv8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:67:e7:e8:08:c1:15:52:e3:fd:4c:ec:e2:dc:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5988f0855c4478d1b94ab8a8d6d9d9c511f31426
        Validity
            Not Before: Apr 13 10:01:01 2025 GMT
            Not After : Apr 14 10:01:01 2025 GMT
        Subject: CN=43d76e99afda8305f8d3c228352d3255f20ca630
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:95:94:51:b2:02:30:ec:59:d1:c0:3b:de:a1:
                    82:db:dc:7b:7b:e0:c3:b6:43:d3:95:e1:e3:e7:38:
                    8f:9f:87:ba:52:32:1b:01:f2:2f:18:3e:c5:ad:f4:
                    7a:7f:b9:0b:b4:d7:85:51:83:70:f6:a7:d9:28:6e:
                    93:b8:66:cc:10:4f:46:d9:f6:05:e7:c0:54:e1:33:
                    2e:8d:c7:cb:8d:e1:ac:99:b5:6a:fd:7d:d8:12:11:
                    84:c0:3c:44:18:89:96:a3:c4:21:47:ba:fe:f7:95:
                    b3:f7:cb:ab:6e:f9:f6:53:dd:8a:a9:05:31:5c:81:
                    4b:d9:41:53:2b:ef:9f:b1:4c:e8:1c:be:65:84:88:
                    70:c7:78:6c:aa:27:e5:58:bb:d3:af:f1:63:bd:19:
                    6e:4c:e9:78:e1:21:39:66:f6:1b:45:31:49:b1:ab:
                    1a:69:6e:44:97:0b:eb:71:e3:db:33:f5:f4:fb:f1:
                    97:61:63:60:a1:bc:e6:d3:96:de:e4:54:9c:db:83:
                    e0:82:81:3c:de:aa:6b:13:29:c4:3b:67:69:d0:1c:
                    08:72:46:ef:6d:ee:cc:d0:ed:ca:ac:0e:d2:48:b3:
                    5a:68:60:a4:58:76:06:d1:05:11:19:3a:cf:81:56:
                    cf:83:a6:40:90:7f:17:41:31:31:83:8f:fa:7d:83:
                    76:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:D7:6E:99:AF:DA:83:05:F8:D3:C2:28:35:2D:32:55:F2:0C:A6:30
            X509v3 Authority Key Identifier:
                keyid:59:88:F0:85:5C:44:78:D1:B9:4A:B8:A8:D6:D9:D9:C5:11:F3:14:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WYjwhVxEeNG5Srio1tnZxRHzFCY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/d734fa-6e83-4683-bf49-87122b514e69/1/WYjwhVxEeNG5Srio1tnZxRHzFCY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/d734fa-6e83-4683-bf49-87122b514e69/1/WYjwhVxEeNG5Srio1tnZxRHzFCY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:e4:6d:7f:22:ac:17:b9:a6:7b:cb:e7:8d:dc:82:9f:0b:17:
         a2:a4:c8:81:36:79:ef:e2:31:d6:cb:e7:5f:18:17:26:0e:f0:
         8f:00:3a:81:4e:18:36:f1:a2:c6:d6:4a:7c:a6:40:b7:0f:3c:
         c8:80:ad:48:db:61:5f:4e:ac:38:3a:95:dc:61:4a:07:76:4a:
         5f:4c:b8:a0:37:2a:57:46:a6:21:03:02:04:15:d4:91:21:0b:
         de:9f:1d:c7:3e:8a:e1:af:9a:34:e2:bb:6c:ac:01:7f:be:96:
         25:01:0c:06:3f:be:cd:93:08:70:19:50:a3:6d:05:6a:a0:6e:
         89:d9:0e:2b:6d:47:52:22:b0:a1:94:61:cd:d8:02:a6:0e:14:
         3f:6d:56:f9:03:cc:75:f7:24:25:d3:fc:a0:40:75:20:86:20:
         59:22:b1:2c:72:30:b6:f1:dc:76:02:68:66:65:3d:11:33:0b:
         d9:32:e5:82:d5:30:4b:d9:ff:84:94:c0:a0:15:64:02:95:b3:
         73:6c:8f:82:6c:b7:83:d6:34:42:2e:83:25:e5:f1:07:9e:cb:
         dd:d3:6a:27:62:17:94:1c:b0:99:28:19:38:d1:9a:cd:27:f9:
         25:2b:45:d6:e5:72:e9:a2:9e:50:99:f8:ad:f4:9d:a9:05:ad:
         32:16:96:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----