Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/264f9a-13ea-4c50-a6a9-712d5e17a6f6/1/leiDWblaOWSub5oM2q4H9Xn5jDU.mft
File:                     leiDWblaOWSub5oM2q4H9Xn5jDU.mft (raw, json)
Hash identifier:          K6Y7Y3qHlko6fGDqE3fwy29yaKeEDDoeaIEnm5yMbDM=
Subject key identifier:   28:87:D8:7E:27:1E:78:B1:D4:A3:38:89:19:84:18:A9:88:FC:EB:9A
Authority key identifier: 95:E8:83:59:B9:5A:39:64:AE:6F:9A:0C:DA:AE:07:F5:79:F9:8C:35
Certificate issuer:       /CN=95e88359b95a3964ae6f9a0cdaae07f579f98c35
Certificate serial:       01962F06CDDD6647A4BF1483A755FB123471
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/leiDWblaOWSub5oM2q4H9Xn5jDU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e4/264f9a-13ea-4c50-a6a9-712d5e17a6f6/1/leiDWblaOWSub5oM2q4H9Xn5jDU.mft
Manifest number:          02AC
Signing time:             Sun 13 Apr 2025 12:01:37 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:37 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:37 +0000
Files and hashes:         1: leiDWblaOWSub5oM2q4H9Xn5jDU.crl (hash: ZW4KTm4EaEQuV8lGPJI2NoNcEsAu4ew2HeK8uEzg0XU=)
                          2: pe1o9e3jWHQk95p2Ei_dXirE0kc.roa (hash: 7nIBr99cFeZBlfuF7+XYt3ntEwToRh90vxok7wcdM9Q=)
                          3: rzPMwtKJbrfVAK2tZQ7ho2lMTko.roa (hash: 6lSfgp9VWZJODBNAF2r5pCybLvr4sFR9bMz2OJU8t8k=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:cd:dd:66:47:a4:bf:14:83:a7:55:fb:12:34:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=95e88359b95a3964ae6f9a0cdaae07f579f98c35
        Validity
            Not Before: Apr 13 12:01:37 2025 GMT
            Not After : Apr 14 12:01:37 2025 GMT
        Subject: CN=2887d87e271e78b1d4a33889198418a988fceb9a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:11:f4:47:8a:af:3d:b6:04:88:b9:2b:1a:40:
                    61:02:0a:54:e9:0f:fb:d0:92:e5:aa:79:ca:40:8d:
                    03:60:17:74:93:e7:d7:99:c4:ae:e8:0a:69:fb:fe:
                    26:37:73:b3:6a:34:74:08:93:c3:7d:bd:54:37:1c:
                    0d:d9:7e:a6:c5:8a:62:3e:14:ac:77:de:d1:1e:80:
                    9a:f4:f1:7f:ad:63:15:2b:c5:16:98:69:63:31:f4:
                    ca:0e:0e:bc:0e:b3:f1:86:1b:8e:8c:77:0b:75:54:
                    58:43:5b:86:ba:af:bc:8a:09:ad:12:5a:fb:85:f2:
                    ae:40:47:2a:4f:c4:b2:65:3f:68:00:fd:c7:df:94:
                    d7:62:f4:3b:57:55:bc:9e:c4:de:6a:34:85:2a:24:
                    b0:2e:53:93:1a:3b:89:fd:5a:47:ab:4c:e4:dd:59:
                    95:de:e2:2d:56:34:c8:ea:4f:22:14:01:46:07:db:
                    f3:4b:34:67:76:5d:62:17:93:69:ab:dd:64:bf:8b:
                    81:f1:ee:9b:83:93:f7:9f:63:d3:08:41:c9:c7:81:
                    b6:83:d6:02:46:58:51:f6:5f:5f:04:f8:3d:e6:14:
                    46:0c:b7:da:d5:a8:de:5d:f5:36:06:51:25:e9:cb:
                    3e:74:e9:c3:77:e2:04:e9:49:2f:57:61:8d:b3:5d:
                    e3:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:87:D8:7E:27:1E:78:B1:D4:A3:38:89:19:84:18:A9:88:FC:EB:9A
            X509v3 Authority Key Identifier:
                keyid:95:E8:83:59:B9:5A:39:64:AE:6F:9A:0C:DA:AE:07:F5:79:F9:8C:35

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/leiDWblaOWSub5oM2q4H9Xn5jDU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/264f9a-13ea-4c50-a6a9-712d5e17a6f6/1/leiDWblaOWSub5oM2q4H9Xn5jDU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/264f9a-13ea-4c50-a6a9-712d5e17a6f6/1/leiDWblaOWSub5oM2q4H9Xn5jDU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:50:21:55:60:40:1f:fc:64:ba:7e:a2:4d:da:8c:96:bf:4b:
         db:3d:1b:bc:9a:98:10:fa:8a:e6:4d:af:26:e5:83:45:87:15:
         0b:49:63:81:60:70:26:0d:bc:38:df:2d:67:30:8d:91:6c:8c:
         a2:00:99:af:a9:d3:9a:91:63:79:78:71:c6:b2:54:b1:ab:1f:
         e7:c7:05:67:47:0a:92:2e:11:4b:56:62:f3:39:6b:4e:b0:cb:
         75:4b:29:dc:e9:47:b1:78:73:8d:0a:f3:74:6b:f7:bd:2d:8c:
         fd:64:24:02:f9:fc:b1:05:ab:60:29:06:f2:09:f8:7a:23:fe:
         29:3d:b6:52:f5:0a:ac:e0:03:8b:37:0f:50:8c:3c:5b:bd:01:
         f1:9f:61:c4:b2:12:22:6e:81:84:69:a9:5f:9f:ba:4b:96:f8:
         01:b4:b9:95:ab:de:50:6b:45:01:dc:12:4a:50:27:fd:fd:8f:
         ac:47:71:cc:ff:33:c8:96:78:68:ce:0c:cd:a5:9d:f2:e3:0b:
         a3:37:52:77:9b:40:94:99:6c:70:92:d3:b0:82:7e:76:0d:0d:
         4a:71:02:ec:0d:19:6f:ed:b4:ae:aa:31:4d:77:9f:61:b0:09:
         85:89:02:8a:6f:14:a0:58:0f:2c:15:a9:d1:1e:95:d4:dc:05:
         a3:4f:f0:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----