Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/d4175d-192c-418c-972f-8ee21b74dd56/1/WAFcyNofG780PiarII34uyb9U64.mft
File:                     WAFcyNofG780PiarII34uyb9U64.mft (raw, json)
Hash identifier:          B8F5nhlZ5s7Bqbh2bv+vsRg6CAYWi9fUP0jqDBSOCb8=
Subject key identifier:   04:4E:33:76:F5:A7:21:03:89:BD:A5:CE:42:48:9C:AF:16:36:45:CC
Authority key identifier: 58:01:5C:C8:DA:1F:1B:BF:34:3E:26:AB:20:8D:F8:BB:26:FD:53:AE
Certificate issuer:       /CN=58015cc8da1f1bbf343e26ab208df8bb26fd53ae
Certificate serial:       01962E2AE06654C4F2E297403C06E80CA530
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WAFcyNofG780PiarII34uyb9U64.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e5/d4175d-192c-418c-972f-8ee21b74dd56/1/WAFcyNofG780PiarII34uyb9U64.mft
Manifest number:          14F5
Signing time:             Sun 13 Apr 2025 08:01:23 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:23 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:23 +0000
Files and hashes:         1: 9t5l9DU2DQd9JSq54qDiGTsAgAw.roa (hash: vFDXt6Ws4OGlOdrYdsisaEM0Z4ldRcdznPar93jpV/Q=)
                          2: DQQVfrDiRTCIUPr9zd0b4FQXD9s.roa (hash: 8keLR4RgePK/t+qeMIRiOhqAQZ/cmQFBEI8DEv5+z8s=)
                          3: WAFcyNofG780PiarII34uyb9U64.crl (hash: /MDazG8wUzdtysjnnwcPx1nNhKkho1x5dfd0ffP3r+o=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2a:e0:66:54:c4:f2:e2:97:40:3c:06:e8:0c:a5:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=58015cc8da1f1bbf343e26ab208df8bb26fd53ae
        Validity
            Not Before: Apr 13 08:01:23 2025 GMT
            Not After : Apr 14 08:01:23 2025 GMT
        Subject: CN=044e3376f5a7210389bda5ce42489caf163645cc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:d8:c7:d2:4e:3c:4e:0c:ed:21:3e:e4:d7:4c:
                    d5:54:e1:07:f6:46:65:0d:41:5c:b5:e5:32:35:18:
                    c8:b2:1e:c7:1c:e6:0b:f4:ed:4c:28:38:95:34:d9:
                    c9:0b:59:54:6e:6c:ba:0c:1f:7e:9f:55:df:49:d8:
                    a6:c2:61:d0:e5:21:0b:69:76:e9:2d:e5:f6:7b:c3:
                    85:49:61:c2:05:e7:6b:16:22:a4:1d:31:33:48:b2:
                    a5:cb:98:47:70:d2:ea:42:2e:4d:84:05:5b:d8:34:
                    41:2c:58:53:26:05:91:bd:bb:1d:38:d5:0e:f0:84:
                    ff:b0:5d:9b:44:aa:7f:c3:d6:45:29:eb:ef:92:4a:
                    6b:cc:f4:db:16:5a:dc:a8:f7:7c:6b:14:ee:17:e2:
                    16:dc:67:b7:1d:76:b7:23:3c:a9:d2:7d:62:0d:a5:
                    db:36:85:45:6f:f1:63:6d:1a:c7:3c:f3:ef:89:7c:
                    4b:f5:a9:0d:fe:bc:50:24:c3:4b:40:4c:b9:66:a4:
                    14:b6:50:4e:14:cd:86:8a:ed:0d:01:ba:4a:a3:f9:
                    38:a4:94:27:aa:6a:22:ee:54:54:0d:4c:7b:7c:c7:
                    1d:f4:a4:d6:d4:88:5c:6c:5f:67:af:a2:2d:6d:5e:
                    21:3d:e9:41:d4:0a:29:fb:04:03:65:cd:af:2b:c6:
                    a8:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:4E:33:76:F5:A7:21:03:89:BD:A5:CE:42:48:9C:AF:16:36:45:CC
            X509v3 Authority Key Identifier:
                keyid:58:01:5C:C8:DA:1F:1B:BF:34:3E:26:AB:20:8D:F8:BB:26:FD:53:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WAFcyNofG780PiarII34uyb9U64.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/d4175d-192c-418c-972f-8ee21b74dd56/1/WAFcyNofG780PiarII34uyb9U64.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/d4175d-192c-418c-972f-8ee21b74dd56/1/WAFcyNofG780PiarII34uyb9U64.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:75:72:25:8c:d6:1a:2d:c9:7b:6a:65:e5:22:0a:2e:5a:35:
         42:a2:55:d3:2c:5b:f6:ca:b8:ed:9c:f9:73:62:c4:f7:f7:73:
         d7:74:d0:85:30:79:34:3d:17:ac:ca:b0:ba:7e:b3:b8:ab:68:
         10:95:e5:87:62:c5:a9:2c:1b:fd:23:a0:fe:69:ff:3b:32:81:
         49:9d:e3:20:73:29:d2:87:41:d5:fd:20:3e:15:4b:4d:f3:a7:
         58:a4:f2:3c:68:87:d1:30:ff:30:aa:5f:a9:81:9e:28:99:24:
         e2:90:3f:f6:d1:75:a5:16:21:d4:3a:0e:34:44:27:79:5f:ef:
         2d:ed:9a:8d:59:5f:a6:21:dc:39:7a:d0:d7:f0:43:86:fc:f6:
         25:b4:d9:b8:cb:0d:f1:4a:4c:69:2a:1c:87:c2:89:af:dc:82:
         65:d1:47:cb:9e:de:96:ee:5e:c6:ee:76:0e:86:f4:ee:71:b6:
         08:b4:93:79:16:96:96:34:d9:32:c4:73:f3:78:0b:8c:8b:4d:
         a5:2e:69:2d:c2:62:5b:66:65:16:89:7b:d4:80:a6:19:a0:4f:
         b1:6e:7b:20:bc:f8:ad:93:b8:69:94:9b:bc:9f:d9:e0:74:9a:
         a4:f9:7e:a2:04:6e:1c:49:eb:a8:b8:c8:97:78:f2:34:88:3e:
         d2:21:a0:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----