Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/32f3bb-2594-4b37-94aa-941244f5dded/1/wnz1VgIH7OhILDL8tplfd9f3MMs.mft
File:                     wnz1VgIH7OhILDL8tplfd9f3MMs.mft (raw, json)
Hash identifier:          UyFt6LnWxBoQ4zllgyA5WC9rO4JwkT0QIPXyKyNU6lo=
Subject key identifier:   3D:18:25:E5:DA:14:C1:B0:C1:B5:02:8E:B3:40:A9:A7:CC:EB:2C:D6
Authority key identifier: C2:7C:F5:56:02:07:EC:E8:48:2C:32:FC:B6:99:5F:77:D7:F7:30:CB
Certificate issuer:       /CN=c27cf5560207ece8482c32fcb6995f77d7f730cb
Certificate serial:       01962E99483D7272170CEB16260FA361427A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wnz1VgIH7OhILDL8tplfd9f3MMs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ef/32f3bb-2594-4b37-94aa-941244f5dded/1/wnz1VgIH7OhILDL8tplfd9f3MMs.mft
Manifest number:          01D0
Signing time:             Sun 13 Apr 2025 10:01:59 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:59 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:59 +0000
Files and hashes:         1: f45K-_tztLGikN2V1uWSCFuY_68.roa (hash: xJe3gW2GTPkOmGgSxCeDd1gAbtFU96D/eKs9HOKj+Eo=)
                          2: wnz1VgIH7OhILDL8tplfd9f3MMs.crl (hash: /gE/U5/9MI2ejmhOGgS5NjX9yZn/b/N/2e76DQNyzBk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:48:3d:72:72:17:0c:eb:16:26:0f:a3:61:42:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c27cf5560207ece8482c32fcb6995f77d7f730cb
        Validity
            Not Before: Apr 13 10:01:59 2025 GMT
            Not After : Apr 14 10:01:59 2025 GMT
        Subject: CN=3d1825e5da14c1b0c1b5028eb340a9a7cceb2cd6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:31:72:6d:37:b3:07:cf:2f:cc:22:41:0a:93:
                    c3:45:71:08:92:10:c7:3c:a1:47:6f:ff:89:cd:f1:
                    3b:5d:01:b6:fb:cc:d8:6f:c8:2a:2c:2b:9c:99:16:
                    c4:7d:60:97:a1:bd:8c:ca:bb:88:d5:5e:76:75:8e:
                    c1:88:ac:f2:cd:3a:62:01:6e:0e:d1:77:d4:ac:e7:
                    fb:7a:dd:08:e0:68:a7:75:de:68:fb:50:db:41:c3:
                    8d:5e:87:32:56:17:0f:50:7f:f7:c8:f1:22:b8:90:
                    f3:3b:8a:c3:21:56:8e:f5:d5:fa:b1:ab:34:91:f9:
                    ad:83:f8:3c:41:5b:46:a7:c0:eb:fd:2e:5c:aa:5e:
                    1e:ed:e0:3a:04:3f:7c:0a:69:69:4a:55:49:2b:eb:
                    50:18:8d:12:4d:7d:06:61:ab:be:fd:19:f2:f8:85:
                    f6:15:77:cb:3a:6f:68:6a:89:5c:3c:1d:c4:c4:e7:
                    54:58:59:26:c9:cc:96:e6:3a:70:14:83:68:f5:b6:
                    cb:9d:0a:15:60:7e:a6:fd:1e:78:80:7e:ab:3b:55:
                    2f:42:58:a2:47:f6:03:a1:18:83:c8:e8:39:18:1f:
                    c2:f3:8f:ea:1e:2c:fc:de:74:28:5c:5e:e4:8b:b6:
                    eb:d8:f3:42:ed:0a:86:c3:8a:18:29:a0:e1:77:02:
                    69:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:18:25:E5:DA:14:C1:B0:C1:B5:02:8E:B3:40:A9:A7:CC:EB:2C:D6
            X509v3 Authority Key Identifier:
                keyid:C2:7C:F5:56:02:07:EC:E8:48:2C:32:FC:B6:99:5F:77:D7:F7:30:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wnz1VgIH7OhILDL8tplfd9f3MMs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/32f3bb-2594-4b37-94aa-941244f5dded/1/wnz1VgIH7OhILDL8tplfd9f3MMs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/32f3bb-2594-4b37-94aa-941244f5dded/1/wnz1VgIH7OhILDL8tplfd9f3MMs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:80:16:7a:2d:53:80:70:ee:34:47:19:f4:50:8f:5a:62:84:
         8c:5f:dc:5b:0f:b0:45:e9:65:6d:71:79:1f:25:c5:34:c0:b4:
         41:fc:dc:aa:56:2e:aa:2a:87:bd:66:3c:af:3e:71:de:4f:1f:
         23:e6:a7:6e:96:ca:62:16:69:86:4c:3c:0f:89:60:47:71:63:
         7d:e2:c3:4f:e4:fc:a4:72:34:6f:c4:84:8c:f0:82:77:64:23:
         49:79:05:3b:2e:75:f4:3a:13:d1:3c:f0:5d:e9:a4:93:0c:6e:
         63:c8:46:f2:62:d8:6e:69:be:2e:90:16:b5:65:56:f9:57:16:
         8a:86:4c:bc:78:b0:56:61:42:95:b5:a0:0c:55:0d:4e:5c:c6:
         0d:a1:72:27:b3:f9:46:0b:d5:3c:e3:9e:a2:55:fb:76:e8:f1:
         68:9a:52:69:01:06:84:e0:69:e2:6c:08:45:cd:81:f7:06:17:
         35:52:ea:78:df:42:8b:31:52:52:d2:3c:69:5a:a1:c1:41:5f:
         80:9d:6c:0e:1c:6e:cc:2d:98:05:0e:a9:8a:a0:15:7b:8a:77:
         ad:9d:a5:b7:f6:16:84:27:e7:32:c8:9d:18:5c:fd:73:45:22:
         40:98:43:af:af:ed:66:79:c2:33:af:10:33:eb:74:01:62:dc:
         cc:bd:36:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----