Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/6ec66d-d6b6-430f-8fcb-e70a911a1c7b/1/w9yyPepY-X-tWnl7RXdB1b_msbA.mft
File:                     w9yyPepY-X-tWnl7RXdB1b_msbA.mft (raw, json)
Hash identifier:          0z49TsZ/K4n7aj0Xuvm2Hc91qwecaGrYQC4sSROKVRU=
Subject key identifier:   5C:29:B8:F7:06:11:41:78:B4:7F:AB:22:3B:39:F6:DF:04:7A:66:5A
Authority key identifier: C3:DC:B2:3D:EA:58:F9:7F:AD:5A:79:7B:45:77:41:D5:BF:E6:B1:B0
Certificate issuer:       /CN=c3dcb23dea58f97fad5a797b457741d5bfe6b1b0
Certificate serial:       01962DF41D64032E879A7F33223FA88E96A5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/w9yyPepY-X-tWnl7RXdB1b_msbA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f3/6ec66d-d6b6-430f-8fcb-e70a911a1c7b/1/w9yyPepY-X-tWnl7RXdB1b_msbA.mft
Manifest number:          14EA
Signing time:             Sun 13 Apr 2025 07:01:34 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:34 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:34 +0000
Files and hashes:         1: KvTnsIcL8m_pQPoNHudO5mxyd6I.roa (hash: LQX5cYypJwp0YO63rbhroJGzv3tgP3X96RXpqlbq7V0=)
                          2: w9yyPepY-X-tWnl7RXdB1b_msbA.crl (hash: 9dLbBsghsVce0SvNNBF5l09/usn4BtmrhlSnkhxlcPs=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f4:1d:64:03:2e:87:9a:7f:33:22:3f:a8:8e:96:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c3dcb23dea58f97fad5a797b457741d5bfe6b1b0
        Validity
            Not Before: Apr 13 07:01:34 2025 GMT
            Not After : Apr 14 07:01:34 2025 GMT
        Subject: CN=5c29b8f706114178b47fab223b39f6df047a665a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:9a:3f:41:a2:f2:82:76:9c:dd:6f:7d:b5:af:
                    75:55:32:f8:a7:e3:74:13:aa:0b:3a:0c:03:1b:1a:
                    5b:ff:07:9e:fb:93:f7:23:0f:10:31:8b:44:4a:99:
                    c1:61:7d:26:b6:9f:e9:21:41:14:f9:67:68:b7:f6:
                    13:fe:02:d6:ad:ad:7c:63:f0:98:38:3c:73:af:dc:
                    83:1f:5c:14:67:77:99:e7:46:6c:23:15:17:f9:97:
                    e8:af:85:6b:0b:38:66:63:1f:1f:53:58:77:f9:44:
                    7e:cc:39:98:1e:47:45:d3:40:53:a9:ab:6e:a8:c8:
                    f3:84:b9:b4:86:a8:12:1a:45:fc:0b:31:85:00:20:
                    90:d5:84:a3:fe:cd:81:3c:a1:e2:5d:2e:12:c7:cc:
                    ad:23:d2:8e:a2:da:e1:75:24:d3:27:17:f3:74:b7:
                    14:03:cd:d2:f7:11:4b:6e:35:7f:50:1d:f8:70:27:
                    b6:bc:36:c7:7c:75:8b:08:16:14:35:d2:14:1e:cf:
                    f1:dd:f6:dd:25:7f:6f:59:66:66:58:ef:d5:82:f4:
                    3e:f0:82:dd:9b:c4:f4:c1:df:a2:a4:7f:6d:d0:8b:
                    55:ff:3f:db:bc:23:01:7f:d6:18:2e:51:c9:3d:83:
                    51:d5:7b:c9:a0:d9:cb:7c:8e:b1:d4:3c:df:6d:b2:
                    10:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:29:B8:F7:06:11:41:78:B4:7F:AB:22:3B:39:F6:DF:04:7A:66:5A
            X509v3 Authority Key Identifier:
                keyid:C3:DC:B2:3D:EA:58:F9:7F:AD:5A:79:7B:45:77:41:D5:BF:E6:B1:B0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w9yyPepY-X-tWnl7RXdB1b_msbA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/6ec66d-d6b6-430f-8fcb-e70a911a1c7b/1/w9yyPepY-X-tWnl7RXdB1b_msbA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/6ec66d-d6b6-430f-8fcb-e70a911a1c7b/1/w9yyPepY-X-tWnl7RXdB1b_msbA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a8:02:69:2b:2a:cc:b2:ec:91:45:7b:66:13:93:1e:98:5c:14:
         69:7b:f2:08:01:20:dd:5e:5d:a4:d6:01:10:47:82:0c:27:a7:
         f0:90:ac:d8:0a:7c:da:1a:0a:aa:ec:ab:2a:94:5c:a6:83:f9:
         bd:c5:4b:05:4f:4a:48:78:f8:9b:8e:9b:d8:02:09:58:af:1b:
         5b:50:e7:23:1b:d2:1e:7e:09:22:00:08:9a:65:55:14:15:b8:
         80:ba:21:37:1c:af:f0:5a:5e:15:ac:c4:75:e4:22:da:2e:7d:
         fa:65:dd:69:9c:ba:fe:10:55:4f:01:ec:c7:9f:e6:d8:88:ff:
         b5:4f:fb:24:60:b1:03:d4:d0:ba:cf:42:71:b9:40:0b:1c:5a:
         7b:6f:51:15:0d:8a:d9:89:de:51:6f:c0:f2:4d:7e:1b:49:31:
         0d:70:a1:df:e7:e3:ae:39:c1:d3:49:70:17:7d:e0:a0:a6:b0:
         3f:51:08:cb:54:3a:23:15:14:84:e8:57:2c:49:81:14:3f:fa:
         33:51:bb:ca:13:e3:27:30:c9:47:d4:b7:51:12:86:1f:61:47:
         36:80:19:cf:06:d5:92:75:87:d1:2c:1d:5b:ec:ac:b4:f4:12:
         b6:aa:25:06:22:f1:ac:18:9b:82:3e:10:77:9f:0e:13:ca:75:
         86:25:5f:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----