Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/0af199-fe47-4f5b-9c68-15b944577c86/1/wiS2ntSiO3s-BnSj-ZRgHXO3uv8.mft
File:                     wiS2ntSiO3s-BnSj-ZRgHXO3uv8.mft (raw, json)
Hash identifier:          o33H9Tx8GKOqbbagTO01ojpAS4COTj2bbYBO9FpVoBI=
Subject key identifier:   25:EE:AF:A8:69:01:CF:EF:B4:B4:26:1B:5F:AF:5E:4E:CE:1C:FC:B3
Authority key identifier: C2:24:B6:9E:D4:A2:3B:7B:3E:06:74:A3:F9:94:60:1D:73:B7:BA:FF
Certificate issuer:       /CN=c224b69ed4a23b7b3e0674a3f994601d73b7baff
Certificate serial:       01962E98BE52FBA803D4527FD8ECF4085589
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wiS2ntSiO3s-BnSj-ZRgHXO3uv8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f4/0af199-fe47-4f5b-9c68-15b944577c86/1/wiS2ntSiO3s-BnSj-ZRgHXO3uv8.mft
Manifest number:          0433
Signing time:             Sun 13 Apr 2025 10:01:24 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:24 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:24 +0000
Files and hashes:         1: g5yuydF4Poe4QOJQ8dgMQtQLFlA.roa (hash: ztDU3PoyCa7wU7AjEFCTcvzcTrmXKsTMTZ/tLyZjIE8=)
                          2: gktrPpar80Yj3HO_xTl6-8tholk.roa (hash: 5YMgCwZjSTpe0kk7pnZdD0CkFN0NmRFgfWE0skj33rw=)
                          3: wiS2ntSiO3s-BnSj-ZRgHXO3uv8.crl (hash: gIepC9ldNbxrHV/x3EaJC+q0NBId5NMNH6qxp2Wfr/0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:be:52:fb:a8:03:d4:52:7f:d8:ec:f4:08:55:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c224b69ed4a23b7b3e0674a3f994601d73b7baff
        Validity
            Not Before: Apr 13 10:01:24 2025 GMT
            Not After : Apr 14 10:01:24 2025 GMT
        Subject: CN=25eeafa86901cfefb4b4261b5faf5e4ece1cfcb3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:16:6e:d5:65:92:6b:cf:11:11:4c:2d:22:bc:
                    78:dc:f1:8c:0e:b0:da:06:12:6d:49:81:2b:0d:d3:
                    8a:ab:ff:de:95:25:63:05:01:78:b8:53:d9:b8:67:
                    29:5c:9d:ba:eb:71:eb:d2:c2:55:82:b5:08:e4:82:
                    b2:ad:4f:80:1d:17:80:0a:a0:7a:ff:24:6e:f3:5d:
                    a2:46:c3:07:0d:f8:83:53:8d:fb:0d:a9:ab:62:e1:
                    7b:c6:09:23:ed:a7:a6:80:39:b6:b4:af:6f:69:21:
                    ec:c2:d4:55:a6:fd:ec:d7:73:b9:e5:fc:4b:8c:66:
                    32:ae:0c:9e:a0:48:46:27:03:22:6b:9b:d9:e7:b5:
                    0a:e8:3f:aa:52:3e:04:f7:e2:cd:e4:15:f6:ee:df:
                    ba:20:b0:06:d2:8d:24:e1:f3:df:9a:ad:8a:25:6d:
                    b6:72:ce:cf:39:f6:17:c5:73:d0:01:73:bb:31:c3:
                    d5:4f:b3:03:0d:ef:05:0b:59:5c:ec:c6:4f:6c:d6:
                    8b:42:5b:6f:23:70:24:1f:41:19:10:3d:cd:a6:9c:
                    5f:25:df:2c:75:40:bb:d7:ce:3a:6d:ce:37:ca:79:
                    a3:68:50:59:00:55:a0:10:df:e7:f9:96:98:94:ba:
                    84:27:92:ba:6c:59:06:33:c8:a3:ba:1e:34:87:91:
                    d5:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:EE:AF:A8:69:01:CF:EF:B4:B4:26:1B:5F:AF:5E:4E:CE:1C:FC:B3
            X509v3 Authority Key Identifier:
                keyid:C2:24:B6:9E:D4:A2:3B:7B:3E:06:74:A3:F9:94:60:1D:73:B7:BA:FF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wiS2ntSiO3s-BnSj-ZRgHXO3uv8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/0af199-fe47-4f5b-9c68-15b944577c86/1/wiS2ntSiO3s-BnSj-ZRgHXO3uv8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/0af199-fe47-4f5b-9c68-15b944577c86/1/wiS2ntSiO3s-BnSj-ZRgHXO3uv8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a4:57:d0:ca:3e:59:f1:29:74:e0:bd:8f:ab:11:8a:24:57:24:
         42:1b:ae:ae:32:b2:0e:23:a2:a9:1e:93:3d:58:64:0f:17:a6:
         d3:91:47:0b:0f:d4:a8:1a:ce:63:76:52:e2:f1:f2:36:2c:e3:
         2f:6a:92:55:3e:4c:5e:49:a6:f8:c4:10:6e:c6:81:d3:ff:69:
         54:d4:57:c1:6c:b2:f1:5e:67:e1:50:69:b7:f3:03:f6:52:a5:
         f1:48:52:7b:fd:54:23:5c:86:07:70:6d:19:37:35:7c:ed:be:
         5f:d5:56:48:a2:73:f5:ed:af:2f:60:25:21:79:87:16:fc:00:
         5e:4d:b1:30:b0:ee:1f:b2:71:c8:92:f0:70:96:3f:3c:1a:9c:
         23:b9:25:23:b9:68:42:36:fc:21:f7:0d:17:40:0e:f1:35:72:
         69:54:4a:c9:b2:a6:4b:6b:b5:dd:ab:1b:47:aa:be:03:cc:a2:
         9a:58:df:b5:f4:3c:ef:16:ab:09:43:57:f8:cc:5e:81:a9:1e:
         ea:54:f2:fb:cd:91:c2:da:2f:b0:90:3e:40:a0:a0:3a:91:72:
         da:c7:6f:6d:5c:63:c0:a7:60:12:28:c2:0a:a9:82:11:ac:39:
         77:a3:71:de:7b:ab:dd:d0:d9:77:1b:e2:13:af:a4:f7:f3:56:
         c5:63:5b:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----