Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/6b7485-a265-4e29-b27d-1bc0c7baf5e3/1/w_W0TiSnGM-yONFLvHVe8VLylcE.mft
File:                     w_W0TiSnGM-yONFLvHVe8VLylcE.mft (raw, json)
Hash identifier:          yFF/CmazX+ACzVDoYQLPHc/36Y0yr5gZDFjxI81hZB8=
Subject key identifier:   79:66:C1:70:BC:C9:17:5A:9B:60:62:1C:42:05:AD:F5:C7:18:2A:3F
Authority key identifier: C3:F5:B4:4E:24:A7:18:CF:B2:38:D1:4B:BC:75:5E:F1:52:F2:95:C1
Certificate issuer:       /CN=c3f5b44e24a718cfb238d14bbc755ef152f295c1
Certificate serial:       01962F0737BC6D8364F612D84F15A346BB41
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/w_W0TiSnGM-yONFLvHVe8VLylcE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f8/6b7485-a265-4e29-b27d-1bc0c7baf5e3/1/w_W0TiSnGM-yONFLvHVe8VLylcE.mft
Manifest number:          0AC4
Signing time:             Sun 13 Apr 2025 12:02:04 +0000
Manifest this update:     Sun 13 Apr 2025 12:02:04 +0000
Manifest next update:     Mon 14 Apr 2025 12:02:04 +0000
Files and hashes:         1: w_W0TiSnGM-yONFLvHVe8VLylcE.crl (hash: fYez8kqOfl61SHoNsOLDtxV58JMN2y9NQmfb8Bobj4A=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:07:37:bc:6d:83:64:f6:12:d8:4f:15:a3:46:bb:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c3f5b44e24a718cfb238d14bbc755ef152f295c1
        Validity
            Not Before: Apr 13 12:02:04 2025 GMT
            Not After : Apr 14 12:02:04 2025 GMT
        Subject: CN=7966c170bcc9175a9b60621c4205adf5c7182a3f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:a3:b6:f2:0b:1d:54:e2:53:e5:59:79:25:7b:
                    f6:a5:7b:bf:97:22:5b:9d:91:7d:60:92:67:ea:3c:
                    f5:17:45:45:26:f8:aa:2d:4d:c9:90:f1:0d:fd:00:
                    5d:8b:29:9d:f7:24:cd:47:dd:db:cf:85:6e:98:94:
                    5b:45:2d:10:6d:2b:b3:cd:c2:b9:6f:2d:6c:21:33:
                    9c:7a:1e:0a:20:b4:ad:59:67:b4:2f:67:a4:c5:e6:
                    fd:24:c7:73:51:f3:a4:22:ec:e5:cf:9d:d2:1b:2a:
                    cb:b9:21:1c:03:ca:ad:0c:4c:86:38:10:cc:6e:71:
                    cc:d6:b4:4a:57:3f:b7:50:9c:23:59:9d:88:77:1a:
                    20:80:0c:c5:93:ff:01:ea:85:47:96:3e:79:fb:c1:
                    15:12:f7:2f:d0:df:e3:a5:3d:83:c4:ea:ce:f1:fc:
                    ec:07:27:2e:f5:4a:76:d7:99:6c:40:a7:04:b8:6f:
                    ff:50:a7:55:b4:b5:59:41:da:e6:12:2f:69:2f:58:
                    41:bc:b3:10:16:54:84:54:0a:2e:bc:0b:73:e2:36:
                    5d:01:1f:fe:09:f9:00:9a:63:aa:b9:af:dd:a6:3c:
                    8d:47:80:51:c0:28:ca:49:f3:17:b2:0b:60:8c:1e:
                    fe:01:01:a3:45:7f:6e:73:7e:7b:e2:5e:e4:af:27:
                    0d:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:66:C1:70:BC:C9:17:5A:9B:60:62:1C:42:05:AD:F5:C7:18:2A:3F
            X509v3 Authority Key Identifier:
                keyid:C3:F5:B4:4E:24:A7:18:CF:B2:38:D1:4B:BC:75:5E:F1:52:F2:95:C1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w_W0TiSnGM-yONFLvHVe8VLylcE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/6b7485-a265-4e29-b27d-1bc0c7baf5e3/1/w_W0TiSnGM-yONFLvHVe8VLylcE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/6b7485-a265-4e29-b27d-1bc0c7baf5e3/1/w_W0TiSnGM-yONFLvHVe8VLylcE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:d3:8e:0c:2b:1c:9c:b8:c6:c7:ee:b9:cc:8f:09:68:3d:67:
         66:52:62:d9:dc:00:b9:72:19:68:5c:23:b7:90:1b:0d:83:bb:
         61:5f:29:f8:c1:dd:81:ed:31:6f:af:15:8e:11:bf:65:f0:ea:
         13:ab:74:79:dc:52:1f:c0:67:39:1e:89:be:22:b0:06:c5:ff:
         e6:88:84:d1:54:63:b7:77:cc:8d:bc:36:ce:7c:44:8e:44:fd:
         64:b3:6b:a0:5a:b8:55:0c:b0:4a:1b:78:0a:b7:90:af:a4:3a:
         32:d3:fc:6e:51:93:9b:23:19:ae:f1:da:0d:1e:12:f5:63:4b:
         57:1f:66:07:fb:89:bc:f6:df:da:db:83:5e:62:62:2a:8f:b4:
         97:45:06:85:4c:e1:40:e9:fb:f1:6e:0f:5e:30:5a:22:85:12:
         35:f8:90:3d:0e:40:e5:32:1f:bd:2a:60:f7:af:3b:f2:11:13:
         9e:51:01:08:0a:f0:ce:43:a5:0e:bf:35:78:90:ad:06:42:50:
         9b:c2:dc:7e:8b:47:6e:bb:18:80:0b:79:31:64:bd:7c:43:1d:
         71:ce:3a:43:8f:77:ae:00:43:9d:1b:93:2e:c0:c8:75:1a:8a:
         e3:b3:13:f7:97:28:35:8c:bb:e0:b6:9a:79:45:c4:ce:60:c4:
         16:5a:a6:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----