Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/a1c6ec-c260-4ca2-887b-4bb94cbc2e73/1/W20XjxOFEwa1Y03xWXFjGfTYJHg.mft
File:                     W20XjxOFEwa1Y03xWXFjGfTYJHg.mft (raw, json)
Hash identifier:          RD/xO0bc/Av16G8vHh5aMtZgid1N2oignjwiWAHBcr0=
Subject key identifier:   9B:DC:AD:3D:20:AE:EE:3F:72:0F:01:55:FA:48:CE:A6:2A:FD:84:AF
Authority key identifier: 5B:6D:17:8F:13:85:13:06:B5:63:4D:F1:59:71:63:19:F4:D8:24:78
Certificate issuer:       /CN=5b6d178f13851306b5634df159716319f4d82478
Certificate serial:       01962F3DDAD4D615F00FEE8BA3795D5AADFD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/W20XjxOFEwa1Y03xWXFjGfTYJHg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fc/a1c6ec-c260-4ca2-887b-4bb94cbc2e73/1/W20XjxOFEwa1Y03xWXFjGfTYJHg.mft
Manifest number:          0B86
Signing time:             Sun 13 Apr 2025 13:01:44 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:44 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:44 +0000
Files and hashes:         1: 4Y2Nbo1_a6IBq8Cl0IDfGwKCP_M.roa (hash: 0bsJSEvzwH1XPIlPA10NL/s8qRTvdmZt752O+GQRDjw=)
                          2: W20XjxOFEwa1Y03xWXFjGfTYJHg.crl (hash: zOgncUI91G71JKOTtst0JZis7LV+ehC61Q1RNknyPAc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:da:d4:d6:15:f0:0f:ee:8b:a3:79:5d:5a:ad:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b6d178f13851306b5634df159716319f4d82478
        Validity
            Not Before: Apr 13 13:01:44 2025 GMT
            Not After : Apr 14 13:01:44 2025 GMT
        Subject: CN=9bdcad3d20aeee3f720f0155fa48cea62afd84af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:ac:e1:ce:93:5d:d2:a4:e1:db:8b:cc:dd:cb:
                    11:9b:c2:32:e8:5c:c2:a1:34:9c:53:f6:4e:7c:46:
                    bd:32:3d:62:19:4e:1a:12:f9:1b:e8:c5:dd:08:26:
                    ec:ad:0e:07:46:d3:2c:56:c1:c4:4f:14:ae:7a:84:
                    4a:40:b0:00:b2:6a:cb:61:ad:46:2a:0f:8b:00:b7:
                    4f:80:46:5c:ec:f6:22:d8:00:9e:a3:72:5e:21:3f:
                    c7:d9:97:3e:05:bf:17:0e:5b:ed:98:ff:9d:16:92:
                    80:70:01:71:ae:95:d9:ba:72:1f:97:bf:01:c5:f8:
                    e4:08:56:5b:d3:ef:a0:62:06:fa:8c:d5:c8:09:9d:
                    f4:6e:6c:78:fd:b5:6d:8e:d9:54:e2:77:05:ac:ee:
                    3e:ec:09:4d:27:9c:fe:ba:fc:5e:df:70:91:e7:c4:
                    23:03:7e:0d:65:d4:43:d7:d4:f0:06:4f:e8:43:19:
                    9f:1f:7b:3c:69:e0:b8:82:2d:96:1a:a7:6a:dd:60:
                    09:9c:77:73:cf:b7:a3:ad:6e:de:01:b6:d8:05:2b:
                    47:33:59:3d:81:a4:71:77:fe:d2:bb:51:28:d3:ea:
                    8d:a2:47:08:84:b9:d6:af:ee:fe:64:a6:47:c6:17:
                    ec:66:fa:a7:56:bc:4d:a2:3e:5e:01:4f:71:b3:8f:
                    ba:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:DC:AD:3D:20:AE:EE:3F:72:0F:01:55:FA:48:CE:A6:2A:FD:84:AF
            X509v3 Authority Key Identifier:
                keyid:5B:6D:17:8F:13:85:13:06:B5:63:4D:F1:59:71:63:19:F4:D8:24:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W20XjxOFEwa1Y03xWXFjGfTYJHg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/a1c6ec-c260-4ca2-887b-4bb94cbc2e73/1/W20XjxOFEwa1Y03xWXFjGfTYJHg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/a1c6ec-c260-4ca2-887b-4bb94cbc2e73/1/W20XjxOFEwa1Y03xWXFjGfTYJHg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:1e:67:b5:a0:10:cd:72:cf:dd:4a:0b:de:a9:55:fe:c0:e0:
         f9:5c:83:1f:ba:f8:5d:07:01:86:2f:6a:b8:71:25:29:c0:c5:
         8e:42:08:6c:a1:36:b9:29:18:97:85:ce:be:07:25:2c:ab:fc:
         6c:29:94:a5:41:5b:95:6b:04:6f:1e:e0:4d:91:76:a6:3e:3f:
         1f:28:7e:6a:42:a9:79:6c:61:92:4f:c5:c8:76:fd:38:0c:5c:
         48:7e:0e:73:72:fe:28:3b:25:03:86:03:06:01:8c:92:c0:8b:
         b5:f1:f9:ab:cf:04:d9:4f:0d:9a:ef:ac:61:e6:6e:91:02:d1:
         20:3c:da:1a:fa:51:19:c1:49:a4:fb:4f:a9:1d:d4:28:c5:e4:
         f5:cf:61:f9:a5:6f:56:8c:21:95:a1:11:c9:35:1c:ad:c9:08:
         24:d2:c7:49:5d:88:c2:7f:1d:8f:d0:2d:39:c3:2e:84:b4:01:
         9a:9c:d4:f5:e1:76:06:7d:fe:46:2d:22:68:45:b2:43:47:3b:
         14:05:cd:e5:e8:5e:f6:fc:a4:8c:da:d7:cd:41:70:70:c6:a5:
         7d:ee:71:40:08:d5:69:47:a9:df:45:d3:fb:c6:fa:d5:83:55:
         b8:d1:1a:8f:2a:4e:ed:15:54:7c:28:96:29:2a:e0:db:8b:ef:
         1f:3f:8d:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----