Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/8eff42-5b55-4e6f-8222-a52a8795d956/1/W-4FGpOQHswBdEB5qkrC-wd7n8E.mft
File:                     W-4FGpOQHswBdEB5qkrC-wd7n8E.mft (raw, json)
Hash identifier:          CTHNTpYBVumCMPfMNF3dVKdil1VLIhbABFphDHyizVs=
Subject key identifier:   3F:25:2B:AD:B4:4E:0E:0A:29:F4:5F:28:67:F3:1D:7B:0A:5C:C8:14
Authority key identifier: 5B:EE:05:1A:93:90:1E:CC:01:74:40:79:AA:4A:C2:FB:07:7B:9F:C1
Certificate issuer:       /CN=5bee051a93901ecc01744079aa4ac2fb077b9fc1
Certificate serial:       0195E158E1BAAA4E9DA640CA76A872C2649D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/W-4FGpOQHswBdEB5qkrC-wd7n8E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/66/8eff42-5b55-4e6f-8222-a52a8795d956/1/W-4FGpOQHswBdEB5qkrC-wd7n8E.mft
Manifest number:          126E
Signing time:             Sat 29 Mar 2025 10:00:53 +0000
Manifest this update:     Sat 29 Mar 2025 10:00:53 +0000
Manifest next update:     Sun 30 Mar 2025 10:00:53 +0000
Files and hashes:         1: 279VdnG-Fdszjb2yG7-2IjnNQq8.roa (hash: 39BYbVFVCqd2qENpfGmBlifLRcfQzLv4w9dE1us6VMw=)
                          2: 4LSDpWlsgJw9Otx93_mKw6B9grg.roa (hash: c67VMb5sCTD5NQ5KlZtleOn3Nkqt4gilHv8oqn6VVoY=)
                          3: QZsEzF5Uanou3frIfzrz7sXtIzk.roa (hash: 6qhVEn0UXh14a1V5qFmAi7r1Lf/LN44JR4TpHEtpYIQ=)
                          4: Vx5x_bXNKHWPaLcbsSMbayKsJ6c.roa (hash: 8Re0cXlUrm/00gRHpwtqBPEBcWm8dUdY/V27GZgOOjY=)
                          5: W-4FGpOQHswBdEB5qkrC-wd7n8E.crl (hash: vq84axeHM1xdUwtd20nZ8Oa6nEMPAKCI60I21RKeG3w=)
                          6: _AxdM0TapJRwZRPAoGLBTsCIVsg.roa (hash: XGaXRToDPIvjJqkgJCg3fbR7ABXKEIiZ37d2bopOgi8=)
                          7: aFIEwyn9QMrdZxgjt2xaRy3HuBU.roa (hash: WYgPsctqzKEHGx9t7skC8EcDRaeZlFuUGl3x2x/2Veg=)
                          8: ckuQTVeOTWmVeOP4EBOPI4_kTkg.roa (hash: lbXsTVgXldq8a0VyZZLgKrRQ4BJoKPMcORX5A8N1vSY=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:e1:58:e1:ba:aa:4e:9d:a6:40:ca:76:a8:72:c2:64:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5bee051a93901ecc01744079aa4ac2fb077b9fc1
        Validity
            Not Before: Mar 29 10:00:53 2025 GMT
            Not After : Mar 30 10:00:53 2025 GMT
        Subject: CN=3f252badb44e0e0a29f45f2867f31d7b0a5cc814
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:dd:c1:4f:dd:f7:b8:38:30:57:d3:8b:77:2a:
                    be:6a:5f:f3:03:c5:2c:20:ac:2b:4c:c8:49:2f:70:
                    d5:8d:cd:72:66:32:a8:0a:f8:a6:8a:b0:2a:c8:41:
                    58:e8:29:d3:d6:3c:02:65:b9:4d:e1:fc:37:61:ff:
                    ae:fc:3e:97:94:1c:56:c0:7a:63:13:2f:96:d9:f1:
                    3b:0b:ff:43:a3:f6:60:c4:3e:7a:f9:f0:58:7f:81:
                    cf:fa:8e:97:69:c8:a8:9e:fe:a5:18:13:cf:2e:30:
                    d1:58:40:81:78:72:df:4f:74:c9:60:86:e4:73:16:
                    9e:0a:dd:3d:49:22:ca:d1:4d:8c:e3:d4:7d:77:2b:
                    7e:b5:29:64:ff:e6:c5:de:f8:33:2f:2b:5a:db:78:
                    9e:be:72:5e:93:3a:5f:65:17:84:ff:c6:ef:1f:28:
                    30:ec:88:ef:62:96:1a:e8:c4:fa:8c:89:7e:6f:71:
                    ce:46:5c:e3:49:76:e7:59:51:5a:83:fa:2d:62:fb:
                    1e:cb:e0:0e:48:fb:16:c8:ac:e3:af:2e:3c:d3:a1:
                    24:f5:59:8f:36:3b:c3:26:e4:17:02:f9:12:aa:17:
                    31:aa:db:f2:49:fe:97:13:24:a9:5c:9a:e9:24:57:
                    cd:50:49:65:56:e8:f6:26:8a:b1:8e:0a:48:da:d6:
                    eb:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:25:2B:AD:B4:4E:0E:0A:29:F4:5F:28:67:F3:1D:7B:0A:5C:C8:14
            X509v3 Authority Key Identifier:
                keyid:5B:EE:05:1A:93:90:1E:CC:01:74:40:79:AA:4A:C2:FB:07:7B:9F:C1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W-4FGpOQHswBdEB5qkrC-wd7n8E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/8eff42-5b55-4e6f-8222-a52a8795d956/1/W-4FGpOQHswBdEB5qkrC-wd7n8E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/66/8eff42-5b55-4e6f-8222-a52a8795d956/1/W-4FGpOQHswBdEB5qkrC-wd7n8E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         af:d4:53:92:c5:39:c2:cf:00:7e:66:18:8b:b6:23:c2:4e:97:
         29:fe:2f:1d:48:d0:f6:8a:e3:62:b0:f5:92:dc:2c:9d:18:16:
         a4:69:cb:19:33:f6:4c:9b:d2:1f:95:be:20:2b:d8:48:f9:2a:
         4b:12:56:d5:9d:9e:a0:99:16:44:6b:89:5b:24:f6:5b:e3:db:
         0c:b5:9e:99:ac:82:81:1a:cc:d2:08:0e:33:c0:02:d5:fd:da:
         59:68:24:21:4c:fc:09:cd:d3:6e:c9:17:6b:d3:5e:da:57:73:
         4c:95:75:5c:0d:4f:15:e2:88:27:49:88:98:8d:36:98:8b:5a:
         b9:66:f7:a9:c3:e5:aa:11:a8:f7:79:2b:ea:18:4e:41:a2:9b:
         72:d4:af:eb:ba:90:94:c9:e2:7b:af:1c:2e:6f:39:1c:11:f8:
         9e:09:dc:0e:68:83:ea:6c:48:88:ed:cd:7a:42:98:5a:2c:b1:
         80:c2:2d:ab:4a:93:68:d4:fd:47:48:0e:41:f8:00:58:47:1c:
         67:99:77:db:b3:9c:08:7d:8c:1e:1c:b1:e6:cd:ea:9c:ee:d1:
         5e:b8:3a:ee:59:00:e9:b9:a8:f3:b5:08:a8:ab:de:a0:ae:cb:
         11:71:d4:a0:78:b3:18:12:6a:8f:a8:c7:1e:32:8b:e1:55:9d:
         eb:50:18:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----