Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/d8faaa-9b42-4080-9203-e51aa0331df5/1/WvK_GR_9YrnydHUAnI-z4KFKIjc.mft
File:                     WvK_GR_9YrnydHUAnI-z4KFKIjc.mft (raw, json)
Hash identifier:          /EBsOtWA11Nx0uhC2Sk+FXzp4+8XEBAnMbJ9v3qCd2k=
Subject key identifier:   05:B1:92:51:DA:F0:38:EC:0C:98:AC:6D:88:96:5B:DF:7D:63:A9:A7
Authority key identifier: 5A:F2:BF:19:1F:FD:62:B9:F2:74:75:00:9C:8F:B3:E0:A1:4A:22:37
Certificate issuer:       /CN=5af2bf191ffd62b9f27475009c8fb3e0a14a2237
Certificate serial:       018ECEF68C7C60A8E3F0CD392597C8BBB7B9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WvK_GR_9YrnydHUAnI-z4KFKIjc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/61/d8faaa-9b42-4080-9203-e51aa0331df5/1/WvK_GR_9YrnydHUAnI-z4KFKIjc.mft
Manifest number:          1118
Signing time:             Thu 11 Apr 2024 21:00:47 +0000
Manifest this update:     Thu 11 Apr 2024 21:00:47 +0000
Manifest next update:     Fri 12 Apr 2024 21:00:47 +0000
Files and hashes:         1: LYnvVYBNfO02NGLb8OqwSQvvmss.roa (hash: 1MQQ4c4toBssZ0IWA56QMnp9/TwVfcL6IZ4tyLL1axo=)
                          2: RA94-YrODfRapBfrOJbCPUjE4Do.roa (hash: cHIANoiNkiVnrGAKCnzNB1hm31ncqkhAH2yE33FsCXc=)
                          3: WvK_GR_9YrnydHUAnI-z4KFKIjc.crl (hash: K38MXv5ATRexCCMfg3+x1pv1pitDsqi4Ke4VfDDIfVU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8e:ce:f6:8c:7c:60:a8:e3:f0:cd:39:25:97:c8:bb:b7:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5af2bf191ffd62b9f27475009c8fb3e0a14a2237
        Validity
            Not Before: Apr 11 21:00:47 2024 GMT
            Not After : Apr 12 21:00:47 2024 GMT
        Subject: CN=05b19251daf038ec0c98ac6d88965bdf7d63a9a7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:48:00:c7:76:da:57:06:5c:63:8b:5f:57:8c:
                    df:77:9a:85:1e:6a:b7:53:77:7b:c6:9c:62:4f:c7:
                    e4:93:2a:6d:52:1f:dc:d0:b6:aa:93:41:15:46:c6:
                    cd:0e:8f:b8:fc:20:d9:26:f7:0e:d3:10:6b:e6:47:
                    bc:a9:81:1b:9d:b2:55:0a:97:5d:e8:92:be:9f:f2:
                    a0:ba:d9:63:6d:54:08:de:dd:b4:0f:3d:0a:11:d4:
                    d5:33:24:b0:2d:6a:3c:b2:b4:44:2f:8a:86:ab:2e:
                    d5:df:6a:df:7c:96:bb:c0:18:74:3c:40:e1:0d:51:
                    a1:52:46:ae:58:33:8d:c9:e8:7a:a9:c4:c7:00:65:
                    49:3b:23:c6:1e:ac:0a:83:d1:26:ca:b1:b0:88:30:
                    73:b2:ce:92:68:2f:29:f7:e9:4d:7f:47:1f:ab:a6:
                    27:28:cf:9c:40:16:65:08:56:c6:1f:02:7a:81:a0:
                    66:9a:ba:a2:15:ae:4b:b5:2b:7e:e9:b5:62:42:8b:
                    11:59:6e:89:93:30:d2:a1:40:7b:97:d6:60:51:0c:
                    36:45:74:45:b8:78:75:a1:86:f0:29:75:a7:93:03:
                    60:a0:6d:72:a2:50:76:f6:22:89:62:82:5b:59:b1:
                    95:7d:84:a8:a9:02:9c:a7:63:6c:6d:36:4d:9f:c1:
                    98:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:B1:92:51:DA:F0:38:EC:0C:98:AC:6D:88:96:5B:DF:7D:63:A9:A7
            X509v3 Authority Key Identifier:
                keyid:5A:F2:BF:19:1F:FD:62:B9:F2:74:75:00:9C:8F:B3:E0:A1:4A:22:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WvK_GR_9YrnydHUAnI-z4KFKIjc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/d8faaa-9b42-4080-9203-e51aa0331df5/1/WvK_GR_9YrnydHUAnI-z4KFKIjc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/61/d8faaa-9b42-4080-9203-e51aa0331df5/1/WvK_GR_9YrnydHUAnI-z4KFKIjc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:1a:31:7f:bc:d2:42:72:49:6b:38:f8:d3:72:88:7f:e5:29:
         69:9e:73:38:86:6a:e2:76:c4:e5:89:e4:46:c3:a4:b9:8a:c7:
         16:ce:ec:33:57:81:0a:02:e7:e5:df:3e:1e:ef:d3:30:7e:fa:
         8a:12:ac:63:87:cc:a9:fa:aa:22:1f:60:56:fe:44:eb:f3:d0:
         07:79:27:7d:8c:1a:94:6d:30:81:77:92:3a:c1:4c:25:58:5c:
         22:fa:fe:2f:32:7a:f6:a7:e7:f0:07:35:28:b6:3b:c1:07:1d:
         91:fd:97:81:23:b4:64:3f:3c:13:24:6a:ca:5f:d5:0f:fa:b5:
         68:29:59:19:31:72:ed:fc:6c:8e:db:ea:38:b9:51:c4:d2:07:
         2a:06:79:7a:b1:12:99:6e:34:e7:92:9c:e9:b1:9b:44:db:a1:
         4d:96:71:11:51:61:59:b1:e1:89:cf:66:1c:1e:cb:4e:28:01:
         bd:9e:5e:fb:1b:dd:8f:d4:cd:08:e8:a3:e1:92:74:a1:2b:50:
         53:e0:27:48:34:f8:34:a2:8c:46:9b:03:fc:65:87:33:71:61:
         a8:41:bb:18:f7:94:1d:7d:61:85:f0:c7:e9:f1:d6:0f:8d:22:
         8c:1d:7f:47:4d:03:a2:bf:26:df:ed:22:23:c0:15:a3:d1:1c:
         06:7b:fd:6c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY7O9ox8YKjj8M05JZfIu7e5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVhZjJiZjE5MWZmZDYyYjlmMjc0NzUwMDljOGZiM2UwYTE0
YTIyMzcwHhcNMjQwNDExMjEwMDQ3WhcNMjQwNDEyMjEwMDQ3WjAzMTEwLwYDVQQD
EygwNWIxOTI1MWRhZjAzOGVjMGM5OGFjNmQ4ODk2NWJkZjdkNjNhOWE3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAskgAx3baVwZcY4tfV4zfd5qFHmq3
U3d7xpxiT8fkkyptUh/c0Laqk0EVRsbNDo+4/CDZJvcO0xBr5ke8qYEbnbJVCpdd
6JK+n/KgutljbVQI3t20Dz0KEdTVMySwLWo8srREL4qGqy7V32rffJa7wBh0PEDh
DVGhUkauWDONyeh6qcTHAGVJOyPGHqwKg9EmyrGwiDBzss6SaC8p9+lNf0cfq6Yn
KM+cQBZlCFbGHwJ6gaBmmrqiFa5LtSt+6bViQosRWW6JkzDSoUB7l9ZgUQw2RXRF
uHh1oYbwKXWnkwNgoG1yolB29iKJYoJbWbGVfYSoqQKcp2NsbTZNn8GYWQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAWxklHa8DjsDJisbYiWW999Y6mnMB8GA1UdIwQY
MBaAFFryvxkf/WK58nR1AJyPs+ChSiI3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV3ZLX0dSXzlZcm55ZEhVQW5JLXo0S0ZLSWpjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS9kOGZhYWEtOWI0Mi00MDgwLTkyMDMt
ZTUxYWEwMzMxZGY1LzEvV3ZLX0dSXzlZcm55ZEhVQW5JLXo0S0ZLSWpjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MS9kOGZhYWEtOWI0Mi00MDgwLTkyMDMtZTUxYWEwMzMxZGY1
LzEvV3ZLX0dSXzlZcm55ZEhVQW5JLXo0S0ZLSWpjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYRoxf7zS
QnJJazj403KIf+UpaZ5zOIZq4nbE5YnkRsOkuYrHFs7sM1eBCgLn5d8+Hu/TMH76
ihKsY4fMqfqqIh9gVv5E6/PQB3knfYwalG0wgXeSOsFMJVhcIvr+LzJ69qfn8Ac1
KLY7wQcdkf2XgSO0ZD88EyRqyl/VD/q1aClZGTFy7fxsjtvqOLlRxNIHKgZ5erES
mW4055Kc6bGbRNuhTZZxEVFhWbHhic9mHB7LTigBvZ5e+xvdj9TNCOij4ZJ0oStQ
U+AnSDT4NKKMRpsD/GWHM3FhqEG7GPeUHX1hhfDH6fHWD40ijB1/R00Dor8m3+0i
I8AVo9EcBnv9bA==
-----END CERTIFICATE-----