Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/312132-2e2c-4a57-a8ac-578f02e78066/1/wgfhDLxdJJv02O6yVJ7Ez4Q-8O4.mft
File:                     wgfhDLxdJJv02O6yVJ7Ez4Q-8O4.mft (raw, json)
Hash identifier:          5Bu48x4is3zH4HfLzj9jDDp4nLxh8uuPie/LYrVOJQ0=
Subject key identifier:   BC:0B:32:C0:DE:5B:F0:9D:28:9B:1F:1E:AA:46:68:BD:8A:E0:16:72
Authority key identifier: C2:07:E1:0C:BC:5D:24:9B:F4:D8:EE:B2:54:9E:C4:CF:84:3E:F0:EE
Certificate issuer:       /CN=c207e10cbc5d249bf4d8eeb2549ec4cf843ef0ee
Certificate serial:       0192BCE60A600DF03ACB9EABAD2146827EAB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wgfhDLxdJJv02O6yVJ7Ez4Q-8O4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ee/312132-2e2c-4a57-a8ac-578f02e78066/1/wgfhDLxdJJv02O6yVJ7Ez4Q-8O4.mft
Manifest number:          0CB5
Signing time:             Thu 24 Oct 2024 05:00:45 +0000
Manifest this update:     Thu 24 Oct 2024 05:00:45 +0000
Manifest next update:     Fri 25 Oct 2024 05:00:45 +0000
Files and hashes:         1: eafs4wSzhyjd02TnlHXmnGO4nkM.roa (hash: Y0grCTdexWlz/KEGJNvaW7zXYxh/P2YmqPybVHhG9xk=)
                          2: wgfhDLxdJJv02O6yVJ7Ez4Q-8O4.crl (hash: VdkIZR+LtICmbNHfDtYPsy00AxYJCkf8D3Ol+1SZlVs=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:92:bc:e6:0a:60:0d:f0:3a:cb:9e:ab:ad:21:46:82:7e:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c207e10cbc5d249bf4d8eeb2549ec4cf843ef0ee
        Validity
            Not Before: Oct 24 05:00:45 2024 GMT
            Not After : Oct 25 05:00:45 2024 GMT
        Subject: CN=bc0b32c0de5bf09d289b1f1eaa4668bd8ae01672
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:28:97:58:b9:92:26:3b:7a:ce:87:2d:5e:4b:
                    d2:53:a4:36:d6:c9:93:74:ea:7f:fc:63:df:29:39:
                    75:a8:9d:ec:ca:e8:fc:82:1d:b5:fb:41:57:29:db:
                    da:b9:4a:10:ab:ec:0f:bf:d7:c4:c8:d4:81:e9:ce:
                    e2:7c:1b:83:aa:4f:22:c5:00:48:c2:69:3a:2a:7c:
                    6e:b9:9f:37:e1:02:2b:ec:b4:cf:7c:c4:30:87:6a:
                    50:41:ed:ce:bb:a5:b2:2d:eb:42:a8:ae:28:1a:15:
                    e0:9a:ef:e7:60:80:5d:f8:04:41:5f:49:6e:aa:fb:
                    d9:c3:30:90:5d:21:ba:e8:df:f0:f4:7f:73:07:5d:
                    0e:2e:41:25:35:8e:0e:d7:36:96:fd:d5:6f:e7:8a:
                    e1:f1:d7:fb:a8:b7:ae:e7:bf:a4:e4:16:84:2d:28:
                    ac:87:db:bb:fb:de:3a:02:bf:6f:c5:3c:c1:63:14:
                    ce:9c:96:92:c1:78:33:04:9e:3b:63:0d:8c:ed:ef:
                    95:66:de:7d:c1:b8:6a:a1:80:82:bc:7c:65:4f:37:
                    d9:24:e0:e4:90:bd:6c:cb:f8:2b:27:09:06:b7:62:
                    1d:db:26:aa:10:6f:73:a4:b4:55:96:9d:72:47:2e:
                    a6:b1:81:94:83:e2:e0:7b:66:3b:36:f7:16:37:7d:
                    fc:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:0B:32:C0:DE:5B:F0:9D:28:9B:1F:1E:AA:46:68:BD:8A:E0:16:72
            X509v3 Authority Key Identifier:
                keyid:C2:07:E1:0C:BC:5D:24:9B:F4:D8:EE:B2:54:9E:C4:CF:84:3E:F0:EE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wgfhDLxdJJv02O6yVJ7Ez4Q-8O4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/312132-2e2c-4a57-a8ac-578f02e78066/1/wgfhDLxdJJv02O6yVJ7Ez4Q-8O4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/312132-2e2c-4a57-a8ac-578f02e78066/1/wgfhDLxdJJv02O6yVJ7Ez4Q-8O4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a7:4d:9e:18:6f:94:a2:83:f8:a9:fc:52:8d:67:7c:ad:de:54:
         25:3a:59:e1:a5:9e:07:73:62:38:c0:17:f1:a3:2f:51:d2:9f:
         68:2d:9c:70:d5:07:46:77:65:18:15:83:d4:27:df:a7:07:32:
         7b:28:c9:cf:77:6d:7d:f5:f3:73:71:95:70:80:6a:86:2f:42:
         e1:a8:60:04:fa:57:ff:f8:1e:92:04:46:12:8a:82:a0:ec:18:
         05:c1:cb:c8:0b:bd:57:53:d5:04:6b:4c:56:d4:91:8c:d0:77:
         5b:54:76:d4:ae:38:75:ae:80:ba:0f:cd:44:94:00:b0:17:80:
         74:ab:ed:94:4d:be:8e:ce:16:21:1a:a4:84:3e:f9:39:c0:31:
         6e:bd:43:45:38:13:cf:30:b1:ed:f4:91:aa:28:08:85:04:b6:
         96:0c:54:d7:8b:7e:14:56:b5:6c:22:ed:92:f6:f4:63:c3:6b:
         b7:58:77:8a:df:5a:0a:9c:00:db:0d:02:ce:cb:2b:f3:84:ca:
         fb:74:f7:02:70:99:fb:e8:61:64:dd:1d:7d:32:06:e0:ec:af:
         78:71:24:65:55:41:51:a1:b3:f2:bf:a4:b1:be:be:ac:4d:e2:
         34:80:61:b8:a5:25:4d:92:e6:17:21:57:1f:6c:a8:14:1c:2c:
         5a:c4:b2:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----