Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/3334f8-dace-497f-a5a3-814e80904be4/1/W-oriExwZ_WP_wQKHwbg3x6Aqz4.mft
File:                     W-oriExwZ_WP_wQKHwbg3x6Aqz4.mft (raw, json)
Hash identifier:          hKll1E4QEiwgClYvq63mmrjWWL+PMkEYG+HAiFe0O4w=
Subject key identifier:   F2:7B:53:6A:86:76:FD:AA:3F:52:F6:18:41:52:D1:DE:D2:A2:AF:11
Authority key identifier: 5B:EA:2B:88:4C:70:67:F5:8F:FF:04:0A:1F:06:E0:DF:1E:80:AB:3E
Certificate issuer:       /CN=5bea2b884c7067f58fff040a1f06e0df1e80ab3e
Certificate serial:       01905211D354DF51C84DFEDDA090642CF37C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/W-oriExwZ_WP_wQKHwbg3x6Aqz4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f4/3334f8-dace-497f-a5a3-814e80904be4/1/W-oriExwZ_WP_wQKHwbg3x6Aqz4.mft
Manifest number:          11E4
Signing time:             Wed 26 Jun 2024 01:03:38 +0000
Manifest this update:     Wed 26 Jun 2024 01:03:38 +0000
Manifest next update:     Thu 27 Jun 2024 01:03:38 +0000
Files and hashes:         1: C7OdrelbKjM0i740XZ9NdpAiZKM.roa (hash: u0Tq9U5AlcEcckTd14/yXxkinRPu+I8TzTF+ytepNAo=)
                          2: NtGaIcsQXzdhIv7N5Hgj4JTWViY.roa (hash: 0I5CJlRyw+Qne7GP5zecYS+NQyZptZ+kYmo5/65tCWc=)
                          3: VuCmDE1ZFFWdvMC9jNwAvnk8_1E.roa (hash: jGNtpNIfgCtCqj5DQhtVFddZHQJUdpBrUyTpCaJKVk4=)
                          4: W-oriExwZ_WP_wQKHwbg3x6Aqz4.crl (hash: RRNl5S1YkkKKblaq1zj2/cW4ji+JeIrlsQeutHMeuLo=)
                          5: b0jGgN-ocxM6d_jFfyqUjK59E30.roa (hash: qTw0O9wG/YmxuIeAkBfoVSgme59wTcT1oak0wqog3eE=)
                          6: pvFg9lX6ghJZCEyMTz056gojFgY.roa (hash: K8u86H5QJJDa74penll6nYEHrbf824+fTzOg7NKxexk=)
                          7: wP_zYqqWPbbx_rKAy6hajggoGWk.roa (hash: sCj23lWtgVRxPYNSOLXJouRr0NMisiKj/M/gvlosTpk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:52:11:d3:54:df:51:c8:4d:fe:dd:a0:90:64:2c:f3:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5bea2b884c7067f58fff040a1f06e0df1e80ab3e
        Validity
            Not Before: Jun 26 01:03:38 2024 GMT
            Not After : Jun 27 01:03:38 2024 GMT
        Subject: CN=f27b536a8676fdaa3f52f6184152d1ded2a2af11
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:fb:2c:27:f6:5b:c9:9e:71:21:71:32:bf:8d:
                    23:c1:79:89:ed:fa:de:57:1e:a5:2d:d0:1c:69:37:
                    5c:2f:07:9a:3a:e8:61:fa:a3:18:25:9f:0a:05:99:
                    c2:c7:10:f6:8a:08:29:b6:f5:9c:41:89:4a:59:f0:
                    0f:ad:e7:9d:f8:91:24:b3:1f:59:f7:bb:a8:3a:e9:
                    cc:50:ee:a2:62:29:f5:94:e8:76:8e:a5:98:27:d2:
                    c0:15:39:81:d5:1c:5c:8d:27:35:51:d5:f9:60:8e:
                    57:f2:34:13:c9:36:92:19:87:20:b5:68:5b:79:79:
                    4c:9a:60:b9:6f:40:6e:d8:77:cf:fe:da:35:3c:b0:
                    fe:60:ed:07:50:d2:54:e5:91:a0:58:7e:5c:d9:fc:
                    82:75:d9:b3:f8:fe:a9:25:e0:eb:06:36:26:e3:12:
                    47:1e:73:fc:01:0a:6a:a4:b3:ad:e5:a7:1b:db:f8:
                    d2:d1:f2:71:51:d3:5c:29:d3:b0:16:e9:ec:c8:42:
                    a3:96:ac:c5:43:da:c9:38:7b:c6:b0:a5:56:31:5b:
                    ea:02:71:53:ed:12:31:df:b7:85:9b:f9:37:15:71:
                    c4:d0:e4:2c:76:1f:fb:1b:84:a9:98:e0:10:b2:e7:
                    98:12:77:b4:9e:aa:9e:7b:58:a3:9b:7f:b2:07:e7:
                    e4:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:7B:53:6A:86:76:FD:AA:3F:52:F6:18:41:52:D1:DE:D2:A2:AF:11
            X509v3 Authority Key Identifier:
                keyid:5B:EA:2B:88:4C:70:67:F5:8F:FF:04:0A:1F:06:E0:DF:1E:80:AB:3E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W-oriExwZ_WP_wQKHwbg3x6Aqz4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/3334f8-dace-497f-a5a3-814e80904be4/1/W-oriExwZ_WP_wQKHwbg3x6Aqz4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/3334f8-dace-497f-a5a3-814e80904be4/1/W-oriExwZ_WP_wQKHwbg3x6Aqz4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:ba:55:8b:b9:36:95:15:2d:74:8c:f6:ae:07:4d:55:ed:b0:
         8c:55:4d:f8:b4:d3:4a:5b:61:ef:c1:a6:81:64:ef:bc:78:2a:
         1a:56:f7:ee:a6:78:ac:03:91:10:88:03:54:57:50:e1:86:1d:
         c9:45:de:b7:84:d0:60:02:f0:25:c0:8b:cc:f3:99:4a:8b:44:
         64:bb:b1:fb:cc:d8:1e:5e:11:9a:e9:9f:fd:22:e0:60:5c:0e:
         e7:db:50:c3:66:e5:97:c7:d3:2b:6c:2f:e4:2c:fa:fc:69:9c:
         18:34:cf:7a:15:75:89:8f:9c:16:e7:1e:8b:3a:34:7b:4e:bc:
         55:d0:e8:f3:61:1d:96:56:8d:d4:73:df:00:92:e4:28:6e:e7:
         b7:26:af:b7:27:cd:d2:8b:22:23:79:25:b5:87:1b:19:6b:d0:
         91:df:f3:25:99:24:bc:02:1d:dc:69:52:1a:57:34:95:50:29:
         f4:f0:f5:13:fe:5e:da:6f:e8:64:20:cc:98:f2:2c:42:6f:4f:
         47:b4:bc:46:85:16:e9:54:ce:e9:9b:e7:ba:d8:31:b5:e0:db:
         12:60:53:95:8c:af:17:88:c0:50:47:f0:8e:58:b4:24:14:2d:
         cc:7d:85:a3:95:22:cc:5c:2f:56:97:14:0c:c8:f8:70:1c:99:
         69:ca:a3:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----