Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/9be856-0e32-400f-8e89-369cd8be25fe/1/wBHuBmZBdQpRFH2NyZobEFZY0gM.mft
File:                     wBHuBmZBdQpRFH2NyZobEFZY0gM.mft (raw, json)
Hash identifier:          V+Dwzg4d3LETeeFtFmK5/RmiUICL0DIWXAxne6BGDeI=
Subject key identifier:   2A:F3:9E:07:EB:3E:73:59:95:F6:33:AE:C1:A3:AD:6C:C6:1F:68:0A
Authority key identifier: C0:11:EE:06:66:41:75:0A:51:14:7D:8D:C9:9A:1B:10:56:58:D2:03
Certificate issuer:       /CN=c011ee066641750a51147d8dc99a1b105658d203
Certificate serial:       0194BC3BBD1025666C87F0957A6484208D55
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wBHuBmZBdQpRFH2NyZobEFZY0gM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1b/9be856-0e32-400f-8e89-369cd8be25fe/1/wBHuBmZBdQpRFH2NyZobEFZY0gM.mft
Manifest number:          142A
Signing time:             Fri 31 Jan 2025 12:00:19 +0000
Manifest this update:     Fri 31 Jan 2025 12:00:19 +0000
Manifest next update:     Sat 01 Feb 2025 12:00:19 +0000
Files and hashes:         1: 1-HSWsiWM-hDl2O_5CedvBQ55YQ8.roa (hash: le2bdDjj8eJvjQqLPVAV9ifpc64QyRhmisD9ayP5j2w=)
                          2: WfTKVc2urWFHINs-H7ByO8d8wxU.roa (hash: vrGq1fPxckNV2umjKEkVDvs5jt8ww7idFEdo+nD8HaU=)
                          3: tq6G4XKwLkPscmGDzl0ViLLGYc0.roa (hash: gCrgWGNDXJJp5RhoxWhID/tfHWwjzd875gYTpw7zJGg=)
                          4: wBHuBmZBdQpRFH2NyZobEFZY0gM.crl (hash: +4RsQE0LRHv5D68mlF3OeWlBvoePMiov2Syu79/zMFs=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:3b:bd:10:25:66:6c:87:f0:95:7a:64:84:20:8d:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c011ee066641750a51147d8dc99a1b105658d203
        Validity
            Not Before: Jan 31 12:00:19 2025 GMT
            Not After : Feb  1 12:00:19 2025 GMT
        Subject: CN=2af39e07eb3e735995f633aec1a3ad6cc61f680a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:89:86:71:e3:59:21:26:de:b7:c5:11:c5:c9:
                    16:74:35:ec:26:13:e8:ee:ab:e7:c0:62:00:85:a6:
                    a1:30:73:01:82:ff:d9:c2:97:46:ac:19:03:ca:e3:
                    e7:e8:e4:ba:0d:bf:ef:91:91:63:c5:1c:82:64:da:
                    84:d8:9c:4a:9c:31:6b:3c:75:a4:0b:50:1a:79:5f:
                    78:1e:02:53:40:5f:b5:07:09:fd:f8:2f:5d:cb:89:
                    b1:bc:3d:3d:02:fa:e6:51:1a:36:c4:9d:28:3a:79:
                    eb:5a:3a:6a:a2:bf:55:d8:38:8e:19:12:50:76:72:
                    91:6d:59:6d:c6:bb:c4:2d:eb:7b:bd:e9:68:97:72:
                    ce:0f:e1:46:90:74:9a:cf:d8:a8:da:45:b8:7e:ac:
                    af:b7:9b:b6:90:27:3b:f6:f8:d5:0d:c8:13:f3:54:
                    84:c0:18:ee:76:18:1e:15:63:4f:6b:cb:b7:53:6b:
                    2e:39:32:2b:60:33:95:b3:3e:28:58:97:69:92:29:
                    88:ae:e8:6e:3a:6a:82:12:40:4c:43:5c:a5:1c:da:
                    49:fc:01:7e:e2:40:65:af:c2:7e:92:d1:6a:ec:5e:
                    77:f3:ae:ce:ba:47:46:99:98:b0:18:2f:a1:64:5e:
                    22:de:eb:8e:45:e8:06:4b:02:c9:6f:77:7b:3c:87:
                    55:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:F3:9E:07:EB:3E:73:59:95:F6:33:AE:C1:A3:AD:6C:C6:1F:68:0A
            X509v3 Authority Key Identifier:
                keyid:C0:11:EE:06:66:41:75:0A:51:14:7D:8D:C9:9A:1B:10:56:58:D2:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wBHuBmZBdQpRFH2NyZobEFZY0gM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/9be856-0e32-400f-8e89-369cd8be25fe/1/wBHuBmZBdQpRFH2NyZobEFZY0gM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/9be856-0e32-400f-8e89-369cd8be25fe/1/wBHuBmZBdQpRFH2NyZobEFZY0gM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         94:ab:0c:67:3b:0a:92:e4:7e:dc:6e:79:f0:ac:a5:3f:6a:19:
         77:bf:26:ff:72:fe:37:75:68:fa:a3:be:44:35:4e:bf:f8:92:
         cd:32:1c:be:4a:84:db:ad:1d:45:30:e6:62:0e:95:68:24:e1:
         b0:38:87:c7:2c:06:f5:81:b8:a3:22:bc:1f:78:d3:d5:e2:4f:
         9f:ca:26:30:3d:71:c8:eb:aa:e4:ea:54:95:56:ea:a9:83:07:
         da:b1:0b:76:2c:3b:c8:65:aa:e6:ee:1c:3d:79:43:69:66:8a:
         35:dc:1d:1b:25:e5:5c:4d:b6:09:1d:b2:b8:5d:d7:3f:c8:a1:
         d1:69:a2:0f:30:90:bf:a9:1c:2d:04:52:a4:12:9c:a8:a8:a6:
         b4:ee:2a:3f:61:97:86:6e:81:08:dc:e8:35:43:6e:cb:c3:9e:
         c0:87:d0:a7:a6:3c:df:33:9a:7e:c6:a8:e7:68:c2:e5:8f:6e:
         0a:e7:51:31:cd:64:95:af:00:09:f0:b7:33:34:aa:bb:d7:c3:
         74:78:11:27:a0:71:b5:12:3e:72:5b:57:4c:ec:d9:33:2d:f7:
         5a:f7:37:08:14:95:c3:d1:5f:b2:78:1c:44:fd:e5:d3:04:4e:
         62:45:49:df:87:65:e9:5e:8f:1f:40:a0:20:61:c0:14:d5:1c:
         be:9f:88:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----