Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/23ed9a-1ca5-45ea-9b8c-73533de099c3/1/WXoB3ofgEYA_iQrhd0kCD5lfFAw.mft
File:                     WXoB3ofgEYA_iQrhd0kCD5lfFAw.mft (raw, json)
Hash identifier:          FUQHn2OjobtEPC1jC9hbSdAHP5Y6JR5glDVXEKNohHA=
Subject key identifier:   9B:84:1A:7E:6F:C4:A5:4F:0D:5A:20:19:52:08:65:88:13:AB:2D:2E
Authority key identifier: 59:7A:01:DE:87:E0:11:80:3F:89:0A:E1:77:49:02:0F:99:5F:14:0C
Certificate issuer:       /CN=597a01de87e011803f890ae17749020f995f140c
Certificate serial:       0194BD4E55E25BA18BC218DE21A82642550F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WXoB3ofgEYA_iQrhd0kCD5lfFAw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/22/23ed9a-1ca5-45ea-9b8c-73533de099c3/1/WXoB3ofgEYA_iQrhd0kCD5lfFAw.mft
Manifest number:          1185
Signing time:             Fri 31 Jan 2025 17:00:15 +0000
Manifest this update:     Fri 31 Jan 2025 17:00:15 +0000
Manifest next update:     Sat 01 Feb 2025 17:00:15 +0000
Files and hashes:         1: 0D01ZS927DpHThbFhFQ-_hFWxII.roa (hash: W9Yn7dxHb0Wn1s2QKfIJNqloaSt38wuy4qDOcPmUhfU=)
                          2: 42BmTsViJXz2WqlV4_io6K3VIjk.roa (hash: 2MyAlESNR6eqmGKBHGCnds8446wWXVt2CWU4C9xt8MM=)
                          3: KZZiPS9ZeOzzb7Ol0GU3vdesmec.roa (hash: vFZw/xYafILFh9yVo7+bAnIUSWqHvFS5F2SG90lZkR0=)
                          4: WXoB3ofgEYA_iQrhd0kCD5lfFAw.crl (hash: /o+JoHDmcgvz/nOlHlK/lYttMY21TLF1R6kOo0xCjhE=)
                          5: Xo3ldLDsIsZwGbJ3VdetX-GULwc.roa (hash: 81La9U37EUF9V2tnd1e+qs0cFhZ17T44E32Wc8vicAU=)
                          6: _WlES2eSPPAcdb99IjbgTsc5Xro.roa (hash: EOl3gK+o3EL4dSF6oUVZ6VSDAeYTaurQvmfArpGviOI=)
                          7: sBlJ4mJbmZ7QPuvf5LufFr5BMyU.roa (hash: i/AotRsBPnt5Nf8geU1CUYhpvrjw/c5dfcC4n774/K4=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bd:4e:55:e2:5b:a1:8b:c2:18:de:21:a8:26:42:55:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=597a01de87e011803f890ae17749020f995f140c
        Validity
            Not Before: Jan 31 17:00:15 2025 GMT
            Not After : Feb  1 17:00:15 2025 GMT
        Subject: CN=9b841a7e6fc4a54f0d5a20195208658813ab2d2e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:6c:fd:df:a8:2c:ac:40:a8:50:6b:fb:65:20:
                    47:88:9a:77:10:7a:8b:0c:3e:b5:69:f6:d6:3b:8e:
                    01:b9:3a:bd:37:5a:5d:b9:3f:ec:29:d6:67:0f:19:
                    e6:20:63:9d:b0:be:04:85:42:8f:f8:6a:fd:26:17:
                    49:31:a6:91:d9:5b:ff:e5:29:3d:0a:9d:58:d9:41:
                    29:4f:03:f6:e2:0c:00:9e:59:c8:5e:cd:1d:8a:f4:
                    6a:06:b6:68:39:48:81:8a:e9:4f:c9:8e:f8:d7:73:
                    76:ab:31:7d:a3:16:ae:e0:11:b8:90:e2:a3:bc:d9:
                    96:7e:47:69:2d:b6:09:1e:8f:b4:83:4d:68:00:b5:
                    41:a9:13:f6:f0:e7:59:34:d4:cd:11:50:2c:0c:84:
                    3d:a0:79:a8:12:3e:7a:d3:51:15:05:bc:2b:c1:3d:
                    6f:40:6d:eb:04:cb:6a:c8:94:98:e0:e5:56:60:1f:
                    24:3c:22:d1:10:c2:be:7c:02:33:ff:3b:ce:fb:d3:
                    15:8d:6a:86:7a:1d:b8:ca:1f:60:c7:4f:e7:cc:9e:
                    9a:69:1e:5b:4f:19:11:0e:b7:84:77:71:ba:ff:4a:
                    05:80:98:11:19:ee:0f:d1:bb:80:98:1b:d4:0f:3f:
                    69:65:49:78:af:be:5d:c2:cf:e9:16:12:33:14:0f:
                    3e:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:84:1A:7E:6F:C4:A5:4F:0D:5A:20:19:52:08:65:88:13:AB:2D:2E
            X509v3 Authority Key Identifier:
                keyid:59:7A:01:DE:87:E0:11:80:3F:89:0A:E1:77:49:02:0F:99:5F:14:0C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WXoB3ofgEYA_iQrhd0kCD5lfFAw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/23ed9a-1ca5-45ea-9b8c-73533de099c3/1/WXoB3ofgEYA_iQrhd0kCD5lfFAw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/22/23ed9a-1ca5-45ea-9b8c-73533de099c3/1/WXoB3ofgEYA_iQrhd0kCD5lfFAw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:d9:04:e0:86:8c:c1:ba:3c:c0:d9:62:3a:30:4a:f2:a5:68:
         5f:f0:7d:2e:84:69:95:5d:7a:30:d5:0d:fa:15:f8:2d:8d:12:
         71:56:e2:70:d1:38:90:dd:e1:31:a5:18:b2:54:8e:ce:10:99:
         83:fd:1b:8d:68:90:44:05:58:03:e4:c7:68:c3:dc:cb:53:a5:
         fa:9a:d0:b1:49:ea:44:d7:0f:89:aa:59:57:9f:70:c1:43:55:
         8d:26:84:39:e2:f4:c6:e7:99:69:55:61:19:f0:76:52:a3:e2:
         a6:af:58:cb:38:8c:2c:f8:6d:84:65:aa:77:ff:c6:94:b3:a2:
         c4:fe:61:8a:48:a8:b8:5e:a0:fe:08:31:5f:15:14:15:ec:9c:
         c4:03:bc:25:36:ae:f1:3a:04:a5:fa:b5:7c:b4:f1:2d:99:a8:
         a2:5e:20:79:56:0c:73:a9:ea:96:ab:b0:3d:88:3a:b6:2c:9d:
         e6:53:1e:3d:f2:60:94:aa:a6:e6:68:3a:58:d8:73:0e:d4:fb:
         6a:11:6d:cb:27:42:79:89:9d:6c:5e:34:54:8a:90:44:27:48:
         ee:e5:54:29:df:f1:a9:74:10:73:7f:79:9c:2f:94:5b:36:0e:
         e9:2a:4f:af:94:81:91:2f:2c:be:0e:e3:05:c8:76:83:f8:f8:
         56:42:78:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 10:54:44 2025 by rpki-client