Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/1bed17-5e33-43a1-bb8f-43a43da9289a/1/WVUSBp5lxZCALs5b972H5muPNdM.mft
File:                     WVUSBp5lxZCALs5b972H5muPNdM.mft (raw, json)
Hash identifier:          0xEzobungvFTAI21tOXPxskds/05Tvuwq4O9tLUOJGM=
Subject key identifier:   48:99:EE:33:FB:8D:63:32:F4:49:B0:D9:67:CD:9F:F5:EC:6F:4F:4A
Authority key identifier: 59:55:12:06:9E:65:C5:90:80:2E:CE:5B:F7:BD:87:E6:6B:8F:35:D3
Certificate issuer:       /CN=595512069e65c590802ece5bf7bd87e66b8f35d3
Certificate serial:       0194BCA9D001545A52D60719B09DA1360FAE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WVUSBp5lxZCALs5b972H5muPNdM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/27/1bed17-5e33-43a1-bb8f-43a43da9289a/1/WVUSBp5lxZCALs5b972H5muPNdM.mft
Manifest number:          02F2
Signing time:             Fri 31 Jan 2025 14:00:32 +0000
Manifest this update:     Fri 31 Jan 2025 14:00:32 +0000
Manifest next update:     Sat 01 Feb 2025 14:00:32 +0000
Files and hashes:         1: WVUSBp5lxZCALs5b972H5muPNdM.crl (hash: 6T5TZoN95dlgozTu/VTXClWexw2nKZYH1c19xVIf65w=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:a9:d0:01:54:5a:52:d6:07:19:b0:9d:a1:36:0f:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=595512069e65c590802ece5bf7bd87e66b8f35d3
        Validity
            Not Before: Jan 31 14:00:32 2025 GMT
            Not After : Feb  1 14:00:32 2025 GMT
        Subject: CN=4899ee33fb8d6332f449b0d967cd9ff5ec6f4f4a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:5c:00:d2:b9:d5:28:ea:0a:b6:01:d7:0d:b0:
                    b6:8a:26:0c:b8:14:d2:c0:cb:36:5d:77:8f:a3:5d:
                    ae:8b:3f:5e:50:3d:de:c7:b0:3b:15:7a:78:22:4a:
                    53:ee:ae:85:dd:ee:f1:74:c2:db:a3:b4:81:8c:e2:
                    23:c3:d4:0a:04:dd:05:f8:3e:46:79:59:69:8b:21:
                    09:58:c4:de:9c:19:f1:a0:26:4c:06:8b:75:d2:73:
                    35:cd:ea:93:cd:2b:97:02:30:5b:77:74:8b:73:46:
                    83:28:49:ee:fe:2f:a7:fc:20:d8:1d:da:5f:8b:7c:
                    29:fb:a6:f5:9b:7b:b4:7e:29:ca:a2:b9:39:7f:e0:
                    e6:fe:c9:b0:c7:b3:ea:a5:a8:d4:4c:18:c2:24:17:
                    14:be:57:ba:ee:c5:40:a4:20:81:13:ad:90:7a:d9:
                    1a:8a:29:ca:8a:64:aa:73:e5:45:15:fd:0f:69:de:
                    4d:ef:9f:90:fb:0c:b3:d9:4e:a2:25:1b:57:d3:fe:
                    63:ec:77:b8:af:63:6a:92:45:2d:0d:bd:fa:1b:71:
                    2b:ff:88:f1:aa:9e:4e:87:ce:17:73:74:93:3b:5a:
                    fe:19:eb:46:63:d1:c5:d7:18:5a:11:5b:ad:55:51:
                    2c:c0:22:0e:44:cb:ea:b6:3a:a9:c8:c6:4e:fb:26:
                    6d:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:99:EE:33:FB:8D:63:32:F4:49:B0:D9:67:CD:9F:F5:EC:6F:4F:4A
            X509v3 Authority Key Identifier:
                keyid:59:55:12:06:9E:65:C5:90:80:2E:CE:5B:F7:BD:87:E6:6B:8F:35:D3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WVUSBp5lxZCALs5b972H5muPNdM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/1bed17-5e33-43a1-bb8f-43a43da9289a/1/WVUSBp5lxZCALs5b972H5muPNdM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/27/1bed17-5e33-43a1-bb8f-43a43da9289a/1/WVUSBp5lxZCALs5b972H5muPNdM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:9c:44:22:31:50:ca:8b:b5:c7:bd:fc:15:33:95:30:92:2c:
         dc:5b:98:85:07:27:2d:22:59:5e:29:6e:90:63:96:ed:58:52:
         d0:d2:53:fc:7a:ea:2d:3e:15:12:dd:79:1a:a7:73:3c:ae:da:
         10:c4:9e:83:df:33:eb:17:cb:fb:13:57:e1:24:d5:0d:25:68:
         2a:f1:4a:e9:2e:13:e3:0f:0c:f7:48:9b:33:15:80:e9:21:b0:
         6d:db:79:7a:cb:e1:a2:be:32:5a:17:03:0a:e5:74:12:bd:b0:
         18:7a:6b:7d:e8:d6:67:18:f4:89:9a:97:db:12:14:93:82:82:
         c2:bd:f6:f4:66:aa:e8:67:9e:0b:f1:70:59:5d:79:a8:e8:1e:
         c9:2b:dc:79:ee:9b:7e:11:11:1c:a0:92:c3:cf:15:28:f1:0a:
         60:d6:79:06:c8:35:47:4b:11:ba:2f:9c:ff:e5:d8:8b:61:09:
         4d:16:52:73:98:3c:7f:8c:3d:81:ed:b9:51:b0:19:4d:6b:45:
         8a:e3:22:d1:4e:92:09:46:05:b0:82:0d:7a:dd:19:14:a6:e4:
         b2:92:70:58:e4:81:1f:c9:bd:45:d7:de:f6:b2:32:64:65:0e:
         85:fe:ef:9d:0b:60:d6:72:1e:f9:8e:71:bd:3c:d3:ba:1f:ea:
         9e:bf:a2:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:42:00 2025 by rpki-client