Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/00b84b-b5d1-4c1d-8e70-09e8fafaf0cc/1/wA7St1AmRN0DbiOS-wMyz7FNuNI.mft
File:                     wA7St1AmRN0DbiOS-wMyz7FNuNI.mft (raw, json)
Hash identifier:          r+SbAuGhyIjB3UKwUwBBaVsm5MQJIJQQ/b9jLCj27FU=
Subject key identifier:   CD:71:91:A6:5E:AE:C1:F9:CE:D7:25:A5:CB:19:EB:3A:D3:B0:11:84
Authority key identifier: C0:0E:D2:B7:50:26:44:DD:03:6E:23:92:FB:03:32:CF:B1:4D:B8:D2
Certificate issuer:       /CN=c00ed2b7502644dd036e2392fb0332cfb14db8d2
Certificate serial:       0194BC72BBD83258FEBB2DD26849CC16FB86
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wA7St1AmRN0DbiOS-wMyz7FNuNI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2a/00b84b-b5d1-4c1d-8e70-09e8fafaf0cc/1/wA7St1AmRN0DbiOS-wMyz7FNuNI.mft
Manifest number:          1428
Signing time:             Fri 31 Jan 2025 13:00:23 +0000
Manifest this update:     Fri 31 Jan 2025 13:00:23 +0000
Manifest next update:     Sat 01 Feb 2025 13:00:23 +0000
Files and hashes:         1: wA7St1AmRN0DbiOS-wMyz7FNuNI.crl (hash: b7kqox+yc6IVX4RQtEwZ+K78GU17UJEM+yP/H7eSSIs=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:72:bb:d8:32:58:fe:bb:2d:d2:68:49:cc:16:fb:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c00ed2b7502644dd036e2392fb0332cfb14db8d2
        Validity
            Not Before: Jan 31 13:00:23 2025 GMT
            Not After : Feb  1 13:00:23 2025 GMT
        Subject: CN=cd7191a65eaec1f9ced725a5cb19eb3ad3b01184
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:94:66:bc:1b:d0:24:61:7c:7c:a4:61:7f:c0:
                    f7:fb:f9:0c:9c:40:b6:1e:45:2a:7e:d4:30:04:94:
                    85:f5:41:d6:70:13:ac:8f:c6:9e:68:11:0d:e5:61:
                    f8:c6:83:74:fb:f7:8a:24:95:dc:7c:f5:1a:c9:60:
                    ce:2c:6c:03:ac:63:d5:b2:35:db:9b:04:98:2b:e6:
                    55:30:03:4f:5a:aa:02:6c:ad:3d:74:6e:62:04:9f:
                    fe:3c:09:58:8d:a6:fc:99:39:7c:ab:6c:06:65:82:
                    72:c5:0d:29:6d:85:69:f1:8f:11:43:54:7a:8e:bd:
                    c5:72:3c:87:ad:35:31:b3:94:f6:82:17:59:d7:2d:
                    08:d9:83:9d:00:34:08:df:77:33:cd:9b:eb:2d:7a:
                    a9:a9:80:ee:0b:92:26:9f:b9:6a:9c:cf:3a:d7:25:
                    c4:ca:4a:f0:9b:d3:db:82:eb:71:88:14:53:a5:e0:
                    6b:a4:8d:15:c0:4a:89:19:9f:ca:2d:78:2e:22:dd:
                    1a:ca:2d:6c:06:16:09:43:5b:2a:47:6f:ec:1d:f8:
                    d8:6e:b0:52:44:47:53:13:8f:66:70:31:1a:5f:de:
                    a4:3d:0f:aa:0b:0e:e6:1c:29:7f:fd:bc:bf:43:46:
                    31:e6:a1:18:78:44:30:d3:d4:34:8b:ce:28:e1:1a:
                    71:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:71:91:A6:5E:AE:C1:F9:CE:D7:25:A5:CB:19:EB:3A:D3:B0:11:84
            X509v3 Authority Key Identifier:
                keyid:C0:0E:D2:B7:50:26:44:DD:03:6E:23:92:FB:03:32:CF:B1:4D:B8:D2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wA7St1AmRN0DbiOS-wMyz7FNuNI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/00b84b-b5d1-4c1d-8e70-09e8fafaf0cc/1/wA7St1AmRN0DbiOS-wMyz7FNuNI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/00b84b-b5d1-4c1d-8e70-09e8fafaf0cc/1/wA7St1AmRN0DbiOS-wMyz7FNuNI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:ad:44:2e:94:71:1f:16:88:62:4c:34:f6:28:09:7b:49:fc:
         a8:20:8b:e8:02:56:c0:b8:58:09:ab:d9:7d:4a:3a:0b:5c:80:
         16:cf:55:03:13:5c:96:87:06:b4:89:2a:ff:af:76:0d:d9:2d:
         fa:d6:b7:ca:58:f8:c2:64:b0:c9:fe:7c:87:21:09:dc:dc:97:
         26:46:cd:d9:e5:31:1c:1e:70:d5:12:e1:ad:45:1f:99:87:d0:
         40:9d:60:3f:93:ba:9e:13:84:b5:02:d6:42:72:7f:d2:9f:98:
         b9:e9:b2:40:2e:d6:4e:5a:9c:ec:04:f7:f2:db:2f:62:e1:86:
         8c:b6:a3:ae:34:4f:ff:18:4b:88:f5:e5:8f:3a:1c:dc:ff:6c:
         dd:7a:f1:ae:26:e4:04:c2:8a:6f:69:69:9e:da:7a:b6:c6:9c:
         f8:49:a4:46:ea:f3:18:37:a5:cf:14:2d:28:b4:48:d0:28:51:
         14:5a:ca:c3:91:3f:5b:79:97:08:3a:80:b9:90:99:06:69:e9:
         fd:44:f3:ed:a9:c3:4a:83:4a:8c:f5:aa:90:62:16:d8:b9:26:
         f2:2e:c6:b9:f5:78:8a:11:da:5e:4c:af:cd:e7:4e:33:09:0b:
         df:c9:fb:a5:ce:69:f8:cc:c1:ec:28:29:47:ef:7f:2c:14:1f:
         d9:29:f2:b9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8crvYMlj+uy3SaEnMFvuGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMwMGVkMmI3NTAyNjQ0ZGQwMzZlMjM5MmZiMDMzMmNmYjE0
ZGI4ZDIwHhcNMjUwMTMxMTMwMDIzWhcNMjUwMjAxMTMwMDIzWjAzMTEwLwYDVQQD
EyhjZDcxOTFhNjVlYWVjMWY5Y2VkNzI1YTVjYjE5ZWIzYWQzYjAxMTg0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwZRmvBvQJGF8fKRhf8D3+/kMnEC2
HkUqftQwBJSF9UHWcBOsj8aeaBEN5WH4xoN0+/eKJJXcfPUayWDOLGwDrGPVsjXb
mwSYK+ZVMANPWqoCbK09dG5iBJ/+PAlYjab8mTl8q2wGZYJyxQ0pbYVp8Y8RQ1R6
jr3FcjyHrTUxs5T2ghdZ1y0I2YOdADQI33czzZvrLXqpqYDuC5Imn7lqnM861yXE
ykrwm9PbgutxiBRTpeBrpI0VwEqJGZ/KLXguIt0ayi1sBhYJQ1sqR2/sHfjYbrBS
REdTE49mcDEaX96kPQ+qCw7mHCl//by/Q0Yx5qEYeEQw09Q0i84o4Rpx+wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM1xkaZersH5ztclpcsZ6zrTsBGEMB8GA1UdIwQY
MBaAFMAO0rdQJkTdA24jkvsDMs+xTbjSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd0E3U3QxQW1STjBEYmlPUy13TXl6N0ZOdU5JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS8wMGI4NGItYjVkMS00YzFkLThlNzAt
MDllOGZhZmFmMGNjLzEvd0E3U3QxQW1STjBEYmlPUy13TXl6N0ZOdU5JLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYS8wMGI4NGItYjVkMS00YzFkLThlNzAtMDllOGZhZmFmMGNj
LzEvd0E3U3QxQW1STjBEYmlPUy13TXl6N0ZOdU5JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGa1ELpRx
HxaIYkw09igJe0n8qCCL6AJWwLhYCavZfUo6C1yAFs9VAxNclocGtIkq/692Ddkt
+ta3ylj4wmSwyf58hyEJ3NyXJkbN2eUxHB5w1RLhrUUfmYfQQJ1gP5O6nhOEtQLW
QnJ/0p+YuemyQC7WTlqc7AT38tsvYuGGjLajrjRP/xhLiPXljzoc3P9s3Xrxribk
BMKKb2lpntp6tsac+EmkRurzGDelzxQtKLRI0ChRFFrKw5E/W3mXCDqAuZCZBmnp
/UTz7anDSoNKjPWqkGIW2Lkm8i7GufV4ihHaXkyvzedOMwkL38n7pc5p+MzB7Cgp
R+9/LBQf2SnyuQ==
-----END CERTIFICATE-----
Generated at Fri Apr 25 00:52:14 2025 by rpki-client