Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/efb2d1-c5cb-4143-aa88-610072d80115/1/W-j-iCe9xgk1VQngyegOqyH5zcM.mft
File:                     W-j-iCe9xgk1VQngyegOqyH5zcM.mft (raw, json)
Hash identifier:          vvUvhd2uThMKZWJmfXINkZyglb2tqcsP/JbXUAQEy8E=
Subject key identifier:   60:15:97:7E:23:C3:D4:FB:17:79:B9:E2:45:B5:A7:2F:DB:BB:F5:BA
Authority key identifier: 5B:E8:FE:88:27:BD:C6:09:35:55:09:E0:C9:E8:0E:AB:21:F9:CD:C3
Certificate issuer:       /CN=5be8fe8827bdc609355509e0c9e80eab21f9cdc3
Certificate serial:       0194BC72E5102C1B76594D021E13B517280D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/W-j-iCe9xgk1VQngyegOqyH5zcM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/31/efb2d1-c5cb-4143-aa88-610072d80115/1/W-j-iCe9xgk1VQngyegOqyH5zcM.mft
Manifest number:          0864
Signing time:             Fri 31 Jan 2025 13:00:33 +0000
Manifest this update:     Fri 31 Jan 2025 13:00:33 +0000
Manifest next update:     Sat 01 Feb 2025 13:00:33 +0000
Files and hashes:         1: W-j-iCe9xgk1VQngyegOqyH5zcM.crl (hash: 2KUE6wdC1byqFRZBWiefi0sHjD45wjOWV1DaKLmh0Co=)
                          2: y8OPBhGIRdnRfns2wStFC7bDr4o.roa (hash: J10wvmClCuf9chJ2RyDKTPdaCtqaxXBdRLqjfTXblX8=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:72:e5:10:2c:1b:76:59:4d:02:1e:13:b5:17:28:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5be8fe8827bdc609355509e0c9e80eab21f9cdc3
        Validity
            Not Before: Jan 31 13:00:33 2025 GMT
            Not After : Feb  1 13:00:33 2025 GMT
        Subject: CN=6015977e23c3d4fb1779b9e245b5a72fdbbbf5ba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:03:dd:a9:f6:88:11:4b:85:00:4f:34:8b:6a:
                    53:b5:2a:7a:db:e1:1f:28:cf:07:ff:8d:8a:af:01:
                    f5:47:55:06:50:1c:c1:3a:85:d2:f1:6d:a8:dd:1d:
                    11:97:94:08:91:3b:9b:5e:05:07:de:1b:c2:5c:ca:
                    ee:c5:94:9b:09:dc:1a:ca:a9:4b:d4:50:99:03:57:
                    39:3f:37:2d:35:6a:cb:37:47:97:71:77:f0:d1:6d:
                    0b:c2:06:13:30:be:96:a2:bc:77:2c:30:0d:38:71:
                    0d:64:27:2f:09:c9:6e:43:45:e1:1f:64:e6:fb:92:
                    09:d4:19:a6:84:8e:1c:12:69:12:d2:85:b7:2f:be:
                    00:00:18:9b:e6:2e:a6:80:74:f3:9e:76:b2:5f:47:
                    7a:f7:4a:65:45:a7:3b:9a:16:e9:9c:8f:36:cf:d5:
                    9b:ef:8b:a1:0a:af:5d:ef:99:e4:93:0e:cb:15:01:
                    e6:ee:06:51:6a:9d:2c:6f:a1:9e:20:0c:f4:f5:a6:
                    4e:68:b1:0d:b3:5f:cd:0d:b7:26:17:ce:d2:9b:44:
                    b2:79:ba:ef:53:95:ca:13:67:63:15:ac:49:03:cb:
                    68:2f:6e:31:33:08:7f:eb:63:67:76:ab:97:41:f5:
                    ef:35:0e:2f:f4:eb:0e:65:b6:ec:c0:7a:9b:80:10:
                    33:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:15:97:7E:23:C3:D4:FB:17:79:B9:E2:45:B5:A7:2F:DB:BB:F5:BA
            X509v3 Authority Key Identifier:
                keyid:5B:E8:FE:88:27:BD:C6:09:35:55:09:E0:C9:E8:0E:AB:21:F9:CD:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W-j-iCe9xgk1VQngyegOqyH5zcM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/efb2d1-c5cb-4143-aa88-610072d80115/1/W-j-iCe9xgk1VQngyegOqyH5zcM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/31/efb2d1-c5cb-4143-aa88-610072d80115/1/W-j-iCe9xgk1VQngyegOqyH5zcM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:27:d5:ee:ca:76:f9:de:f0:b1:db:e6:c1:6c:b2:a7:0e:b3:
         db:b5:76:6e:ea:e6:fd:c4:d4:f9:0d:92:96:b1:44:dc:0d:4f:
         16:db:9a:13:63:eb:67:05:65:6a:12:ef:c5:bd:23:1b:42:71:
         ea:5b:f8:4d:d9:5e:ec:d1:de:04:72:94:4b:6d:cf:4f:87:35:
         6c:9f:9e:87:3d:ed:ef:c1:e5:4b:13:b2:65:08:f0:52:f4:f8:
         07:19:66:71:25:da:47:c6:69:5e:96:c6:15:11:99:fd:44:91:
         8f:0d:b4:d5:bd:e3:1e:f6:b9:e7:12:9d:04:a9:9b:3e:4d:88:
         dc:f8:6e:e7:01:10:b6:35:cd:01:b2:76:72:4f:15:cd:2b:2a:
         e9:fc:6f:89:81:84:f6:9b:45:e9:b7:88:0c:33:6c:88:31:36:
         ac:23:30:48:21:15:9d:6a:f5:f3:9c:a6:c3:a6:7d:4f:06:a6:
         d8:86:47:cb:43:75:16:3e:0a:f7:bf:6a:d1:2c:06:c3:92:85:
         c3:1c:7c:59:c1:77:17:7e:81:e6:0d:3e:10:f3:2c:62:20:b2:
         51:99:a4:d5:ac:cb:74:22:e5:5b:5e:9f:b7:15:9b:a8:9c:2a:
         90:de:17:69:a4:0d:63:c3:45:68:c8:87:39:c9:30:2a:9b:0c:
         09:74:44:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:07:10 2025 by rpki-client