Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/aacb0a-cf64-4e75-a9df-249ac773c282/1/Wv2GZ8zpW-CulgWMRVDXCIA1MS8.mft
File:                     Wv2GZ8zpW-CulgWMRVDXCIA1MS8.mft (raw, json)
Hash identifier:          qW+cOH/1CBhhKAileTb3G7/ajFOjxgcUze3ulpsMhFs=
Subject key identifier:   1E:4D:49:15:4C:16:91:D2:AC:E4:D7:B5:F7:37:96:73:45:5B:62:60
Authority key identifier: 5A:FD:86:67:CC:E9:5B:E0:AE:96:05:8C:45:50:D7:08:80:35:31:2F
Certificate issuer:       /CN=5afd8667cce95be0ae96058c4550d7088035312f
Certificate serial:       0194BC3C9605B6B62B765B4322E376D18A87
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Wv2GZ8zpW-CulgWMRVDXCIA1MS8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3b/aacb0a-cf64-4e75-a9df-249ac773c282/1/Wv2GZ8zpW-CulgWMRVDXCIA1MS8.mft
Manifest number:          10AA
Signing time:             Fri 31 Jan 2025 12:01:14 +0000
Manifest this update:     Fri 31 Jan 2025 12:01:14 +0000
Manifest next update:     Sat 01 Feb 2025 12:01:14 +0000
Files and hashes:         1: Wv2GZ8zpW-CulgWMRVDXCIA1MS8.crl (hash: TC12TS4QU7vypFlLN+ceFWZmT+KDiHAE/RJLecBi1ns=)
                          2: q9zEIJSyiAtted-qK0IC2QOIvVc.roa (hash: Dw02XDclSknqFZSzdcVjqUMXTqYYIsr90SDwtwPQEIs=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:3c:96:05:b6:b6:2b:76:5b:43:22:e3:76:d1:8a:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5afd8667cce95be0ae96058c4550d7088035312f
        Validity
            Not Before: Jan 31 12:01:14 2025 GMT
            Not After : Feb  1 12:01:14 2025 GMT
        Subject: CN=1e4d49154c1691d2ace4d7b5f7379673455b6260
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:0c:92:9d:7e:c7:25:7d:c0:58:c0:5f:41:7f:
                    1c:c0:45:a9:61:e9:b5:ef:fa:0f:4d:4d:39:50:9b:
                    b3:8c:c1:c9:a7:77:7e:7e:74:fd:c4:d8:dd:e9:44:
                    aa:e3:79:49:8b:76:7a:ed:72:7d:ed:d2:e3:b3:34:
                    d6:e3:ed:dc:39:3a:55:da:0e:77:18:67:3f:78:fe:
                    22:d1:73:cd:74:ce:23:79:69:e7:8b:a2:9e:61:31:
                    14:70:14:1e:00:81:04:df:e3:e7:2c:9b:9f:f1:1f:
                    80:0b:9a:63:56:e6:77:fa:1d:be:65:69:b4:cf:be:
                    67:4b:f4:0b:98:c3:92:aa:a4:38:38:7e:04:4d:b2:
                    b6:f9:dc:99:87:b4:69:8f:ec:0b:ce:fa:81:09:c6:
                    63:ab:ae:be:db:de:4e:27:08:44:7a:8f:a9:26:9b:
                    f5:76:c2:5a:bf:29:f2:fc:59:9d:db:c3:4e:e6:4d:
                    ca:c1:e4:70:85:bb:1d:12:13:f7:0c:0a:94:f9:62:
                    32:9c:d6:2f:0c:e3:49:de:5a:1c:86:2d:58:d7:76:
                    6d:b1:fd:14:1c:98:d4:1f:24:3c:7e:7c:76:76:c6:
                    ab:f3:ce:27:eb:63:f8:a2:14:9a:d2:f9:b1:1a:92:
                    a2:ad:ee:0e:85:3c:ec:af:ab:20:24:67:4f:31:73:
                    02:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:4D:49:15:4C:16:91:D2:AC:E4:D7:B5:F7:37:96:73:45:5B:62:60
            X509v3 Authority Key Identifier:
                keyid:5A:FD:86:67:CC:E9:5B:E0:AE:96:05:8C:45:50:D7:08:80:35:31:2F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wv2GZ8zpW-CulgWMRVDXCIA1MS8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/aacb0a-cf64-4e75-a9df-249ac773c282/1/Wv2GZ8zpW-CulgWMRVDXCIA1MS8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/aacb0a-cf64-4e75-a9df-249ac773c282/1/Wv2GZ8zpW-CulgWMRVDXCIA1MS8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         94:4b:f5:02:10:db:ae:ea:ce:81:91:34:4f:fa:3b:c0:ed:a7:
         5e:4d:bf:16:36:8b:28:63:19:9d:a6:8b:27:82:a4:a7:ed:5d:
         b6:16:56:7c:d1:a3:e6:f1:1e:b5:1f:7f:49:7b:67:1d:16:56:
         d7:b0:b1:86:b6:71:dd:13:23:a1:23:6a:36:59:fe:8d:0f:24:
         4f:40:e2:31:12:f6:15:bb:26:7a:1b:2e:6d:3a:ca:19:69:69:
         ea:87:af:09:86:34:fd:70:61:fb:f7:62:68:b6:c1:1d:18:53:
         6a:65:83:48:68:e3:f5:d4:9b:e0:27:9c:40:fa:f8:5c:7c:dd:
         a0:ca:d3:b1:c1:e8:65:5b:53:25:07:2f:f2:20:15:72:35:90:
         23:76:60:10:79:90:c5:5b:b2:d5:60:e7:85:14:61:f9:fd:10:
         4f:a5:24:8c:c0:8e:16:80:74:ee:f1:e6:d8:c4:87:20:c6:26:
         3a:df:76:60:12:ce:75:e5:91:32:86:85:07:17:40:56:53:8f:
         2b:00:44:e8:27:32:ca:4f:8f:af:ad:95:d7:33:f7:dd:1f:15:
         51:74:3b:66:aa:02:db:a1:f9:75:81:c0:2e:44:7a:cc:17:8f:
         bd:74:7c:d0:f4:49:62:d5:a1:2a:93:26:d8:95:d4:3e:1b:fe:
         6c:8c:44:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 20:37:09 2025 by rpki-client