Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/4ee19c-9462-4390-a42d-7eff8f1e91cd/1/wQTNffhMMZ0ZrzWxEE8XProsbb0.mft
File:                     wQTNffhMMZ0ZrzWxEE8XProsbb0.mft (raw, json)
Hash identifier:          HNuKgVOLo36XSzuv76jX8rfKDjZJU0MHY0e+ruA6uPw=
Subject key identifier:   6B:04:21:9E:14:40:65:F0:99:87:D2:98:2C:EC:10:3B:58:FD:F8:BC
Authority key identifier: C1:04:CD:7D:F8:4C:31:9D:19:AF:35:B1:10:4F:17:3E:BA:2C:6D:BD
Certificate issuer:       /CN=c104cd7df84c319d19af35b1104f173eba2c6dbd
Certificate serial:       0194BC3BD3D368D046F3AFEE140DD044AF88
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wQTNffhMMZ0ZrzWxEE8XProsbb0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/48/4ee19c-9462-4390-a42d-7eff8f1e91cd/1/wQTNffhMMZ0ZrzWxEE8XProsbb0.mft
Manifest number:          0652
Signing time:             Fri 31 Jan 2025 12:00:24 +0000
Manifest this update:     Fri 31 Jan 2025 12:00:24 +0000
Manifest next update:     Sat 01 Feb 2025 12:00:24 +0000
Files and hashes:         1: 1-XP7SSYynpJIZg4ibI0Wpm_d7y4.roa (hash: LOYh8aPG/hc+f2Wb/Cw6QofBs2xxLo7hf2Lj5w8CzgE=)
                          2: Drm3yVYw97KKXBlf3pxNGzoXJmg.roa (hash: UqWUcKKXRQLVy4D1ELRqLBvncJ5/FKdyjzDDOKgUpAA=)
                          3: wQTNffhMMZ0ZrzWxEE8XProsbb0.crl (hash: VYJv+nYEuzaG3jXMMMKW3W30eBiT4XQppCQ+rb1UDko=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:3b:d3:d3:68:d0:46:f3:af:ee:14:0d:d0:44:af:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c104cd7df84c319d19af35b1104f173eba2c6dbd
        Validity
            Not Before: Jan 31 12:00:24 2025 GMT
            Not After : Feb  1 12:00:24 2025 GMT
        Subject: CN=6b04219e144065f09987d2982cec103b58fdf8bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:c2:91:97:63:c3:f9:e3:35:3c:af:09:33:fe:
                    44:9d:c1:56:f5:ec:cd:67:88:0e:18:44:ba:4b:6e:
                    08:6b:8e:0e:5d:a3:a0:2b:ed:a5:60:8c:da:8b:b8:
                    6b:74:d2:b7:c4:b9:4b:b2:d1:5f:dc:ab:10:e6:ad:
                    bb:12:7c:42:50:6a:0a:23:db:0a:fb:8c:42:1a:5e:
                    5a:e4:1e:95:39:54:f1:aa:11:06:c8:cd:4a:80:8a:
                    3a:ab:69:8b:2d:7d:a0:29:5c:6b:08:78:a5:82:17:
                    6b:68:5a:f9:6a:92:bc:13:c6:7f:c9:c4:13:38:0b:
                    85:39:ee:1b:90:19:1a:9e:8c:b3:61:3c:19:70:29:
                    3b:7a:a2:2d:ce:3f:d9:d3:70:4a:81:92:18:ed:73:
                    76:0a:3c:de:1e:11:5a:ba:4d:6b:29:66:78:ce:30:
                    fc:b5:c4:a4:e6:49:45:4e:ab:1f:3f:6c:22:d7:15:
                    4f:12:df:9e:40:fc:5f:28:c5:fb:c6:4e:79:57:7e:
                    a1:fe:5b:4a:8e:27:a6:3a:7d:69:9b:be:2c:8d:d2:
                    88:27:1f:51:5a:d0:e7:0b:d3:0a:12:99:e1:d5:71:
                    aa:87:20:85:76:9b:66:cc:ce:6e:bb:ff:a1:6e:b9:
                    a6:bf:41:34:4e:04:03:f4:81:63:0b:6c:01:60:8a:
                    05:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:04:21:9E:14:40:65:F0:99:87:D2:98:2C:EC:10:3B:58:FD:F8:BC
            X509v3 Authority Key Identifier:
                keyid:C1:04:CD:7D:F8:4C:31:9D:19:AF:35:B1:10:4F:17:3E:BA:2C:6D:BD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wQTNffhMMZ0ZrzWxEE8XProsbb0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/4ee19c-9462-4390-a42d-7eff8f1e91cd/1/wQTNffhMMZ0ZrzWxEE8XProsbb0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/48/4ee19c-9462-4390-a42d-7eff8f1e91cd/1/wQTNffhMMZ0ZrzWxEE8XProsbb0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:13:f6:90:13:66:b9:53:ad:8f:04:79:97:89:ef:97:fd:45:
         eb:ec:6e:8d:64:4c:59:c5:5c:42:e3:f4:75:36:a9:77:45:07:
         8d:92:bd:6d:f5:8a:7c:cc:a3:ae:65:a1:c0:8b:db:f8:19:d0:
         cd:b9:45:b4:cb:d6:ba:32:93:71:38:9f:e8:bc:09:3b:c1:da:
         89:91:8c:55:0f:b8:59:44:0a:95:4b:f9:6e:44:b1:0e:9e:31:
         dc:cb:78:f8:82:64:25:ac:00:6c:55:32:f3:5e:a5:4b:cb:97:
         32:4d:e9:fd:33:54:51:6e:c6:fd:0a:f7:b4:96:4d:c5:55:d0:
         18:fe:32:31:f8:e7:3a:81:4e:14:6d:2f:67:5a:15:45:6c:ef:
         00:3f:0b:25:15:53:20:04:7f:01:60:7e:37:f5:ba:fe:e6:e5:
         c4:e3:55:f2:18:37:3a:56:77:7a:47:8f:23:ff:0c:7c:4c:46:
         d7:ad:b2:be:46:2a:63:2a:8f:99:3f:d5:05:5f:10:90:18:9f:
         89:d9:7d:e9:a5:83:5b:ab:3d:c3:8c:9a:7b:81:70:35:81:9c:
         05:8f:65:e7:a0:c3:ab:e5:ca:58:fe:ff:cd:5f:48:d9:7b:94:
         ac:4c:15:b6:11:98:78:03:fc:01:74:75:05:9a:64:8c:5b:8e:
         ed:52:26:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:38:11 2025 by rpki-client