Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/31c056-6a8a-4226-803c-583fbe64a955/1/WUlpi7zST8nhqfX0FIbDGvGaS8g.mft
File:                     WUlpi7zST8nhqfX0FIbDGvGaS8g.mft (raw, json)
Hash identifier:          nfZ+dCSsJRKpDuYbCoyV8iW3vbgUDx7VG1r10Q9KvEw=
Subject key identifier:   EF:8D:AB:2A:3A:00:AB:DD:BC:45:62:0B:84:0A:DB:2E:83:EC:44:4D
Authority key identifier: 59:49:69:8B:BC:D2:4F:C9:E1:A9:F5:F4:14:86:C3:1A:F1:9A:4B:C8
Certificate issuer:       /CN=5949698bbcd24fc9e1a9f5f41486c31af19a4bc8
Certificate serial:       0194BCE09B24140851EDC78679F4944D373A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WUlpi7zST8nhqfX0FIbDGvGaS8g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4f/31c056-6a8a-4226-803c-583fbe64a955/1/WUlpi7zST8nhqfX0FIbDGvGaS8g.mft
Manifest number:          142A
Signing time:             Fri 31 Jan 2025 15:00:23 +0000
Manifest this update:     Fri 31 Jan 2025 15:00:23 +0000
Manifest next update:     Sat 01 Feb 2025 15:00:23 +0000
Files and hashes:         1: WUlpi7zST8nhqfX0FIbDGvGaS8g.crl (hash: rYGQUX6CD1/4o0X5GCx05XCsiIE4W6/rr7/NOUgGoqc=)
                          2: vt15ABy3zJP47x5DikC4lY7LNe4.roa (hash: IdpTO09MEQGHcGdgBzndMJHenkqW9uYtr/gnL2zPkrU=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:e0:9b:24:14:08:51:ed:c7:86:79:f4:94:4d:37:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5949698bbcd24fc9e1a9f5f41486c31af19a4bc8
        Validity
            Not Before: Jan 31 15:00:23 2025 GMT
            Not After : Feb  1 15:00:23 2025 GMT
        Subject: CN=ef8dab2a3a00abddbc45620b840adb2e83ec444d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:2e:9d:72:ce:6e:4e:d5:03:88:c2:63:a4:6c:
                    2b:30:38:5e:22:0a:61:d0:87:e7:c5:82:92:87:e5:
                    4c:a3:9d:a5:c7:30:7d:f1:c3:78:cc:57:47:db:e3:
                    c3:7f:35:54:d9:5f:52:d5:6e:87:75:15:ed:b4:b8:
                    85:11:b7:4e:03:82:95:e7:ec:15:ee:9a:63:bf:96:
                    b5:21:67:59:69:5c:e3:70:54:14:75:1d:d2:75:9e:
                    1b:76:78:e2:5b:07:fb:01:ee:69:39:30:39:b1:9f:
                    92:94:e7:9d:61:00:b9:ca:e7:e1:ae:a8:c6:72:82:
                    a0:54:80:9d:1e:60:8c:01:c3:dd:1a:5a:d6:70:8a:
                    c8:37:fb:6e:9e:a7:c3:91:2f:6e:21:22:bd:a0:73:
                    6a:79:7a:38:92:95:f3:d7:cb:cc:58:37:11:59:62:
                    30:a0:cb:f4:43:61:51:be:4c:65:c7:d3:7e:eb:66:
                    70:30:4d:da:19:1e:d0:7d:2d:c0:33:2e:15:51:27:
                    cd:40:20:80:07:da:26:3f:b6:85:cb:75:32:b6:b3:
                    2a:18:e8:71:44:ba:de:d2:f7:22:7a:1d:79:54:ad:
                    8d:18:ac:a6:52:3c:e5:41:d5:f3:4d:f5:b9:7c:09:
                    eb:77:0c:ad:dc:99:b2:9f:b3:37:0c:3b:02:8c:56:
                    4a:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:8D:AB:2A:3A:00:AB:DD:BC:45:62:0B:84:0A:DB:2E:83:EC:44:4D
            X509v3 Authority Key Identifier:
                keyid:59:49:69:8B:BC:D2:4F:C9:E1:A9:F5:F4:14:86:C3:1A:F1:9A:4B:C8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WUlpi7zST8nhqfX0FIbDGvGaS8g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/31c056-6a8a-4226-803c-583fbe64a955/1/WUlpi7zST8nhqfX0FIbDGvGaS8g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/31c056-6a8a-4226-803c-583fbe64a955/1/WUlpi7zST8nhqfX0FIbDGvGaS8g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:0c:39:34:ab:64:b2:75:1d:90:0b:e9:5f:41:47:d5:30:26:
         88:29:ac:c6:d8:10:59:d6:01:19:a5:13:20:ae:c2:11:e5:f5:
         6a:7f:a2:46:42:aa:6a:95:7c:75:e3:54:11:12:85:36:7b:04:
         07:c2:76:12:67:ca:ff:fe:be:67:e2:c5:a8:23:c5:1d:88:c0:
         24:1c:72:5d:ae:36:21:bd:76:7a:c9:d9:3a:11:f9:df:ea:f1:
         14:74:41:cf:f1:e7:7b:59:91:19:23:c5:d1:3c:b5:7c:78:75:
         8b:ad:40:c8:17:1a:67:50:99:89:83:2a:6f:37:a6:98:48:fd:
         00:ef:19:17:28:c5:34:88:21:10:b4:2b:e4:c1:14:f2:61:4c:
         07:c2:55:41:e4:af:be:5a:89:8c:f3:53:84:23:4c:72:87:ca:
         52:1e:74:c0:f9:75:03:7a:1a:4e:4d:eb:e4:ae:c2:c6:eb:51:
         85:ef:ad:0f:b4:82:82:45:f7:cd:d2:60:37:3e:ff:37:00:27:
         59:64:86:a7:e5:c6:6a:27:12:cb:58:5e:48:80:a1:6c:c3:7b:
         89:d4:89:3a:ed:56:6c:bc:e5:d5:00:48:95:aa:31:7a:51:25:
         40:96:6a:e0:29:2a:01:6d:f7:3b:f7:34:5f:7e:a5:f1:b4:cf:
         50:07:28:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:01:11 2025 by rpki-client