Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/720394-cf71-40a3-a538-ed01ed7c129b/1/wlWYnVecS16t6FL5f2Lpvyz73jw.mft
File:                     wlWYnVecS16t6FL5f2Lpvyz73jw.mft (raw, json)
Hash identifier:          G859amF9FuLYCAyCjsgzjk/GoIuoPm4+2ClQx0kB96M=
Subject key identifier:   2F:1A:79:75:01:0E:DC:BD:0E:4B:0D:6B:E5:24:3F:1B:60:6C:4C:02
Authority key identifier: C2:55:98:9D:57:9C:4B:5E:AD:E8:52:F9:7F:62:E9:BF:2C:FB:DE:3C
Certificate issuer:       /CN=c255989d579c4b5eade852f97f62e9bf2cfbde3c
Certificate serial:       0194BD177864B926AB2E7C3D40668C37CCCA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wlWYnVecS16t6FL5f2Lpvyz73jw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/55/720394-cf71-40a3-a538-ed01ed7c129b/1/wlWYnVecS16t6FL5f2Lpvyz73jw.mft
Manifest number:          142B
Signing time:             Fri 31 Jan 2025 16:00:19 +0000
Manifest this update:     Fri 31 Jan 2025 16:00:19 +0000
Manifest next update:     Sat 01 Feb 2025 16:00:19 +0000
Files and hashes:         1: 0ScG0SYY1VJYmCkO7bu4SWFCgDw.roa (hash: nEK6JQy7FzSZP+R7rro7N3DM3RNkDpivxyHHYO4T3GY=)
                          2: JZ0aaYFj7IVaH2VzvyP-hrd5WRY.roa (hash: NFZatP5QzAykkG+QnrkI9HiICUER0h9e0EtlC/fbFpE=)
                          3: XNVTHPEtEvJEQtfosSseCOClX9E.roa (hash: ncfHiY3VCS5auvhcc8v+Uwg/prPyczVTt0Pq4DfPjJw=)
                          4: wlWYnVecS16t6FL5f2Lpvyz73jw.crl (hash: iVAXKWjhx+JLD+rAJ/1yWTD2D4I9Xs7axz/6+sGIYtk=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bd:17:78:64:b9:26:ab:2e:7c:3d:40:66:8c:37:cc:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c255989d579c4b5eade852f97f62e9bf2cfbde3c
        Validity
            Not Before: Jan 31 16:00:19 2025 GMT
            Not After : Feb  1 16:00:19 2025 GMT
        Subject: CN=2f1a7975010edcbd0e4b0d6be5243f1b606c4c02
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:e4:4e:6e:f7:20:d9:c3:fe:2a:c4:e4:c3:f5:
                    a1:78:f8:18:98:9d:9b:d5:fe:04:25:62:6f:74:bd:
                    28:9a:9c:01:ff:39:d4:e7:1d:20:42:10:5b:a6:43:
                    c2:b2:7d:19:6a:6f:c2:ce:82:17:dd:c8:a5:60:d5:
                    e0:90:52:b2:bb:cb:e7:b4:fa:90:73:cc:10:82:b5:
                    fd:72:eb:9b:86:a1:79:75:9e:2b:03:2b:e1:ab:dc:
                    9c:0e:1f:e4:48:05:cd:4c:fc:8e:b9:ec:f1:65:ef:
                    b4:5d:6c:7e:29:0e:be:3e:50:f2:7d:f3:90:08:4b:
                    f2:32:bc:9e:df:f7:2a:59:b7:b7:06:2d:f7:95:84:
                    6e:f4:44:21:71:c5:07:50:61:5c:a6:a8:7a:28:88:
                    c0:10:da:c5:fa:c2:a5:69:34:79:39:2c:03:32:fa:
                    db:fa:92:19:0c:ca:d7:4b:4c:ae:c4:54:02:a8:b8:
                    ea:59:2a:d9:11:6c:58:ed:06:54:40:f1:40:45:9b:
                    02:0e:5f:5a:f8:a8:06:62:eb:b5:b6:0f:7a:49:ec:
                    0d:e5:8a:6c:dc:a4:8e:0d:26:45:19:fd:5f:ee:cd:
                    c8:2e:7b:2c:20:ea:6c:3a:70:61:49:29:18:e6:14:
                    a4:9a:20:a6:d9:6f:da:90:bb:ea:31:ca:ef:f9:24:
                    da:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:1A:79:75:01:0E:DC:BD:0E:4B:0D:6B:E5:24:3F:1B:60:6C:4C:02
            X509v3 Authority Key Identifier:
                keyid:C2:55:98:9D:57:9C:4B:5E:AD:E8:52:F9:7F:62:E9:BF:2C:FB:DE:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wlWYnVecS16t6FL5f2Lpvyz73jw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/720394-cf71-40a3-a538-ed01ed7c129b/1/wlWYnVecS16t6FL5f2Lpvyz73jw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/55/720394-cf71-40a3-a538-ed01ed7c129b/1/wlWYnVecS16t6FL5f2Lpvyz73jw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         99:e9:d2:bc:55:cf:35:4e:6f:1b:44:3a:11:f1:e3:5f:6f:31:
         09:d3:39:7d:07:79:15:be:68:22:4c:87:b0:7f:70:96:34:6f:
         c9:14:f9:b3:26:85:53:e6:84:e5:24:d9:08:d6:b4:cd:ca:d5:
         78:f6:d7:be:e3:f7:89:84:dd:ef:71:67:ca:e8:99:8a:bb:43:
         66:02:65:18:9f:23:07:df:af:d8:a9:13:ed:c8:d6:c3:a2:a6:
         2e:42:22:cb:96:56:ef:df:04:05:88:03:47:80:ee:46:81:9f:
         c2:79:e3:99:71:8a:0b:20:3d:de:b4:ac:99:f3:02:44:e8:15:
         87:34:d9:24:79:fb:4b:67:af:33:6a:28:b2:3a:99:0a:e5:6a:
         c4:64:6c:4e:15:62:ef:25:bb:00:e6:b1:61:f9:77:87:74:9b:
         d0:82:db:6d:9b:e2:ad:d3:60:85:8f:da:a8:95:74:9f:90:c9:
         38:b6:93:91:ff:db:62:75:7b:aa:67:aa:6d:20:ca:ed:f1:42:
         84:6a:9a:0c:3f:99:6d:e4:0e:03:8e:4e:16:c6:05:f7:00:c2:
         7f:df:49:14:b8:b5:0b:e8:92:ea:e6:51:53:de:cf:45:17:3f:
         05:b4:a1:71:53:90:9f:da:5a:a2:c6:5c:6c:15:93:96:6e:9d:
         74:0b:0c:fc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9F3hkuSarLnw9QGaMN8zKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMyNTU5ODlkNTc5YzRiNWVhZGU4NTJmOTdmNjJlOWJmMmNm
YmRlM2MwHhcNMjUwMTMxMTYwMDE5WhcNMjUwMjAxMTYwMDE5WjAzMTEwLwYDVQQD
EygyZjFhNzk3NTAxMGVkY2JkMGU0YjBkNmJlNTI0M2YxYjYwNmM0YzAyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqORObvcg2cP+KsTkw/WhePgYmJ2b
1f4EJWJvdL0ompwB/znU5x0gQhBbpkPCsn0Zam/CzoIX3cilYNXgkFKyu8vntPqQ
c8wQgrX9cuubhqF5dZ4rAyvhq9ycDh/kSAXNTPyOuezxZe+0XWx+KQ6+PlDyffOQ
CEvyMrye3/cqWbe3Bi33lYRu9EQhccUHUGFcpqh6KIjAENrF+sKlaTR5OSwDMvrb
+pIZDMrXS0yuxFQCqLjqWSrZEWxY7QZUQPFARZsCDl9a+KgGYuu1tg96SewN5Yps
3KSODSZFGf1f7s3ILnssIOpsOnBhSSkY5hSkmiCm2W/akLvqMcrv+STajQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFC8aeXUBDty9DksNa+UkPxtgbEwCMB8GA1UdIwQY
MBaAFMJVmJ1XnEterehS+X9i6b8s+948MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd2xXWW5WZWNTMTZ0NkZMNWYyTHB2eXo3M2p3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS83MjAzOTQtY2Y3MS00MGEzLWE1Mzgt
ZWQwMWVkN2MxMjliLzEvd2xXWW5WZWNTMTZ0NkZMNWYyTHB2eXo3M2p3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NS83MjAzOTQtY2Y3MS00MGEzLWE1MzgtZWQwMWVkN2MxMjli
LzEvd2xXWW5WZWNTMTZ0NkZMNWYyTHB2eXo3M2p3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmenSvFXP
NU5vG0Q6EfHjX28xCdM5fQd5Fb5oIkyHsH9wljRvyRT5syaFU+aE5STZCNa0zcrV
ePbXvuP3iYTd73FnyuiZirtDZgJlGJ8jB9+v2KkT7cjWw6KmLkIiy5ZW798EBYgD
R4DuRoGfwnnjmXGKCyA93rSsmfMCROgVhzTZJHn7S2evM2oosjqZCuVqxGRsThVi
7yW7AOaxYfl3h3Sb0ILbbZvirdNghY/aqJV0n5DJOLaTkf/bYnV7qmeqbSDK7fFC
hGqaDD+ZbeQOA45OFsYF9wDCf99JFLi1C+iS6uZRU97PRRc/BbShcVOQn9paosZc
bBWTlm6ddAsM/A==
-----END CERTIFICATE-----