Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/2d953c-96bc-407b-ad6a-3cfd6c3fdca4/1/wOod26TL08tX7IYNhf9P-TAa_OU.mft
File:                     wOod26TL08tX7IYNhf9P-TAa_OU.mft (raw, json)
Hash identifier:          n8QXmzd+/nUTbfmcjSVykM8eacyOmDzx+7RI/+RslKQ=
Subject key identifier:   38:F4:C3:3E:74:CF:05:33:F4:AF:46:7A:5E:AB:59:5A:74:F0:F5:DE
Authority key identifier: C0:EA:1D:DB:A4:CB:D3:CB:57:EC:86:0D:85:FF:4F:F9:30:1A:FC:E5
Certificate issuer:       /CN=c0ea1ddba4cbd3cb57ec860d85ff4ff9301afce5
Certificate serial:       0194BBCDEFBBED1D0B50B18EFCB4082D9571
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wOod26TL08tX7IYNhf9P-TAa_OU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/63/2d953c-96bc-407b-ad6a-3cfd6c3fdca4/1/wOod26TL08tX7IYNhf9P-TAa_OU.mft
Manifest number:          1426
Signing time:             Fri 31 Jan 2025 10:00:23 +0000
Manifest this update:     Fri 31 Jan 2025 10:00:23 +0000
Manifest next update:     Sat 01 Feb 2025 10:00:23 +0000
Files and hashes:         1: AMYGfvxAWSGgHnKu_QntycSpGmI.roa (hash: QcPElnjpeBVJZHljf/0lA1BJWaDX6zX8ch7k4Gzc5Ng=)
                          2: wOod26TL08tX7IYNhf9P-TAa_OU.crl (hash: 07CLAXbB8AzaC63+kKesPxGq3F4FhyCsgoZrDYQQAFQ=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bb:cd:ef:bb:ed:1d:0b:50:b1:8e:fc:b4:08:2d:95:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c0ea1ddba4cbd3cb57ec860d85ff4ff9301afce5
        Validity
            Not Before: Jan 31 10:00:23 2025 GMT
            Not After : Feb  1 10:00:23 2025 GMT
        Subject: CN=38f4c33e74cf0533f4af467a5eab595a74f0f5de
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:41:bb:f0:7f:f4:ab:f8:b8:cf:3f:10:5b:37:
                    f6:15:ef:d9:db:f8:bb:96:65:66:c6:67:27:4b:da:
                    38:9b:2d:b4:5b:4f:ba:b1:c4:d7:dc:d7:4a:e4:7f:
                    df:06:79:5a:2f:bf:58:7f:cf:c1:e4:f7:b5:b6:fc:
                    76:81:74:c9:7b:60:16:a3:e3:c7:bd:67:8d:30:e0:
                    c6:1a:7f:3a:54:a7:d5:42:d1:cf:05:fe:a7:a1:36:
                    3a:80:04:75:07:c7:55:ed:64:8f:cb:ed:3d:ec:27:
                    95:30:e9:c7:ec:f6:16:40:8a:37:50:21:9c:c6:b9:
                    d3:82:08:6a:f7:dc:55:16:e1:60:b3:b4:7b:de:e9:
                    a3:d9:e7:98:a0:d1:de:b8:01:ce:67:bc:d0:22:6d:
                    e1:d0:0a:38:b1:8a:3d:5c:d4:66:21:84:62:c6:b2:
                    80:7c:7d:71:ec:8c:88:5b:7b:e3:90:69:71:0f:08:
                    45:2b:e9:6d:e9:06:8b:5c:19:d4:c7:7a:88:b2:39:
                    7c:ef:cc:47:fb:c4:2c:13:58:6d:2f:01:cc:93:00:
                    64:8b:20:8f:e8:de:28:e4:a4:b7:8c:d6:6c:2a:05:
                    07:4c:fd:c3:9a:c8:f4:78:46:c3:d2:97:ea:0e:56:
                    1e:7f:2e:ad:45:46:2c:23:78:b4:42:a8:be:51:cd:
                    4a:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:F4:C3:3E:74:CF:05:33:F4:AF:46:7A:5E:AB:59:5A:74:F0:F5:DE
            X509v3 Authority Key Identifier:
                keyid:C0:EA:1D:DB:A4:CB:D3:CB:57:EC:86:0D:85:FF:4F:F9:30:1A:FC:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wOod26TL08tX7IYNhf9P-TAa_OU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/2d953c-96bc-407b-ad6a-3cfd6c3fdca4/1/wOod26TL08tX7IYNhf9P-TAa_OU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/63/2d953c-96bc-407b-ad6a-3cfd6c3fdca4/1/wOod26TL08tX7IYNhf9P-TAa_OU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:77:e3:9a:11:0e:b9:61:b3:24:cc:51:ac:79:20:77:ea:b9:
         16:c1:25:fe:20:ea:22:96:be:b2:13:0e:a0:6d:b0:f7:32:90:
         5a:cf:0d:83:9c:56:a2:2a:26:54:c3:1d:24:22:ae:97:11:6e:
         e4:7c:f8:5e:97:72:82:53:17:de:e2:b0:f3:9e:27:43:2d:84:
         8b:13:38:84:1f:17:f3:c9:6d:28:82:5c:d0:d1:91:9a:43:f6:
         0e:3c:6e:14:99:d4:4f:8a:22:f6:31:99:46:33:53:1c:6b:cf:
         e8:86:1c:90:f9:08:75:94:97:eb:06:ab:ed:96:52:8f:e3:7d:
         a1:3e:07:98:a1:a7:2e:39:31:4f:d8:3a:64:7d:64:4b:1b:63:
         14:80:ed:78:b1:4e:e1:42:03:09:65:3d:7a:76:d3:e8:07:91:
         50:26:c7:02:2d:a6:6f:5d:53:05:ad:4e:5c:e6:5a:16:ef:46:
         05:1c:5f:5c:92:c4:07:19:13:26:32:73:10:01:6b:50:cd:a5:
         35:fa:a4:98:95:8e:31:f8:fc:c9:17:53:4a:4b:ff:62:dd:c0:
         87:e8:aa:9a:77:f9:9b:89:98:cd:67:aa:95:e3:ba:a5:bc:9d:
         82:0a:b1:e5:50:50:c3:b7:e0:b6:30:a2:cc:55:8f:25:71:29:
         2e:69:10:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:57:14 2025 by rpki-client