Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/160f8f-dbab-482d-b39c-ad2fda47988e/1/wOVJ_c7rApEsiodByBaAa74ZxEg.mft
File:                     wOVJ_c7rApEsiodByBaAa74ZxEg.mft (raw, json)
Hash identifier:          3Bd6vqXMwZJ6oXTutgLubWcjkO6AhWcntseykNCx8rk=
Subject key identifier:   41:70:3B:10:6C:E9:59:CB:2B:06:AA:DB:F1:FC:92:54:09:69:9D:BC
Authority key identifier: C0:E5:49:FD:CE:EB:02:91:2C:8A:87:41:C8:16:80:6B:BE:19:C4:48
Certificate issuer:       /CN=c0e549fdceeb02912c8a8741c816806bbe19c448
Certificate serial:       0194BC3CAA0D10A8712872433A58943885D2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wOVJ_c7rApEsiodByBaAa74ZxEg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/65/160f8f-dbab-482d-b39c-ad2fda47988e/1/wOVJ_c7rApEsiodByBaAa74ZxEg.mft
Manifest number:          08D4
Signing time:             Fri 31 Jan 2025 12:01:19 +0000
Manifest this update:     Fri 31 Jan 2025 12:01:19 +0000
Manifest next update:     Sat 01 Feb 2025 12:01:19 +0000
Files and hashes:         1: 7eNb44WNvRe3zUhzNoMOXBV0hdw.roa (hash: u5nCu4SXyaiL5SI5Y24CZX8YRjgh+vsOfZ1NUiBL330=)
                          2: 92v4gOX7Hd4VpBM47MNWwQITmiQ.roa (hash: IYC56kc9QpO1Lz7tXp5PsrYKm5wg9hGG4hbFTisgloQ=)
                          3: BJ6lsg-DXRJALTpWPFS2koaTAyY.roa (hash: IiHbLMYyBvv8idUUWBs1VcBi/2+qrySt01qtestuj3U=)
                          4: DO5idF7JefFWyUYzkZhYwCuZL6c.roa (hash: AJ1wLkAbsKPjn/aeUEI+0wqiFAaro9i62bH223sEeJk=)
                          5: iDdiLh5kCcnVhEcS17XeyUklRpU.roa (hash: vH9FgKr3O/PWH1F99+7VS2TIiEwAAU+Q3wu4ESVAvX4=)
                          6: lb8SvljV7v-gn9cpNcy7VFlIW4U.roa (hash: TMosDmxteJN205Un1BL0SVx3OHQURc2E5+W3ttZ+rDY=)
                          7: qkGOcb9ML1ScPc6ocdkEc-fJdPo.roa (hash: rOYR9Hc2I/xQX5WTMTMX9NryWoJMfSMzeGQ9FnM3vXE=)
                          8: v4giAVOJMEch9tYcozCGJgelH1M.roa (hash: OUMy4ShdW4gTpBY9LdojzedOmb/sODuZT4FZY1l2uCM=)
                          9: vCbOPN37-7Enm6vsP3-hGOISXDg.roa (hash: 7gKAoJeE/xQ9th4073due0jo0EKw0fA+BzapZ9ZOEdQ=)
                          10: wOVJ_c7rApEsiodByBaAa74ZxEg.crl (hash: T+ngSCs9s0+FleK/CjI/5ynW87OMgO2kwKH33Rq6THw=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:3c:aa:0d:10:a8:71:28:72:43:3a:58:94:38:85:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c0e549fdceeb02912c8a8741c816806bbe19c448
        Validity
            Not Before: Jan 31 12:01:19 2025 GMT
            Not After : Feb  1 12:01:19 2025 GMT
        Subject: CN=41703b106ce959cb2b06aadbf1fc925409699dbc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:53:92:d9:04:d6:63:a0:c8:9c:fa:5a:6f:59:
                    2e:56:5f:cb:ef:3e:42:e1:78:8b:fd:ee:31:a4:19:
                    aa:33:7d:43:fe:59:4b:1e:c5:37:57:f0:6c:14:a9:
                    da:48:9b:fe:c2:e6:72:f0:76:a8:f5:06:1a:81:6e:
                    85:a0:95:a9:e1:5e:00:bb:be:30:7b:01:a2:4d:ce:
                    22:2a:3a:87:e9:a3:cd:a7:9b:38:22:5d:44:bb:be:
                    14:26:19:bf:ae:da:49:3f:2e:fd:da:10:7b:14:99:
                    fe:d5:16:ad:cc:5e:dd:78:9b:d1:8d:04:2f:10:c2:
                    bd:9d:e6:1a:1d:81:f1:29:d9:c8:f1:c1:2e:ff:a9:
                    99:be:95:78:b4:60:b5:e5:a1:1a:c8:b0:4f:30:b5:
                    c4:bd:24:85:d8:67:50:4a:34:d9:32:86:a7:50:e4:
                    5f:cc:59:ae:d3:2f:f6:33:e7:68:a5:b7:bf:4f:76:
                    0d:45:a5:1e:74:cb:ec:3e:67:e0:d5:d5:77:e9:5e:
                    1f:b8:e7:2d:f4:91:f4:5a:c8:87:40:2b:c4:9d:9d:
                    b4:ee:61:c5:83:c6:53:a8:81:fa:34:72:67:68:7a:
                    d2:af:da:7d:a3:15:7c:1d:c2:f6:17:84:be:37:0f:
                    24:ad:e5:04:2b:98:d5:10:b0:24:ca:ca:dd:0c:91:
                    91:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:70:3B:10:6C:E9:59:CB:2B:06:AA:DB:F1:FC:92:54:09:69:9D:BC
            X509v3 Authority Key Identifier:
                keyid:C0:E5:49:FD:CE:EB:02:91:2C:8A:87:41:C8:16:80:6B:BE:19:C4:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wOVJ_c7rApEsiodByBaAa74ZxEg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/160f8f-dbab-482d-b39c-ad2fda47988e/1/wOVJ_c7rApEsiodByBaAa74ZxEg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/65/160f8f-dbab-482d-b39c-ad2fda47988e/1/wOVJ_c7rApEsiodByBaAa74ZxEg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:4b:47:8f:2b:d6:c0:9d:48:17:4e:30:9a:f4:07:07:24:73:
         a8:10:4c:46:86:48:e1:a8:95:fc:e7:63:e2:cf:b3:ef:ea:84:
         8c:58:73:81:65:64:ab:f6:a2:d0:1f:a5:a1:eb:c9:40:99:c1:
         ea:b7:cc:47:40:97:ae:6e:38:2f:6f:bb:08:8d:e0:41:46:00:
         53:a6:88:9e:d9:1c:6a:22:b6:39:c6:29:c0:0c:64:d6:b7:c4:
         45:8b:5e:1e:b2:29:17:90:6c:31:c4:15:25:f7:2c:6d:c8:73:
         ee:a3:1d:aa:55:66:24:b1:86:e7:de:1b:09:e3:7c:65:14:a3:
         bb:90:12:d1:f3:8a:4c:0f:2f:a1:cd:f0:43:00:ba:a2:b2:4d:
         8e:8b:e7:4e:98:02:83:06:a8:c7:39:4b:15:2d:3f:e4:b2:44:
         fd:03:12:ee:c8:dd:81:bd:99:c9:63:7f:38:40:87:34:dc:32:
         0b:da:06:9a:c0:3d:7c:3d:04:84:59:de:4d:df:13:77:c6:a0:
         4c:e0:73:58:34:07:df:29:a6:9c:52:19:f4:7f:36:db:78:9c:
         3c:04:0e:bd:9d:5b:8e:f8:5f:e0:a8:ce:44:b0:ed:33:31:91:
         52:e2:5a:95:e5:45:4f:26:7f:8e:4f:82:b5:d2:2e:38:bd:d2:
         36:5a:8c:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----