Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/8eff42-5b55-4e6f-8222-a52a8795d956/1/W-4FGpOQHswBdEB5qkrC-wd7n8E.mft
File:                     W-4FGpOQHswBdEB5qkrC-wd7n8E.mft (raw, json)
Hash identifier:          38rDNPC5zV71ZlolODyWzi0TyZ2R/HrBTRQqjIXnnF4=
Subject key identifier:   1B:83:6F:6E:12:25:AE:5D:BB:C2:28:BF:D9:12:58:87:6B:98:B8:C7
Authority key identifier: 5B:EE:05:1A:93:90:1E:CC:01:74:40:79:AA:4A:C2:FB:07:7B:9F:C1
Certificate issuer:       /CN=5bee051a93901ecc01744079aa4ac2fb077b9fc1
Certificate serial:       0194BBCE332D1DC6AD2B37FEEE9AD69A5EDC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/W-4FGpOQHswBdEB5qkrC-wd7n8E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/66/8eff42-5b55-4e6f-8222-a52a8795d956/1/W-4FGpOQHswBdEB5qkrC-wd7n8E.mft
Manifest number:          11D6
Signing time:             Fri 31 Jan 2025 10:00:40 +0000
Manifest this update:     Fri 31 Jan 2025 10:00:40 +0000
Manifest next update:     Sat 01 Feb 2025 10:00:40 +0000
Files and hashes:         1: 279VdnG-Fdszjb2yG7-2IjnNQq8.roa (hash: 39BYbVFVCqd2qENpfGmBlifLRcfQzLv4w9dE1us6VMw=)
                          2: 4LSDpWlsgJw9Otx93_mKw6B9grg.roa (hash: c67VMb5sCTD5NQ5KlZtleOn3Nkqt4gilHv8oqn6VVoY=)
                          3: QZsEzF5Uanou3frIfzrz7sXtIzk.roa (hash: 6qhVEn0UXh14a1V5qFmAi7r1Lf/LN44JR4TpHEtpYIQ=)
                          4: Vx5x_bXNKHWPaLcbsSMbayKsJ6c.roa (hash: 8Re0cXlUrm/00gRHpwtqBPEBcWm8dUdY/V27GZgOOjY=)
                          5: W-4FGpOQHswBdEB5qkrC-wd7n8E.crl (hash: ynSWAL75kSZ/ZvCvZkXteHRpoFgYFMYjym8q8QIamcI=)
                          6: _AxdM0TapJRwZRPAoGLBTsCIVsg.roa (hash: XGaXRToDPIvjJqkgJCg3fbR7ABXKEIiZ37d2bopOgi8=)
                          7: aFIEwyn9QMrdZxgjt2xaRy3HuBU.roa (hash: WYgPsctqzKEHGx9t7skC8EcDRaeZlFuUGl3x2x/2Veg=)
                          8: ckuQTVeOTWmVeOP4EBOPI4_kTkg.roa (hash: lbXsTVgXldq8a0VyZZLgKrRQ4BJoKPMcORX5A8N1vSY=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bb:ce:33:2d:1d:c6:ad:2b:37:fe:ee:9a:d6:9a:5e:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5bee051a93901ecc01744079aa4ac2fb077b9fc1
        Validity
            Not Before: Jan 31 10:00:40 2025 GMT
            Not After : Feb  1 10:00:40 2025 GMT
        Subject: CN=1b836f6e1225ae5dbbc228bfd91258876b98b8c7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:d2:1e:a1:f6:17:01:08:d4:b0:8e:0f:8d:f4:
                    54:4a:e2:0b:4d:6c:b9:ee:94:c5:b3:b9:3e:d7:00:
                    bc:53:51:cf:0d:49:3b:f9:a7:2f:b9:81:49:56:56:
                    a4:d6:e7:f5:d5:e1:07:a5:31:ed:51:15:0c:19:8e:
                    bf:04:9f:f2:0a:43:f8:09:74:38:a8:3a:9a:51:5f:
                    92:df:f8:65:6d:df:27:a1:b7:aa:fb:85:c9:a6:4c:
                    c7:00:44:b2:64:5f:88:af:b0:04:d8:97:b9:54:2a:
                    2c:9c:44:25:fc:a5:3c:9c:46:30:de:71:86:e3:d5:
                    a6:a0:ee:8b:ce:74:98:8a:22:14:f6:19:e6:df:11:
                    ca:22:af:3f:0e:c7:20:26:41:93:21:7d:bf:29:2a:
                    d8:aa:de:58:63:4b:58:d4:a2:c1:4f:af:15:a0:34:
                    68:fc:6a:a4:54:00:45:5a:a1:ff:36:45:89:db:a1:
                    71:d4:bc:b4:15:59:e9:1c:94:5b:02:ee:32:48:79:
                    2e:1d:60:2f:ca:91:8a:89:3e:5c:4b:fe:a3:a7:c3:
                    58:cd:06:5e:ab:1f:86:0b:d5:60:3d:ca:dc:0a:bf:
                    fc:d6:ef:87:39:9b:25:98:9a:95:89:47:96:a5:1f:
                    8e:61:fc:c1:1a:6c:99:2a:cb:d7:86:3b:13:eb:f8:
                    58:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:83:6F:6E:12:25:AE:5D:BB:C2:28:BF:D9:12:58:87:6B:98:B8:C7
            X509v3 Authority Key Identifier:
                keyid:5B:EE:05:1A:93:90:1E:CC:01:74:40:79:AA:4A:C2:FB:07:7B:9F:C1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W-4FGpOQHswBdEB5qkrC-wd7n8E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/8eff42-5b55-4e6f-8222-a52a8795d956/1/W-4FGpOQHswBdEB5qkrC-wd7n8E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/66/8eff42-5b55-4e6f-8222-a52a8795d956/1/W-4FGpOQHswBdEB5qkrC-wd7n8E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ba:66:be:da:8c:15:e4:42:89:f7:1c:9b:1a:c1:91:68:23:c0:
         e9:61:e7:da:cb:7d:7e:33:63:7b:fb:ec:26:57:c5:4f:ad:b3:
         2d:3f:32:a2:d1:47:db:39:87:88:6d:71:81:4a:bd:00:f8:b3:
         39:82:e9:42:80:15:df:44:5c:91:03:dc:29:de:7f:ee:d4:5e:
         24:1c:2c:7c:4a:29:0e:80:d7:31:75:ea:fc:4b:4a:d8:7b:95:
         a5:3a:44:a0:6c:18:a6:50:be:b0:a6:af:a3:e2:3d:b9:50:cf:
         21:67:62:15:7f:74:06:0f:57:77:12:0f:e9:bc:33:9f:12:b8:
         02:c3:1a:7a:9a:18:f9:54:be:89:eb:90:f5:17:3c:2b:b6:81:
         c8:d7:ec:36:ed:6f:2b:48:d4:83:32:7e:ad:56:84:6b:fc:60:
         a2:74:df:2e:34:7d:b2:75:a6:0a:99:82:c6:e8:42:9f:eb:57:
         d8:94:5e:cc:59:c2:f4:48:33:6d:a8:f8:7a:2e:a7:d4:eb:57:
         81:a9:ca:53:ea:0e:43:34:97:20:cd:fd:b7:70:0e:a3:01:db:
         dd:da:88:9c:a6:07:74:88:6d:64:78:ec:f2:41:76:52:98:b4:
         5d:34:21:d8:1f:77:2a:e0:65:7f:00:94:01:7b:ca:37:f5:b9:
         05:46:43:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----