Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/12dd2c-4d0c-420a-98a5-02e6422c4181/1/wDJJW4nc6BsMf4ht38NgS94G2KY.mft
File:                     wDJJW4nc6BsMf4ht38NgS94G2KY.mft (raw, json)
Hash identifier:          6LeiXqcafwZT9jJ9vSPBV9iWhv+6du7NvE5mcZaoGpA=
Subject key identifier:   45:F2:7D:21:33:A8:CB:80:61:23:F3:87:E5:C2:79:7C:C8:1F:28:90
Authority key identifier: C0:32:49:5B:89:DC:E8:1B:0C:7F:88:6D:DF:C3:60:4B:DE:06:D8:A6
Certificate issuer:       /CN=c032495b89dce81b0c7f886ddfc3604bde06d8a6
Certificate serial:       0194BBCEE8B64C137D1F3B3D3F7F0BD6D7F8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wDJJW4nc6BsMf4ht38NgS94G2KY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/68/12dd2c-4d0c-420a-98a5-02e6422c4181/1/wDJJW4nc6BsMf4ht38NgS94G2KY.mft
Manifest number:          142A
Signing time:             Fri 31 Jan 2025 10:01:26 +0000
Manifest this update:     Fri 31 Jan 2025 10:01:26 +0000
Manifest next update:     Sat 01 Feb 2025 10:01:26 +0000
Files and hashes:         1: mHKZZdX4P1dK57yB0hCJdDCS-A8.roa (hash: sgKlWaet9A3w8v934Vjaqn1vJ0nwSp4V/6BEjtLuqMM=)
                          2: wDJJW4nc6BsMf4ht38NgS94G2KY.crl (hash: pA8oB9GctQrO0u1nEiRemQs9jPl+6Rn+8aVYx2IDVOM=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bb:ce:e8:b6:4c:13:7d:1f:3b:3d:3f:7f:0b:d6:d7:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c032495b89dce81b0c7f886ddfc3604bde06d8a6
        Validity
            Not Before: Jan 31 10:01:26 2025 GMT
            Not After : Feb  1 10:01:26 2025 GMT
        Subject: CN=45f27d2133a8cb806123f387e5c2797cc81f2890
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:44:b6:75:38:c5:79:57:2e:9f:4e:ff:0f:60:
                    5a:18:93:7c:98:77:45:02:3f:dd:f5:e9:0c:76:46:
                    16:39:f4:46:b3:b2:b4:f3:99:b4:7f:9f:6d:e2:34:
                    f1:10:aa:d9:0e:5a:b7:84:09:ea:1c:20:3e:31:9b:
                    a1:54:17:7b:ff:10:a8:f3:a1:65:21:39:fc:45:55:
                    b5:30:9d:34:53:87:9f:1d:11:34:53:53:af:ec:fc:
                    29:44:0e:5b:3e:de:98:78:67:7c:ab:fd:0e:be:81:
                    a8:62:87:b8:a4:d6:e5:5d:2f:99:70:70:8e:be:6e:
                    1b:4a:31:56:e7:30:e9:78:ef:aa:1b:63:1f:90:cc:
                    63:c5:78:2d:8e:c1:74:d0:c5:b1:0b:5d:5e:db:ce:
                    24:c8:f8:b8:b0:36:25:8d:fd:fb:9e:0d:25:b1:6c:
                    6d:88:7d:a2:68:7a:ee:4b:5b:46:e6:1a:70:36:1b:
                    27:31:ee:50:fb:8c:f1:67:20:41:66:86:2d:34:12:
                    b7:e7:74:2e:be:b7:eb:0a:23:2e:a1:2b:50:33:33:
                    f3:7c:cf:e0:cb:45:f2:f3:7a:f2:65:92:cd:99:d5:
                    c5:6e:ca:fc:26:cb:98:45:41:57:ad:73:70:57:5c:
                    57:01:28:f1:c7:cb:74:6c:d7:a8:01:a6:2e:ee:cd:
                    5a:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:F2:7D:21:33:A8:CB:80:61:23:F3:87:E5:C2:79:7C:C8:1F:28:90
            X509v3 Authority Key Identifier:
                keyid:C0:32:49:5B:89:DC:E8:1B:0C:7F:88:6D:DF:C3:60:4B:DE:06:D8:A6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wDJJW4nc6BsMf4ht38NgS94G2KY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/12dd2c-4d0c-420a-98a5-02e6422c4181/1/wDJJW4nc6BsMf4ht38NgS94G2KY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/68/12dd2c-4d0c-420a-98a5-02e6422c4181/1/wDJJW4nc6BsMf4ht38NgS94G2KY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:1f:bc:1a:0a:f7:a5:d6:5c:a4:bb:05:da:f4:ab:07:66:68:
         c7:a7:a7:9a:1c:3e:14:03:51:06:fd:0e:fa:63:81:50:d4:e8:
         eb:f0:f1:f1:40:b4:d7:8c:1f:57:a1:8a:bd:b4:a5:93:e4:f7:
         70:8b:ca:6e:73:39:8d:56:ab:32:9a:a6:e5:3a:5b:58:b8:b7:
         60:72:be:7b:a1:45:4c:d4:65:05:71:0f:0d:21:a5:4f:5b:25:
         90:0d:24:e3:d1:19:c8:a0:34:bb:79:97:a2:85:d0:dd:14:76:
         cb:34:ad:61:22:2b:d0:7f:2a:67:5c:4d:98:6e:1c:d4:e0:60:
         1a:6e:1f:9d:b9:62:83:e2:52:21:e9:c2:93:c2:60:95:1c:8f:
         20:fe:d2:fc:93:97:de:4e:2f:31:7c:60:fe:82:e4:8f:63:63:
         cc:3c:0a:64:ef:64:3f:03:6a:01:7f:e1:34:b8:40:c6:70:b0:
         8b:b2:43:7c:49:d0:84:28:c2:af:16:8d:ad:a7:5d:dc:54:0b:
         b8:7c:d8:e9:8e:a2:36:85:45:b8:a3:bc:40:6e:d8:ef:3a:ce:
         a4:41:9a:2a:1e:fa:67:c3:33:8c:d5:3e:8c:80:ac:82:cf:53:
         4b:cf:9e:ad:18:de:d7:36:76:14:94:76:d4:8e:10:d0:f1:50:
         f3:1a:bf:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:47:58 2025 by rpki-client