Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/bea14a-0d32-4aa7-b898-d60b3b6cca6e/1/WpObDO0411zGPtUNblznK7tbSxA.mft
File:                     WpObDO0411zGPtUNblznK7tbSxA.mft (raw, json)
Hash identifier:          Chi3AOXhAEEWnnq/7KVzKglk0RjzHbHOft8BS5dkAgI=
Subject key identifier:   5D:C9:9E:36:68:8A:D9:50:A9:BE:72:D5:53:F1:8E:24:C7:86:91:FB
Authority key identifier: 5A:93:9B:0C:ED:38:D7:5C:C6:3E:D5:0D:6E:5C:E7:2B:BB:5B:4B:10
Certificate issuer:       /CN=5a939b0ced38d75cc63ed50d6e5ce72bbb5b4b10
Certificate serial:       0194BD4E9E68F59CD4FA536C1F4DCCEB5EA9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WpObDO0411zGPtUNblznK7tbSxA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/74/bea14a-0d32-4aa7-b898-d60b3b6cca6e/1/WpObDO0411zGPtUNblznK7tbSxA.mft
Manifest number:          101D
Signing time:             Fri 31 Jan 2025 17:00:33 +0000
Manifest this update:     Fri 31 Jan 2025 17:00:33 +0000
Manifest next update:     Sat 01 Feb 2025 17:00:33 +0000
Files and hashes:         1: 11dCD_28knpPV-7hcS46kYjhhGo.roa (hash: G83WGRUtYY3zSefbF+E2SJyXjgx9VV9MLKF3KXuZ9b4=)
                          2: 9T-QhsbRhmrkvdsVLB1PkHcPQAU.roa (hash: +YZGQdKu0ilXXmu/2SQfsBtiwU0k+RevzvRnNOLKKVY=)
                          3: AaM-pqC2G1Ii-4FRyyYRtfA0Ooo.roa (hash: mQFbvzX+Y9dZrtK2BakuFJ5sm6Ogm235Vho6rN3XTII=)
                          4: WpObDO0411zGPtUNblznK7tbSxA.crl (hash: Z5qSLpkcMgSM3p1KHlTI3GDi++eMEgQT+9VFB4YAYQY=)
                          5: cymC3KZ1c7BXQLRy1AilqQI6bpI.roa (hash: mlam5arUK8SsUqk4z5tLdb+v0T8UqDPPoMtwFlKuVc8=)
                          6: mjXUPjiVNMzLXR-2QHlKUZB-SqY.roa (hash: 9INuss7absNCiBI0T9pOtU1T9XnmEmmFvhdz0TxdOWA=)
                          7: pUUlfUvQW3bpVWFJSWjtqGtipWk.roa (hash: P7OmQLjENv5CK2lPe0nA9Qd4uSq82B7QZTMLiELa9bY=)
                          8: qnW51eXl6iLH1UGdnNVD2RBavLQ.roa (hash: ZOPFQSAJtSvVDnecEeTUqA5xZ9agsklGMdIDxOY18U4=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bd:4e:9e:68:f5:9c:d4:fa:53:6c:1f:4d:cc:eb:5e:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5a939b0ced38d75cc63ed50d6e5ce72bbb5b4b10
        Validity
            Not Before: Jan 31 17:00:33 2025 GMT
            Not After : Feb  1 17:00:33 2025 GMT
        Subject: CN=5dc99e36688ad950a9be72d553f18e24c78691fb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:20:59:99:2d:e6:84:4f:82:b8:de:f9:ae:0e:
                    0e:bb:ff:74:0f:64:ee:0e:b6:c0:49:75:f0:3d:72:
                    06:09:aa:6d:c3:05:cf:3b:b0:35:ef:99:fc:db:17:
                    0a:89:cc:cd:72:90:74:e6:1f:9d:90:50:b8:be:7c:
                    8f:c8:d6:f9:2f:34:f5:36:70:56:27:87:b2:df:3a:
                    db:e3:6a:74:0b:7f:d4:a9:0b:b8:27:5a:6e:d9:eb:
                    44:b6:bc:2f:9a:b6:cb:37:f7:71:8b:8a:24:27:39:
                    02:5b:52:3d:d5:d0:31:f5:10:b6:93:f9:28:03:9b:
                    4a:4a:a1:93:26:9b:f5:f1:cc:85:67:35:f2:00:3c:
                    97:8e:45:7f:2f:6f:e2:e1:5e:d1:29:4d:f2:56:7f:
                    f1:6b:10:7a:e1:2a:01:f9:68:aa:a8:f2:1a:f1:56:
                    ff:5c:d7:fe:23:61:aa:1e:e6:d6:77:1f:6c:9c:bb:
                    96:87:09:a2:77:0b:fe:76:d1:40:7b:3c:d1:24:dc:
                    7d:a6:bd:80:f8:52:bf:29:d6:ef:df:c0:66:fd:bf:
                    bf:d6:5d:75:78:d2:c3:83:37:11:ff:69:bf:1d:80:
                    89:ab:ac:88:0e:9f:b3:a3:fb:37:75:0a:ba:6d:f5:
                    2a:66:e3:8b:63:11:b8:55:9d:0c:3f:73:e4:13:90:
                    ef:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:C9:9E:36:68:8A:D9:50:A9:BE:72:D5:53:F1:8E:24:C7:86:91:FB
            X509v3 Authority Key Identifier:
                keyid:5A:93:9B:0C:ED:38:D7:5C:C6:3E:D5:0D:6E:5C:E7:2B:BB:5B:4B:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WpObDO0411zGPtUNblznK7tbSxA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/bea14a-0d32-4aa7-b898-d60b3b6cca6e/1/WpObDO0411zGPtUNblznK7tbSxA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/74/bea14a-0d32-4aa7-b898-d60b3b6cca6e/1/WpObDO0411zGPtUNblznK7tbSxA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:4c:5b:be:8a:48:cd:5f:e5:c8:04:1d:2f:b0:75:3c:78:76:
         16:e1:f5:79:73:7e:43:a6:df:f3:d3:62:25:4b:16:a8:04:d8:
         14:fa:97:1d:47:cc:02:3b:d5:92:d5:02:c6:68:7d:f9:ef:4a:
         06:78:27:8a:ad:2e:4d:ef:d9:1b:48:af:0d:f7:d3:a2:ce:93:
         49:54:32:0b:fa:72:d1:4e:a6:95:a7:ae:0f:e3:bd:2e:84:60:
         00:20:16:76:fc:2a:71:0d:1f:c6:15:a4:69:a3:75:7d:4c:3f:
         f5:46:31:35:37:f1:32:50:49:b1:55:2a:35:44:17:3e:19:a9:
         79:1c:d8:57:7b:30:29:fa:ed:68:26:3d:5c:a8:72:07:ba:89:
         ad:e1:42:7e:45:53:16:cd:b9:82:f3:17:94:fe:df:d5:74:4e:
         48:26:5e:f0:e2:c2:50:49:13:89:b7:91:0e:c1:c8:98:40:d1:
         99:2b:e4:3d:bf:e2:ad:9f:44:72:16:b9:c2:38:75:5f:cf:89:
         0b:af:7c:2c:12:27:c6:b8:07:c5:03:ee:19:26:a8:c8:05:be:
         5f:60:a4:18:03:cc:2a:03:8b:d7:4e:e6:72:b1:8e:46:36:89:
         9c:0b:8c:0c:28:b5:2f:15:28:90:df:aa:b8:5d:ef:99:16:20:
         7d:82:b0:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:18:09 2025 by rpki-client