Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/3f056a-124e-4f12-b3db-fca31f645bf5/1/wwvzI77VsMENPzevDrNjrafKxKs.mft
File:                     wwvzI77VsMENPzevDrNjrafKxKs.mft (raw, json)
Hash identifier:          PfE4AU6xmR7rAYCrCRGlgSSWC3ilyvWLNx5NEGByxeA=
Subject key identifier:   0F:78:FE:53:AE:C8:1D:B2:80:3A:22:5C:99:A8:B7:E0:AF:18:5B:2A
Authority key identifier: C3:0B:F3:23:BE:D5:B0:C1:0D:3F:37:AF:0E:B3:63:AD:A7:CA:C4:AB
Certificate issuer:       /CN=c30bf323bed5b0c10d3f37af0eb363ada7cac4ab
Certificate serial:       0194BBCDB19166F8FDF4AA9910164A34D533
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wwvzI77VsMENPzevDrNjrafKxKs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/88/3f056a-124e-4f12-b3db-fca31f645bf5/1/wwvzI77VsMENPzevDrNjrafKxKs.mft
Manifest number:          076B
Signing time:             Fri 31 Jan 2025 10:00:07 +0000
Manifest this update:     Fri 31 Jan 2025 10:00:07 +0000
Manifest next update:     Sat 01 Feb 2025 10:00:07 +0000
Files and hashes:         1: wwvzI77VsMENPzevDrNjrafKxKs.crl (hash: iyuCV8s+vTMIGWvKB0niTmF2TqoxFnqPs24onVq+bT0=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bb:cd:b1:91:66:f8:fd:f4:aa:99:10:16:4a:34:d5:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c30bf323bed5b0c10d3f37af0eb363ada7cac4ab
        Validity
            Not Before: Jan 31 10:00:07 2025 GMT
            Not After : Feb  1 10:00:07 2025 GMT
        Subject: CN=0f78fe53aec81db2803a225c99a8b7e0af185b2a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:56:f1:37:1f:b9:be:14:56:44:41:51:81:51:
                    2f:e6:24:ea:bf:e2:2d:62:49:f4:e9:ed:1f:63:53:
                    0e:4c:ca:61:03:bc:58:14:5b:4a:67:fe:0c:18:90:
                    81:91:08:8f:a3:66:22:00:4d:67:95:f8:38:64:1d:
                    0d:6f:a0:77:10:c0:04:06:ea:4f:65:93:50:75:83:
                    11:6d:8f:f1:31:a5:56:93:65:b5:c0:a8:ae:93:6f:
                    7a:56:a7:a6:4a:4f:56:69:d0:fc:60:f8:19:48:f7:
                    17:2c:16:5c:8c:df:85:66:7a:bb:4e:83:77:a4:5c:
                    9e:74:2d:d6:de:90:e7:81:18:c2:40:68:57:d9:47:
                    73:49:40:f7:95:06:90:c8:d4:33:a7:56:ee:fe:0b:
                    5f:54:e1:0b:e2:f7:20:82:a4:f4:ab:88:25:2a:44:
                    88:9b:4d:bb:47:0f:64:62:8f:00:c9:30:ba:d2:28:
                    41:12:c8:cd:4f:52:19:1f:5e:30:2e:4e:16:5b:72:
                    e0:2a:33:c9:58:54:8d:3e:01:44:7f:4f:6b:b5:7c:
                    e1:f1:75:d7:1c:0c:eb:21:fc:e8:41:0c:d6:79:6a:
                    36:39:09:1a:41:03:e2:a5:7a:e5:26:45:96:f5:86:
                    56:68:d5:16:0c:ab:2d:75:66:75:65:48:1c:fd:d0:
                    30:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:78:FE:53:AE:C8:1D:B2:80:3A:22:5C:99:A8:B7:E0:AF:18:5B:2A
            X509v3 Authority Key Identifier:
                keyid:C3:0B:F3:23:BE:D5:B0:C1:0D:3F:37:AF:0E:B3:63:AD:A7:CA:C4:AB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wwvzI77VsMENPzevDrNjrafKxKs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/3f056a-124e-4f12-b3db-fca31f645bf5/1/wwvzI77VsMENPzevDrNjrafKxKs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/88/3f056a-124e-4f12-b3db-fca31f645bf5/1/wwvzI77VsMENPzevDrNjrafKxKs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d4:11:20:1d:11:2f:48:c8:08:03:76:38:47:87:fb:42:02:d7:
         3a:ce:48:73:54:a3:56:33:ae:6e:b8:06:86:4f:cf:36:99:9b:
         67:ab:0f:d3:f0:56:f1:dd:0b:c8:72:24:13:7b:8b:62:3a:71:
         cc:06:d3:58:39:73:21:a4:f1:c2:30:d6:cb:fa:0f:6e:f9:e5:
         e2:3f:3f:cb:48:68:82:d3:2b:fc:e0:fe:06:01:95:30:6e:d2:
         ce:90:81:0e:03:7d:fb:72:e5:ad:f1:65:93:bc:1b:a7:35:33:
         b5:80:03:b4:ca:4e:66:c6:67:8d:a9:3b:b2:29:12:4a:ba:c3:
         d6:02:e0:1d:c2:a8:ab:49:0f:0d:dc:e0:2e:f6:54:53:51:41:
         5e:e0:a7:61:53:0d:1b:1d:44:13:fa:ea:72:dc:cd:a6:f4:0d:
         d4:99:cd:4d:dc:0b:99:03:26:88:7c:ae:42:aa:72:25:b0:9e:
         65:18:b2:64:2e:22:3e:2c:2c:8a:34:b1:fe:8b:c5:f6:9e:69:
         aa:7f:d7:a7:2b:1e:3f:16:c0:96:01:09:91:50:54:ca:9e:06:
         83:bb:59:be:fa:fb:1b:ad:95:5d:f5:ac:6d:73:e4:56:20:20:
         6c:56:5c:5e:4a:ec:8c:01:0d:21:97:02:02:01:84:1b:06:9a:
         34:91:33:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:25:47 2025 by rpki-client