Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/6de939-2713-486f-92fa-1eba8e80d747/1/wt7SUOO68h2OCiWaeZ-Qra6b4wU.mft
File:                     wt7SUOO68h2OCiWaeZ-Qra6b4wU.mft (raw, json)
Hash identifier:          vW54Kn8o0Yim+FPKipYhbbDqVM7hDxcODon9Md4zLAg=
Subject key identifier:   8B:98:43:29:B2:0F:A2:AF:75:01:2B:42:05:30:C3:3B:93:61:C8:78
Authority key identifier: C2:DE:D2:50:E3:BA:F2:1D:8E:0A:25:9A:79:9F:90:AD:AE:9B:E3:05
Certificate issuer:       /CN=c2ded250e3baf21d8e0a259a799f90adae9be305
Certificate serial:       0194BD181A1CBCD633C4CEAFDC932CE0E7BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wt7SUOO68h2OCiWaeZ-Qra6b4wU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8e/6de939-2713-486f-92fa-1eba8e80d747/1/wt7SUOO68h2OCiWaeZ-Qra6b4wU.mft
Manifest number:          0A4B
Signing time:             Fri 31 Jan 2025 16:01:00 +0000
Manifest this update:     Fri 31 Jan 2025 16:01:00 +0000
Manifest next update:     Sat 01 Feb 2025 16:01:00 +0000
Files and hashes:         1: wt7SUOO68h2OCiWaeZ-Qra6b4wU.crl (hash: z34guQKHYKDuvpqYVnMXd8N58M5zL+80wcy+5q2CPKY=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bd:18:1a:1c:bc:d6:33:c4:ce:af:dc:93:2c:e0:e7:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2ded250e3baf21d8e0a259a799f90adae9be305
        Validity
            Not Before: Jan 31 16:01:00 2025 GMT
            Not After : Feb  1 16:01:00 2025 GMT
        Subject: CN=8b984329b20fa2af75012b420530c33b9361c878
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:92:68:8a:08:a5:4b:4b:f8:60:60:2d:88:d4:
                    b4:9f:01:95:20:ca:ff:24:8f:81:8e:e3:b5:75:47:
                    47:62:bb:1c:bb:8c:75:fe:8c:0a:52:9c:ab:51:0e:
                    02:a0:92:95:a3:35:8b:20:d3:45:fd:98:df:ec:ee:
                    7e:0b:e2:f5:6a:89:9f:3e:0e:36:dd:af:f2:d3:51:
                    dd:dc:22:b6:d5:84:25:6e:f6:10:3d:fe:46:f6:2d:
                    e7:af:9b:92:58:18:2b:ee:c7:72:a5:e0:5e:2d:e5:
                    88:4c:56:16:33:e0:46:98:41:82:6a:cf:ea:10:82:
                    20:66:cd:2f:2d:89:98:85:f2:65:a5:73:ef:23:e4:
                    90:77:4f:7b:82:7a:e0:23:56:33:56:3b:16:1e:bb:
                    3a:7f:27:b4:16:8b:07:b8:02:45:ec:b5:85:85:da:
                    3a:13:65:c0:84:90:4e:14:5d:4c:68:74:4b:9c:1f:
                    93:a6:fe:0d:ea:47:e7:16:c0:54:30:fe:57:b0:99:
                    b4:14:c0:b3:3b:aa:fc:7a:97:f6:11:89:ec:e0:c0:
                    6f:5c:ba:65:5b:d5:82:c7:6c:6e:39:e7:e1:ee:07:
                    58:7f:21:25:27:e6:b0:4d:77:fe:a6:d5:55:c4:d1:
                    bd:7f:fe:38:f6:6c:2a:9d:38:cf:53:a0:a2:80:4c:
                    48:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:98:43:29:B2:0F:A2:AF:75:01:2B:42:05:30:C3:3B:93:61:C8:78
            X509v3 Authority Key Identifier:
                keyid:C2:DE:D2:50:E3:BA:F2:1D:8E:0A:25:9A:79:9F:90:AD:AE:9B:E3:05

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wt7SUOO68h2OCiWaeZ-Qra6b4wU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/6de939-2713-486f-92fa-1eba8e80d747/1/wt7SUOO68h2OCiWaeZ-Qra6b4wU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/6de939-2713-486f-92fa-1eba8e80d747/1/wt7SUOO68h2OCiWaeZ-Qra6b4wU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:c8:24:e9:25:15:32:81:3e:99:e0:2b:d1:bf:37:2e:f9:bc:
         b4:f8:f8:09:75:ad:7f:d9:2a:59:d0:3f:cc:f3:8c:75:26:e6:
         69:b5:d9:63:98:b2:cd:ba:ea:24:40:e8:80:bf:a2:1a:ec:e8:
         1e:c5:c1:fe:a9:99:a6:0d:68:be:f6:d3:62:28:37:eb:90:91:
         c7:62:b3:fa:bf:4b:a6:20:cc:6d:cd:3b:75:6b:9e:90:54:b1:
         74:e9:11:0f:57:1e:2d:89:91:6c:10:99:f4:01:0f:eb:71:87:
         95:13:7d:98:14:1b:2f:36:27:cb:09:b5:81:67:90:13:28:ae:
         37:b4:54:77:40:d0:8f:97:92:43:e3:0a:66:25:8d:e8:05:b3:
         cd:ca:40:0e:ec:a6:9e:b7:ef:33:b5:df:da:db:d8:42:57:37:
         90:8e:6d:97:32:b5:9f:71:22:34:b6:53:6e:76:f1:03:9a:06:
         64:78:f0:fe:c7:e5:21:31:ba:7a:3a:c1:e0:3a:30:f9:86:79:
         38:a9:9e:1e:ab:57:82:2f:66:2e:10:c1:42:24:5a:08:3a:ca:
         a0:5d:ba:5a:a0:c1:09:e7:1e:a4:68:bf:c2:e1:bd:d1:d7:bc:
         4c:02:e5:8f:38:3d:e1:c5:cd:a6:f5:88:f1:77:0d:0e:31:58:
         d3:c5:0a:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:50:52 2025 by rpki-client