Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/ac38c4-4b83-40b7-8d0e-7ceabce34e0d/1/WNPpU7X-F6Uxyc9xVgdI30H_cUo.mft
File:                     WNPpU7X-F6Uxyc9xVgdI30H_cUo.mft (raw, json)
Hash identifier:          cP7kLHSvpdP2d2FW9quRMu68EcFgdSDny6Ghz9dLjW4=
Subject key identifier:   01:FF:F3:DA:23:0E:4B:BF:56:CB:BE:A8:D8:6B:D7:6E:D0:CE:49:6D
Authority key identifier: 58:D3:E9:53:B5:FE:17:A5:31:C9:CF:71:56:07:48:DF:41:FF:71:4A
Certificate issuer:       /CN=58d3e953b5fe17a531c9cf71560748df41ff714a
Certificate serial:       0194BBCDBAE240E5C6E3792753A4A2B7850D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WNPpU7X-F6Uxyc9xVgdI30H_cUo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/91/ac38c4-4b83-40b7-8d0e-7ceabce34e0d/1/WNPpU7X-F6Uxyc9xVgdI30H_cUo.mft
Manifest number:          0B1D
Signing time:             Fri 31 Jan 2025 10:00:09 +0000
Manifest this update:     Fri 31 Jan 2025 10:00:09 +0000
Manifest next update:     Sat 01 Feb 2025 10:00:09 +0000
Files and hashes:         1: CMb2v2PccTlBgcAh5nA2SeBCOKc.roa (hash: khwSYgRcb0xgIwV3Wxw9JYrinxD/gAooMfP6PNCyCK0=)
                          2: WNPpU7X-F6Uxyc9xVgdI30H_cUo.crl (hash: yPGbnYBwse7SZ2Q8+KrLp3EgIPNyI4rCny+9b9zj1CE=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bb:cd:ba:e2:40:e5:c6:e3:79:27:53:a4:a2:b7:85:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=58d3e953b5fe17a531c9cf71560748df41ff714a
        Validity
            Not Before: Jan 31 10:00:09 2025 GMT
            Not After : Feb  1 10:00:09 2025 GMT
        Subject: CN=01fff3da230e4bbf56cbbea8d86bd76ed0ce496d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:55:ee:2c:3d:6c:e2:80:14:8b:4d:16:06:97:
                    c8:69:9f:5e:1f:7a:43:ce:d8:63:86:00:0b:83:7d:
                    fa:78:61:f9:1d:f3:4e:17:a6:3a:33:85:d5:96:58:
                    eb:85:c8:00:69:df:78:8e:24:19:c3:e8:c1:ec:27:
                    73:b3:ad:eb:a3:71:4b:d6:94:b0:ce:02:d3:6d:5f:
                    76:2b:12:5d:e4:1b:44:cc:56:1b:01:29:3b:b7:09:
                    3a:58:28:36:b1:ed:99:69:ef:86:4d:12:a3:f2:56:
                    27:30:ad:27:3e:06:f4:f1:50:4c:6f:c7:03:93:22:
                    ab:88:c9:1f:1b:74:b1:be:76:c6:ee:e4:81:ef:bd:
                    1f:42:fd:78:0d:f0:2a:36:08:ee:3f:61:0c:ea:5d:
                    72:d9:79:7a:e9:a0:6a:b2:a0:f8:78:4c:18:66:15:
                    ee:56:ae:c4:8b:ca:f9:76:b9:37:f5:23:38:18:ca:
                    78:3f:05:9e:2d:9d:77:a2:4a:0f:af:cb:5f:71:2d:
                    fa:99:53:cf:52:69:c5:83:43:49:c4:f3:ad:99:13:
                    5f:fd:fc:68:e2:c4:e9:3d:fc:20:3a:a0:5c:7d:be:
                    94:b8:c0:bd:35:b4:8d:7f:4d:1c:81:46:6f:59:85:
                    f5:ec:40:21:c1:bb:61:74:38:d5:b8:3a:46:ae:6e:
                    d7:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:FF:F3:DA:23:0E:4B:BF:56:CB:BE:A8:D8:6B:D7:6E:D0:CE:49:6D
            X509v3 Authority Key Identifier:
                keyid:58:D3:E9:53:B5:FE:17:A5:31:C9:CF:71:56:07:48:DF:41:FF:71:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WNPpU7X-F6Uxyc9xVgdI30H_cUo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/ac38c4-4b83-40b7-8d0e-7ceabce34e0d/1/WNPpU7X-F6Uxyc9xVgdI30H_cUo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/91/ac38c4-4b83-40b7-8d0e-7ceabce34e0d/1/WNPpU7X-F6Uxyc9xVgdI30H_cUo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:af:0a:9f:28:1e:69:d4:7f:fd:e2:16:35:36:6f:be:ec:73:
         2f:99:1c:51:63:ab:13:55:0f:32:ee:00:94:c2:ba:38:79:e1:
         d1:26:b0:3e:67:62:b7:a6:79:19:ca:46:60:c5:8d:21:57:44:
         2c:3f:32:99:80:2e:2b:72:23:43:87:cc:3d:fd:b6:dc:e8:1e:
         af:6d:10:5a:3c:75:6f:66:20:70:a8:4b:c0:6a:d3:df:91:5d:
         da:9d:a3:c9:99:da:47:d4:a0:36:b6:b5:08:d8:26:7e:17:fc:
         34:4c:58:36:bf:4a:3b:2a:c3:0b:3e:d0:a3:ba:1a:ff:29:0e:
         da:56:31:da:5c:b7:fb:c0:ea:e0:64:72:db:05:59:0d:65:a3:
         9f:7f:2b:62:d6:61:0b:47:3f:14:07:4c:38:11:1c:82:c7:e0:
         ca:37:e4:c9:e6:01:90:f5:a4:38:3c:53:1a:8e:34:7b:8e:fb:
         aa:a7:c2:5d:a7:3a:3b:e4:2b:b4:85:82:d2:6c:7e:08:78:31:
         20:34:4c:97:5f:92:c3:07:d2:9b:e8:fc:71:2a:8e:b5:75:bb:
         c6:06:bb:7f:d3:da:cf:a1:18:07:e5:22:b5:3f:4f:2d:e1:76:
         ab:e3:ba:c2:dd:bc:60:d0:c7:36:27:a6:b1:2d:56:26:69:9d:
         29:bc:93:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:06:13 2025 by rpki-client