Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/a06407-a1f2-4b47-96c7-0a9e3cb4dc13/1/WH7X6fmKHxl17p-8sJXDrfoorsA.mft
File:                     WH7X6fmKHxl17p-8sJXDrfoorsA.mft (raw, json)
Hash identifier:          jWOElAtPOmN+xidokkMmvFZpqp4OK8LapIcYlskowho=
Subject key identifier:   35:2A:E4:DC:6B:69:4D:C6:97:21:17:39:2A:4E:5A:60:70:64:38:D8
Authority key identifier: 58:7E:D7:E9:F9:8A:1F:19:75:EE:9F:BC:B0:95:C3:AD:FA:28:AE:C0
Certificate issuer:       /CN=587ed7e9f98a1f1975ee9fbcb095c3adfa28aec0
Certificate serial:       0194BCA9AA5B66550BCDF295291452283261
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WH7X6fmKHxl17p-8sJXDrfoorsA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9e/a06407-a1f2-4b47-96c7-0a9e3cb4dc13/1/WH7X6fmKHxl17p-8sJXDrfoorsA.mft
Manifest number:          140B
Signing time:             Fri 31 Jan 2025 14:00:23 +0000
Manifest this update:     Fri 31 Jan 2025 14:00:23 +0000
Manifest next update:     Sat 01 Feb 2025 14:00:23 +0000
Files and hashes:         1: 19CW3KILFYPXEhHk2Ol76tPUYYc.roa (hash: vdEeJmbxLIeIAD2w3zH+n6I7kJJZC/K9fF2eOSXSZV8=)
                          2: WH7X6fmKHxl17p-8sJXDrfoorsA.crl (hash: xT0g2F1gH+iAyw4fdey4UwgIDMynrY/+FU0FsggMIes=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:a9:aa:5b:66:55:0b:cd:f2:95:29:14:52:28:32:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=587ed7e9f98a1f1975ee9fbcb095c3adfa28aec0
        Validity
            Not Before: Jan 31 14:00:23 2025 GMT
            Not After : Feb  1 14:00:23 2025 GMT
        Subject: CN=352ae4dc6b694dc6972117392a4e5a60706438d8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:6c:6f:28:dc:80:55:ad:75:9d:32:55:90:43:
                    e2:f1:13:f8:8d:e7:1d:e6:cc:0a:c2:b6:75:9d:a7:
                    48:98:01:27:e5:0e:f4:2f:bf:af:9d:d0:1f:6f:8f:
                    4d:5d:94:f0:b8:fd:87:a8:a5:9e:42:56:ac:96:0d:
                    f6:ff:fe:d0:0a:3e:21:eb:d5:dd:71:0d:c9:dd:1c:
                    fc:af:08:2c:9a:43:eb:6a:98:53:99:c1:d1:90:8d:
                    99:02:3a:49:17:09:d3:5c:2a:06:5f:09:89:a1:5f:
                    27:32:6f:99:ee:9a:27:86:b2:e8:00:36:87:7e:c4:
                    d0:b5:9b:d8:a1:29:3d:5d:b1:50:32:b8:ee:86:31:
                    2e:0c:81:40:9e:16:b4:13:7d:9d:80:d2:e2:b5:7c:
                    c6:5b:05:b5:e4:26:01:21:6f:ce:8d:12:34:af:4d:
                    a0:fd:39:1c:cd:fe:82:4c:d6:58:2e:59:c3:31:13:
                    f5:4c:47:9e:4e:73:dd:e8:7b:46:ab:3c:0f:97:03:
                    55:dd:04:ba:8a:af:f9:89:dd:8c:90:d6:41:08:ea:
                    53:ad:ed:db:5b:5f:36:f8:16:7d:b8:49:bf:71:fa:
                    bf:0d:47:9e:a6:a6:67:ed:62:59:f0:06:09:15:2c:
                    07:0a:de:92:1b:1d:65:7c:98:e5:6f:fa:f0:b9:1f:
                    cf:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:2A:E4:DC:6B:69:4D:C6:97:21:17:39:2A:4E:5A:60:70:64:38:D8
            X509v3 Authority Key Identifier:
                keyid:58:7E:D7:E9:F9:8A:1F:19:75:EE:9F:BC:B0:95:C3:AD:FA:28:AE:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WH7X6fmKHxl17p-8sJXDrfoorsA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/a06407-a1f2-4b47-96c7-0a9e3cb4dc13/1/WH7X6fmKHxl17p-8sJXDrfoorsA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/a06407-a1f2-4b47-96c7-0a9e3cb4dc13/1/WH7X6fmKHxl17p-8sJXDrfoorsA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:7c:13:14:18:fc:b9:6f:66:4f:20:c2:8f:5b:68:6e:d4:94:
         21:7a:70:d8:c1:58:15:aa:d2:db:92:35:c9:bb:fc:80:61:49:
         8c:93:75:68:c5:51:13:0c:cc:11:de:ce:31:2d:63:b4:80:c0:
         5a:8b:ba:33:6b:80:c2:a2:10:0e:57:a9:6a:2d:75:5f:7c:49:
         0d:26:11:b3:90:bf:d3:0c:d3:4a:8b:56:9c:23:89:a0:5b:21:
         71:78:62:0a:23:06:57:0a:13:3b:db:dd:b2:19:f7:bc:de:1b:
         dd:14:b6:00:41:13:4f:34:25:d6:41:7c:59:47:4f:58:01:74:
         e3:4e:96:35:7d:17:f4:50:ac:ce:b4:58:55:fb:4e:df:93:0a:
         80:b6:92:d4:4e:ff:a8:e6:c1:46:25:47:7c:62:8b:94:80:12:
         79:10:86:ac:09:ea:d5:7d:30:0e:08:6e:2a:8f:4e:dc:bb:28:
         f9:c0:1a:e4:d5:0f:7e:21:42:4e:78:b4:47:6c:e4:7c:ca:76:
         e1:64:ed:f0:ce:39:9e:c8:13:e5:33:87:0a:bf:1f:03:85:35:
         29:e5:6d:7d:d3:c6:cb:a0:7b:55:45:e4:77:29:56:6d:74:76:
         fe:e6:06:ef:d0:44:ba:e9:c4:6d:98:96:0a:12:34:e2:1a:ac:
         56:7c:21:14
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8qapbZlULzfKVKRRSKDJhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU4N2VkN2U5Zjk4YTFmMTk3NWVlOWZiY2IwOTVjM2FkZmEy
OGFlYzAwHhcNMjUwMTMxMTQwMDIzWhcNMjUwMjAxMTQwMDIzWjAzMTEwLwYDVQQD
EygzNTJhZTRkYzZiNjk0ZGM2OTcyMTE3MzkyYTRlNWE2MDcwNjQzOGQ4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7WxvKNyAVa11nTJVkEPi8RP4jecd
5swKwrZ1nadImAEn5Q70L7+vndAfb49NXZTwuP2HqKWeQlaslg32//7QCj4h69Xd
cQ3J3Rz8rwgsmkPraphTmcHRkI2ZAjpJFwnTXCoGXwmJoV8nMm+Z7ponhrLoADaH
fsTQtZvYoSk9XbFQMrjuhjEuDIFAnha0E32dgNLitXzGWwW15CYBIW/OjRI0r02g
/Tkczf6CTNZYLlnDMRP1TEeeTnPd6HtGqzwPlwNV3QS6iq/5id2MkNZBCOpTre3b
W182+BZ9uEm/cfq/DUeepqZn7WJZ8AYJFSwHCt6SGx1lfJjlb/rwuR/PWQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDUq5NxraU3GlyEXOSpOWmBwZDjYMB8GA1UdIwQY
MBaAFFh+1+n5ih8Zde6fvLCVw636KK7AMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV0g3WDZmbUtIeGwxN3AtOHNKWERyZm9vcnNBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZS9hMDY0MDctYTFmMi00YjQ3LTk2Yzct
MGE5ZTNjYjRkYzEzLzEvV0g3WDZmbUtIeGwxN3AtOHNKWERyZm9vcnNBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85ZS9hMDY0MDctYTFmMi00YjQ3LTk2YzctMGE5ZTNjYjRkYzEz
LzEvV0g3WDZmbUtIeGwxN3AtOHNKWERyZm9vcnNBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAO3wTFBj8
uW9mTyDCj1tobtSUIXpw2MFYFarS25I1ybv8gGFJjJN1aMVREwzMEd7OMS1jtIDA
Wou6M2uAwqIQDlepai11X3xJDSYRs5C/0wzTSotWnCOJoFshcXhiCiMGVwoTO9vd
shn3vN4b3RS2AEETTzQl1kF8WUdPWAF0406WNX0X9FCszrRYVftO35MKgLaS1E7/
qObBRiVHfGKLlIASeRCGrAnq1X0wDghuKo9O3Lso+cAa5NUPfiFCTni0R2zkfMp2
4WTt8M45nsgT5TOHCr8fA4U1KeVtfdPGy6B7VUXkdylWbXR2/uYG79BEuunEbZiW
ChI04hqsVnwhFA==
-----END CERTIFICATE-----
Generated at Thu Apr 24 20:39:38 2025 by rpki-client