Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/4b7576-2b9c-43af-8817-6b0065508996/1/WkpH1YK7DpaA-JJYq5bQWGfTUu8.mft
File:                     WkpH1YK7DpaA-JJYq5bQWGfTUu8.mft (raw, json)
Hash identifier:          5+r/q3az1Qe9wojzIAj/NC974HTbzLjJtwYFCbkG7sw=
Subject key identifier:   B8:A4:43:02:C4:7F:35:55:A3:B9:5C:C4:E4:99:FA:AB:64:C2:8F:5B
Authority key identifier: 5A:4A:47:D5:82:BB:0E:96:80:F8:92:58:AB:96:D0:58:67:D3:52:EF
Certificate issuer:       /CN=5a4a47d582bb0e9680f89258ab96d05867d352ef
Certificate serial:       0194BBCDF5D98646938BCF2619C9607FBB28
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WkpH1YK7DpaA-JJYq5bQWGfTUu8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a1/4b7576-2b9c-43af-8817-6b0065508996/1/WkpH1YK7DpaA-JJYq5bQWGfTUu8.mft
Manifest number:          1213
Signing time:             Fri 31 Jan 2025 10:00:24 +0000
Manifest this update:     Fri 31 Jan 2025 10:00:24 +0000
Manifest next update:     Sat 01 Feb 2025 10:00:24 +0000
Files and hashes:         1: IAWEnryJVpaK2PC1i1p1gzyA5aM.roa (hash: V8zeqHEXmBXDf+5VLnGO8LhbeOvdCzFQOaNucWQFdJs=)
                          2: IxvoZc4F3Qaa5ur1q1XhsdbIwYI.roa (hash: uBXV07kX7Q7HlXXY9czyil+ZyCPUWCh5XY0q2xGQk9E=)
                          3: WkpH1YK7DpaA-JJYq5bQWGfTUu8.crl (hash: XeLmsyehQvmJ+xutsDDajtRjGQ1qBPWFnd//j3ddUdY=)
                          4: gcLYIM7NGFOjlEOaeCFYBSRJsQU.roa (hash: Gb37A8lctlHsApBbJF+wFlN+wBQgxlqZQzSQ9DIxfCE=)
                          5: tMFph9cmJacY9_6pBYOFi0X8qxI.roa (hash: yN3wCBUXrF4u5FVJmYsnf0p7F7khnudzz4ntTOuoOuA=)
                          6: tYYSCJCFza29RNke_2EcrZu7XHo.roa (hash: lB4PFBQhaKp43hqTQ3cMQhuQr2bCAaP0ut24A/mZGfI=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bb:cd:f5:d9:86:46:93:8b:cf:26:19:c9:60:7f:bb:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5a4a47d582bb0e9680f89258ab96d05867d352ef
        Validity
            Not Before: Jan 31 10:00:24 2025 GMT
            Not After : Feb  1 10:00:24 2025 GMT
        Subject: CN=b8a44302c47f3555a3b95cc4e499faab64c28f5b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:9e:21:32:0e:67:4f:0a:a6:3e:40:ed:22:49:
                    e3:08:ea:da:a9:db:1f:c7:dd:4d:52:c9:bf:46:3d:
                    b0:09:a0:6a:ad:7b:4d:65:a1:86:bf:d7:06:f2:74:
                    75:67:ce:67:99:92:fd:95:76:ec:fb:8d:d4:f1:ea:
                    31:17:88:38:f4:a2:2b:fc:d2:54:69:e8:0b:a4:12:
                    43:41:0b:99:a1:84:4c:96:f2:2a:b0:fa:28:c6:1e:
                    30:24:90:97:c9:ce:4a:f8:41:3b:80:7a:5a:a0:21:
                    c9:fd:0b:35:4d:c5:8f:e5:d0:42:09:aa:a2:98:ed:
                    9f:a3:c0:b4:e1:85:4d:82:1e:0e:49:71:ac:c6:63:
                    73:3d:be:76:ca:13:e5:93:00:8d:57:32:29:22:10:
                    fc:50:11:8f:98:fe:d5:81:51:03:91:c1:61:a7:dc:
                    14:11:ad:c6:a3:c1:a2:cb:69:6e:3c:82:0f:2e:7a:
                    15:71:6a:c2:29:80:87:fa:c5:92:53:8c:0f:76:09:
                    33:52:f5:42:1f:18:32:6d:1d:21:a3:c0:a5:63:90:
                    75:46:64:b8:53:ab:65:c6:f9:68:26:45:b5:24:1b:
                    46:0c:40:d4:76:13:0d:f0:ee:c8:4a:a7:e4:f4:c0:
                    92:90:7f:ab:11:3e:fb:6c:bc:2d:92:8b:e4:a4:41:
                    22:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:A4:43:02:C4:7F:35:55:A3:B9:5C:C4:E4:99:FA:AB:64:C2:8F:5B
            X509v3 Authority Key Identifier:
                keyid:5A:4A:47:D5:82:BB:0E:96:80:F8:92:58:AB:96:D0:58:67:D3:52:EF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WkpH1YK7DpaA-JJYq5bQWGfTUu8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/4b7576-2b9c-43af-8817-6b0065508996/1/WkpH1YK7DpaA-JJYq5bQWGfTUu8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/4b7576-2b9c-43af-8817-6b0065508996/1/WkpH1YK7DpaA-JJYq5bQWGfTUu8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b9:54:02:8c:ba:2c:9c:40:a2:44:2d:9f:31:c9:c3:30:55:ee:
         8d:cc:6e:04:9b:04:38:ca:4a:22:fa:22:9c:63:09:76:ae:de:
         f8:c2:2d:20:b6:3e:d0:d1:2d:2c:4f:c2:c6:16:54:7b:1b:75:
         02:80:ea:7d:02:56:47:27:94:dc:a7:a3:db:09:9d:39:40:28:
         83:2f:1b:fe:38:8f:2a:c2:e5:11:e1:4f:17:99:b3:05:a7:41:
         1f:8d:9b:05:0a:f2:4a:94:b3:77:16:5e:30:4a:47:58:2c:d6:
         46:42:1a:37:48:ee:f2:a8:44:20:03:72:5b:60:0d:d9:66:66:
         28:e1:3b:6a:84:fe:a1:d6:a5:1f:5e:fc:5f:33:dc:79:23:55:
         84:ba:04:e9:36:5e:f4:e6:ae:be:1d:9c:70:70:e3:1d:bc:40:
         aa:3d:7f:ed:d6:4d:d5:9b:db:9e:23:f8:39:be:e9:43:e1:3c:
         81:bd:c1:72:c8:8b:16:92:93:f8:19:12:56:c8:19:c6:35:7b:
         5a:23:15:2f:df:47:90:ff:f8:9b:5e:50:ca:f2:dd:3f:51:ae:
         a7:bc:4f:a8:7a:dc:bb:81:61:74:24:03:3a:0d:60:43:10:93:
         d8:4b:15:a0:96:f9:1a:c6:f6:f0:21:a5:eb:01:17:0f:22:a9:
         0f:24:be:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 07:48:11 2025 by rpki-client