Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/0ff9e5-fbbe-4b3b-b938-9ceaa1b7a116/1/WwZtuK4WVfw9ikqpnrvZOj_g4-Q.mft
File:                     WwZtuK4WVfw9ikqpnrvZOj_g4-Q.mft (raw, json)
Hash identifier:          eicG5e1gNOTlh6mFZWsn+ubFOA1QQ+Vuz9KZrfLn7eg=
Subject key identifier:   E8:69:FA:F6:84:07:C7:1D:59:6A:52:FB:37:4C:73:8D:68:64:C9:A3
Authority key identifier: 5B:06:6D:B8:AE:16:55:FC:3D:8A:4A:A9:9E:BB:D9:3A:3F:E0:E3:E4
Certificate issuer:       /CN=5b066db8ae1655fc3d8a4aa99ebbd93a3fe0e3e4
Certificate serial:       0194BC3C033B25FA8443088D6907BDAD2BEA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WwZtuK4WVfw9ikqpnrvZOj_g4-Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a4/0ff9e5-fbbe-4b3b-b938-9ceaa1b7a116/1/WwZtuK4WVfw9ikqpnrvZOj_g4-Q.mft
Manifest number:          12C8
Signing time:             Fri 31 Jan 2025 12:00:37 +0000
Manifest this update:     Fri 31 Jan 2025 12:00:37 +0000
Manifest next update:     Sat 01 Feb 2025 12:00:37 +0000
Files and hashes:         1: 52gpXjI8Kd7Tv-YmaRlcfsM4RAk.roa (hash: mEm534ZT6ZgaZ/3v86vVc5+tMaW3MbmkjCPIio5FpX8=)
                          2: WwZtuK4WVfw9ikqpnrvZOj_g4-Q.crl (hash: PFzS6f6t1+8mkRJwYwUsId180TREgrSIE/I/sZCIXTw=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:3c:03:3b:25:fa:84:43:08:8d:69:07:bd:ad:2b:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b066db8ae1655fc3d8a4aa99ebbd93a3fe0e3e4
        Validity
            Not Before: Jan 31 12:00:37 2025 GMT
            Not After : Feb  1 12:00:37 2025 GMT
        Subject: CN=e869faf68407c71d596a52fb374c738d6864c9a3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fa:46:ff:e8:32:b6:cb:c4:31:04:56:c7:ce:bd:
                    d8:bf:1c:3c:b9:aa:e8:bd:b7:cc:26:38:dd:fb:cc:
                    7b:57:ae:47:a1:da:df:1e:aa:9e:e1:16:81:b6:2d:
                    b0:43:6f:89:c7:26:50:1e:a4:c8:1f:97:af:14:d7:
                    b6:01:b3:bd:5e:23:46:9a:cb:ce:a1:81:15:47:a0:
                    38:3f:22:52:2b:04:38:3b:ea:74:24:97:94:2a:57:
                    a1:da:58:73:75:8d:da:60:23:c8:cd:5e:25:1e:af:
                    cf:23:50:ef:c6:d6:80:d5:35:9a:f3:60:36:c9:54:
                    cc:82:67:1c:1d:a7:66:92:4e:da:4e:73:77:39:9b:
                    97:db:8b:a1:52:a1:b6:59:36:0a:e9:21:16:86:73:
                    c4:e6:98:e7:6c:9d:32:96:ce:75:78:10:96:2e:41:
                    c2:79:30:9d:f7:15:61:3b:dc:60:ff:e5:93:75:01:
                    62:68:71:36:35:00:8e:13:71:81:c6:12:62:16:dd:
                    d5:59:fd:fc:a6:c9:52:5c:fe:dd:80:ae:39:11:ec:
                    25:f9:20:a8:82:af:e9:ea:ab:c7:f5:b5:11:d2:89:
                    eb:9c:33:85:f9:dd:02:25:eb:a3:30:91:29:82:2c:
                    03:de:e6:f8:f0:10:0f:26:57:82:80:d7:cc:3d:c8:
                    4f:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:69:FA:F6:84:07:C7:1D:59:6A:52:FB:37:4C:73:8D:68:64:C9:A3
            X509v3 Authority Key Identifier:
                keyid:5B:06:6D:B8:AE:16:55:FC:3D:8A:4A:A9:9E:BB:D9:3A:3F:E0:E3:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WwZtuK4WVfw9ikqpnrvZOj_g4-Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/0ff9e5-fbbe-4b3b-b938-9ceaa1b7a116/1/WwZtuK4WVfw9ikqpnrvZOj_g4-Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/0ff9e5-fbbe-4b3b-b938-9ceaa1b7a116/1/WwZtuK4WVfw9ikqpnrvZOj_g4-Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:94:d5:6c:77:74:67:27:a4:cc:48:26:e3:d7:57:0a:10:81:
         fb:3c:6d:17:a6:95:04:5d:54:a5:4c:1f:71:c2:79:70:73:02:
         8c:69:8f:b2:12:7e:e4:97:3c:08:c2:22:8a:02:ad:e5:7c:e2:
         78:04:d4:be:d9:21:e9:4c:e0:31:df:a2:40:85:f8:d4:dd:57:
         f9:06:d2:86:21:85:2f:c6:38:55:d0:7c:13:0e:9d:f8:38:ed:
         1d:c6:2b:90:27:02:ae:33:9c:f4:c7:fb:2d:9a:a9:5f:ea:b4:
         d6:e7:72:76:9f:ee:bc:7b:86:8b:21:3a:0a:c0:78:ac:f3:04:
         43:b2:62:11:a2:2c:e0:1f:20:9a:5c:39:b7:e7:18:44:9a:5a:
         ee:e4:9d:ff:8f:78:90:e5:85:09:5d:d9:c8:d5:67:82:2e:42:
         9a:8f:66:97:f9:09:17:50:78:72:94:f0:92:64:0a:29:77:72:
         65:65:b6:8a:ca:a9:f0:21:36:d0:f9:16:cd:5b:31:20:ed:9d:
         52:f9:fa:d8:da:ec:7a:dc:75:6f:9c:25:60:77:00:91:4e:79:
         1d:0c:42:3e:10:91:9f:68:18:2f:f9:c2:3f:63:59:b1:15:b0:
         75:e9:62:76:ec:09:76:65:61:44:2f:85:14:bd:0a:6c:34:77:
         c0:51:b1:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 09:10:05 2025 by rpki-client