Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/3a61cc-7286-4fb0-9508-c135a6edb861/1/wTuQ-qxe_PkxlWGdoW86R-_-mf4.mft
File:                     wTuQ-qxe_PkxlWGdoW86R-_-mf4.mft (raw, json)
Hash identifier:          /o9FYqukdrT9N5CI+iSspHlqEa+K0vcNAKP30lqKHpw=
Subject key identifier:   71:D9:6F:25:64:B6:4D:56:DA:57:18:80:9F:D1:4D:4F:15:E0:25:A1
Authority key identifier: C1:3B:90:FA:AC:5E:FC:F9:31:95:61:9D:A1:6F:3A:47:EF:FE:99:FE
Certificate issuer:       /CN=c13b90faac5efcf93195619da16f3a47effe99fe
Certificate serial:       0194BC3BEEC70A0AE3396824DF914709B49D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wTuQ-qxe_PkxlWGdoW86R-_-mf4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a5/3a61cc-7286-4fb0-9508-c135a6edb861/1/wTuQ-qxe_PkxlWGdoW86R-_-mf4.mft
Manifest number:          1429
Signing time:             Fri 31 Jan 2025 12:00:31 +0000
Manifest this update:     Fri 31 Jan 2025 12:00:31 +0000
Manifest next update:     Sat 01 Feb 2025 12:00:31 +0000
Files and hashes:         1: iyuy2kmWqZNHXuAfcuh0lwdEN5U.roa (hash: 80r40j4f0TX0nXOpgOJuceIx9IUXe6MHRj3CO+H5lVg=)
                          2: wTuQ-qxe_PkxlWGdoW86R-_-mf4.crl (hash: dt3rGS07o9THr5YK3NvGTFEGFAftl+s+rEDu6hqG+QE=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:3b:ee:c7:0a:0a:e3:39:68:24:df:91:47:09:b4:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c13b90faac5efcf93195619da16f3a47effe99fe
        Validity
            Not Before: Jan 31 12:00:31 2025 GMT
            Not After : Feb  1 12:00:31 2025 GMT
        Subject: CN=71d96f2564b64d56da5718809fd14d4f15e025a1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:3c:46:e9:5b:5a:17:e1:bb:5d:ed:57:59:6c:
                    fb:20:ed:a1:4f:3c:bf:33:f6:ab:ff:02:75:c7:69:
                    7a:f5:48:f7:8e:c1:71:c4:cf:75:c3:e8:f5:1d:40:
                    6b:04:39:de:d8:8b:2f:3b:8d:87:9d:f3:18:34:64:
                    13:91:c5:ea:88:62:86:f7:5a:db:28:3f:04:08:bb:
                    44:fa:6c:88:40:54:5f:35:f3:73:5f:e0:72:6e:c7:
                    96:5d:c6:fd:f5:02:9d:e7:d8:ec:09:75:75:af:72:
                    04:9d:af:60:fd:1f:56:80:6b:33:75:ab:56:5a:af:
                    b3:fd:00:a7:aa:10:cc:7b:bc:7d:e4:6a:c4:1c:20:
                    73:9c:b2:85:d8:82:f7:a0:dd:cf:7d:19:ae:9a:12:
                    05:14:ce:59:b7:84:f2:e8:97:16:6f:0a:fc:51:56:
                    34:ec:94:8d:80:65:3e:ba:d8:8d:59:6c:54:e0:23:
                    8a:a0:3b:80:81:fd:b2:49:63:61:72:4d:c1:3c:ce:
                    91:0c:cf:f0:1c:1f:14:fb:04:61:81:80:8b:f0:8f:
                    69:0a:e1:1b:8a:46:92:72:e0:45:1f:e4:d9:ef:5d:
                    9c:07:40:47:6b:da:96:03:85:42:b2:3e:e3:89:7d:
                    f9:7f:bf:95:16:ec:6f:43:12:cf:04:b1:1b:d5:08:
                    03:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:D9:6F:25:64:B6:4D:56:DA:57:18:80:9F:D1:4D:4F:15:E0:25:A1
            X509v3 Authority Key Identifier:
                keyid:C1:3B:90:FA:AC:5E:FC:F9:31:95:61:9D:A1:6F:3A:47:EF:FE:99:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wTuQ-qxe_PkxlWGdoW86R-_-mf4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/3a61cc-7286-4fb0-9508-c135a6edb861/1/wTuQ-qxe_PkxlWGdoW86R-_-mf4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/3a61cc-7286-4fb0-9508-c135a6edb861/1/wTuQ-qxe_PkxlWGdoW86R-_-mf4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:e5:e7:b0:03:b8:74:35:40:86:32:59:9c:cf:43:ff:cb:35:
         10:3a:19:62:3c:28:c2:27:6d:13:28:c3:a3:56:66:21:37:f5:
         0b:b5:7e:8a:11:70:c6:80:e3:07:8f:ce:3f:55:d0:de:17:12:
         49:9f:94:c3:49:eb:15:dd:2a:14:f6:2b:e3:5a:dd:78:22:7e:
         42:a1:fd:3a:25:52:7e:96:d7:3a:9c:a2:04:bb:b8:4e:32:2c:
         84:f6:e4:20:05:7d:53:d7:24:60:ba:eb:22:7a:bd:bd:10:49:
         fa:91:cd:2b:6f:2f:38:71:0a:c8:80:cc:60:2f:26:0f:63:d4:
         01:18:16:e2:36:56:7a:4e:99:1c:00:d3:e7:03:14:4d:c9:c4:
         08:bc:68:ff:75:4b:64:3c:15:25:14:11:eb:d6:c7:20:e2:9d:
         98:a1:a0:37:68:eb:78:c4:c5:31:3b:6c:83:08:1d:af:6a:c3:
         42:07:87:b8:85:18:ea:63:65:05:a4:a1:ee:4c:9b:62:3e:60:
         7f:69:07:ad:3f:30:1d:3b:55:88:1c:8a:63:74:47:bf:c6:38:
         ef:90:90:e9:e1:bc:70:da:86:c5:46:20:2f:06:e3:39:06:03:
         76:04:82:2f:5a:0e:ae:bf:cf:96:e6:0c:7e:60:7b:b3:b3:07:
         e4:b2:20:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:37:48 2025 by rpki-client