Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/5047e8-c547-4b75-afc0-c6ece5901580/1/wPDumEJicDHsomTaxl5f72OUP5g.mft
File:                     wPDumEJicDHsomTaxl5f72OUP5g.mft (raw, json)
Hash identifier:          UM+x6IrkEGQibViPjOk8JVnSnYazgnOhO/vcGbYZDgc=
Subject key identifier:   B2:D4:0F:DF:AD:EB:8F:40:FB:81:90:99:AE:E7:AD:28:09:2F:E7:2C
Authority key identifier: C0:F0:EE:98:42:62:70:31:EC:A2:64:DA:C6:5E:5F:EF:63:94:3F:98
Certificate issuer:       /CN=c0f0ee9842627031eca264dac65e5fef63943f98
Certificate serial:       0194BCA977D5B955883FEEC2CE221579FED9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wPDumEJicDHsomTaxl5f72OUP5g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a7/5047e8-c547-4b75-afc0-c6ece5901580/1/wPDumEJicDHsomTaxl5f72OUP5g.mft
Manifest number:          0AF9
Signing time:             Fri 31 Jan 2025 14:00:10 +0000
Manifest this update:     Fri 31 Jan 2025 14:00:10 +0000
Manifest next update:     Sat 01 Feb 2025 14:00:10 +0000
Files and hashes:         1: KyVtpyRTcvgBS4JaV8NPZOuwdLQ.roa (hash: iY3Qd0RfijC3WmQCC9uFX5dUNLie0ZRKHtS62kmKzs8=)
                          2: wPDumEJicDHsomTaxl5f72OUP5g.crl (hash: 4XFDBfN3I3+MO8m7otGLTuG78maXVsa6F3OCc4QDKmI=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:a9:77:d5:b9:55:88:3f:ee:c2:ce:22:15:79:fe:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c0f0ee9842627031eca264dac65e5fef63943f98
        Validity
            Not Before: Jan 31 14:00:10 2025 GMT
            Not After : Feb  1 14:00:10 2025 GMT
        Subject: CN=b2d40fdfadeb8f40fb819099aee7ad28092fe72c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:da:f5:e4:2a:bb:4d:5f:dd:ec:2f:0b:aa:92:
                    b8:54:70:5e:7b:e0:11:2b:20:a1:41:61:30:b8:b2:
                    c2:99:20:a7:7f:25:fd:af:83:89:a7:ba:bf:8b:c7:
                    c1:7b:a0:88:da:bc:74:7f:66:71:84:ce:d7:05:39:
                    1f:98:00:f4:6c:64:d3:61:86:e0:ca:b0:dd:af:f3:
                    a3:eb:7f:4a:d5:4e:cd:29:96:90:0a:6f:ab:51:47:
                    0b:b7:ad:00:63:ea:e0:ff:b1:09:0c:02:59:c7:17:
                    b1:4d:5d:ef:02:1e:69:d9:00:ae:59:9e:15:15:3d:
                    be:fd:43:a5:a9:e7:c2:a5:6a:b8:4f:ad:c3:f0:8b:
                    7d:56:52:75:2a:bb:d4:8d:99:64:90:0e:1b:77:a1:
                    17:34:10:60:6c:a2:16:f4:ec:f5:ff:e2:c5:a9:c2:
                    cf:8d:70:13:7b:11:2c:7d:36:72:6e:9a:91:9c:9a:
                    7e:7c:9b:52:c0:48:6c:5c:d8:85:3b:85:92:04:28:
                    59:6c:cb:38:e8:ad:0e:c7:5a:3c:14:e0:2c:cc:e2:
                    35:bd:cd:99:f2:fe:71:ae:41:86:c8:ea:ab:09:96:
                    50:17:68:ec:ae:89:51:2d:45:89:f6:1e:79:b0:ee:
                    2d:29:c7:11:58:60:9c:6b:37:75:ee:ec:d2:ab:90:
                    e1:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:D4:0F:DF:AD:EB:8F:40:FB:81:90:99:AE:E7:AD:28:09:2F:E7:2C
            X509v3 Authority Key Identifier:
                keyid:C0:F0:EE:98:42:62:70:31:EC:A2:64:DA:C6:5E:5F:EF:63:94:3F:98

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wPDumEJicDHsomTaxl5f72OUP5g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/5047e8-c547-4b75-afc0-c6ece5901580/1/wPDumEJicDHsomTaxl5f72OUP5g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/5047e8-c547-4b75-afc0-c6ece5901580/1/wPDumEJicDHsomTaxl5f72OUP5g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:f8:6c:63:86:20:21:bb:35:c8:b2:9a:a9:38:b5:d0:05:1d:
         fb:ad:dd:44:46:6e:02:80:65:1f:52:5c:be:e6:d6:9e:8b:d8:
         1c:c7:0a:d3:9a:35:9d:fa:b1:e2:66:e1:16:a8:72:a2:7c:e3:
         48:d9:de:cd:98:c0:b9:bb:34:ec:18:14:94:0e:87:4d:e6:c2:
         bd:2f:5a:3b:82:a1:7b:f8:5f:51:55:60:3b:5a:c1:4d:6a:82:
         07:59:27:a5:2f:43:b7:f7:37:b2:04:d8:37:03:53:9e:8a:ae:
         e6:f6:2b:47:1c:bf:d7:c0:20:0c:30:5d:48:40:c2:88:14:e0:
         f9:97:29:f3:47:f7:6d:76:dd:1a:36:05:dd:81:c7:5e:e8:21:
         40:2d:3b:dc:55:cd:b8:20:7b:c0:31:e3:53:1f:c8:55:50:60:
         73:63:42:23:b3:e8:5c:6e:9e:ff:74:ce:03:10:15:8a:39:3b:
         95:48:82:d7:3a:95:64:52:61:0a:f0:3f:b4:d6:ee:8b:70:fd:
         60:e2:83:e9:a6:53:e1:15:37:35:d7:e2:50:39:ad:ea:c9:03:
         0f:90:bd:da:a8:1c:47:3a:e2:7e:27:74:bf:71:94:5c:8f:19:
         68:1f:75:7a:54:34:7b:5f:05:6f:38:fd:c1:f6:9d:22:2a:02:
         a3:33:9e:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:12:41 2025 by rpki-client