Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/3405e3-8cc0-460d-b7e9-9ba6da70fadb/1/W4YuIx_L1Tkb1HbGq5qytyEKh6Q.mft
File:                     W4YuIx_L1Tkb1HbGq5qytyEKh6Q.mft (raw, json)
Hash identifier:          FW1kALWQF6XUS0b0LZmGucBGtnYDEmQZikZ2Gc5yHZw=
Subject key identifier:   68:79:04:07:7F:F4:A4:49:80:A5:01:84:14:92:DB:87:5A:40:C5:36
Authority key identifier: 5B:86:2E:23:1F:CB:D5:39:1B:D4:76:C6:AB:9A:B2:B7:21:0A:87:A4
Certificate issuer:       /CN=5b862e231fcbd5391bd476c6ab9ab2b7210a87a4
Certificate serial:       0194BD859CAF9A89DF7E85BBD0501AD9DC77
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/W4YuIx_L1Tkb1HbGq5qytyEKh6Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a9/3405e3-8cc0-460d-b7e9-9ba6da70fadb/1/W4YuIx_L1Tkb1HbGq5qytyEKh6Q.mft
Manifest number:          0C59
Signing time:             Fri 31 Jan 2025 18:00:37 +0000
Manifest this update:     Fri 31 Jan 2025 18:00:37 +0000
Manifest next update:     Sat 01 Feb 2025 18:00:37 +0000
Files and hashes:         1: W4YuIx_L1Tkb1HbGq5qytyEKh6Q.crl (hash: BkH9btLKW2y2EXIzDzt9gh2BPDPgvuH2fwz24IQEW5I=)
                          2: gRqe05O7FJ-3whaf6RiaMKovVHw.roa (hash: Amo4rFyICByEK7RCP/ax/RVJMXu+W6BkFpTvi0xsm7w=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bd:85:9c:af:9a:89:df:7e:85:bb:d0:50:1a:d9:dc:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b862e231fcbd5391bd476c6ab9ab2b7210a87a4
        Validity
            Not Before: Jan 31 18:00:37 2025 GMT
            Not After : Feb  1 18:00:37 2025 GMT
        Subject: CN=687904077ff4a44980a501841492db875a40c536
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:1d:77:18:8c:6c:72:12:1c:2d:7d:e2:e7:8f:
                    7f:b7:48:48:3a:d6:4c:a3:23:74:3e:7f:d2:3a:a9:
                    53:58:ee:47:8e:e9:aa:6c:19:1d:49:22:c4:24:d2:
                    9c:ff:92:e7:5a:e6:0f:f1:2c:ed:de:64:35:4c:ff:
                    07:4e:ba:ca:bb:af:ae:4e:6e:85:15:59:7a:e8:6c:
                    9b:8c:11:36:f3:df:b3:c1:3d:5b:fe:24:50:1c:28:
                    5b:f4:49:be:d1:2b:85:ef:a0:35:c7:16:fd:2e:a8:
                    93:36:8d:16:96:3c:2b:63:05:ba:e1:1d:eb:23:74:
                    91:f4:4c:b8:f6:9a:1b:79:1d:7c:9d:86:32:9b:1a:
                    fd:c7:81:b0:bc:d5:3b:fe:5c:a7:94:fd:8d:b5:86:
                    8c:1e:e1:53:96:f6:f9:8d:4f:2f:20:2d:71:b6:32:
                    22:ee:b7:96:43:b6:84:44:33:71:92:ba:57:11:23:
                    e8:d0:b6:49:19:e1:db:bc:fa:b1:fc:0d:dd:83:74:
                    94:93:a9:11:98:f6:e3:e5:7f:ff:04:39:57:26:d6:
                    0d:35:18:98:7b:56:3e:a5:01:58:dc:9f:29:5f:8c:
                    46:fb:43:73:9f:48:6f:ed:57:ad:d8:ec:6a:45:6c:
                    69:8c:e3:1e:c3:a7:f1:43:f8:51:2c:3a:ee:b8:97:
                    fc:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:79:04:07:7F:F4:A4:49:80:A5:01:84:14:92:DB:87:5A:40:C5:36
            X509v3 Authority Key Identifier:
                keyid:5B:86:2E:23:1F:CB:D5:39:1B:D4:76:C6:AB:9A:B2:B7:21:0A:87:A4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W4YuIx_L1Tkb1HbGq5qytyEKh6Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/3405e3-8cc0-460d-b7e9-9ba6da70fadb/1/W4YuIx_L1Tkb1HbGq5qytyEKh6Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/3405e3-8cc0-460d-b7e9-9ba6da70fadb/1/W4YuIx_L1Tkb1HbGq5qytyEKh6Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:4b:78:3e:41:a8:61:91:f7:89:a9:64:83:b6:67:7f:7c:ed:
         c2:39:c3:e7:df:ee:d6:9d:ef:00:29:63:9e:f7:a2:65:3e:d3:
         ed:a6:17:ea:ab:d8:1d:7e:a0:d4:a4:3f:eb:10:90:bf:1e:c0:
         73:3d:b3:8f:32:2e:f5:60:0b:24:b6:88:d1:08:6e:93:4a:42:
         95:33:fd:09:be:3a:73:ef:2c:2b:c6:74:bd:c1:41:bd:24:ad:
         29:40:fb:0b:94:ad:d1:dd:8f:28:cb:e7:a7:ab:98:b1:f1:d6:
         30:b2:6b:d2:40:ba:29:60:33:c8:50:78:c5:1e:e9:8f:04:d1:
         f7:b6:4e:83:cd:27:6c:97:e7:e0:c0:32:07:5d:33:0c:91:60:
         6c:ab:a5:1c:9b:00:44:4b:54:1d:12:63:21:be:80:ed:00:e0:
         17:c2:86:08:a6:d9:6c:97:ac:21:e8:a8:4d:dc:1d:20:fd:eb:
         25:60:a0:32:bc:3e:64:5f:31:34:60:27:0f:86:c5:43:e1:1b:
         07:d9:6f:d3:fa:b1:0b:d5:e3:ff:58:3c:c4:5d:45:ad:cd:af:
         21:7c:0d:1c:34:95:e0:4f:02:48:76:0b:e3:3b:9a:e8:7d:15:
         93:1c:76:75:28:bc:70:e0:5c:9f:09:95:24:78:99:40:cd:b3:
         66:79:d8:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:48:12 2025 by rpki-client