Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/a4f4c2-ee35-43e0-8bad-44d0d0891989/1/wDxpSwadoTLPTEvXwdIiloY7F20.mft
File:                     wDxpSwadoTLPTEvXwdIiloY7F20.mft (raw, json)
Hash identifier:          swYV8j3aYTGO/Ktm/jvXTwwQJ8YuPLgOXHX833p/2xo=
Subject key identifier:   3C:E1:8D:91:76:7B:D3:4F:8A:10:C0:0C:9D:45:45:0B:D0:8A:50:9D
Authority key identifier: C0:3C:69:4B:06:9D:A1:32:CF:4C:4B:D7:C1:D2:22:96:86:3B:17:6D
Certificate issuer:       /CN=c03c694b069da132cf4c4bd7c1d22296863b176d
Certificate serial:       0194BCE0CC62C987CE38647F0D460400B645
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wDxpSwadoTLPTEvXwdIiloY7F20.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a9/a4f4c2-ee35-43e0-8bad-44d0d0891989/1/wDxpSwadoTLPTEvXwdIiloY7F20.mft
Manifest number:          A0
Signing time:             Fri 31 Jan 2025 15:00:36 +0000
Manifest this update:     Fri 31 Jan 2025 15:00:36 +0000
Manifest next update:     Sat 01 Feb 2025 15:00:36 +0000
Files and hashes:         1: D83JF5HJmZ_nDCEolR80xNvS-M8.roa (hash: 2gVW9uQvzf9z69pIhSOEl0MnJWNxJhApE/Mz251JqN8=)
                          2: wDxpSwadoTLPTEvXwdIiloY7F20.crl (hash: bNl3Hr2oaPo0HisHFgLQNwFu/IchQ6tM0UnH1cfJ++U=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:e0:cc:62:c9:87:ce:38:64:7f:0d:46:04:00:b6:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c03c694b069da132cf4c4bd7c1d22296863b176d
        Validity
            Not Before: Jan 31 15:00:36 2025 GMT
            Not After : Feb  1 15:00:36 2025 GMT
        Subject: CN=3ce18d91767bd34f8a10c00c9d45450bd08a509d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:0b:91:68:f6:e3:8d:15:83:f8:b5:1b:b5:5a:
                    6d:c1:37:09:13:84:25:99:27:eb:1d:30:4a:e4:a8:
                    a5:33:7c:09:76:96:94:89:f6:bd:a2:b2:a0:7f:b1:
                    db:04:f7:9e:2d:f5:35:ac:87:fc:01:ae:40:8a:1c:
                    c4:72:3f:03:bd:1d:35:0c:49:17:bf:e0:25:4c:75:
                    b7:83:a5:84:e3:40:e4:60:b6:f0:81:aa:57:76:50:
                    6d:5c:86:32:8c:75:d7:a3:4c:42:9d:6c:59:7e:0b:
                    31:7a:bd:6b:98:f6:dd:db:05:e6:ab:d1:77:a7:9b:
                    06:ae:e0:2c:46:78:5d:ad:75:b0:1d:ac:4c:79:fa:
                    df:04:84:31:bc:66:aa:19:85:e0:f9:a6:5e:09:18:
                    e7:87:cb:6f:e0:3c:3a:c8:46:f2:fa:cd:db:bd:3f:
                    d6:ce:49:98:f0:a0:00:76:f8:f9:b3:87:15:a2:83:
                    c6:bb:d9:cf:51:b6:a0:3b:f1:08:a6:4e:b4:95:d3:
                    33:ed:c2:46:6f:54:0c:6a:f6:07:47:27:2f:22:f1:
                    4f:11:05:05:fc:d1:83:4b:89:14:40:54:f9:f1:9a:
                    85:9f:21:a0:0d:cc:d7:80:3f:88:85:b4:6a:e3:7e:
                    e4:ab:fa:b6:7f:92:aa:19:4a:cc:06:90:c4:bc:34:
                    d2:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:E1:8D:91:76:7B:D3:4F:8A:10:C0:0C:9D:45:45:0B:D0:8A:50:9D
            X509v3 Authority Key Identifier:
                keyid:C0:3C:69:4B:06:9D:A1:32:CF:4C:4B:D7:C1:D2:22:96:86:3B:17:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wDxpSwadoTLPTEvXwdIiloY7F20.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/a4f4c2-ee35-43e0-8bad-44d0d0891989/1/wDxpSwadoTLPTEvXwdIiloY7F20.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/a4f4c2-ee35-43e0-8bad-44d0d0891989/1/wDxpSwadoTLPTEvXwdIiloY7F20.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:68:87:39:36:3b:ff:9a:bd:4e:9a:f0:de:31:2d:f8:70:0b:
         78:ef:13:4e:7c:2d:1d:9b:8f:0c:af:e1:35:55:ac:68:98:a0:
         83:6e:c6:b7:fd:87:57:ab:59:f6:83:89:dc:32:5c:4d:81:b5:
         dd:e8:80:79:aa:b1:c2:30:f4:47:b6:d0:b4:74:2c:ee:07:99:
         9a:37:70:3b:b9:74:3b:6b:ae:48:6c:c8:bb:0d:0f:01:bf:29:
         56:8b:a3:fe:f4:e1:98:44:25:e2:2a:2b:ad:3a:da:4a:ec:1f:
         c4:6c:57:5f:bf:df:e9:c9:99:32:52:da:79:95:dd:58:b3:41:
         56:3b:d1:02:c6:99:c9:bc:6c:31:15:b8:15:d3:0d:c6:dd:e7:
         a5:bf:c3:ce:1d:54:bb:00:e6:4d:86:7a:3d:ae:a0:16:ac:49:
         f7:4c:c0:c7:c4:10:3b:1a:f6:09:15:27:95:ac:42:cf:54:9e:
         fc:01:55:77:c9:94:5c:85:f5:02:34:76:11:db:4c:bd:f5:9f:
         fb:df:fc:b0:9a:53:ea:c0:ca:ba:3b:86:10:e4:95:d1:31:a1:
         6c:41:cd:bb:0d:4e:73:39:cf:e2:a5:a1:54:b6:c0:c8:dc:b9:
         4a:d0:cf:4d:36:4f:a7:02:bf:8e:09:b8:86:7f:16:34:67:22:
         30:37:27:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 09:11:02 2025 by rpki-client