Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/b165ca-2f33-4e8e-a896-cdaa581518f3/1/8WsoQW3b85-ySwmWaGrPrOdsmNU.mft
File:                     8WsoQW3b85-ySwmWaGrPrOdsmNU.mft (raw, json)
Hash identifier:          oN/IGfeHxkmroL0yH1OMUmhTBr6hop5DcEB+RK7ZzVo=
Subject key identifier:   94:89:6F:EF:CB:B0:EB:DE:CB:41:29:32:4D:6D:B4:CC:4C:76:2A:07
Authority key identifier: F1:6B:28:41:6D:DB:F3:9F:B2:4B:09:96:68:6A:CF:AC:E7:6C:98:D5
Certificate issuer:       /CN=f16b28416ddbf39fb24b0996686acface76c98d5
Certificate serial:       0194BC729FBC846ADDB030BAB1DAFD069F41
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8WsoQW3b85-ySwmWaGrPrOdsmNU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b9/b165ca-2f33-4e8e-a896-cdaa581518f3/1/8WsoQW3b85-ySwmWaGrPrOdsmNU.mft
Manifest number:          142D
Signing time:             Fri 31 Jan 2025 13:00:16 +0000
Manifest this update:     Fri 31 Jan 2025 13:00:16 +0000
Manifest next update:     Sat 01 Feb 2025 13:00:16 +0000
Files and hashes:         1: 6uJHb0n-o1Jmt4WfrkKYtugW_tA.roa (hash: oripnuB9VSq+/2+WmWeFeymLsX3aSd+Xhezj6MQbB30=)
                          2: 8WsoQW3b85-ySwmWaGrPrOdsmNU.crl (hash: PcBCOiFWGpHkr/o1MtaozUZNQdZs18Pdy9oRJEUeXsE=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:72:9f:bc:84:6a:dd:b0:30:ba:b1:da:fd:06:9f:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f16b28416ddbf39fb24b0996686acface76c98d5
        Validity
            Not Before: Jan 31 13:00:16 2025 GMT
            Not After : Feb  1 13:00:16 2025 GMT
        Subject: CN=94896fefcbb0ebdecb4129324d6db4cc4c762a07
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:74:1c:66:e5:f8:87:71:8e:f3:52:b4:a4:88:
                    8f:70:d8:30:13:98:d7:4e:b6:9a:1c:1d:29:10:1b:
                    ff:02:1e:40:62:92:f6:a6:76:1d:72:7e:a0:1f:d4:
                    2d:9c:ae:3e:4a:86:96:a3:89:e8:a7:39:9e:a2:ac:
                    07:8f:5b:20:88:03:68:36:21:eb:a2:bb:65:a7:b3:
                    65:3e:29:13:df:f6:cb:0d:c8:74:c9:a9:57:e7:4d:
                    a1:5b:8c:1d:2f:f8:09:3d:d5:9a:f5:ed:4c:ec:bd:
                    91:46:0f:7d:9b:b5:db:20:35:64:5c:a9:8e:b2:89:
                    c2:cb:c5:85:94:b7:83:07:a2:0d:23:4a:14:29:d7:
                    e5:96:fd:a6:29:f6:5c:f4:73:04:94:92:c3:b1:91:
                    6c:34:1a:3b:3c:dd:66:ae:72:24:39:7a:8a:ec:18:
                    68:e5:0a:69:9d:40:00:0a:f4:95:54:ac:cc:5d:ad:
                    97:97:da:8a:13:f5:d4:96:ce:44:f3:cd:13:b6:81:
                    34:b2:5d:a8:b5:14:4e:15:96:5b:11:43:dc:b4:f8:
                    f9:b7:56:93:93:11:90:c1:f8:d3:ec:1e:34:25:16:
                    53:34:6a:91:7e:c9:01:71:8f:b8:c9:51:9e:38:5a:
                    d9:d2:e4:7a:60:0d:94:eb:13:04:fb:b8:97:78:d2:
                    12:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:89:6F:EF:CB:B0:EB:DE:CB:41:29:32:4D:6D:B4:CC:4C:76:2A:07
            X509v3 Authority Key Identifier:
                keyid:F1:6B:28:41:6D:DB:F3:9F:B2:4B:09:96:68:6A:CF:AC:E7:6C:98:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8WsoQW3b85-ySwmWaGrPrOdsmNU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/b165ca-2f33-4e8e-a896-cdaa581518f3/1/8WsoQW3b85-ySwmWaGrPrOdsmNU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/b165ca-2f33-4e8e-a896-cdaa581518f3/1/8WsoQW3b85-ySwmWaGrPrOdsmNU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c5:c1:77:cb:e7:b1:9c:a3:7f:2a:12:6a:4d:7e:76:cb:b7:f9:
         50:58:53:dd:63:30:e0:58:70:d8:cd:cf:90:8e:bd:ef:a9:68:
         e0:58:b8:53:c9:73:85:92:ac:a2:d2:95:ed:fe:63:35:64:33:
         58:dd:82:3e:19:3e:68:6b:9f:23:f3:92:82:fb:de:60:e6:4e:
         1d:61:2a:ff:67:38:e3:b6:c5:d0:22:7d:f9:94:39:f6:54:0f:
         56:23:46:59:e0:c7:cb:98:a3:ac:01:c1:c0:9f:20:c2:15:02:
         7f:97:e7:99:bc:25:c8:8a:3a:00:3a:92:83:68:74:87:52:49:
         ad:d2:b7:1e:bd:fd:91:d4:36:e3:47:e4:8d:cf:f6:2b:15:e1:
         72:92:32:7d:06:22:58:18:bf:7e:5f:92:76:ba:93:9a:8e:8b:
         41:83:3e:3a:bf:15:ef:06:b3:97:4d:6e:d0:d2:5e:39:76:c4:
         31:6c:ac:2d:33:eb:27:db:b8:a3:12:5c:16:1e:45:d6:ad:50:
         25:9e:97:b3:6b:54:a1:ae:22:ef:90:27:6b:93:4d:63:1f:bb:
         19:96:4d:76:9f:c1:74:62:de:26:b5:8c:e6:85:f5:12:d6:19:
         e7:b1:1b:f5:45:54:06:ff:a1:42:5d:0a:42:ec:5a:45:28:c0:
         49:cd:21:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 13:44:01 2025 by rpki-client