Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/420a13-f0a5-4db0-9048-15958a89a012/1/wOOV6sUDfy5HhZVvjai4aeu-_OA.mft
File:                     wOOV6sUDfy5HhZVvjai4aeu-_OA.mft (raw, json)
Hash identifier:          x0fcWxLuU4GxdBIvEQuO+J94GAU+F1h/VKhRbPZpyeY=
Subject key identifier:   82:9A:A5:A5:28:CD:52:CF:62:EA:71:80:17:E6:D6:4D:B7:EF:42:FE
Authority key identifier: C0:E3:95:EA:C5:03:7F:2E:47:85:95:6F:8D:A8:B8:69:EB:BE:FC:E0
Certificate issuer:       /CN=c0e395eac5037f2e4785956f8da8b869ebbefce0
Certificate serial:       0194BBCE5126F998F3A3674261F85222FBBF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wOOV6sUDfy5HhZVvjai4aeu-_OA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c7/420a13-f0a5-4db0-9048-15958a89a012/1/wOOV6sUDfy5HhZVvjai4aeu-_OA.mft
Manifest number:          0B1E
Signing time:             Fri 31 Jan 2025 10:00:48 +0000
Manifest this update:     Fri 31 Jan 2025 10:00:48 +0000
Manifest next update:     Sat 01 Feb 2025 10:00:48 +0000
Files and hashes:         1: wOOV6sUDfy5HhZVvjai4aeu-_OA.crl (hash: cW6qsICTQfx+0x2xt5xn/jLFlne0C1iYWZoqxRuP2Mg=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bb:ce:51:26:f9:98:f3:a3:67:42:61:f8:52:22:fb:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c0e395eac5037f2e4785956f8da8b869ebbefce0
        Validity
            Not Before: Jan 31 10:00:48 2025 GMT
            Not After : Feb  1 10:00:48 2025 GMT
        Subject: CN=829aa5a528cd52cf62ea718017e6d64db7ef42fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:2e:92:ab:3c:19:8e:62:df:07:43:23:bb:74:
                    98:c0:8a:9f:22:64:cd:1e:29:bb:46:68:b5:9b:69:
                    01:40:bb:de:87:e0:07:3f:16:98:1b:e5:48:31:59:
                    01:3a:0d:94:e3:11:85:bc:63:63:bf:a5:c4:c3:69:
                    fe:1c:d6:c9:99:dc:6e:ea:0b:43:28:c8:fd:6f:eb:
                    35:67:cf:8d:e2:b5:46:f5:30:71:e0:32:ff:5e:07:
                    60:a6:d3:b1:28:28:59:7e:b3:66:6d:9b:38:88:74:
                    b2:c6:45:aa:03:ce:36:a6:ac:5d:02:45:05:08:1c:
                    c9:b8:fc:61:b6:97:b9:05:ae:41:9b:b7:c7:f0:87:
                    85:9e:d8:f2:77:c2:55:43:e8:1c:a5:b0:ec:f0:46:
                    4d:1d:8b:83:0c:89:e0:ad:b0:93:d8:af:4d:01:97:
                    85:d2:a2:a4:25:98:aa:47:ca:67:8d:0d:ee:29:6d:
                    18:b9:62:2a:9b:d7:e1:e4:0d:24:ec:db:1b:fc:be:
                    08:62:d9:54:75:de:fb:55:f1:17:6d:56:f9:9a:2b:
                    39:35:05:68:97:fb:1b:46:03:ed:e5:d3:35:f1:d4:
                    b2:ee:05:53:4c:15:9e:58:94:e5:51:d7:c4:ad:48:
                    66:bc:d5:1b:dc:ab:20:94:76:c5:5c:07:fb:3f:75:
                    d5:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:9A:A5:A5:28:CD:52:CF:62:EA:71:80:17:E6:D6:4D:B7:EF:42:FE
            X509v3 Authority Key Identifier:
                keyid:C0:E3:95:EA:C5:03:7F:2E:47:85:95:6F:8D:A8:B8:69:EB:BE:FC:E0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wOOV6sUDfy5HhZVvjai4aeu-_OA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/420a13-f0a5-4db0-9048-15958a89a012/1/wOOV6sUDfy5HhZVvjai4aeu-_OA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/420a13-f0a5-4db0-9048-15958a89a012/1/wOOV6sUDfy5HhZVvjai4aeu-_OA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:b8:29:7b:62:e5:3b:1a:14:42:c5:5a:0c:a8:74:1a:90:3c:
         90:40:b8:b7:c5:07:4b:e0:8b:55:81:28:0b:93:73:da:4d:01:
         2c:ae:52:38:cb:fc:b8:b7:11:8f:ff:75:57:75:4f:03:35:57:
         16:3a:65:0d:5f:28:b4:2d:6e:63:64:57:ab:b3:cd:86:ed:10:
         7b:b1:72:23:40:55:46:83:9e:57:1e:90:50:f3:b9:15:03:f1:
         b9:1c:81:ea:57:58:58:61:89:4f:c4:c6:fd:32:51:df:c9:86:
         06:d3:7a:85:1a:f7:df:25:c2:db:d2:d4:0e:2e:40:df:f8:1f:
         2f:c0:bc:21:69:66:b9:a4:5a:f2:b1:6a:66:d2:97:41:d4:ba:
         68:2e:02:5c:41:0b:fe:66:0c:25:f3:e6:bb:ff:84:ae:4d:cf:
         9c:fe:ae:2f:ea:e7:a5:34:6c:3d:9e:8d:1c:c1:93:e1:fc:24:
         05:bb:ca:0a:13:d4:93:f2:83:d4:8a:2c:29:f1:3b:99:a0:6e:
         23:7c:c3:25:43:33:fa:18:73:fa:4b:5d:8c:c3:db:17:fb:14:
         8f:f2:84:57:97:44:de:40:95:d0:b2:28:fe:30:b5:c0:1b:a2:
         2f:5e:09:b2:ef:7d:a9:c3:89:a0:77:bb:18:f2:08:73:cf:17:
         70:da:f3:e1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS7zlEm+Zjzo2dCYfhSIvu/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMwZTM5NWVhYzUwMzdmMmU0Nzg1OTU2ZjhkYThiODY5ZWJi
ZWZjZTAwHhcNMjUwMTMxMTAwMDQ4WhcNMjUwMjAxMTAwMDQ4WjAzMTEwLwYDVQQD
Eyg4MjlhYTVhNTI4Y2Q1MmNmNjJlYTcxODAxN2U2ZDY0ZGI3ZWY0MmZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAny6SqzwZjmLfB0Mju3SYwIqfImTN
Him7Rmi1m2kBQLveh+AHPxaYG+VIMVkBOg2U4xGFvGNjv6XEw2n+HNbJmdxu6gtD
KMj9b+s1Z8+N4rVG9TBx4DL/XgdgptOxKChZfrNmbZs4iHSyxkWqA842pqxdAkUF
CBzJuPxhtpe5Ba5Bm7fH8IeFntjyd8JVQ+gcpbDs8EZNHYuDDIngrbCT2K9NAZeF
0qKkJZiqR8pnjQ3uKW0YuWIqm9fh5A0k7Nsb/L4IYtlUdd77VfEXbVb5mis5NQVo
l/sbRgPt5dM18dSy7gVTTBWeWJTlUdfErUhmvNUb3KsglHbFXAf7P3XV8wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIKapaUozVLPYupxgBfm1k2370L+MB8GA1UdIwQY
MBaAFMDjlerFA38uR4WVb42ouGnrvvzgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd09PVjZzVURmeTVIaFpWdmphaTRhZXUtX09BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy80MjBhMTMtZjBhNS00ZGIwLTkwNDgt
MTU5NThhODlhMDEyLzEvd09PVjZzVURmeTVIaFpWdmphaTRhZXUtX09BLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNy80MjBhMTMtZjBhNS00ZGIwLTkwNDgtMTU5NThhODlhMDEy
LzEvd09PVjZzVURmeTVIaFpWdmphaTRhZXUtX09BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAH7gpe2Ll
OxoUQsVaDKh0GpA8kEC4t8UHS+CLVYEoC5Nz2k0BLK5SOMv8uLcRj/91V3VPAzVX
FjplDV8otC1uY2RXq7PNhu0Qe7FyI0BVRoOeVx6QUPO5FQPxuRyB6ldYWGGJT8TG
/TJR38mGBtN6hRr33yXC29LUDi5A3/gfL8C8IWlmuaRa8rFqZtKXQdS6aC4CXEEL
/mYMJfPmu/+Erk3PnP6uL+rnpTRsPZ6NHMGT4fwkBbvKChPUk/KD1IosKfE7maBu
I3zDJUMz+hhz+ktdjMPbF/sUj/KEV5dE3kCV0LIo/jC1wBuiL14Jsu99qcOJoHe7
GPIIc88XcNrz4Q==
-----END CERTIFICATE-----
Generated at Thu Apr 24 22:40:06 2025 by rpki-client