Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/a4bdf7-2579-4bd0-8a93-224fd78ef827/1/wRWzJ-hHYWhQIvRzKNb0y9bTBB4.mft
File:                     wRWzJ-hHYWhQIvRzKNb0y9bTBB4.mft (raw, json)
Hash identifier:          rg9bWY25fcEKqgn8anhcWybgs2zJ9ZsRyKD8hStk8PA=
Subject key identifier:   D3:63:5C:55:AE:66:03:C7:CB:51:00:4E:77:A3:88:78:67:70:84:EF
Authority key identifier: C1:15:B3:27:E8:47:61:68:50:22:F4:73:28:D6:F4:CB:D6:D3:04:1E
Certificate issuer:       /CN=c115b327e84761685022f47328d6f4cbd6d3041e
Certificate serial:       0194BCAA3EFCF6EF96E85E4CD3D8E17DAC5F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wRWzJ-hHYWhQIvRzKNb0y9bTBB4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cb/a4bdf7-2579-4bd0-8a93-224fd78ef827/1/wRWzJ-hHYWhQIvRzKNb0y9bTBB4.mft
Manifest number:          11E6
Signing time:             Fri 31 Jan 2025 14:01:01 +0000
Manifest this update:     Fri 31 Jan 2025 14:01:01 +0000
Manifest next update:     Sat 01 Feb 2025 14:01:01 +0000
Files and hashes:         1: IIaW89ZzFdGKWt-qkretRuZFhUw.roa (hash: +wV4CyXS7FosexYu6VMQZY2Kh9jsLDP8nTTtEBowsxI=)
                          2: hKI1gIRkFSpeDRxr6Gy5U-0E8bg.roa (hash: wtwNxYOC1NaLQTBIVmgD52Go7NqEorx1g4IWXnECaeA=)
                          3: wRWzJ-hHYWhQIvRzKNb0y9bTBB4.crl (hash: jeS8M3TzeEVNgzGWXzRobqPBVWONDGYBN7fhbGyGSQc=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:aa:3e:fc:f6:ef:96:e8:5e:4c:d3:d8:e1:7d:ac:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c115b327e84761685022f47328d6f4cbd6d3041e
        Validity
            Not Before: Jan 31 14:01:01 2025 GMT
            Not After : Feb  1 14:01:01 2025 GMT
        Subject: CN=d3635c55ae6603c7cb51004e77a38878677084ef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:c1:94:68:61:48:41:10:51:0e:69:74:97:a3:
                    b2:dc:25:c5:0c:49:6a:e1:dc:67:be:1a:46:1c:0f:
                    29:94:c2:88:8c:02:4f:ae:31:b6:c4:2a:95:e6:4e:
                    a6:88:2a:16:ff:1d:44:42:b6:67:4b:75:86:f0:45:
                    4a:13:70:07:94:e6:b3:67:f1:23:8d:cf:ac:1b:f5:
                    5b:2b:00:c8:f6:d8:6a:6d:32:85:ee:fe:b1:cc:29:
                    95:3c:10:6f:7c:96:64:80:80:b8:c2:3f:0e:16:d0:
                    2a:f6:a5:45:cb:ea:0e:7f:e4:12:66:97:68:27:ab:
                    f1:8d:d4:44:cf:fc:95:dc:48:84:39:a1:82:d0:c1:
                    ba:e5:5f:5f:ff:42:02:23:76:55:6b:dc:86:dd:67:
                    b6:af:a9:d3:33:d1:8f:57:7d:e3:10:38:82:7b:6d:
                    32:cf:cd:76:15:a2:70:22:ed:70:e8:22:cf:49:1a:
                    5e:af:43:71:cc:52:75:ee:08:e5:1f:97:73:cb:f5:
                    f8:a8:1b:e4:75:14:d2:1d:71:2d:6f:b2:80:9a:61:
                    40:b2:cf:4c:e6:a2:79:d1:33:36:d3:61:a6:1c:6b:
                    d7:13:ae:0c:3c:05:6f:2d:58:e7:de:9b:e2:1c:c3:
                    3c:be:8a:73:35:b4:ea:eb:3b:1f:93:71:fb:d0:17:
                    af:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:63:5C:55:AE:66:03:C7:CB:51:00:4E:77:A3:88:78:67:70:84:EF
            X509v3 Authority Key Identifier:
                keyid:C1:15:B3:27:E8:47:61:68:50:22:F4:73:28:D6:F4:CB:D6:D3:04:1E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wRWzJ-hHYWhQIvRzKNb0y9bTBB4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/a4bdf7-2579-4bd0-8a93-224fd78ef827/1/wRWzJ-hHYWhQIvRzKNb0y9bTBB4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/a4bdf7-2579-4bd0-8a93-224fd78ef827/1/wRWzJ-hHYWhQIvRzKNb0y9bTBB4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:50:06:ef:87:77:6e:f4:64:e1:a3:4c:2e:a3:ca:db:d2:02:
         8e:8d:1c:a8:58:72:02:30:81:c9:9d:eb:3a:2c:a6:f0:24:8a:
         27:50:19:22:35:56:61:4d:39:dc:74:58:6a:aa:9a:cc:b7:2c:
         d1:ba:65:97:e4:7e:64:b7:2b:4f:d2:e3:a6:f6:6b:ad:10:a3:
         8e:f8:4b:68:95:ff:f3:cc:27:59:fb:d8:c1:5d:2e:6d:ee:89:
         d1:e3:60:ba:79:79:21:b3:c6:39:a8:bb:1a:99:69:87:e7:cf:
         64:35:2b:e1:39:1c:4c:03:34:d4:68:98:14:6b:09:5a:9a:06:
         16:be:61:06:2d:5a:ee:29:09:28:b1:57:08:62:5a:ad:ad:01:
         b3:1a:8e:d5:24:40:07:38:01:29:3b:25:59:ec:7f:c4:fd:07:
         95:ad:cb:72:0c:bb:55:45:d0:28:52:42:16:f6:ba:5d:3f:c8:
         cc:f9:18:72:31:f0:24:99:4d:d0:8c:b8:e5:85:60:e4:80:f3:
         45:50:b4:3f:45:2a:d7:59:69:16:28:1b:06:e0:8f:7a:1a:56:
         4c:93:b6:9f:4d:58:15:8c:cc:50:3e:03:c1:b8:5b:36:ec:3b:
         f1:e6:ba:ab:65:e5:b6:bb:17:29:39:57:54:e8:a7:e3:e8:53:
         a3:b6:e9:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:03:08 2025 by rpki-client