Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/28a8f3-889e-4549-a44e-ce225187fc38/1/wbBQIRIZ0Y6Zbghst_YwkXiASGA.mft
File:                     wbBQIRIZ0Y6Zbghst_YwkXiASGA.mft (raw, json)
Hash identifier:          pXCMtKUua0P51Cdn7oeeHquC165RZtTpAOlzmLnQFdk=
Subject key identifier:   B7:D5:F2:E0:6B:66:53:EA:F8:CD:EA:17:C8:85:F0:C0:A7:94:82:CA
Authority key identifier: C1:B0:50:21:12:19:D1:8E:99:6E:08:6C:B7:F6:30:91:78:80:48:60
Certificate issuer:       /CN=c1b050211219d18e996e086cb7f6309178804860
Certificate serial:       0194BC3CA72CC86CECD8CA94775C6125C643
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wbBQIRIZ0Y6Zbghst_YwkXiASGA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cd/28a8f3-889e-4549-a44e-ce225187fc38/1/wbBQIRIZ0Y6Zbghst_YwkXiASGA.mft
Manifest number:          147B
Signing time:             Fri 31 Jan 2025 12:01:19 +0000
Manifest this update:     Fri 31 Jan 2025 12:01:19 +0000
Manifest next update:     Sat 01 Feb 2025 12:01:19 +0000
Files and hashes:         1: KML_hA1pizVhEIN7f877pA6o17I.roa (hash: mPt9GeV0y8ENs4Lz1UL4Oj0gaP0ztnD/yr/Nmb/aj0I=)
                          2: UUfu95Auivxvbsa7i57178Y2ltM.roa (hash: jFwsCOA5Al7+HGdTwINvFII4nowICJNXPZ21CgfKF54=)
                          3: bk8bvaCKGh2nGwQX4sd5eWPAY_E.roa (hash: Oyv6e+rWeKuFbdE0+T91WAKyRu15r6MOTTHhVcE1hlg=)
                          4: iFbYnGs7Q9C9t4JGs8FC0ZymsVY.roa (hash: hx8Edg6PVaBQ6FwoxG19s/wh8IcglMW+NEHUNHseRy0=)
                          5: j1Ed5LvHfZfExEzQ6asSeLqnEo8.roa (hash: 8PbOwRCb12J1Sy0cdVXGjrVVbnIpBxcT9Ys7VYDlJhM=)
                          6: kTo0w9ANmlvRAqwEfAOqJPK5HLk.roa (hash: ma1SlWgY7s3fuIJWEMEuFwG0D2BUJyIo28TPPjVIKtc=)
                          7: wbBQIRIZ0Y6Zbghst_YwkXiASGA.crl (hash: RQNG5pVgXUxv8nhN2I0mFleLwW3idxDxgXPFP510wUY=)
                          8: x6WyfN8IVN62gZgewVASQApkl9g.roa (hash: LBcsH6w2HcXVpYRUhZBSvo3mG6uWjn8TOTZsgX0iRl0=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:3c:a7:2c:c8:6c:ec:d8:ca:94:77:5c:61:25:c6:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1b050211219d18e996e086cb7f6309178804860
        Validity
            Not Before: Jan 31 12:01:19 2025 GMT
            Not After : Feb  1 12:01:19 2025 GMT
        Subject: CN=b7d5f2e06b6653eaf8cdea17c885f0c0a79482ca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:1d:41:61:bb:9f:db:55:db:09:cc:25:f5:69:
                    97:d0:e0:09:ff:a9:91:31:e0:7e:ba:a0:60:0c:ed:
                    4e:30:3c:a3:17:89:9d:90:86:21:77:ab:59:79:c9:
                    48:36:92:09:8c:84:ce:38:27:c6:47:96:fe:75:64:
                    fa:2b:d3:74:3e:d6:fa:3a:40:1f:7f:97:16:3c:7c:
                    9d:4b:4d:30:73:b6:27:53:1f:cd:c4:f3:d8:ed:fd:
                    7a:36:f0:1c:dc:2e:23:6a:79:f6:ed:54:55:a8:c5:
                    bd:90:f2:78:26:44:35:bd:6c:4c:77:28:9f:7e:30:
                    34:81:d5:0e:ea:f0:f9:40:35:5d:79:bf:eb:29:f6:
                    29:18:93:de:b9:b5:fc:0d:66:78:84:47:e9:6a:ec:
                    7a:2f:fc:43:3d:c4:14:56:cc:88:cf:3d:b7:0a:d9:
                    30:ad:c6:ad:98:66:c3:c4:11:b1:74:a4:dd:58:df:
                    5f:1e:bc:11:56:8f:00:97:63:50:1f:2f:e7:3b:b8:
                    96:eb:e1:39:a6:a9:25:98:e3:ba:fc:8e:98:aa:39:
                    be:c3:f2:d8:35:be:7c:20:0a:08:07:90:76:a5:08:
                    89:a9:4a:47:e2:b6:24:c4:e9:dd:47:50:4b:37:99:
                    88:a1:12:ae:dd:ef:a4:98:ea:42:e7:9f:b9:cd:3c:
                    09:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:D5:F2:E0:6B:66:53:EA:F8:CD:EA:17:C8:85:F0:C0:A7:94:82:CA
            X509v3 Authority Key Identifier:
                keyid:C1:B0:50:21:12:19:D1:8E:99:6E:08:6C:B7:F6:30:91:78:80:48:60

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wbBQIRIZ0Y6Zbghst_YwkXiASGA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/28a8f3-889e-4549-a44e-ce225187fc38/1/wbBQIRIZ0Y6Zbghst_YwkXiASGA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/28a8f3-889e-4549-a44e-ce225187fc38/1/wbBQIRIZ0Y6Zbghst_YwkXiASGA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:dc:d1:9b:ac:33:4e:98:bf:c4:5f:6d:d3:ec:e6:a0:8e:c7:
         23:1e:f7:2b:fa:42:ed:08:bb:e2:1a:ff:c9:71:0c:46:01:9a:
         f7:9a:fa:4e:1f:96:27:d3:61:b2:9b:d2:3a:79:45:9c:37:05:
         f4:65:e5:ec:39:89:d7:7a:2e:00:f2:1b:c3:60:0d:c8:1e:53:
         ab:e5:69:cb:21:51:b9:21:48:6e:e1:2d:76:cf:b6:aa:bd:65:
         bb:33:70:1d:0d:7d:91:49:e2:95:43:11:9f:d2:b1:33:d4:fe:
         fd:1b:6d:a8:64:6b:22:f8:9e:5f:e6:0b:b3:d0:ba:1b:70:a8:
         66:06:f9:fc:49:70:bf:75:a3:d2:e5:19:e7:3a:e1:ee:2f:a5:
         49:c1:3a:d0:d0:03:8b:57:f3:9e:1a:82:86:b5:6b:2f:f7:56:
         ae:22:a4:b1:9e:0f:31:64:25:b6:1d:27:92:da:f2:3c:6e:6e:
         6b:33:ff:bf:d2:c1:3e:64:0d:bb:87:63:52:f0:d8:c7:bb:f7:
         b4:e0:d8:05:09:89:7f:33:07:7f:99:c9:69:f9:6e:53:d4:69:
         69:d5:93:d5:d8:c9:5a:c4:d0:99:d4:54:9f:b4:cc:7c:b1:15:
         6f:fa:40:37:42:dd:e6:14:37:c3:74:45:f1:c0:77:c5:24:b2:
         c8:20:0e:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----