Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/650c41-7804-4a24-934e-0dba7fa6a403/1/wzWOXE-AqCBszFEDvy6-Ok6WoPE.mft
File:                     wzWOXE-AqCBszFEDvy6-Ok6WoPE.mft (raw, json)
Hash identifier:          hv8jHY/9hfNVTrgruxeT7K1hzJyVCgGt23f0QUzUjT0=
Subject key identifier:   6F:4F:8D:C2:52:3E:3A:C7:22:F1:52:AB:51:9A:0B:14:8F:A0:9F:24
Authority key identifier: C3:35:8E:5C:4F:80:A8:20:6C:CC:51:03:BF:2E:BE:3A:4E:96:A0:F1
Certificate issuer:       /CN=c3358e5c4f80a8206ccc5103bf2ebe3a4e96a0f1
Certificate serial:       0194BCE097F44E4DA81AE0BD83F322F05A60
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wzWOXE-AqCBszFEDvy6-Ok6WoPE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d4/650c41-7804-4a24-934e-0dba7fa6a403/1/wzWOXE-AqCBszFEDvy6-Ok6WoPE.mft
Manifest number:          0248
Signing time:             Fri 31 Jan 2025 15:00:23 +0000
Manifest this update:     Fri 31 Jan 2025 15:00:23 +0000
Manifest next update:     Sat 01 Feb 2025 15:00:23 +0000
Files and hashes:         1: jQ35y5JqdtG9WdmH02jLEjnZC4E.roa (hash: FipHH6QD7PJQoRtOLX5VjgWSjY2BOLQCjuClzQsUWi8=)
                          2: wzWOXE-AqCBszFEDvy6-Ok6WoPE.crl (hash: L6UXkatatvSk7Gm6cdJjFCTY7EtdtrwpFEVmGSozI6Y=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:e0:97:f4:4e:4d:a8:1a:e0:bd:83:f3:22:f0:5a:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c3358e5c4f80a8206ccc5103bf2ebe3a4e96a0f1
        Validity
            Not Before: Jan 31 15:00:23 2025 GMT
            Not After : Feb  1 15:00:23 2025 GMT
        Subject: CN=6f4f8dc2523e3ac722f152ab519a0b148fa09f24
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:29:0b:8a:da:67:23:d6:64:17:21:43:e1:5b:
                    e7:12:86:51:84:41:d7:ec:31:f4:19:d5:33:16:72:
                    d4:51:16:2c:3e:fc:dc:13:20:4b:74:76:73:f2:33:
                    08:7b:0e:bd:88:99:be:1d:df:80:b4:10:7d:a2:71:
                    84:2c:3c:9b:f3:bc:1a:33:88:fe:4c:22:f0:f0:ee:
                    88:a1:60:cc:67:70:cb:6b:f5:11:c2:56:36:b0:3d:
                    04:14:fa:cd:4c:e6:5f:65:43:d8:56:e5:da:57:d3:
                    5a:4a:71:93:01:0c:c9:d6:79:c3:fd:d2:84:f7:a1:
                    33:f1:4e:7a:23:e5:a7:37:09:f7:99:4c:ad:fe:83:
                    50:17:80:69:b9:ce:47:a3:d6:93:b5:43:a0:49:a3:
                    b0:d5:1e:3c:6b:81:11:41:67:33:69:fb:07:6e:8c:
                    9c:24:31:b3:da:41:18:4b:d2:c1:cc:8d:7f:2a:d0:
                    6e:4e:af:7a:2d:69:06:06:51:14:ef:63:b8:cd:16:
                    9e:a5:7d:e4:c2:a2:4f:5f:5d:f4:ea:24:e4:03:1d:
                    ef:ce:a2:d3:ff:16:a0:87:20:ae:83:93:14:2f:52:
                    0e:32:e7:16:12:0a:e3:57:e8:c2:26:f8:1d:1b:4a:
                    f2:14:9f:67:9e:82:85:07:c1:97:5c:5b:21:79:7f:
                    c7:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:4F:8D:C2:52:3E:3A:C7:22:F1:52:AB:51:9A:0B:14:8F:A0:9F:24
            X509v3 Authority Key Identifier:
                keyid:C3:35:8E:5C:4F:80:A8:20:6C:CC:51:03:BF:2E:BE:3A:4E:96:A0:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wzWOXE-AqCBszFEDvy6-Ok6WoPE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/650c41-7804-4a24-934e-0dba7fa6a403/1/wzWOXE-AqCBszFEDvy6-Ok6WoPE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/650c41-7804-4a24-934e-0dba7fa6a403/1/wzWOXE-AqCBszFEDvy6-Ok6WoPE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:0c:93:02:fa:a8:c5:d6:91:95:8b:2a:00:1b:c6:f6:de:b0:
         1c:4e:73:6a:a8:7a:55:41:02:d1:10:6a:61:1f:50:55:62:8c:
         e0:c2:f2:af:c8:90:18:39:a3:01:24:03:38:e8:67:73:68:15:
         1b:58:7a:19:4a:bc:bd:43:7b:38:a4:fb:8b:62:51:6c:69:98:
         5e:ba:e0:a1:86:f8:de:3a:19:d4:40:80:ee:86:bf:c1:43:93:
         e7:e9:1e:cb:1f:18:83:6b:75:05:6b:d6:72:2f:cf:f4:ce:a2:
         66:05:ac:2c:e0:94:f3:3c:c0:b3:05:05:75:9e:69:f5:95:3d:
         c3:7c:05:52:ae:7c:38:90:f9:1b:6a:77:76:09:1c:4f:09:78:
         bd:79:12:40:87:ef:60:b0:ad:81:65:7a:3f:89:31:c9:0a:f6:
         fb:58:2a:f5:58:af:2e:42:54:68:31:7c:b1:99:93:eb:67:77:
         8b:49:30:9a:cd:d6:f3:43:dc:da:ca:83:4b:82:7a:ad:5b:3b:
         76:8d:fc:70:a5:cc:6b:a2:eb:b8:a5:b9:c0:10:c3:f9:c6:64:
         a6:b4:b8:0e:fd:7e:28:d2:91:1d:82:75:69:b4:74:93:fe:b6:
         6c:95:bc:79:94:45:a6:16:c1:02:a9:a8:50:63:41:8d:2e:a5:
         44:95:68:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:41:41 2025 by rpki-client