Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/14eb92-33f3-4ece-aecb-1f0bf0d8cb36/1/wkdsjbVJ97WIqQKw9M6AvrbSV0g.mft
File:                     wkdsjbVJ97WIqQKw9M6AvrbSV0g.mft (raw, json)
Hash identifier:          zwiH63GjkCkadEtMHnHuhCi7oMkwRrMenT4mgh8NtRg=
Subject key identifier:   A9:95:59:08:9D:D4:24:16:4F:B0:85:D2:B9:55:D8:9C:48:31:44:0F
Authority key identifier: C2:47:6C:8D:B5:49:F7:B5:88:A9:02:B0:F4:CE:80:BE:B6:D2:57:48
Certificate issuer:       /CN=c2476c8db549f7b588a902b0f4ce80beb6d25748
Certificate serial:       0194BC3BBC3173B89986427226B4A71B63B7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wkdsjbVJ97WIqQKw9M6AvrbSV0g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d5/14eb92-33f3-4ece-aecb-1f0bf0d8cb36/1/wkdsjbVJ97WIqQKw9M6AvrbSV0g.mft
Manifest number:          0AB5
Signing time:             Fri 31 Jan 2025 12:00:18 +0000
Manifest this update:     Fri 31 Jan 2025 12:00:18 +0000
Manifest next update:     Sat 01 Feb 2025 12:00:18 +0000
Files and hashes:         1: wkdsjbVJ97WIqQKw9M6AvrbSV0g.crl (hash: xNb0E7iWxA7Kef6IypxAkzA7VpYPHpDeYqPa2xxJz58=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:3b:bc:31:73:b8:99:86:42:72:26:b4:a7:1b:63:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2476c8db549f7b588a902b0f4ce80beb6d25748
        Validity
            Not Before: Jan 31 12:00:18 2025 GMT
            Not After : Feb  1 12:00:18 2025 GMT
        Subject: CN=a99559089dd424164fb085d2b955d89c4831440f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:fe:e8:d2:17:51:d8:ea:b5:f7:42:7e:63:e8:
                    54:77:7c:b0:28:53:14:c1:1e:28:1f:02:c3:cf:ac:
                    65:a8:6a:65:bc:f7:5b:93:e1:78:90:98:a4:05:ec:
                    2e:d9:8a:43:40:cd:3a:58:17:3d:cb:50:92:c2:f7:
                    12:07:6d:59:62:b7:d0:7e:52:f7:9c:b1:75:8a:71:
                    73:b6:fa:f1:94:08:ca:c5:15:82:8d:46:30:c7:1d:
                    05:7e:17:11:ef:d3:48:00:80:9d:7a:9d:b7:f3:41:
                    ed:14:d4:11:18:11:aa:2e:42:a6:63:ab:8d:a3:72:
                    e6:19:cd:ff:21:39:a4:82:c2:a3:d6:0b:d3:96:1f:
                    6d:4b:dc:cb:bd:96:4d:27:d9:9d:17:ad:5b:b7:7a:
                    35:72:d2:ef:1d:ad:57:f6:6c:44:88:78:c9:3c:11:
                    00:5a:fa:ad:fc:45:d3:a7:1f:ba:7a:e0:db:8c:46:
                    37:ff:a2:83:cf:7d:d1:31:6a:88:d5:d9:a8:75:f6:
                    31:d2:e3:d9:1a:2d:4c:f3:24:1a:09:77:e8:e6:9b:
                    ca:b4:c7:6b:64:37:40:fb:9b:3b:d2:2f:e9:b1:14:
                    0d:01:2d:a3:8a:cd:64:dd:bd:cb:ae:6e:56:78:5d:
                    50:10:49:c9:1a:54:f4:94:3e:8f:7d:15:f2:0e:46:
                    72:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:95:59:08:9D:D4:24:16:4F:B0:85:D2:B9:55:D8:9C:48:31:44:0F
            X509v3 Authority Key Identifier:
                keyid:C2:47:6C:8D:B5:49:F7:B5:88:A9:02:B0:F4:CE:80:BE:B6:D2:57:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wkdsjbVJ97WIqQKw9M6AvrbSV0g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/14eb92-33f3-4ece-aecb-1f0bf0d8cb36/1/wkdsjbVJ97WIqQKw9M6AvrbSV0g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/14eb92-33f3-4ece-aecb-1f0bf0d8cb36/1/wkdsjbVJ97WIqQKw9M6AvrbSV0g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:95:93:e5:19:b1:f4:65:3c:f6:e7:90:8a:3e:39:d6:18:ec:
         d6:00:7f:f1:3b:5e:b8:34:31:1e:24:46:c3:89:55:e5:dc:13:
         8d:6a:f4:1c:d9:4a:19:2c:3c:e7:e6:91:a5:81:fc:9c:fe:ef:
         c3:0c:9f:28:34:16:13:7f:84:d9:6f:0c:75:65:14:34:07:8e:
         d9:89:a5:d3:0c:24:42:91:42:4e:7d:9c:a3:f0:6b:20:ca:52:
         c4:01:63:5d:a1:21:59:a3:55:ef:1a:ec:1b:0a:eb:54:dc:b5:
         38:4e:77:eb:5f:46:ec:aa:24:4d:d3:cf:10:39:10:f8:8b:c1:
         eb:ed:a8:d8:e5:0f:9b:fc:27:6c:07:f5:57:bf:a8:ac:a1:c7:
         41:79:92:ae:f5:74:f7:f8:66:63:f2:43:01:4c:0c:19:96:83:
         d8:f5:ad:fb:11:c9:07:62:ef:63:10:d4:b0:58:d5:d5:1b:01:
         a5:fd:c4:ca:56:aa:d1:5f:29:bd:54:3e:1c:26:4f:c5:3d:42:
         26:8f:9c:34:63:e4:ff:a1:0c:3f:49:e2:dd:75:52:d8:5e:aa:
         8e:3a:26:3e:c4:68:84:39:ce:0e:7c:2b:fb:81:91:b8:5a:67:
         29:ed:1f:63:7e:91:6d:1b:e7:5d:15:0f:07:44:47:1f:d6:cf:
         74:a4:ca:1a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8O7wxc7iZhkJyJrSnG2O3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMyNDc2YzhkYjU0OWY3YjU4OGE5MDJiMGY0Y2U4MGJlYjZk
MjU3NDgwHhcNMjUwMTMxMTIwMDE4WhcNMjUwMjAxMTIwMDE4WjAzMTEwLwYDVQQD
EyhhOTk1NTkwODlkZDQyNDE2NGZiMDg1ZDJiOTU1ZDg5YzQ4MzE0NDBmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3f7o0hdR2Oq190J+Y+hUd3ywKFMU
wR4oHwLDz6xlqGplvPdbk+F4kJikBewu2YpDQM06WBc9y1CSwvcSB21ZYrfQflL3
nLF1inFztvrxlAjKxRWCjUYwxx0FfhcR79NIAICdep2380HtFNQRGBGqLkKmY6uN
o3LmGc3/ITmkgsKj1gvTlh9tS9zLvZZNJ9mdF61bt3o1ctLvHa1X9mxEiHjJPBEA
Wvqt/EXTpx+6euDbjEY3/6KDz33RMWqI1dmodfYx0uPZGi1M8yQaCXfo5pvKtMdr
ZDdA+5s70i/psRQNAS2jis1k3b3Lrm5WeF1QEEnJGlT0lD6PfRXyDkZygQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKmVWQid1CQWT7CF0rlV2JxIMUQPMB8GA1UdIwQY
MBaAFMJHbI21Sfe1iKkCsPTOgL620ldIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd2tkc2piVko5N1dJcVFLdzlNNkF2cmJTVjBnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS8xNGViOTItMzNmMy00ZWNlLWFlY2It
MWYwYmYwZDhjYjM2LzEvd2tkc2piVko5N1dJcVFLdzlNNkF2cmJTVjBnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNS8xNGViOTItMzNmMy00ZWNlLWFlY2ItMWYwYmYwZDhjYjM2
LzEvd2tkc2piVko5N1dJcVFLdzlNNkF2cmJTVjBnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAT5WT5Rmx
9GU89ueQij451hjs1gB/8TteuDQxHiRGw4lV5dwTjWr0HNlKGSw85+aRpYH8nP7v
wwyfKDQWE3+E2W8MdWUUNAeO2Yml0wwkQpFCTn2co/BrIMpSxAFjXaEhWaNV7xrs
GwrrVNy1OE53619G7KokTdPPEDkQ+IvB6+2o2OUPm/wnbAf1V7+orKHHQXmSrvV0
9/hmY/JDAUwMGZaD2PWt+xHJB2LvYxDUsFjV1RsBpf3Eylaq0V8pvVQ+HCZPxT1C
Jo+cNGPk/6EMP0ni3XVS2F6qjjomPsRohDnODnwr+4GRuFpnKe0fY36RbRvnXRUP
B0RHH9bPdKTKGg==
-----END CERTIFICATE-----
Generated at Thu Apr 24 19:01:49 2025 by rpki-client