Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/f4d345-5ff3-4b0a-8dd9-7a4e3340a491/1/WROOPbd2QL6t8dpbFRlLk4ShRE4.mft
File:                     WROOPbd2QL6t8dpbFRlLk4ShRE4.mft (raw, json)
Hash identifier:          CejLdfSoUZgD7doXOOvB/FMZ7I392d8myHIdv7zmDjA=
Subject key identifier:   55:C6:A5:DD:45:8F:0E:5A:F6:3D:2F:7A:16:11:3B:9F:D4:4F:83:F0
Authority key identifier: 59:13:8E:3D:B7:76:40:BE:AD:F1:DA:5B:15:19:4B:93:84:A1:44:4E
Certificate issuer:       /CN=59138e3db77640beadf1da5b15194b9384a1444e
Certificate serial:       0194BD4E6D32BB38AEA74FE3D5AEA3E5F16E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WROOPbd2QL6t8dpbFRlLk4ShRE4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d9/f4d345-5ff3-4b0a-8dd9-7a4e3340a491/1/WROOPbd2QL6t8dpbFRlLk4ShRE4.mft
Manifest number:          088D
Signing time:             Fri 31 Jan 2025 17:00:21 +0000
Manifest this update:     Fri 31 Jan 2025 17:00:21 +0000
Manifest next update:     Sat 01 Feb 2025 17:00:21 +0000
Files and hashes:         1: WROOPbd2QL6t8dpbFRlLk4ShRE4.crl (hash: MwUOCGvb3HB3faMiJHM25hhsSlgMsSLsDzSE0UthcoU=)
                          2: XxQYUuyDfDmvEH-_h4xcYdCTTls.roa (hash: sOyHTNSLK1nXbLPuDkiUpZ37v4YFW/N/3OvLA+CjJUA=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bd:4e:6d:32:bb:38:ae:a7:4f:e3:d5:ae:a3:e5:f1:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=59138e3db77640beadf1da5b15194b9384a1444e
        Validity
            Not Before: Jan 31 17:00:21 2025 GMT
            Not After : Feb  1 17:00:21 2025 GMT
        Subject: CN=55c6a5dd458f0e5af63d2f7a16113b9fd44f83f0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:81:b1:47:69:1e:63:f2:83:27:d3:6c:22:a0:
                    72:d0:3c:ca:3c:ca:3f:cc:6c:13:db:b9:d0:11:a6:
                    91:fc:3b:44:0c:cd:05:25:53:91:0b:ff:e3:f6:b6:
                    23:d9:5b:ff:61:ed:06:12:c8:b2:81:ca:3e:dd:97:
                    d9:ae:ba:e6:f0:9c:c4:bb:a4:5b:96:ed:51:ec:c1:
                    2b:39:2a:c3:31:09:cc:2d:ab:32:16:a0:8c:72:f1:
                    a0:f3:f1:6a:c0:60:ad:9d:24:27:05:bc:6c:fa:8f:
                    d0:04:2c:8a:70:57:5c:74:d8:fd:98:6c:f7:87:03:
                    6f:a7:fe:0f:70:2b:af:b0:46:69:bf:35:94:8c:70:
                    ea:78:62:66:2e:e8:be:8c:c5:68:d0:d7:de:1a:b7:
                    b1:b1:3a:94:2a:04:75:16:3a:9f:67:54:0e:2b:a1:
                    44:bc:53:d0:3a:c9:2b:e7:72:11:85:3a:b6:9f:0a:
                    bd:5a:22:44:d1:e8:05:03:d2:42:19:b3:a3:64:08:
                    06:b1:50:ab:e4:8b:d0:49:46:8c:0f:fb:30:4b:82:
                    25:e5:e4:16:6c:7d:39:c7:9e:94:9e:8d:f0:ca:12:
                    14:12:e3:39:31:c4:a4:c1:77:3b:85:06:a4:c7:92:
                    48:ec:a7:29:2e:29:87:72:99:fe:41:27:c7:25:1c:
                    21:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:C6:A5:DD:45:8F:0E:5A:F6:3D:2F:7A:16:11:3B:9F:D4:4F:83:F0
            X509v3 Authority Key Identifier:
                keyid:59:13:8E:3D:B7:76:40:BE:AD:F1:DA:5B:15:19:4B:93:84:A1:44:4E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WROOPbd2QL6t8dpbFRlLk4ShRE4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/f4d345-5ff3-4b0a-8dd9-7a4e3340a491/1/WROOPbd2QL6t8dpbFRlLk4ShRE4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/f4d345-5ff3-4b0a-8dd9-7a4e3340a491/1/WROOPbd2QL6t8dpbFRlLk4ShRE4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:5a:d2:f2:a8:68:4d:21:16:41:cf:bf:d0:32:36:23:a1:4c:
         de:2e:d7:34:1a:a4:38:e3:12:bc:80:7a:d1:a9:7e:2e:23:b7:
         8a:12:eb:ff:46:32:d7:f7:40:18:4c:4b:12:38:9a:d7:fb:96:
         22:34:97:45:4a:ee:58:e8:2f:84:21:5f:5e:84:9f:9c:96:c3:
         9f:e2:bc:0d:c5:aa:da:48:e7:0d:1e:0b:34:62:74:a2:e0:0a:
         ed:19:6a:f2:12:03:2e:68:bb:d1:50:23:37:e9:3f:83:7a:b6:
         62:74:4f:84:aa:35:82:96:aa:68:21:fd:c6:dd:7d:23:62:12:
         f4:f1:75:df:96:06:c9:7c:d9:32:fa:fc:0a:ad:d4:52:60:11:
         48:94:8c:32:0f:f7:35:ed:ca:cc:65:49:37:10:07:b3:01:0d:
         20:4e:5b:cc:0a:a5:2c:d2:cd:2d:7a:4f:0d:ab:24:a8:81:94:
         b6:ed:eb:b9:0c:d2:15:16:ff:c5:6a:48:98:18:a0:3d:33:e9:
         6d:dd:8f:29:1d:37:01:d3:52:0e:44:ae:3d:7b:2f:b5:e7:5b:
         3a:15:56:7e:36:6e:5f:4b:11:88:b9:45:81:c0:7b:d8:6c:51:
         9f:10:71:8c:47:e3:45:1e:5f:16:68:91:cb:c9:58:d7:13:00:
         26:e2:4c:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:22:12 2025 by rpki-client