Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/c49172-f8da-4128-8689-515845e6c317/1/wQWtxcQmLf9rPz5gaDDH-XHXZs4.mft
File:                     wQWtxcQmLf9rPz5gaDDH-XHXZs4.mft (raw, json)
Hash identifier:          rf6q7h+NxXY7FjIhQrREDMJV5eMDfQ5fKNtvPbB+6qE=
Subject key identifier:   44:CA:17:F7:43:59:4E:0E:B5:B7:95:60:59:C8:3E:EC:1F:D3:94:AF
Authority key identifier: C1:05:AD:C5:C4:26:2D:FF:6B:3F:3E:60:68:30:C7:F9:71:D7:66:CE
Certificate issuer:       /CN=c105adc5c4262dff6b3f3e606830c7f971d766ce
Certificate serial:       0194BBCE5091E521707113F544DADDBCBF7C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wQWtxcQmLf9rPz5gaDDH-XHXZs4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dc/c49172-f8da-4128-8689-515845e6c317/1/wQWtxcQmLf9rPz5gaDDH-XHXZs4.mft
Manifest number:          08C1
Signing time:             Fri 31 Jan 2025 10:00:47 +0000
Manifest this update:     Fri 31 Jan 2025 10:00:47 +0000
Manifest next update:     Sat 01 Feb 2025 10:00:47 +0000
Files and hashes:         1: 5CKcJ3WWdLnxNxA8zS9MSqemGeU.roa (hash: F1W/LYRU/swbDsn7VsjuOlThJoPhjHiHTuqYQgQV4vQ=)
                          2: FZ6_BK0_bbVrJHhN6MfGrD_zBBU.roa (hash: pGJzWgBtcqu+YLCletr5FYBbo/hFDdnErtqiP7qljbk=)
                          3: ICJFcNTwvBoTxR73h6RFC09rjcE.roa (hash: xTLqPPxBhdwsAxy9x/9cuJE08DZBHQ351Kx0d+iQE1E=)
                          4: WalhO7K1hj39eQFX6Fsg65lsYZc.roa (hash: TPuLRQcIjhduyALRmIncbUOw8bhZHm8cVLFCDxTFRgw=)
                          5: XrIe3RxS0PfS1KQwk38a9UzdLbU.roa (hash: TAdXiNpnMI8M4W6FRb8OCRV5yipTVzRnXpEPH/f9GFs=)
                          6: pIvBgTa21ZIrbNAe93h6ywfLfqU.roa (hash: 4TvmPBfwBLS029TBaeYbv9kyWoozw1GEP3VDLEg1dFk=)
                          7: te98bJGGUvJI2dvVEFniebRE2-Q.roa (hash: YFZNKLPi4G/NTA6BGaRrsOjmLUpnVxIljNwYkPRZo1o=)
                          8: vMfdW02jbLqHp-27brKBsBhbgHY.roa (hash: oHK3CDonAtcVu8dAAlZMcFQZnOMNxTDFalDW/2pvfts=)
                          9: wQWtxcQmLf9rPz5gaDDH-XHXZs4.crl (hash: Q6fRD/RanqmGOWLXPXU3LlMnLW73caKa4ZH6XiWAhOc=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bb:ce:50:91:e5:21:70:71:13:f5:44:da:dd:bc:bf:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c105adc5c4262dff6b3f3e606830c7f971d766ce
        Validity
            Not Before: Jan 31 10:00:47 2025 GMT
            Not After : Feb  1 10:00:47 2025 GMT
        Subject: CN=44ca17f743594e0eb5b7956059c83eec1fd394af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:78:70:aa:42:96:d0:1d:f6:11:8a:61:bc:5d:
                    c4:83:91:1b:74:de:b3:be:a5:6f:8a:47:72:cf:13:
                    e2:9b:fe:dd:5e:45:6a:76:11:1e:d8:5d:8e:69:c0:
                    1e:d4:77:09:31:7c:55:ec:c2:18:df:9e:ab:80:bf:
                    7f:40:df:bf:ef:f6:cd:01:b8:ec:fb:73:a4:e8:9a:
                    29:fc:bb:bc:7b:96:42:c4:5a:ea:cb:ca:d1:f7:4a:
                    f9:ba:da:d9:6b:9e:f4:d9:22:0a:ef:20:0c:74:b9:
                    b1:ab:2e:77:b1:48:c0:0d:ea:6a:4b:f8:70:26:1d:
                    9e:a1:4a:83:88:eb:b0:21:df:07:93:58:79:e3:d4:
                    44:9b:c5:a7:45:ea:b3:61:75:a1:cc:c4:75:45:02:
                    7f:bb:f3:ab:fc:d5:fa:85:c6:2f:19:bd:f2:67:3c:
                    1e:42:5b:e5:94:cc:46:33:7a:ba:35:51:6d:35:69:
                    1c:f0:4b:db:24:76:52:3c:66:7f:dc:f8:5e:65:25:
                    5d:24:60:e0:ef:6e:0d:1d:d4:4a:e5:23:d3:ba:19:
                    4e:87:ce:2e:f2:58:0d:2b:e9:fc:79:09:17:f6:bf:
                    de:50:89:b9:77:26:6b:89:28:81:b0:2a:76:8a:18:
                    d7:c2:b2:1c:32:bf:cd:8f:f4:60:bb:35:6a:f1:8c:
                    49:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:CA:17:F7:43:59:4E:0E:B5:B7:95:60:59:C8:3E:EC:1F:D3:94:AF
            X509v3 Authority Key Identifier:
                keyid:C1:05:AD:C5:C4:26:2D:FF:6B:3F:3E:60:68:30:C7:F9:71:D7:66:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wQWtxcQmLf9rPz5gaDDH-XHXZs4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/c49172-f8da-4128-8689-515845e6c317/1/wQWtxcQmLf9rPz5gaDDH-XHXZs4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/c49172-f8da-4128-8689-515845e6c317/1/wQWtxcQmLf9rPz5gaDDH-XHXZs4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:ba:b2:fa:c1:b1:01:18:5e:74:8f:7e:60:1f:9c:c1:de:b0:
         51:6e:ba:11:39:f8:f8:20:ae:39:6d:cc:8c:6e:32:bf:14:bb:
         08:2f:c3:5a:ea:25:72:1e:bc:5d:b4:cb:b5:8b:f6:52:ec:37:
         80:90:4f:ef:e4:10:65:34:24:c1:80:3a:de:1d:84:b7:5d:e0:
         18:f8:2d:d5:ae:c6:ff:d0:86:fc:a2:46:45:46:d1:3c:f0:56:
         3c:ca:48:0a:2c:70:57:57:d9:1e:a3:a6:bd:f5:81:f3:89:b2:
         ca:1a:9c:94:55:6b:2c:56:10:5c:22:3d:97:e5:3f:3b:f6:0b:
         ba:88:0f:7d:2a:94:28:b2:1c:c6:30:de:1d:e7:f7:fd:23:34:
         b0:31:d4:01:33:94:71:07:9e:8a:5b:84:82:b8:74:1d:f2:09:
         3a:40:13:9a:84:1b:d0:2b:fa:d8:46:15:97:29:a8:70:a3:8a:
         48:fb:fd:28:7f:cc:1f:f6:54:b6:f6:9f:fa:7d:2a:ad:58:f7:
         9f:d2:38:22:41:5a:e5:fc:2a:b2:e5:b8:58:28:33:4f:1b:01:
         95:5e:b5:5a:63:0a:ba:14:de:92:a0:aa:b5:de:48:03:2f:b7:
         6b:70:79:93:11:3d:1d:9c:78:b2:7a:be:b6:26:ea:c6:b3:cf:
         33:4e:f6:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----