Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/601d6f-b31a-492e-8ef0-52bccb06af3c/1/Wo04knhIXt1Q0yz1yoTOJyjAjMY.mft
File:                     Wo04knhIXt1Q0yz1yoTOJyjAjMY.mft (raw, json)
Hash identifier:          Qr1zCIri5GwduzK6gUd/Qh1K/7fGxXibExeyrKca7q0=
Subject key identifier:   6F:9F:5F:77:FC:A0:AF:00:E1:83:FB:D2:E2:E7:76:36:4F:19:0E:0D
Authority key identifier: 5A:8D:38:92:78:48:5E:DD:50:D3:2C:F5:CA:84:CE:27:28:C0:8C:C6
Certificate issuer:       /CN=5a8d389278485edd50d32cf5ca84ce2728c08cc6
Certificate serial:       0194BBCE51507977C7AD1AC77C99A85336D3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Wo04knhIXt1Q0yz1yoTOJyjAjMY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dd/601d6f-b31a-492e-8ef0-52bccb06af3c/1/Wo04knhIXt1Q0yz1yoTOJyjAjMY.mft
Manifest number:          1292
Signing time:             Fri 31 Jan 2025 10:00:47 +0000
Manifest this update:     Fri 31 Jan 2025 10:00:47 +0000
Manifest next update:     Sat 01 Feb 2025 10:00:47 +0000
Files and hashes:         1: 9QUsRCAhmLwTzTZMFA3QwgGkN-o.roa (hash: BYkBRt5u6iYa0bSjaJlYJJH3gyP0JFZinNO6dVWDgNQ=)
                          2: Wo04knhIXt1Q0yz1yoTOJyjAjMY.crl (hash: dHF30909Ae/MZDkxG1uQY8KPdZD4v0UpoUjIYi0bH5M=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bb:ce:51:50:79:77:c7:ad:1a:c7:7c:99:a8:53:36:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5a8d389278485edd50d32cf5ca84ce2728c08cc6
        Validity
            Not Before: Jan 31 10:00:47 2025 GMT
            Not After : Feb  1 10:00:47 2025 GMT
        Subject: CN=6f9f5f77fca0af00e183fbd2e2e776364f190e0d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:58:ee:56:2c:95:02:18:58:d6:d5:6e:19:85:
                    b0:0d:c5:99:ef:38:fc:eb:a7:3b:17:91:6f:32:18:
                    c6:11:22:8f:87:c2:63:e4:97:90:54:b0:91:26:06:
                    3f:18:6c:49:7e:74:1a:9d:2e:9f:5d:56:c5:cf:eb:
                    13:f5:d0:52:10:28:26:b8:9c:92:f6:e8:6d:d5:2e:
                    4d:4a:43:2f:02:45:6a:fa:2b:2e:e7:2f:16:e7:3e:
                    00:23:6c:f6:67:27:4e:80:0b:a7:cf:ce:39:33:df:
                    1a:2a:a9:50:aa:7f:17:f2:e1:5c:6e:fc:a1:79:31:
                    e0:b2:45:57:c2:ae:fc:2c:fa:fa:44:c2:c3:90:d1:
                    5e:4b:db:01:e9:3d:90:b7:07:a9:2a:c1:a3:46:8f:
                    15:e4:f9:c6:36:58:0f:ba:42:54:a8:ea:ca:e4:d5:
                    1b:dd:b6:7f:cd:cc:41:17:c0:b1:65:f8:e0:79:28:
                    0f:59:fb:62:aa:eb:ad:af:a7:93:d4:b9:6b:18:37:
                    11:2c:ec:15:4e:78:b0:a6:1c:fd:93:59:ba:65:7d:
                    42:f8:25:6b:ab:6d:40:6e:24:33:0b:9d:db:cc:19:
                    a8:20:d2:b3:6c:bf:3b:78:6f:a3:ea:b3:50:e2:fe:
                    37:cd:8b:b5:3e:52:ed:53:33:13:d2:59:4f:7a:bb:
                    d5:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:9F:5F:77:FC:A0:AF:00:E1:83:FB:D2:E2:E7:76:36:4F:19:0E:0D
            X509v3 Authority Key Identifier:
                keyid:5A:8D:38:92:78:48:5E:DD:50:D3:2C:F5:CA:84:CE:27:28:C0:8C:C6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wo04knhIXt1Q0yz1yoTOJyjAjMY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/601d6f-b31a-492e-8ef0-52bccb06af3c/1/Wo04knhIXt1Q0yz1yoTOJyjAjMY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/601d6f-b31a-492e-8ef0-52bccb06af3c/1/Wo04knhIXt1Q0yz1yoTOJyjAjMY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:3a:ff:45:05:fb:06:a1:e8:80:b4:34:c0:65:2f:20:70:04:
         e6:1d:cb:d2:d8:c3:14:af:93:df:a9:6a:e2:b6:54:82:fa:e5:
         3c:9e:82:46:43:57:de:9a:93:25:37:a6:d9:93:7f:1a:0e:b4:
         d8:f0:5d:cf:11:f3:31:7f:78:a2:ce:8b:a2:8d:8d:25:14:99:
         d7:2b:53:d0:59:65:16:a4:9a:bb:7a:6c:94:9a:d4:6e:37:b0:
         4d:ec:54:61:16:32:4c:74:9f:03:cc:d2:61:6d:8d:8f:2e:96:
         c1:f1:2b:73:91:9a:81:d8:c6:11:39:38:a4:84:8c:97:f6:d7:
         ad:2a:36:2f:c3:5d:63:d3:ac:24:e2:73:2c:a6:92:e3:9c:5e:
         73:07:85:8a:b3:41:c4:b9:0b:6d:9b:aa:fb:c1:ef:d8:99:14:
         a4:e2:93:1e:36:49:ce:c3:25:47:28:1d:63:53:7b:d5:71:cb:
         f6:44:d1:fc:e5:27:fd:87:03:af:e1:3b:fb:d9:55:dd:e7:e2:
         b1:d6:d4:54:a3:fe:68:4f:3a:88:98:1b:bb:62:a2:78:ee:51:
         b2:a8:dc:7a:0b:64:f1:75:90:c8:fd:73:8a:0c:06:80:d9:e6:
         2d:25:94:ff:1a:d7:b5:cf:a6:1f:a5:6b:1c:78:68:e9:58:be:
         61:2d:b4:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:34:18 2025 by rpki-client