Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/59e107-704f-4480-b69e-f06a761c9a20/1/wd13fOfXCSaMDFWlnADGrqWyGb0.mft
File:                     wd13fOfXCSaMDFWlnADGrqWyGb0.mft (raw, json)
Hash identifier:          loNESDSrvwgGfd6hmcZLv9axTGFuuslYA72NLuW2EBw=
Subject key identifier:   C7:EB:B3:99:CC:23:0B:03:F1:E8:05:42:C0:37:AE:B1:C4:E1:26:11
Authority key identifier: C1:DD:77:7C:E7:D7:09:26:8C:0C:55:A5:9C:00:C6:AE:A5:B2:19:BD
Certificate issuer:       /CN=c1dd777ce7d709268c0c55a59c00c6aea5b219bd
Certificate serial:       0194BC727AE15E1F6E366C51B01F793AB0E4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wd13fOfXCSaMDFWlnADGrqWyGb0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e1/59e107-704f-4480-b69e-f06a761c9a20/1/wd13fOfXCSaMDFWlnADGrqWyGb0.mft
Manifest number:          0F18
Signing time:             Fri 31 Jan 2025 13:00:06 +0000
Manifest this update:     Fri 31 Jan 2025 13:00:06 +0000
Manifest next update:     Sat 01 Feb 2025 13:00:06 +0000
Files and hashes:         1: Ex-cB_4h1wPjXU2C6qgnvAowG6s.roa (hash: Pfofg8M1L5a51wZ24aPVDYrdbmmkhLSc6VaiAue9C68=)
                          2: wd13fOfXCSaMDFWlnADGrqWyGb0.crl (hash: YzBsEc8iTDm6ztKRRDxJ9EsFCjd9u0vYZIRq0ETrku8=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:72:7a:e1:5e:1f:6e:36:6c:51:b0:1f:79:3a:b0:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1dd777ce7d709268c0c55a59c00c6aea5b219bd
        Validity
            Not Before: Jan 31 13:00:06 2025 GMT
            Not After : Feb  1 13:00:06 2025 GMT
        Subject: CN=c7ebb399cc230b03f1e80542c037aeb1c4e12611
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:13:e8:c3:c1:57:0f:e5:f6:a7:3b:d3:0a:66:
                    5f:a8:ca:c2:38:fb:e1:eb:96:42:00:05:24:30:15:
                    e7:6a:4a:3f:b0:4b:d6:13:db:95:08:c6:22:3a:a3:
                    2e:bf:19:87:a9:29:06:ba:29:a0:26:10:ec:e6:90:
                    56:5a:8a:ed:b3:18:1c:c9:2a:4c:71:1b:fa:70:5c:
                    03:0f:b9:28:66:7e:dc:28:a4:18:8f:c4:06:bf:d9:
                    74:f7:ee:49:95:14:12:77:cd:9e:51:63:43:51:99:
                    2c:21:5c:6c:ec:f8:b4:d5:4a:0b:a1:48:76:87:d6:
                    0b:ea:1a:17:60:0d:44:88:92:02:47:a2:7f:d3:75:
                    58:c2:c2:ac:8c:2b:93:e7:4a:06:41:81:fb:7f:08:
                    08:3b:6e:5e:89:ff:2a:5a:83:3c:eb:ec:83:4b:b2:
                    73:3e:0a:38:e6:93:f7:93:e8:d0:5e:79:e0:29:b2:
                    54:5f:b2:a9:f5:4a:8c:51:97:5c:4f:2f:ad:6a:1c:
                    2b:c2:cd:0f:73:f9:60:3b:f8:10:97:97:49:8d:fd:
                    2a:07:16:06:c7:30:3f:e4:7e:b4:0d:6f:de:87:04:
                    fb:0c:a9:2d:19:c3:8b:89:73:20:64:48:c3:08:43:
                    e2:ec:74:70:0b:ac:5b:a4:37:fe:42:4a:bf:c1:a5:
                    f9:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:EB:B3:99:CC:23:0B:03:F1:E8:05:42:C0:37:AE:B1:C4:E1:26:11
            X509v3 Authority Key Identifier:
                keyid:C1:DD:77:7C:E7:D7:09:26:8C:0C:55:A5:9C:00:C6:AE:A5:B2:19:BD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wd13fOfXCSaMDFWlnADGrqWyGb0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/59e107-704f-4480-b69e-f06a761c9a20/1/wd13fOfXCSaMDFWlnADGrqWyGb0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/59e107-704f-4480-b69e-f06a761c9a20/1/wd13fOfXCSaMDFWlnADGrqWyGb0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:a2:84:44:bb:44:4a:fd:ec:e8:b4:ad:5c:01:e3:50:8e:c5:
         64:8f:2e:46:51:22:72:70:0c:f6:d6:3a:78:89:1b:11:55:11:
         c0:0e:dd:06:d8:f5:8b:15:6e:3d:e2:42:d9:fa:99:b8:a7:af:
         70:75:32:6f:46:00:4b:da:bd:f9:29:42:80:18:94:17:b8:51:
         e3:a4:2c:49:af:a0:55:65:cf:b6:98:31:2c:81:53:5d:3d:82:
         c5:00:ae:d7:34:8a:d4:8f:99:3f:9b:f7:f6:39:0e:b5:2e:93:
         da:d6:d5:ed:02:c5:68:9e:3c:b0:5c:ff:6e:4f:bc:e5:08:57:
         00:20:d1:17:a1:b8:69:e2:47:a8:4d:47:f7:96:03:8c:e9:80:
         b0:39:8f:6c:1c:59:c5:36:ad:a4:2e:4c:4a:cd:5e:44:fe:4f:
         05:6d:34:88:66:55:86:db:49:eb:56:c8:52:9a:f8:d3:18:c4:
         fe:d4:5b:a7:53:83:7c:35:fa:3b:e7:49:3a:7d:6d:23:db:e4:
         96:c8:a1:48:53:08:51:96:bc:3f:59:fc:f6:ab:10:26:fb:05:
         50:18:b5:c1:0e:ec:e4:e3:74:bb:1c:82:2a:dc:27:69:1c:7f:
         5a:a9:5f:7f:62:cc:23:bf:82:61:d0:13:94:76:60:b6:c0:08:
         e0:1e:06:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 3 21:11:14 2025 by rpki-client