Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/20dd04-abec-44c3-95eb-5e37d5587be5/1/WLtuKTiiJR3EOE2vZe-lINwaWII.mft
File:                     WLtuKTiiJR3EOE2vZe-lINwaWII.mft (raw, json)
Hash identifier:          DECbRzEELRHYurEOMhpf7RVo2lOVZ2TStcGTKh+jUfw=
Subject key identifier:   E4:FB:80:F2:4A:EF:FE:C7:71:56:78:C3:51:F8:30:95:DC:A0:E7:2E
Authority key identifier: 58:BB:6E:29:38:A2:25:1D:C4:38:4D:AF:65:EF:A5:20:DC:1A:58:82
Certificate issuer:       /CN=58bb6e2938a2251dc4384daf65efa520dc1a5882
Certificate serial:       0194BD8551AB0233CAEC3859A9E4944FFA07
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WLtuKTiiJR3EOE2vZe-lINwaWII.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e5/20dd04-abec-44c3-95eb-5e37d5587be5/1/WLtuKTiiJR3EOE2vZe-lINwaWII.mft
Manifest number:          142C
Signing time:             Fri 31 Jan 2025 18:00:18 +0000
Manifest this update:     Fri 31 Jan 2025 18:00:18 +0000
Manifest next update:     Sat 01 Feb 2025 18:00:18 +0000
Files and hashes:         1: KyLINVTTqdvXuj7Fj90bgruawzY.roa (hash: cok5H5wGuOmXEJz7bKUxFi+mFBkwx9emz6VKC+7X5HQ=)
                          2: WLtuKTiiJR3EOE2vZe-lINwaWII.crl (hash: s43rvvxKKfe9vYngLvISL3B8nW8qxB4OqVnC3CO/EuM=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bd:85:51:ab:02:33:ca:ec:38:59:a9:e4:94:4f:fa:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=58bb6e2938a2251dc4384daf65efa520dc1a5882
        Validity
            Not Before: Jan 31 18:00:18 2025 GMT
            Not After : Feb  1 18:00:18 2025 GMT
        Subject: CN=e4fb80f24aeffec7715678c351f83095dca0e72e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:f5:39:4f:63:0c:10:8e:0c:86:98:d2:3d:89:
                    8f:68:07:16:aa:5f:77:41:0c:d0:49:dd:a2:d4:19:
                    6b:15:7e:80:47:fc:b5:75:44:bf:13:0c:20:4d:b7:
                    03:02:4a:b7:fe:0e:58:19:43:72:c9:0c:f0:ff:2a:
                    14:fe:96:05:b9:9d:d8:1f:96:0e:81:02:e6:14:f0:
                    05:40:1f:1a:69:3a:00:4b:f9:5e:3f:82:ab:79:35:
                    4c:39:59:83:41:b4:22:24:02:f6:22:6f:c0:c1:9a:
                    02:fa:73:7d:fd:fe:85:85:af:d2:df:6b:02:c0:8d:
                    82:9b:6a:ae:69:2d:2c:d5:1e:b6:24:12:67:86:67:
                    a8:3c:77:d4:96:86:b4:f9:1f:e1:f6:c0:1b:b2:30:
                    d7:6a:3a:78:1c:60:cb:ac:f6:8b:91:88:b9:63:6b:
                    da:f1:1e:7b:e8:07:c4:ab:9f:e0:c4:1f:95:96:60:
                    9a:90:57:3c:1d:bb:1f:80:ee:dc:2a:47:83:28:da:
                    8b:dc:45:f0:d9:2d:39:85:ef:84:cd:c1:09:51:f9:
                    7a:e9:80:12:55:73:eb:4f:d4:6a:85:2b:7c:a8:5b:
                    6b:b3:c7:30:22:85:6c:3f:4c:34:b8:1f:13:e3:4e:
                    ab:d3:04:79:1a:1b:a2:bc:d1:b8:5a:8a:e5:84:19:
                    cc:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:FB:80:F2:4A:EF:FE:C7:71:56:78:C3:51:F8:30:95:DC:A0:E7:2E
            X509v3 Authority Key Identifier:
                keyid:58:BB:6E:29:38:A2:25:1D:C4:38:4D:AF:65:EF:A5:20:DC:1A:58:82

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WLtuKTiiJR3EOE2vZe-lINwaWII.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/20dd04-abec-44c3-95eb-5e37d5587be5/1/WLtuKTiiJR3EOE2vZe-lINwaWII.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/20dd04-abec-44c3-95eb-5e37d5587be5/1/WLtuKTiiJR3EOE2vZe-lINwaWII.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:2f:16:39:fe:a4:c2:73:3d:fa:e6:2f:fd:d5:0b:3f:82:88:
         2a:5c:9a:5c:21:4a:5f:d1:68:65:f4:59:e5:89:1c:65:80:ce:
         ea:98:00:e3:29:25:38:b8:bb:f0:c2:c1:4a:c3:94:bc:79:92:
         69:a5:02:71:98:21:83:09:3f:d0:3e:d2:42:47:ef:7d:12:e2:
         1c:75:c5:d0:d2:07:ec:0c:b6:21:f9:97:88:01:1b:80:33:a1:
         8f:42:3c:ff:c4:c5:8b:3f:8c:3a:a2:da:66:29:48:7f:a5:ea:
         44:30:72:a4:05:60:59:69:ec:7a:25:b1:53:f3:df:8c:f1:c1:
         ab:84:2a:de:e9:15:c7:b3:4d:5c:f9:d6:99:67:e5:4e:24:ab:
         2c:f2:9e:5a:90:f2:fd:69:fd:db:4d:5f:b8:fe:55:b0:0d:c7:
         6f:04:fc:96:14:8d:17:6c:2b:59:a1:9a:c6:60:2e:af:17:a8:
         37:f9:33:3d:fa:34:25:64:fd:cb:47:75:5d:ba:4a:b4:bb:4d:
         9c:e7:b1:06:99:d0:6c:8e:78:ed:00:ae:4c:bd:0e:43:a4:01:
         33:1b:c9:9f:a1:37:8e:10:b9:17:92:7d:82:3b:4e:bf:c3:90:
         29:a0:2a:42:13:11:a4:2a:74:bf:16:1e:0a:d6:99:99:1a:c2:
         db:18:cf:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 13:26:09 2025 by rpki-client