Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/1f5a4d-f5f2-4173-b690-06b9ca2f60c7/1/wpzJ08SW-KkiBNQKZl7fU4GQ1Tk.mft
File:                     wpzJ08SW-KkiBNQKZl7fU4GQ1Tk.mft (raw, json)
Hash identifier:          tbbwO9ERKfgS1ZqCFyNqsQ7OR+AJm6ujD32VeFfatb0=
Subject key identifier:   A3:5C:78:EB:34:82:9B:74:61:3D:41:50:1C:CF:C0:46:1C:15:E7:0C
Authority key identifier: C2:9C:C9:D3:C4:96:F8:A9:22:04:D4:0A:66:5E:DF:53:81:90:D5:39
Certificate issuer:       /CN=c29cc9d3c496f8a92204d40a665edf538190d539
Certificate serial:       0194BD854184660179733EF2A091A41A9BE1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wpzJ08SW-KkiBNQKZl7fU4GQ1Tk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ec/1f5a4d-f5f2-4173-b690-06b9ca2f60c7/1/wpzJ08SW-KkiBNQKZl7fU4GQ1Tk.mft
Manifest number:          0163
Signing time:             Fri 31 Jan 2025 18:00:14 +0000
Manifest this update:     Fri 31 Jan 2025 18:00:14 +0000
Manifest next update:     Sat 01 Feb 2025 18:00:14 +0000
Files and hashes:         1: c3GX2BFKDEhmANmZ86G-emEKbTk.roa (hash: mk77AQBdXW18vflWaTb98uk+eKpn+5cvtwdROZ1ovY0=)
                          2: wpzJ08SW-KkiBNQKZl7fU4GQ1Tk.crl (hash: hbUbfAN8kBWm6ZOTGyEq86aYb5PJ/AP3qziy/PocJ90=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bd:85:41:84:66:01:79:73:3e:f2:a0:91:a4:1a:9b:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c29cc9d3c496f8a92204d40a665edf538190d539
        Validity
            Not Before: Jan 31 18:00:14 2025 GMT
            Not After : Feb  1 18:00:14 2025 GMT
        Subject: CN=a35c78eb34829b74613d41501ccfc0461c15e70c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:06:e0:59:e5:3e:38:73:ed:a7:e6:45:d5:9f:
                    2e:96:ad:0f:fe:cb:b7:3c:0b:a7:02:f7:11:b6:f7:
                    e8:0b:90:61:a9:2d:ea:58:60:6c:b8:04:77:51:db:
                    af:22:2d:14:2a:76:6a:0a:98:48:2e:4a:89:bf:0a:
                    95:bc:ba:72:4e:fd:24:d8:d0:f6:0d:03:da:bd:01:
                    64:b9:f7:d8:eb:56:a7:76:58:53:41:ab:79:86:15:
                    43:fe:03:1b:b4:df:10:b8:e9:5b:82:57:99:2f:07:
                    1c:33:0f:1e:54:30:dc:c3:9c:02:31:8d:ca:d5:d9:
                    73:e1:ef:44:e9:f8:56:53:cd:7d:aa:0a:b2:d5:06:
                    ce:4f:e5:ea:27:fe:05:fd:c9:6c:70:e2:3d:a5:5e:
                    5d:73:c0:ab:88:9b:38:5e:ba:da:2c:9c:81:dc:33:
                    34:20:d4:8a:c0:18:8f:28:f5:79:50:ca:77:94:12:
                    4d:67:32:43:5f:01:6e:a1:69:bb:48:e0:74:0b:06:
                    3d:75:bd:4e:e6:c4:91:08:d9:0e:d3:44:11:bf:c9:
                    8f:b6:8e:44:e4:62:4b:03:fc:74:10:f5:e5:1f:d2:
                    35:7c:26:1d:fa:ab:a8:9f:ef:57:c1:c2:5c:32:25:
                    53:61:35:49:f4:9a:08:bb:47:c5:42:82:70:f2:dc:
                    06:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:5C:78:EB:34:82:9B:74:61:3D:41:50:1C:CF:C0:46:1C:15:E7:0C
            X509v3 Authority Key Identifier:
                keyid:C2:9C:C9:D3:C4:96:F8:A9:22:04:D4:0A:66:5E:DF:53:81:90:D5:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wpzJ08SW-KkiBNQKZl7fU4GQ1Tk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/1f5a4d-f5f2-4173-b690-06b9ca2f60c7/1/wpzJ08SW-KkiBNQKZl7fU4GQ1Tk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/1f5a4d-f5f2-4173-b690-06b9ca2f60c7/1/wpzJ08SW-KkiBNQKZl7fU4GQ1Tk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a7:b3:dc:57:ba:f5:04:39:ba:e6:b1:5b:44:ee:b5:3f:6f:44:
         fa:e2:59:eb:d6:c9:41:4c:4f:3b:68:22:2b:c5:6f:40:47:58:
         79:5f:4b:e2:32:f0:e4:45:40:bf:d4:7f:71:78:98:09:3f:ad:
         3d:2e:8d:dc:7b:9f:dc:72:f6:36:72:8a:da:c3:a2:44:78:8e:
         5e:9f:f1:99:ea:3f:4a:1f:39:00:50:37:fd:1d:da:d2:80:c1:
         6d:b3:26:dd:14:6b:d1:eb:cf:47:32:73:ff:53:24:93:cb:20:
         bb:89:cd:f1:ab:5c:d4:91:d3:ba:a1:84:ad:87:6b:0a:b5:30:
         d8:ec:f2:fa:3f:0b:64:c1:fb:70:63:1e:1e:5a:4e:14:96:79:
         3f:af:07:6c:3f:85:5a:83:92:f0:d1:e8:cb:7a:86:f2:e9:81:
         27:b1:36:55:45:6c:c1:36:14:34:88:2c:7e:2b:d4:ed:b2:81:
         fe:9d:62:9c:53:10:c8:a7:55:bc:60:d8:8d:73:34:dd:41:6e:
         97:0f:ac:cf:ec:20:fa:1d:1e:7d:92:9f:ae:e7:a3:e4:6b:eb:
         1c:6e:32:c6:ec:86:88:65:3f:ec:1e:77:2f:f4:58:a6:5c:65:
         fd:11:98:23:97:a1:60:a6:cd:19:05:13:68:e5:1f:83:2e:27:
         e0:3e:1e:2e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9hUGEZgF5cz7yoJGkGpvhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMyOWNjOWQzYzQ5NmY4YTkyMjA0ZDQwYTY2NWVkZjUzODE5
MGQ1MzkwHhcNMjUwMTMxMTgwMDE0WhcNMjUwMjAxMTgwMDE0WjAzMTEwLwYDVQQD
EyhhMzVjNzhlYjM0ODI5Yjc0NjEzZDQxNTAxY2NmYzA0NjFjMTVlNzBjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArwbgWeU+OHPtp+ZF1Z8ulq0P/su3
PAunAvcRtvfoC5BhqS3qWGBsuAR3UduvIi0UKnZqCphILkqJvwqVvLpyTv0k2ND2
DQPavQFkuffY61andlhTQat5hhVD/gMbtN8QuOlbgleZLwccMw8eVDDcw5wCMY3K
1dlz4e9E6fhWU819qgqy1QbOT+XqJ/4F/clscOI9pV5dc8CriJs4XrraLJyB3DM0
INSKwBiPKPV5UMp3lBJNZzJDXwFuoWm7SOB0CwY9db1O5sSRCNkO00QRv8mPto5E
5GJLA/x0EPXlH9I1fCYd+quon+9XwcJcMiVTYTVJ9JoIu0fFQoJw8twGIQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKNceOs0gpt0YT1BUBzPwEYcFecMMB8GA1UdIwQY
MBaAFMKcydPElvipIgTUCmZe31OBkNU5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd3B6SjA4U1ctS2tpQk5RS1psN2ZVNEdRMVRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYy8xZjVhNGQtZjVmMi00MTczLWI2OTAt
MDZiOWNhMmY2MGM3LzEvd3B6SjA4U1ctS2tpQk5RS1psN2ZVNEdRMVRrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYy8xZjVhNGQtZjVmMi00MTczLWI2OTAtMDZiOWNhMmY2MGM3
LzEvd3B6SjA4U1ctS2tpQk5RS1psN2ZVNEdRMVRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAp7PcV7r1
BDm65rFbRO61P29E+uJZ69bJQUxPO2giK8VvQEdYeV9L4jLw5EVAv9R/cXiYCT+t
PS6N3Huf3HL2NnKK2sOiRHiOXp/xmeo/Sh85AFA3/R3a0oDBbbMm3RRr0evPRzJz
/1Mkk8sgu4nN8atc1JHTuqGErYdrCrUw2Ozy+j8LZMH7cGMeHlpOFJZ5P68HbD+F
WoOS8NHoy3qG8umBJ7E2VUVswTYUNIgsfivU7bKB/p1inFMQyKdVvGDYjXM03UFu
lw+sz+wg+h0efZKfruej5GvrHG4yxuyGiGU/7B53L/RYplxl/RGYI5ehYKbNGQUT
aOUfgy4n4D4eLg==
-----END CERTIFICATE-----
Generated at Fri Apr 25 00:40:24 2025 by rpki-client