Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/b20e90-bf6e-4e25-87d5-eceeff8e84e0/1/WhQcUJCCTQoXwp7EBQ4hAHET-9o.mft
File:                     WhQcUJCCTQoXwp7EBQ4hAHET-9o.mft (raw, json)
Hash identifier:          HAHca8szWoiRu+l+KPTOEgo5nguWOl3x8pEXIl6Zo+o=
Subject key identifier:   84:5C:FB:91:E5:8A:A5:AE:9C:ED:6D:F0:0D:8C:8E:40:05:AE:5D:97
Authority key identifier: 5A:14:1C:50:90:82:4D:0A:17:C2:9E:C4:05:0E:21:00:71:13:FB:DA
Certificate issuer:       /CN=5a141c5090824d0a17c29ec4050e21007113fbda
Certificate serial:       0194BD17A62A34FEF970B40A86A786FE0E31
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WhQcUJCCTQoXwp7EBQ4hAHET-9o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ee/b20e90-bf6e-4e25-87d5-eceeff8e84e0/1/WhQcUJCCTQoXwp7EBQ4hAHET-9o.mft
Manifest number:          142E
Signing time:             Fri 31 Jan 2025 16:00:31 +0000
Manifest this update:     Fri 31 Jan 2025 16:00:31 +0000
Manifest next update:     Sat 01 Feb 2025 16:00:31 +0000
Files and hashes:         1: 9mv5BJvEaAqWoj8vH5r1xx_pFgo.roa (hash: IAS+DSX7WNtHYk4j+RDYn0qWAwRUWPxJ+A4Wt+jMAHQ=)
                          2: MpJGW61wsAY2na2GoCEJeo5HvXk.roa (hash: vRlmBz0iiqrk+J7PazbAwX0O6F7JU+iRJTTbiLqVjxU=)
                          3: PNxKt9EExJcdff8t4PlXHS3Zp8E.roa (hash: l/sm5m0RtWP1FamD6nvtIs4Wmty8En19TqcjOBknuMY=)
                          4: SNph92J-Xcf8IveNNNu0MkGJVWI.roa (hash: VJRwO2aW7uM1HccqCjhKGDaLckqIJFkhu3+W4SavOHw=)
                          5: U8yyp-JTHsc4PzNj0KNOVG9KECs.roa (hash: XL8cza6Y6dTsPDS6Eb2/zXU0zrVRVcGlEc/rkfzZaj0=)
                          6: WhQcUJCCTQoXwp7EBQ4hAHET-9o.crl (hash: yc5hfVmrFukMyUGco8YXgGS145r2dDZtERJHDT8MCAY=)
                          7: YDG9y3Wf050PhX_9gaokrKJ6bQ0.roa (hash: +s5vm9MR5KB+oAdSZ0D17khw8OLYyk5MlkPweH/pkac=)
                          8: ve4iz1Nb8DcHS9BJwN65K0mM0-E.roa (hash: KrskrDJ9DRb/ge1dc1ifB8Oiho4jbO0ADnVg8CJqCCI=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bd:17:a6:2a:34:fe:f9:70:b4:0a:86:a7:86:fe:0e:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5a141c5090824d0a17c29ec4050e21007113fbda
        Validity
            Not Before: Jan 31 16:00:31 2025 GMT
            Not After : Feb  1 16:00:31 2025 GMT
        Subject: CN=845cfb91e58aa5ae9ced6df00d8c8e4005ae5d97
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:98:64:32:e9:5d:01:6e:74:19:a0:fd:b8:1b:
                    1f:f3:39:7f:db:9e:4c:33:28:c9:d6:3f:5d:79:b1:
                    6d:a4:e3:ce:88:3d:42:b8:8c:62:3a:3d:77:0d:3c:
                    ea:f4:0c:c4:38:9f:5f:e2:0e:1c:b9:c4:5a:5b:bf:
                    0a:71:bf:84:95:75:e8:08:f2:24:9f:fe:76:10:49:
                    f5:24:fd:ec:31:ff:41:53:d1:99:d8:af:59:5a:39:
                    1b:3a:b0:cf:4f:be:57:9b:54:07:11:1e:6f:48:00:
                    77:bb:63:5c:83:49:b0:ce:40:e1:50:93:c2:61:e0:
                    78:4c:5e:75:9d:6b:16:76:fe:28:1f:fe:58:20:b8:
                    a5:f4:cb:5e:0a:6c:c0:c9:4c:01:f4:02:1e:3a:7f:
                    01:78:f7:d2:8e:ef:36:f6:55:11:4c:fc:ea:21:2f:
                    89:9c:a7:a3:7e:a2:9b:8a:c7:de:7a:72:45:5c:31:
                    97:f1:e9:eb:6e:37:7a:f9:0d:39:37:77:0b:e1:4d:
                    22:cc:b2:bc:52:05:ed:17:cb:7f:23:7e:96:8a:c5:
                    53:cf:5f:3d:ed:0d:dc:37:2a:82:6e:fe:41:85:76:
                    4f:7a:63:bb:b9:a1:07:87:32:7e:97:ba:56:13:a7:
                    f3:8f:d5:78:ed:41:11:bf:72:f2:19:14:40:c4:e2:
                    3f:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:5C:FB:91:E5:8A:A5:AE:9C:ED:6D:F0:0D:8C:8E:40:05:AE:5D:97
            X509v3 Authority Key Identifier:
                keyid:5A:14:1C:50:90:82:4D:0A:17:C2:9E:C4:05:0E:21:00:71:13:FB:DA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WhQcUJCCTQoXwp7EBQ4hAHET-9o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/b20e90-bf6e-4e25-87d5-eceeff8e84e0/1/WhQcUJCCTQoXwp7EBQ4hAHET-9o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/b20e90-bf6e-4e25-87d5-eceeff8e84e0/1/WhQcUJCCTQoXwp7EBQ4hAHET-9o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         be:f8:60:ae:d7:c8:9e:51:ea:a1:49:5d:71:59:da:ea:a0:07:
         b3:7e:fd:3a:ff:3c:a1:2e:52:d7:27:43:da:66:bc:95:b7:01:
         d4:ae:d1:5d:e5:d8:5d:af:bf:dc:41:21:8c:b7:be:31:e5:f4:
         df:8d:aa:90:26:27:fd:96:ce:e7:e5:6e:77:76:d8:e9:50:9f:
         90:23:d9:3b:86:87:32:97:ab:36:70:38:f3:a1:6a:c7:70:68:
         0e:59:c1:a3:cb:e8:22:79:ac:ae:33:81:30:5a:e8:37:f1:e5:
         14:e4:66:69:a2:6f:0c:01:94:0d:0c:fe:92:f6:88:7a:53:5d:
         c3:64:b2:06:01:e2:f3:ef:01:46:64:5e:13:ca:31:3d:c8:1f:
         eb:ff:2c:11:50:0b:1f:11:e3:ce:9d:59:8e:e1:3b:94:10:57:
         55:e4:9b:2b:15:f8:ec:80:e1:3d:04:0a:c5:f5:d5:8b:d1:12:
         d0:fc:15:4d:1d:46:ee:17:11:f0:31:bd:af:bf:43:7f:48:aa:
         11:d9:ed:30:2d:8f:02:e8:14:6b:5f:83:85:ff:06:da:8f:e4:
         01:d4:3f:7e:b7:a8:f6:9a:3c:f5:4a:ad:b2:ac:dc:69:bb:3e:
         24:68:0b:14:c9:fe:65:09:da:71:7f:78:7c:f6:b0:ac:6e:de:
         3a:fa:54:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----