Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/c07a7d-24e6-4610-b656-c47172d5d882/1/WbPglWqdSBfNkoUsJ6J7fS8RE9s.mft
File:                     WbPglWqdSBfNkoUsJ6J7fS8RE9s.mft (raw, json)
Hash identifier:          6h9yaid6frV1+N5rGHvzkObQqvXibYUze5ICrueWR6k=
Subject key identifier:   29:6F:4A:8D:12:97:E6:94:95:C3:D6:DC:CF:1C:32:FB:ED:06:99:99
Authority key identifier: 59:B3:E0:95:6A:9D:48:17:CD:92:85:2C:27:A2:7B:7D:2F:11:13:DB
Certificate issuer:       /CN=59b3e0956a9d4817cd92852c27a27b7d2f1113db
Certificate serial:       0194BC7294C54AFAD8F9F712EF570D6733FE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WbPglWqdSBfNkoUsJ6J7fS8RE9s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f5/c07a7d-24e6-4610-b656-c47172d5d882/1/WbPglWqdSBfNkoUsJ6J7fS8RE9s.mft
Manifest number:          0B85
Signing time:             Fri 31 Jan 2025 13:00:13 +0000
Manifest this update:     Fri 31 Jan 2025 13:00:13 +0000
Manifest next update:     Sat 01 Feb 2025 13:00:13 +0000
Files and hashes:         1: BnHPRpHVxUrrpd0IzvhYM9ZoVGA.roa (hash: k46oPjmA0dBoUS914bzbaVVF+WxzasmMO4gdexQM14I=)
                          2: WbPglWqdSBfNkoUsJ6J7fS8RE9s.crl (hash: N5WNOFlwKebAxpzmCQLjO81Dpr6nYnMRmChXT2JZN4E=)
                          3: pXH9YpU9YJCA_rF2kD4sAq3Gb8A.roa (hash: T2ULJjjfs09CAUBnhR9VtzEhjC6fHO+cQ94xa8HkXMc=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:72:94:c5:4a:fa:d8:f9:f7:12:ef:57:0d:67:33:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=59b3e0956a9d4817cd92852c27a27b7d2f1113db
        Validity
            Not Before: Jan 31 13:00:13 2025 GMT
            Not After : Feb  1 13:00:13 2025 GMT
        Subject: CN=296f4a8d1297e69495c3d6dccf1c32fbed069999
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:da:b2:83:13:0e:54:a0:9e:d5:72:0d:3f:43:
                    3d:ff:c3:d6:82:f1:3d:6d:e1:70:2c:65:d5:f8:4e:
                    28:b2:8b:9f:87:aa:c8:2a:8c:5a:1a:b8:d7:75:b4:
                    04:da:3b:1a:a1:40:ca:0b:a0:66:e5:60:2f:6b:6b:
                    e4:72:c8:6d:e2:fa:74:1d:ee:22:a8:8f:82:8c:84:
                    c5:de:9c:fa:ee:ec:53:cc:c5:26:9c:20:95:1e:81:
                    68:15:61:ad:82:85:2d:bd:c9:aa:64:c5:8e:2e:50:
                    e1:09:a6:5a:e3:82:3e:ea:fb:8a:bd:06:b3:fd:07:
                    1c:9b:62:93:7c:e2:9f:52:6d:9b:c7:aa:dc:dd:41:
                    96:a9:65:f1:86:3d:59:a6:a0:d9:a0:75:56:fa:30:
                    12:b6:87:39:44:8e:73:8d:1a:b8:ce:57:d4:e3:4f:
                    8c:b7:78:fd:77:94:f3:0a:9d:04:f0:22:79:7b:09:
                    4c:09:44:ed:19:71:26:91:3d:c1:8d:ab:2e:34:db:
                    92:22:d5:a8:0a:ab:9e:d2:cd:01:b2:86:21:35:7b:
                    92:11:14:dd:2e:3c:23:46:1e:69:82:95:e6:84:bf:
                    b9:1c:43:f1:bf:81:f7:60:b9:be:2a:08:e2:62:74:
                    10:67:51:51:f2:57:d9:7a:85:10:5c:e2:82:c6:3f:
                    2a:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:6F:4A:8D:12:97:E6:94:95:C3:D6:DC:CF:1C:32:FB:ED:06:99:99
            X509v3 Authority Key Identifier:
                keyid:59:B3:E0:95:6A:9D:48:17:CD:92:85:2C:27:A2:7B:7D:2F:11:13:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WbPglWqdSBfNkoUsJ6J7fS8RE9s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/c07a7d-24e6-4610-b656-c47172d5d882/1/WbPglWqdSBfNkoUsJ6J7fS8RE9s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/c07a7d-24e6-4610-b656-c47172d5d882/1/WbPglWqdSBfNkoUsJ6J7fS8RE9s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b7:a4:a7:05:a1:1d:ba:5e:d9:b7:d9:b0:32:e2:35:1b:0e:2c:
         69:bc:d9:70:79:ff:e5:40:39:33:46:7e:41:d0:62:69:1f:ba:
         36:33:10:0e:d7:93:fc:d4:1f:20:da:1e:a6:c5:c5:4c:e7:ea:
         8c:8e:07:c6:e4:cf:e3:3b:c7:40:20:40:6a:8f:b0:c4:8d:c4:
         ba:93:16:11:32:43:8a:74:05:fe:7f:af:2b:b2:b0:85:ae:08:
         22:29:25:a9:6e:3f:f7:fb:ae:df:5f:dc:bb:53:3f:7a:a4:f4:
         d4:ed:4c:e0:4c:1b:69:47:a1:7a:5d:6d:ba:cc:44:1c:8d:87:
         a0:db:51:56:4e:1c:df:af:c2:84:7f:86:25:93:30:87:b0:7b:
         64:bd:1c:a7:b0:2e:e6:11:4d:7b:71:c1:0d:b4:ee:df:b2:ce:
         8f:91:53:4f:c4:bc:cd:46:9c:75:5c:37:64:2b:35:49:ac:84:
         0a:72:d5:07:dc:2b:10:33:3c:bb:e4:46:2a:49:3d:2e:f8:b1:
         b9:e9:fa:cf:46:7a:76:e4:a2:01:46:84:35:ab:ef:3a:0b:61:
         b1:34:f7:b3:c9:50:af:c3:17:0f:b0:4c:db:df:74:a1:dc:60:
         b6:45:58:86:17:a5:1f:76:75:95:24:d1:e5:2b:b6:5c:b1:34:
         20:02:dc:8b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8cpTFSvrY+fcS71cNZzP+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU5YjNlMDk1NmE5ZDQ4MTdjZDkyODUyYzI3YTI3YjdkMmYx
MTEzZGIwHhcNMjUwMTMxMTMwMDEzWhcNMjUwMjAxMTMwMDEzWjAzMTEwLwYDVQQD
EygyOTZmNGE4ZDEyOTdlNjk0OTVjM2Q2ZGNjZjFjMzJmYmVkMDY5OTk5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAztqygxMOVKCe1XINP0M9/8PWgvE9
beFwLGXV+E4osoufh6rIKoxaGrjXdbQE2jsaoUDKC6Bm5WAva2vkcsht4vp0He4i
qI+CjITF3pz67uxTzMUmnCCVHoFoFWGtgoUtvcmqZMWOLlDhCaZa44I+6vuKvQaz
/Qccm2KTfOKfUm2bx6rc3UGWqWXxhj1ZpqDZoHVW+jAStoc5RI5zjRq4zlfU40+M
t3j9d5TzCp0E8CJ5ewlMCUTtGXEmkT3BjasuNNuSItWoCque0s0BsoYhNXuSERTd
LjwjRh5pgpXmhL+5HEPxv4H3YLm+KgjiYnQQZ1FR8lfZeoUQXOKCxj8qeQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFClvSo0Sl+aUlcPW3M8cMvvtBpmZMB8GA1UdIwQY
MBaAFFmz4JVqnUgXzZKFLCeie30vERPbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV2JQZ2xXcWRTQmZOa29Vc0o2SjdmUzhSRTlzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNS9jMDdhN2QtMjRlNi00NjEwLWI2NTYt
YzQ3MTcyZDVkODgyLzEvV2JQZ2xXcWRTQmZOa29Vc0o2SjdmUzhSRTlzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNS9jMDdhN2QtMjRlNi00NjEwLWI2NTYtYzQ3MTcyZDVkODgy
LzEvV2JQZ2xXcWRTQmZOa29Vc0o2SjdmUzhSRTlzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAt6SnBaEd
ul7Zt9mwMuI1Gw4sabzZcHn/5UA5M0Z+QdBiaR+6NjMQDteT/NQfINoepsXFTOfq
jI4HxuTP4zvHQCBAao+wxI3EupMWETJDinQF/n+vK7Kwha4IIiklqW4/9/uu31/c
u1M/eqT01O1M4EwbaUehel1tusxEHI2HoNtRVk4c36/ChH+GJZMwh7B7ZL0cp7Au
5hFNe3HBDbTu37LOj5FTT8S8zUacdVw3ZCs1SayECnLVB9wrEDM8u+RGKkk9Lvix
uen6z0Z6duSiAUaENavvOgthsTT3s8lQr8MXD7BM2990odxgtkVYhhelH3Z1lSTR
5Su2XLE0IALciw==
-----END CERTIFICATE-----
Generated at Thu Apr 24 22:44:36 2025 by rpki-client