Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/d6d1be-10d9-4a3a-bd14-0a830d01afd1/1/WWDmzRsbAGOxiQ94B0XCRWBtz3M.mft
File:                     WWDmzRsbAGOxiQ94B0XCRWBtz3M.mft (raw, json)
Hash identifier:          2vaSIvYJnODfcU8SjwGgozHdGitE2PyuttxJLTbggfI=
Subject key identifier:   7C:B4:FD:1B:86:B3:B0:C4:6E:66:39:17:DD:38:29:59:24:68:38:8D
Authority key identifier: 59:60:E6:CD:1B:1B:00:63:B1:89:0F:78:07:45:C2:45:60:6D:CF:73
Certificate issuer:       /CN=5960e6cd1b1b0063b1890f780745c245606dcf73
Certificate serial:       0194BC04D72ED6658F74357024910E395134
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WWDmzRsbAGOxiQ94B0XCRWBtz3M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fb/d6d1be-10d9-4a3a-bd14-0a830d01afd1/1/WWDmzRsbAGOxiQ94B0XCRWBtz3M.mft
Manifest number:          142A
Signing time:             Fri 31 Jan 2025 11:00:21 +0000
Manifest this update:     Fri 31 Jan 2025 11:00:21 +0000
Manifest next update:     Sat 01 Feb 2025 11:00:21 +0000
Files and hashes:         1: 8Z3aUD_PAmXD6dv52YsOghcqB84.roa (hash: yqXiM+cGXnQH3xEwReOpDqFoSkq0y2lHcTn04sbV7Go=)
                          2: WWDmzRsbAGOxiQ94B0XCRWBtz3M.crl (hash: h1+QxvlGdL3soHe6qJJ1Am3/uoNHNeQL9pr8Y0OIQBs=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:04:d7:2e:d6:65:8f:74:35:70:24:91:0e:39:51:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5960e6cd1b1b0063b1890f780745c245606dcf73
        Validity
            Not Before: Jan 31 11:00:21 2025 GMT
            Not After : Feb  1 11:00:21 2025 GMT
        Subject: CN=7cb4fd1b86b3b0c46e663917dd3829592468388d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:e4:87:f4:91:06:be:b5:8c:88:2b:de:16:67:
                    5e:f0:4b:3f:00:a9:a1:14:99:32:e1:91:26:e8:88:
                    50:63:26:24:f3:fd:85:29:d9:3b:77:81:ac:81:01:
                    f1:0c:2a:90:a3:85:14:89:d0:a5:ea:97:0f:fe:c9:
                    06:b1:61:8f:22:51:1f:b0:03:b8:09:d0:95:18:39:
                    47:ab:55:65:de:79:87:f2:af:69:a0:ca:59:59:7b:
                    a5:f4:a1:13:c6:f2:41:01:2f:d3:17:17:87:81:b3:
                    76:5c:21:1c:80:5d:96:6e:e4:1c:bd:c1:0c:0b:16:
                    26:90:8f:a6:9c:1f:c4:27:8e:db:81:2a:99:2a:e2:
                    78:e9:eb:67:95:ba:c2:91:99:83:3a:8b:85:c2:ee:
                    d6:34:72:48:4c:95:46:94:46:a0:c2:8e:a3:1d:bf:
                    44:57:27:30:07:d3:0f:a6:ae:18:14:0e:96:2f:14:
                    0e:81:63:50:cd:e5:e1:c3:8b:8c:af:f7:a7:5a:20:
                    ff:37:8e:ee:bc:85:5d:93:7d:4c:7c:1a:b7:da:76:
                    32:28:13:b2:94:36:4f:29:25:3f:37:b4:67:b7:96:
                    5e:92:3e:76:c3:52:87:73:45:0c:3f:7a:66:6a:f2:
                    0b:ec:4b:cf:37:1e:d2:6b:86:60:3f:25:ca:97:49:
                    3f:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:B4:FD:1B:86:B3:B0:C4:6E:66:39:17:DD:38:29:59:24:68:38:8D
            X509v3 Authority Key Identifier:
                keyid:59:60:E6:CD:1B:1B:00:63:B1:89:0F:78:07:45:C2:45:60:6D:CF:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WWDmzRsbAGOxiQ94B0XCRWBtz3M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/d6d1be-10d9-4a3a-bd14-0a830d01afd1/1/WWDmzRsbAGOxiQ94B0XCRWBtz3M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/d6d1be-10d9-4a3a-bd14-0a830d01afd1/1/WWDmzRsbAGOxiQ94B0XCRWBtz3M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:6c:09:0b:51:14:95:8e:66:96:90:d3:fe:39:02:ed:b7:fa:
         16:c2:d3:fb:ef:89:c7:fa:59:04:82:a4:4a:56:95:d0:79:74:
         19:dc:51:87:65:2e:c5:ab:b3:73:55:6d:d3:65:57:63:5e:a5:
         45:d8:ae:29:d3:2a:80:27:d8:72:46:2f:f0:2d:44:4a:19:1b:
         a4:80:69:06:b4:e2:be:f6:12:5a:fa:03:20:37:06:c0:be:27:
         6b:f0:53:86:02:98:51:ce:8c:d3:f4:95:e3:8d:87:77:80:b8:
         0e:9e:e4:51:c2:38:85:0f:cd:b9:3d:ce:39:90:77:a1:af:6b:
         43:23:6f:aa:99:d8:87:b6:b0:8e:61:99:d8:06:73:39:b7:f5:
         3a:ea:e0:d4:c7:e9:54:65:4e:c6:28:f4:5a:33:5c:1a:20:2f:
         48:1d:29:cb:f5:f4:b7:e1:a4:6d:08:48:cc:88:58:bb:51:00:
         7f:30:68:2c:d8:56:54:0f:6c:df:de:27:cf:cb:6e:1d:1c:57:
         a4:94:e1:07:a7:e6:73:41:bf:50:41:6d:6f:b4:a4:1b:4a:ec:
         56:c3:95:fa:74:90:2a:5e:83:07:13:99:2f:eb:cb:ad:bf:91:
         9c:dd:6d:43:99:47:ee:e9:24:92:96:52:7c:00:00:65:a8:17:
         20:60:4b:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:42:19 2025 by rpki-client