Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/f4821b-0863-45ed-a6cd-0bf2a1b2cccb/1/WUV8aFxbFcOvTUO2Dk1MCg7u1os.mft
File:                     WUV8aFxbFcOvTUO2Dk1MCg7u1os.mft (raw, json)
Hash identifier:          aZA4tNFpMNPlezfVSh09q8XlfAb74w44S25ua0sp7a0=
Subject key identifier:   FF:89:94:E2:A7:57:91:47:9A:B5:E2:7E:67:CF:A8:91:41:AE:17:DA
Authority key identifier: 59:45:7C:68:5C:5B:15:C3:AF:4D:43:B6:0E:4D:4C:0A:0E:EE:D6:8B
Certificate issuer:       /CN=59457c685c5b15c3af4d43b60e4d4c0a0eeed68b
Certificate serial:       0194BBCE357EFBCCE1C914F86AFC5F35CC22
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WUV8aFxbFcOvTUO2Dk1MCg7u1os.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fc/f4821b-0863-45ed-a6cd-0bf2a1b2cccb/1/WUV8aFxbFcOvTUO2Dk1MCg7u1os.mft
Manifest number:          04F9
Signing time:             Fri 31 Jan 2025 10:00:40 +0000
Manifest this update:     Fri 31 Jan 2025 10:00:40 +0000
Manifest next update:     Sat 01 Feb 2025 10:00:40 +0000
Files and hashes:         1: WUV8aFxbFcOvTUO2Dk1MCg7u1os.crl (hash: RcNFEVk6U7qjgaodAD9m8jUKN7O1MuCHhlr6Y+Z28Uw=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bb:ce:35:7e:fb:cc:e1:c9:14:f8:6a:fc:5f:35:cc:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=59457c685c5b15c3af4d43b60e4d4c0a0eeed68b
        Validity
            Not Before: Jan 31 10:00:40 2025 GMT
            Not After : Feb  1 10:00:40 2025 GMT
        Subject: CN=ff8994e2a75791479ab5e27e67cfa89141ae17da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:fa:41:86:f5:35:81:70:2c:36:0e:7f:8c:21:
                    51:7a:22:9e:2d:48:cc:2e:8b:95:96:35:57:a3:f5:
                    fe:52:0e:b5:4a:cf:eb:ec:83:51:f5:f3:34:23:c6:
                    bc:8d:5d:76:b0:c5:74:89:4c:ad:c2:8b:2e:8d:90:
                    ef:5e:80:be:b6:d3:60:99:99:2a:aa:3f:8a:43:0a:
                    72:6a:7b:30:8d:3d:85:42:0a:b0:ca:01:7d:c2:18:
                    57:1d:6c:d1:33:46:de:23:3e:59:47:c3:63:66:29:
                    3a:97:ca:d9:24:3f:05:fe:e1:dd:3f:10:f2:07:68:
                    06:23:7f:90:ae:2d:c7:a5:eb:0c:c6:aa:ae:33:a3:
                    4e:fe:3c:d2:dc:e9:e6:9c:98:12:f7:94:a4:99:89:
                    c3:ff:95:91:e6:01:a3:ba:a1:22:fa:d1:c5:93:d9:
                    dc:b1:36:8a:81:aa:b3:9c:d7:07:07:76:25:32:7b:
                    28:49:7f:a6:09:86:9e:2e:d8:b8:d9:db:f7:80:c1:
                    e3:bb:b2:8a:51:a9:60:20:84:3f:33:f0:9a:a6:15:
                    de:96:8f:8a:7d:23:28:97:7b:8f:ae:3a:fe:b0:1d:
                    c4:ee:7b:91:c9:0b:10:14:6f:a6:dc:39:cc:85:c0:
                    40:36:69:1e:26:b7:9d:be:90:a5:a8:ba:78:61:3c:
                    ed:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:89:94:E2:A7:57:91:47:9A:B5:E2:7E:67:CF:A8:91:41:AE:17:DA
            X509v3 Authority Key Identifier:
                keyid:59:45:7C:68:5C:5B:15:C3:AF:4D:43:B6:0E:4D:4C:0A:0E:EE:D6:8B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WUV8aFxbFcOvTUO2Dk1MCg7u1os.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/f4821b-0863-45ed-a6cd-0bf2a1b2cccb/1/WUV8aFxbFcOvTUO2Dk1MCg7u1os.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/f4821b-0863-45ed-a6cd-0bf2a1b2cccb/1/WUV8aFxbFcOvTUO2Dk1MCg7u1os.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:c3:2c:69:7d:de:d1:4b:9f:8d:74:f4:dc:87:59:1d:fc:a4:
         89:56:e3:d9:74:d9:d5:ce:da:c9:1d:1b:ba:ef:a1:1a:24:11:
         f6:4d:58:f9:a3:64:13:21:1c:33:61:c4:87:07:b8:18:2a:66:
         38:c3:fd:1e:68:52:35:86:ec:a7:8a:7c:75:fb:b2:d3:73:e6:
         62:b5:50:b7:4f:7d:b3:45:82:83:f2:b8:26:a3:92:50:12:08:
         c7:7e:51:cb:35:08:70:51:84:15:2d:e9:f2:e8:26:51:d9:ca:
         fc:45:68:39:79:18:cf:92:dd:07:c3:16:6e:7d:f1:36:39:5c:
         ea:89:14:4c:1d:6e:14:98:58:d5:6c:90:05:13:28:61:12:12:
         8e:08:3d:3f:61:4a:24:69:1c:2b:eb:b3:62:d1:fa:dc:84:09:
         b2:77:e2:a7:67:c1:19:12:d0:5f:ae:31:36:4d:22:98:7a:ed:
         ab:67:d2:b8:7b:7b:fa:9a:a1:72:8e:6d:68:9c:b9:1f:6f:e7:
         80:0a:58:00:da:d1:18:89:b3:91:7e:41:dd:00:d9:b2:1c:65:
         01:5a:94:d3:67:92:e8:a1:f7:97:28:e9:46:19:f0:d2:0f:89:
         37:c5:fb:af:00:04:0e:81:45:c3:76:4c:61:6e:bf:72:75:dd:
         04:d9:d6:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:44:48 2025 by rpki-client