Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/9d7141-60a4-42b6-92e7-c8b02f4b36ce/1/wvpSf6WGyrL1ZwDNzo2PUSwPGKk.mft
File:                     wvpSf6WGyrL1ZwDNzo2PUSwPGKk.mft (raw, json)
Hash identifier:          l4aGL1sVaOH+6yZZMpT8wA5CtnZOVq646MSgKIqayb8=
Subject key identifier:   BB:76:E2:E5:6E:FB:C0:7A:48:9A:89:01:CD:16:11:63:7C:55:BB:32
Authority key identifier: C2:FA:52:7F:A5:86:CA:B2:F5:67:00:CD:CE:8D:8F:51:2C:0F:18:A9
Certificate issuer:       /CN=c2fa527fa586cab2f56700cdce8d8f512c0f18a9
Certificate serial:       019549DB16E7A6600885F3E204314BBC45EE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wvpSf6WGyrL1ZwDNzo2PUSwPGKk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/17/9d7141-60a4-42b6-92e7-c8b02f4b36ce/1/wvpSf6WGyrL1ZwDNzo2PUSwPGKk.mft
Manifest number:          09BF
Signing time:             Fri 28 Feb 2025 00:00:49 +0000
Manifest this update:     Fri 28 Feb 2025 00:00:49 +0000
Manifest next update:     Sat 01 Mar 2025 00:00:49 +0000
Files and hashes:         1: tg3tt4CcvJitXQEqVPxg5ttt9Eo.roa (hash: yGdPxHiy2/23FGq/l1RQJi2bmwu/aMnyVmTI18Ildio=)
                          2: wvpSf6WGyrL1ZwDNzo2PUSwPGKk.crl (hash: WXx/RZg7J2CXNMvHFY76vEqEWs1Gu5cgl4mytr8Q+5o=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:49:db:16:e7:a6:60:08:85:f3:e2:04:31:4b:bc:45:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2fa527fa586cab2f56700cdce8d8f512c0f18a9
        Validity
            Not Before: Feb 28 00:00:49 2025 GMT
            Not After : Mar  1 00:00:49 2025 GMT
        Subject: CN=bb76e2e56efbc07a489a8901cd1611637c55bb32
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:2a:5f:2f:62:a1:a3:5c:e1:e9:51:de:3d:8a:
                    01:cf:e7:84:ea:02:56:d9:fb:45:93:58:d2:62:8e:
                    ef:11:38:fa:0e:3c:a0:f4:d0:37:f6:a4:ec:6e:b9:
                    db:1f:72:e6:5e:07:26:58:96:d8:3c:df:bd:68:89:
                    3a:d8:30:cc:6c:a1:f4:36:40:8e:32:b4:7d:03:fe:
                    22:55:f6:da:4d:cf:c1:da:f2:cb:24:1d:14:50:99:
                    3a:93:a4:f3:c2:24:68:a1:1e:0c:ac:5a:06:67:fd:
                    0c:17:c7:da:ef:19:37:4e:4c:54:ec:32:70:4e:f5:
                    6b:1c:2d:2f:0c:87:10:d3:6f:39:ea:e0:a4:82:d3:
                    d8:e6:7d:6a:e4:dc:cb:b3:e7:67:06:59:12:40:73:
                    b4:f9:16:78:dc:d4:06:02:ae:16:09:d9:a6:fc:d9:
                    69:e2:5a:e8:cf:cd:98:49:b6:5e:1c:ea:33:e9:86:
                    1c:c0:01:50:74:5c:96:6b:d9:0e:3e:e5:bd:3c:ad:
                    96:4f:f9:95:94:3b:a3:48:65:db:f5:72:9c:c2:ec:
                    c5:e6:f1:98:f6:10:83:58:4f:f3:55:3d:00:f7:5e:
                    5a:54:38:0b:aa:cf:b2:1b:27:a2:5f:8b:d7:7d:01:
                    ec:87:80:d3:00:17:5d:29:a5:db:ec:c0:b2:13:fb:
                    76:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:76:E2:E5:6E:FB:C0:7A:48:9A:89:01:CD:16:11:63:7C:55:BB:32
            X509v3 Authority Key Identifier:
                keyid:C2:FA:52:7F:A5:86:CA:B2:F5:67:00:CD:CE:8D:8F:51:2C:0F:18:A9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wvpSf6WGyrL1ZwDNzo2PUSwPGKk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/9d7141-60a4-42b6-92e7-c8b02f4b36ce/1/wvpSf6WGyrL1ZwDNzo2PUSwPGKk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/17/9d7141-60a4-42b6-92e7-c8b02f4b36ce/1/wvpSf6WGyrL1ZwDNzo2PUSwPGKk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:1d:4b:f4:e1:fa:76:c4:10:f1:b3:00:c0:ca:00:d0:1f:82:
         d6:2a:2b:50:3f:85:0b:3a:ce:e0:0b:54:71:16:c3:8f:3a:4f:
         dd:45:8f:67:78:cf:e3:bd:69:3d:6e:f9:1a:c7:26:c3:a4:8f:
         eb:66:98:ed:d3:13:f4:f0:8e:dd:d3:16:d3:55:f2:3d:5a:48:
         af:c9:27:6e:81:67:58:b1:2a:cf:a4:18:c6:d2:e0:8b:4e:81:
         4a:fc:47:b2:43:41:6f:00:4e:9e:10:67:ab:4f:44:4f:4a:c9:
         f2:93:ba:a6:dd:2c:8e:b3:a0:07:e1:18:92:1b:b2:76:2d:e5:
         31:77:de:bd:cc:8c:7d:63:3a:86:f3:54:bd:d8:9d:ba:a1:08:
         3c:bd:6b:48:7d:da:f8:a4:0c:cb:92:40:e9:25:54:f7:e8:45:
         3f:d9:9f:05:09:4a:f3:f9:a1:38:9f:d2:26:50:a2:29:3c:bb:
         d4:24:24:92:bd:10:b3:fe:92:2f:2e:99:b7:7d:55:d8:e0:1a:
         3e:f1:1d:1f:5f:1a:da:df:ec:e9:bc:7d:05:8d:8d:57:e1:6b:
         6f:dc:71:63:40:66:67:4e:5a:13:61:8b:af:30:89:1a:58:59:
         8f:40:1c:83:4b:2c:b8:52:47:ee:12:90:dd:e6:31:92:b6:fb:
         a1:0a:3b:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 14:21:48 2025 by rpki-client