Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/9d60f1-5d78-403d-84a5-b399f6c88693/1/wjt-cUHnZ-cqTmeA5nP2HNqF6vM.mft
File:                     wjt-cUHnZ-cqTmeA5nP2HNqF6vM.mft (raw, json)
Hash identifier:          BGSHYn3DOcLwyis2UZtFCF2Yoz9q2+4fEfU1kWSjn6Y=
Subject key identifier:   4C:CC:46:F8:D1:64:41:50:7E:9A:C8:5A:81:D0:7C:48:47:99:84:70
Authority key identifier: C2:3B:7E:71:41:E7:67:E7:2A:4E:67:80:E6:73:F6:1C:DA:85:EA:F3
Certificate issuer:       /CN=c23b7e7141e767e72a4e6780e673f61cda85eaf3
Certificate serial:       0183C1271522A72C303F0E4374F88314ABC8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wjt-cUHnZ-cqTmeA5nP2HNqF6vM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0a/9d60f1-5d78-403d-84a5-b399f6c88693/1/wjt-cUHnZ-cqTmeA5nP2HNqF6vM.mft
Manifest number:          0B04
Signing time:             Mon 10 Oct 2022 09:08:27 +0000
Manifest this update:     Mon 10 Oct 2022 09:08:27 +0000
Manifest next update:     Tue 11 Oct 2022 09:08:27 +0000
Files and hashes:         1: RQ9tZA2QOwstlOCv3kL6ZeH39so.roa (hash: hATh1kPtXQQT+mkHc/FtRUxil569XcXd4IfpACo3TMg=)
                          2: wjt-cUHnZ-cqTmeA5nP2HNqF6vM.crl (hash: AFRClOzd+KwubCzrtC22JUNrZImGYOSjJNRK4jmj/T8=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:83:c1:27:15:22:a7:2c:30:3f:0e:43:74:f8:83:14:ab:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c23b7e7141e767e72a4e6780e673f61cda85eaf3
        Validity
            Not Before: Oct 10 09:08:27 2022 GMT
            Not After : Oct 11 09:08:27 2022 GMT
        Subject: CN=4ccc46f8d16441507e9ac85a81d07c4847998470
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:67:22:8a:01:65:d8:89:68:28:54:27:7f:bd:
                    c4:fd:71:2b:c8:6b:03:9c:5f:f9:fe:42:27:7b:b2:
                    49:84:90:35:74:ee:bc:ee:e1:5c:bf:cd:75:b3:51:
                    3e:fa:de:95:84:c8:21:cf:50:8a:c7:db:05:90:06:
                    0d:74:08:5f:4c:f8:c8:9b:75:17:30:38:59:c9:b9:
                    bd:67:00:0a:07:7d:25:14:dc:f1:22:32:4b:ab:ad:
                    3e:9d:93:d5:08:69:f7:cb:93:e1:2f:53:3d:7d:04:
                    15:71:e3:3f:3a:72:81:ad:05:8f:cb:99:51:8f:4a:
                    f7:1b:ab:3d:0c:57:31:6f:8e:9f:56:de:d3:bb:a2:
                    56:db:b5:fb:e6:75:51:47:c6:ea:3d:92:93:44:8a:
                    07:b2:59:b5:53:89:b6:8d:d7:37:0f:1b:49:14:c5:
                    b6:ee:45:3c:62:2f:70:00:aa:61:ec:6c:31:a0:f0:
                    0c:5d:67:f4:b9:36:bf:ca:55:62:7d:34:df:4e:7d:
                    9c:6c:6f:55:d5:56:9d:07:7a:b8:e0:15:dd:1e:63:
                    2f:d7:1a:19:bc:a4:0f:10:2e:15:2a:92:ed:30:27:
                    e2:fd:ce:20:50:1f:36:99:88:87:c8:c8:9c:b2:4d:
                    67:5f:81:50:34:ef:22:70:82:c8:72:65:81:1e:87:
                    61:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:CC:46:F8:D1:64:41:50:7E:9A:C8:5A:81:D0:7C:48:47:99:84:70
            X509v3 Authority Key Identifier:
                keyid:C2:3B:7E:71:41:E7:67:E7:2A:4E:67:80:E6:73:F6:1C:DA:85:EA:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wjt-cUHnZ-cqTmeA5nP2HNqF6vM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/9d60f1-5d78-403d-84a5-b399f6c88693/1/wjt-cUHnZ-cqTmeA5nP2HNqF6vM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/9d60f1-5d78-403d-84a5-b399f6c88693/1/wjt-cUHnZ-cqTmeA5nP2HNqF6vM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:0e:1f:33:64:4e:fa:a2:8e:0f:d2:20:01:fc:1d:e7:47:b9:
         49:b6:68:da:42:32:d4:75:49:83:7a:eb:16:39:4f:0c:c8:8a:
         c4:10:f7:52:03:bc:ba:5e:d4:4d:75:68:4f:59:14:8c:9b:09:
         4b:56:aa:99:f2:55:8d:30:8f:16:60:6e:c8:d0:23:0c:0d:79:
         12:c5:06:77:89:47:3a:cd:3d:55:6d:0b:83:9f:56:b3:89:54:
         fd:1e:fe:88:2c:74:df:32:07:55:b8:b6:d5:ef:43:ee:72:ba:
         cb:5a:e4:cd:e3:59:f3:b6:11:d5:66:65:57:c5:44:38:8a:52:
         52:9b:d4:69:7b:24:18:9b:7a:4e:e7:7e:88:9b:2f:9b:bd:4b:
         28:e3:dd:91:6e:26:d2:c8:f3:4b:a7:a5:f3:1a:f0:63:3d:47:
         38:63:2f:66:ee:67:7f:96:f2:95:35:a2:a0:5f:a4:cf:47:79:
         33:22:88:68:03:44:74:32:93:85:c7:ac:32:05:12:19:4f:ee:
         c1:93:8b:db:ab:09:6f:45:cc:52:13:dc:a7:75:38:dd:b4:25:
         23:9c:3b:72:8a:1d:55:f2:a4:2c:f2:09:c1:fb:93:98:cc:71:
         1d:ea:15:74:e7:84:b4:32:9f:1c:b4:b7:1c:84:95:96:c9:c8:
         5d:48:2c:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:49:50 2025 by rpki-client