Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/1b4dfa-c0de-44a8-9fc5-5f44537e72a5/1/Wa_J-u5PQ1mihq_l0HaFJZWDQrU.mft
File:                     Wa_J-u5PQ1mihq_l0HaFJZWDQrU.mft (raw, json)
Hash identifier:          U4zLbq6jmgoVOpdWY7XeIXHK/TXFkGo1rxh66pmcWlQ=
Subject key identifier:   30:11:CA:C0:1C:6E:6B:67:5F:B0:BD:67:58:B1:E6:9F:1A:77:B4:8D
Authority key identifier: 59:AF:C9:FA:EE:4F:43:59:A2:86:AF:E5:D0:76:85:25:95:83:42:B5
Certificate issuer:       /CN=59afc9faee4f4359a286afe5d0768525958342b5
Certificate serial:       01884767008EC0730C5B127D0D86533A0025
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Wa_J-u5PQ1mihq_l0HaFJZWDQrU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9a/1b4dfa-c0de-44a8-9fc5-5f44537e72a5/1/Wa_J-u5PQ1mihq_l0HaFJZWDQrU.mft
Manifest number:          0904
Signing time:             Tue 23 May 2023 06:58:32 +0000
Manifest this update:     Tue 23 May 2023 06:58:32 +0000
Manifest next update:     Wed 24 May 2023 06:58:32 +0000
Files and hashes:         1: Wa_J-u5PQ1mihq_l0HaFJZWDQrU.crl (hash: qzKpgzj/x4SlNd/cd8myr/Ofh4VRhb12N2Z6PStPdew=)
                          2: mb9ZpAHKS4sP1_GzpHlsoE1NSOg.roa (hash: qw9EIP2yheSUS0ue2xy/Z3Sy5Eyrn2lywj/2Gm4rt/I=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:88:47:67:00:8e:c0:73:0c:5b:12:7d:0d:86:53:3a:00:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=59afc9faee4f4359a286afe5d0768525958342b5
        Validity
            Not Before: May 23 06:58:32 2023 GMT
            Not After : May 24 06:58:32 2023 GMT
        Subject: CN=3011cac01c6e6b675fb0bd6758b1e69f1a77b48d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:f6:9f:b8:a6:1c:ef:ca:9f:2b:e6:18:75:3f:
                    f5:cf:40:33:51:06:60:e3:97:e8:da:1c:7f:c3:0e:
                    1d:c2:88:b4:62:d3:2a:58:5c:0a:7c:b4:6e:9d:d8:
                    21:ba:90:22:4f:b6:be:e5:be:b0:c5:43:3e:7e:c3:
                    f9:dc:e5:75:67:d5:4e:20:33:9b:6a:0f:48:af:17:
                    67:d5:01:30:f9:ac:0b:73:10:7c:77:c1:f9:cd:89:
                    c3:10:c4:2d:6d:8f:20:60:8b:27:63:af:db:d4:53:
                    e1:98:ba:f3:f6:ce:72:23:84:8e:e1:1e:3f:54:de:
                    bb:53:e8:2a:33:d2:8d:d0:b1:c9:4f:f7:74:bc:ee:
                    36:47:6f:c2:b3:c0:f5:95:2f:ef:ee:a1:00:59:17:
                    b7:6a:03:91:5d:00:ba:ed:21:f2:2f:1a:89:cb:eb:
                    8a:12:0d:09:3f:bb:8f:d3:ac:53:b4:ac:c6:0b:41:
                    91:8f:67:f9:b6:52:4c:bc:76:be:b8:f3:e2:e2:df:
                    49:78:20:13:aa:be:08:95:be:26:f6:55:20:58:e9:
                    fa:20:eb:d8:a8:3f:f3:3f:a3:d8:e5:86:ec:5d:7e:
                    ac:5f:05:95:43:eb:68:43:21:f7:cc:b5:c0:76:10:
                    61:a5:7c:1d:79:c3:ed:7c:6d:12:c3:c3:9f:83:c2:
                    5c:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:11:CA:C0:1C:6E:6B:67:5F:B0:BD:67:58:B1:E6:9F:1A:77:B4:8D
            X509v3 Authority Key Identifier:
                keyid:59:AF:C9:FA:EE:4F:43:59:A2:86:AF:E5:D0:76:85:25:95:83:42:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wa_J-u5PQ1mihq_l0HaFJZWDQrU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/1b4dfa-c0de-44a8-9fc5-5f44537e72a5/1/Wa_J-u5PQ1mihq_l0HaFJZWDQrU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/1b4dfa-c0de-44a8-9fc5-5f44537e72a5/1/Wa_J-u5PQ1mihq_l0HaFJZWDQrU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:83:d6:7e:1f:7c:22:90:a7:d3:47:40:88:92:bb:05:0d:56:
         86:cc:8f:d6:ca:9f:36:35:12:6d:0e:62:73:72:63:11:56:63:
         1e:d9:e5:57:9c:4e:0b:e1:bc:b7:34:06:0a:ce:49:44:20:98:
         78:aa:f7:09:6c:b2:64:98:65:14:cd:0e:f0:53:0a:f1:1e:6d:
         40:29:91:51:1c:81:bf:1f:79:d0:2c:7a:22:aa:ab:01:ac:da:
         e6:63:c0:ce:4a:40:72:89:6c:a6:79:30:ca:44:41:24:90:e7:
         cd:ea:04:12:75:ea:aa:91:ed:2d:ec:73:82:14:5b:9a:26:54:
         b5:8a:fb:c5:8a:53:cb:89:fd:ef:8a:53:a1:6e:52:a0:ce:76:
         89:b3:5e:21:85:84:65:e9:0b:ea:c5:a8:b6:0d:4f:cc:d2:e2:
         0d:96:13:4d:5f:8a:f5:1c:8f:f7:20:30:c4:84:18:37:27:40:
         36:f3:62:d3:d7:2a:f8:9f:05:ba:ad:cb:52:4f:f4:55:f8:62:
         34:b8:04:d6:08:0e:64:e8:6a:fa:38:82:bf:38:07:9d:fd:e5:
         9d:04:3a:18:2d:76:3b:af:ee:a9:a7:dc:b3:f8:76:2f:b0:87:
         2a:63:b6:66:dc:51:00:65:2a:b5:8f:05:16:09:ac:9a:cd:a5:
         c3:1f:a9:d8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAYhHZwCOwHMMWxJ9DYZTOgAlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU5YWZjOWZhZWU0ZjQzNTlhMjg2YWZlNWQwNzY4NTI1OTU4
MzQyYjUwHhcNMjMwNTIzMDY1ODMyWhcNMjMwNTI0MDY1ODMyWjAzMTEwLwYDVQQD
EygzMDExY2FjMDFjNmU2YjY3NWZiMGJkNjc1OGIxZTY5ZjFhNzdiNDhkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgvafuKYc78qfK+YYdT/1z0AzUQZg
45fo2hx/ww4dwoi0YtMqWFwKfLRundghupAiT7a+5b6wxUM+fsP53OV1Z9VOIDOb
ag9Irxdn1QEw+awLcxB8d8H5zYnDEMQtbY8gYIsnY6/b1FPhmLrz9s5yI4SO4R4/
VN67U+gqM9KN0LHJT/d0vO42R2/Cs8D1lS/v7qEAWRe3agORXQC67SHyLxqJy+uK
Eg0JP7uP06xTtKzGC0GRj2f5tlJMvHa+uPPi4t9JeCATqr4Ilb4m9lUgWOn6IOvY
qD/zP6PY5YbsXX6sXwWVQ+toQyH3zLXAdhBhpXwdecPtfG0Sw8Ofg8JcAwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDARysAcbmtnX7C9Z1ix5p8ad7SNMB8GA1UdIwQY
MBaAFFmvyfruT0NZooav5dB2hSWVg0K1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV2FfSi11NVBRMW1paHFfbDBIYUZKWldEUXJVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85YS8xYjRkZmEtYzBkZS00NGE4LTlmYzUt
NWY0NDUzN2U3MmE1LzEvV2FfSi11NVBRMW1paHFfbDBIYUZKWldEUXJVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85YS8xYjRkZmEtYzBkZS00NGE4LTlmYzUtNWY0NDUzN2U3MmE1
LzEvV2FfSi11NVBRMW1paHFfbDBIYUZKWldEUXJVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXIPWfh98
IpCn00dAiJK7BQ1WhsyP1sqfNjUSbQ5ic3JjEVZjHtnlV5xOC+G8tzQGCs5JRCCY
eKr3CWyyZJhlFM0O8FMK8R5tQCmRURyBvx950Cx6IqqrAaza5mPAzkpAcolspnkw
ykRBJJDnzeoEEnXqqpHtLexzghRbmiZUtYr7xYpTy4n974pToW5SoM52ibNeIYWE
ZekL6sWotg1PzNLiDZYTTV+K9RyP9yAwxIQYNydANvNi09cq+J8Fuq3LUk/0Vfhi
NLgE1ggOZOhq+jiCvzgHnf3lnQQ6GC12O6/uqafcs/h2L7CHKmO2ZtxRAGUqtY8F
Fgmsms2lwx+p2A==
-----END CERTIFICATE-----
Generated at Sun Apr 20 18:58:26 2025 by rpki-client