Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/1bc0cb-dfa4-4151-a61b-335a7e4384b1/1/WtDEH96ZZRsTKQb_BgK0e1YHpb4.mft
File:                     WtDEH96ZZRsTKQb_BgK0e1YHpb4.mft (raw, json)
Hash identifier:          TGEY7Tbsrtp0+7PkhhvcovWs/7VOWt3Uwtjep2d7vTk=
Subject key identifier:   C5:E7:82:32:4E:77:9D:F5:3A:E6:C7:01:52:F2:B8:17:32:27:70:9D
Authority key identifier: 5A:D0:C4:1F:DE:99:65:1B:13:29:06:FF:06:02:B4:7B:56:07:A5:BE
Certificate issuer:       /CN=5ad0c41fde99651b132906ff0602b47b5607a5be
Certificate serial:       0195DFD8FE2818E3528EF63990BBDB81FD57
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WtDEH96ZZRsTKQb_BgK0e1YHpb4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9d/1bc0cb-dfa4-4151-a61b-335a7e4384b1/1/WtDEH96ZZRsTKQb_BgK0e1YHpb4.mft
Manifest number:          0CE1
Signing time:             Sat 29 Mar 2025 03:01:34 +0000
Manifest this update:     Sat 29 Mar 2025 03:01:34 +0000
Manifest next update:     Sun 30 Mar 2025 03:01:34 +0000
Files and hashes:         1: CyjhjoDiSo7WFimizlr7VkadJR8.roa (hash: cM6TG/2qfvLGo5XP6sM8MTNGlbdx/5vkQ91bz6yRUQw=)
                          2: WtDEH96ZZRsTKQb_BgK0e1YHpb4.crl (hash: /g8pCNx07KbZ5obYPzkpCnFm02uUBME3iL1PVAvgHXc=)
                          3: hWPfJRigBwQrXXI_iYiIoMMdvMI.roa (hash: wsY9wU/Uh/qwSah/fwLqo3Fci0fOUVaJuSLnsVDw8zk=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:df:d8:fe:28:18:e3:52:8e:f6:39:90:bb:db:81:fd:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5ad0c41fde99651b132906ff0602b47b5607a5be
        Validity
            Not Before: Mar 29 03:01:34 2025 GMT
            Not After : Mar 30 03:01:34 2025 GMT
        Subject: CN=c5e782324e779df53ae6c70152f2b8173227709d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:1a:91:46:af:12:f0:cc:97:78:9d:76:17:b6:
                    26:a9:f7:c7:76:1a:84:11:73:26:9a:35:d1:f8:2a:
                    9f:1d:a5:5f:84:df:89:60:70:c7:08:f6:b4:25:43:
                    4c:8a:96:c4:76:91:d9:a6:79:7c:4a:1b:e6:f5:09:
                    6d:5d:29:16:4c:08:38:11:53:94:02:56:95:4b:d2:
                    cb:dd:97:e1:d8:c3:9f:4f:f6:96:fd:c3:88:ba:da:
                    f3:1a:e0:d6:03:aa:ec:cb:8f:83:cf:78:cf:dd:57:
                    e5:3f:4d:f4:22:0b:c7:45:82:35:48:04:9d:16:5d:
                    b8:d1:5b:9b:d3:32:e1:7e:2f:18:2b:b8:2e:03:be:
                    13:e8:9f:10:38:fe:9b:fa:29:f1:76:9a:a7:6c:1b:
                    f8:4e:36:4d:e6:f4:f2:69:03:0f:c0:e9:22:fd:c6:
                    24:bb:ef:18:dc:53:24:db:16:f0:2f:ae:b8:4e:95:
                    fe:29:36:c4:a4:fb:24:80:45:97:6e:17:6a:fc:a9:
                    27:cf:d6:9c:20:2b:21:4a:30:e8:58:23:77:73:55:
                    c5:a7:21:69:e5:5d:29:78:57:9a:d7:9a:c1:f7:1e:
                    45:7e:75:ab:84:83:aa:44:36:50:57:e9:cd:cb:5d:
                    7b:2a:af:7d:4f:c2:42:4a:cb:ea:e1:11:82:42:a2:
                    58:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:E7:82:32:4E:77:9D:F5:3A:E6:C7:01:52:F2:B8:17:32:27:70:9D
            X509v3 Authority Key Identifier:
                keyid:5A:D0:C4:1F:DE:99:65:1B:13:29:06:FF:06:02:B4:7B:56:07:A5:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WtDEH96ZZRsTKQb_BgK0e1YHpb4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/1bc0cb-dfa4-4151-a61b-335a7e4384b1/1/WtDEH96ZZRsTKQb_BgK0e1YHpb4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/1bc0cb-dfa4-4151-a61b-335a7e4384b1/1/WtDEH96ZZRsTKQb_BgK0e1YHpb4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a8:06:b5:a4:dc:85:e0:e3:61:51:1b:f7:9f:fb:99:a7:f7:ef:
         6e:09:ad:9b:4b:ad:31:34:62:0c:0f:f5:b6:3b:8b:b7:c8:d9:
         44:98:7a:81:cb:2d:8f:09:e2:4b:2e:f5:79:d8:6e:21:80:77:
         67:fb:76:15:c5:51:40:ed:c0:b2:53:35:26:d8:da:1c:4f:65:
         8f:09:7a:88:d4:46:90:f0:5f:05:cb:8d:55:96:0a:f6:2c:e1:
         ea:ea:92:97:5b:91:27:b4:98:47:a7:08:16:81:e4:b4:03:dc:
         67:0d:f1:7e:b0:37:f5:14:d0:0e:18:39:bc:75:a5:26:d7:8b:
         44:7f:10:6f:5e:63:ad:f9:9f:38:de:5c:24:34:6e:21:a0:8e:
         fc:20:c2:37:2d:65:72:dc:54:6d:5d:0d:b5:c7:f9:b3:5b:3d:
         e1:7a:1c:73:16:c2:ce:56:26:4c:32:1e:4c:42:cd:c0:1e:68:
         ae:0d:bb:1e:c8:91:8b:ef:81:93:31:bd:10:3b:62:a3:d3:96:
         9e:a2:54:c5:58:e8:7b:4b:02:d2:07:7a:59:e4:9b:12:19:00:
         ab:9b:af:36:9d:83:68:40:dc:c7:46:54:c0:a4:95:fb:ca:8e:
         c0:a0:29:5b:ec:13:62:cc:30:68:6d:1d:1e:da:4d:ab:d9:bb:
         d9:68:05:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 00:00:48 2025 by rpki-client