Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/420a13-f0a5-4db0-9048-15958a89a012/1/wOOV6sUDfy5HhZVvjai4aeu-_OA.mft
File:                     wOOV6sUDfy5HhZVvjai4aeu-_OA.mft (raw, json)
Hash identifier:          nB5RyT+11vliuIDTwLoh3iPqx4dnVbeu1oRc7/XsscM=
Subject key identifier:   5C:DA:68:51:2D:90:57:4A:9E:24:14:64:37:EB:1A:0E:4D:18:7F:17
Authority key identifier: C0:E3:95:EA:C5:03:7F:2E:47:85:95:6F:8D:A8:B8:69:EB:BE:FC:E0
Certificate issuer:       /CN=c0e395eac5037f2e4785956f8da8b869ebbefce0
Certificate serial:       0195E1591D566AE535D11542C2E90A5423A8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wOOV6sUDfy5HhZVvjai4aeu-_OA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c7/420a13-f0a5-4db0-9048-15958a89a012/1/wOOV6sUDfy5HhZVvjai4aeu-_OA.mft
Manifest number:          0BB6
Signing time:             Sat 29 Mar 2025 10:01:08 +0000
Manifest this update:     Sat 29 Mar 2025 10:01:08 +0000
Manifest next update:     Sun 30 Mar 2025 10:01:08 +0000
Files and hashes:         1: wOOV6sUDfy5HhZVvjai4aeu-_OA.crl (hash: gunDg+uo9Qkqt0GXDY//7A/2vALWGazJWAkrRgKlqDY=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:e1:59:1d:56:6a:e5:35:d1:15:42:c2:e9:0a:54:23:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c0e395eac5037f2e4785956f8da8b869ebbefce0
        Validity
            Not Before: Mar 29 10:01:08 2025 GMT
            Not After : Mar 30 10:01:08 2025 GMT
        Subject: CN=5cda68512d90574a9e24146437eb1a0e4d187f17
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:1e:5f:6f:01:a1:5a:61:95:0a:ce:24:9b:76:
                    4c:f5:f2:08:d0:ca:a9:91:68:29:de:82:4f:fa:da:
                    cc:6d:a0:ae:da:8d:b0:66:32:22:17:26:e2:88:96:
                    49:70:e3:8a:bf:0e:c2:b7:12:9c:ea:9d:96:94:5d:
                    0b:b7:a9:10:b1:f2:e1:de:08:8a:80:ff:ca:46:d8:
                    1a:03:d8:63:cc:eb:43:73:09:cc:11:9f:e4:ee:c7:
                    17:ff:6f:8e:49:1d:70:38:c3:44:32:5f:6f:5e:3b:
                    e0:26:3d:60:b9:7c:50:ea:08:0c:df:56:61:99:52:
                    89:22:f0:f2:f4:dd:ff:98:57:d2:16:b2:a7:95:cf:
                    ec:c9:fa:1f:cd:90:ff:e1:b2:2d:53:5d:5c:58:f3:
                    24:27:00:20:b3:8c:f7:b8:74:84:1a:43:58:a4:77:
                    03:e4:f1:21:32:4d:fd:05:8c:b7:a5:b3:91:44:f3:
                    4c:68:9a:c7:89:42:33:ca:b2:4f:c6:2a:cb:40:26:
                    df:17:a8:2c:03:c4:2c:90:0a:05:06:0c:8d:fe:75:
                    6d:5d:5d:d4:6e:1b:9a:38:d7:9a:46:bd:af:48:12:
                    55:fe:36:2c:a1:b2:30:a6:24:f5:24:02:ff:4d:f0:
                    53:c0:18:11:2d:69:a3:ce:ae:09:88:6b:52:58:bf:
                    6d:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:DA:68:51:2D:90:57:4A:9E:24:14:64:37:EB:1A:0E:4D:18:7F:17
            X509v3 Authority Key Identifier:
                keyid:C0:E3:95:EA:C5:03:7F:2E:47:85:95:6F:8D:A8:B8:69:EB:BE:FC:E0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wOOV6sUDfy5HhZVvjai4aeu-_OA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/420a13-f0a5-4db0-9048-15958a89a012/1/wOOV6sUDfy5HhZVvjai4aeu-_OA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/420a13-f0a5-4db0-9048-15958a89a012/1/wOOV6sUDfy5HhZVvjai4aeu-_OA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:06:8e:3e:63:19:e4:96:b4:e5:a8:c2:30:cb:52:70:c5:c6:
         e6:49:82:b3:e3:01:00:e0:e4:44:cb:ea:a3:8b:29:dd:dd:10:
         cd:13:5f:a2:f2:74:f5:9e:11:35:76:8d:2a:34:23:58:a6:9d:
         52:b0:59:df:f6:9a:1c:d4:22:14:c0:1f:45:1d:09:63:9b:c7:
         ef:82:89:0e:bf:f7:bf:bc:2e:04:52:c4:f0:60:93:cd:49:26:
         21:38:c5:32:d4:7e:80:47:f5:95:1d:95:6a:2b:96:16:fe:d6:
         0d:a1:60:5e:d4:be:f5:9a:83:c1:7d:d0:90:bb:ab:f6:c7:fd:
         79:52:17:d3:e1:ea:9d:95:65:4b:af:e0:d0:12:b2:66:c0:ea:
         8f:39:69:90:6d:08:0f:f7:3c:b9:74:84:c7:1c:ee:ee:23:26:
         71:53:be:95:7a:22:89:e1:bf:a7:a8:7b:69:74:e0:79:b3:0e:
         14:cf:9a:b9:e3:7e:f8:27:4d:87:cf:16:be:4c:0e:e8:e5:20:
         5e:e6:2d:12:c6:64:70:f2:ee:ee:07:68:68:f9:88:e1:65:14:
         54:39:a7:e6:da:4a:eb:02:37:b5:ad:25:0d:09:af:38:aa:cb:
         c7:83:16:a4:e0:a9:16:1d:b3:2e:02:55:63:65:6c:1a:4a:7b:
         84:61:cc:a3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZXhWR1WauU10RVCwukKVCOoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMwZTM5NWVhYzUwMzdmMmU0Nzg1OTU2ZjhkYThiODY5ZWJi
ZWZjZTAwHhcNMjUwMzI5MTAwMTA4WhcNMjUwMzMwMTAwMTA4WjAzMTEwLwYDVQQD
Eyg1Y2RhNjg1MTJkOTA1NzRhOWUyNDE0NjQzN2ViMWEwZTRkMTg3ZjE3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApB5fbwGhWmGVCs4km3ZM9fII0Mqp
kWgp3oJP+trMbaCu2o2wZjIiFybiiJZJcOOKvw7CtxKc6p2WlF0Lt6kQsfLh3giK
gP/KRtgaA9hjzOtDcwnMEZ/k7scX/2+OSR1wOMNEMl9vXjvgJj1guXxQ6ggM31Zh
mVKJIvDy9N3/mFfSFrKnlc/syfofzZD/4bItU11cWPMkJwAgs4z3uHSEGkNYpHcD
5PEhMk39BYy3pbORRPNMaJrHiUIzyrJPxirLQCbfF6gsA8QskAoFBgyN/nVtXV3U
bhuaONeaRr2vSBJV/jYsobIwpiT1JAL/TfBTwBgRLWmjzq4JiGtSWL9tSQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFzaaFEtkFdKniQUZDfrGg5NGH8XMB8GA1UdIwQY
MBaAFMDjlerFA38uR4WVb42ouGnrvvzgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd09PVjZzVURmeTVIaFpWdmphaTRhZXUtX09BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy80MjBhMTMtZjBhNS00ZGIwLTkwNDgt
MTU5NThhODlhMDEyLzEvd09PVjZzVURmeTVIaFpWdmphaTRhZXUtX09BLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNy80MjBhMTMtZjBhNS00ZGIwLTkwNDgtMTU5NThhODlhMDEy
LzEvd09PVjZzVURmeTVIaFpWdmphaTRhZXUtX09BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcAaOPmMZ
5Ja05ajCMMtScMXG5kmCs+MBAODkRMvqo4sp3d0QzRNfovJ09Z4RNXaNKjQjWKad
UrBZ3/aaHNQiFMAfRR0JY5vH74KJDr/3v7wuBFLE8GCTzUkmITjFMtR+gEf1lR2V
aiuWFv7WDaFgXtS+9ZqDwX3QkLur9sf9eVIX0+HqnZVlS6/g0BKyZsDqjzlpkG0I
D/c8uXSExxzu7iMmcVO+lXoiieG/p6h7aXTgebMOFM+aueN++CdNh88WvkwO6OUg
XuYtEsZkcPLu7gdoaPmI4WUUVDmn5tpK6wI3ta0lDQmvOKrLx4MWpOCpFh2zLgJV
Y2VsGkp7hGHMow==
-----END CERTIFICATE-----
Generated at Tue Apr 8 06:07:23 2025 by rpki-client