Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/9cfc79-8bda-4862-a7d8-4f8d9355d862/1/WFRbn70B0owOptCPW0cts0-tLqM.mft
File:                     WFRbn70B0owOptCPW0cts0-tLqM.mft (raw, json)
Hash identifier:          xBArG9Ow67GyXZxcngww+iyJWMNlHGKnboqQXGN1ZPg=
Subject key identifier:   6F:66:71:09:2E:76:05:E5:69:E0:2A:A4:B2:6A:CE:48:A3:A5:91:C4
Authority key identifier: 58:54:5B:9F:BD:01:D2:8C:0E:A6:D0:8F:5B:47:2D:B3:4F:AD:2E:A3
Certificate issuer:       /CN=58545b9fbd01d28c0ea6d08f5b472db34fad2ea3
Certificate serial:       01962F06FF2ED658F5BAF98FCE8F7E144246
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WFRbn70B0owOptCPW0cts0-tLqM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/03/9cfc79-8bda-4862-a7d8-4f8d9355d862/1/WFRbn70B0owOptCPW0cts0-tLqM.mft
Manifest number:          14B0
Signing time:             Sun 13 Apr 2025 12:01:49 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:49 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:49 +0000
Files and hashes:         1: WFRbn70B0owOptCPW0cts0-tLqM.crl (hash: T8IHJJwTm05C/YBRUYvt/mBek6OP0A+O1C9OB+qdV80=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:ff:2e:d6:58:f5:ba:f9:8f:ce:8f:7e:14:42:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=58545b9fbd01d28c0ea6d08f5b472db34fad2ea3
        Validity
            Not Before: Apr 13 12:01:49 2025 GMT
            Not After : Apr 14 12:01:49 2025 GMT
        Subject: CN=6f6671092e7605e569e02aa4b26ace48a3a591c4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:f1:c3:c1:a9:a6:f3:75:74:b3:ee:aa:10:03:
                    ac:d6:90:c0:04:5f:69:63:c5:02:c5:6a:71:5e:75:
                    c5:7f:3c:b4:a8:7a:a3:45:ca:72:40:55:e3:29:74:
                    69:9a:a2:a1:cc:eb:e0:fa:e1:d7:f2:d3:25:ee:4a:
                    ca:54:d1:f2:14:33:ce:2c:b7:a5:49:3c:ef:ab:b4:
                    7f:af:e6:17:da:f1:41:0e:a3:60:5f:70:82:10:77:
                    ff:e8:aa:c6:45:c8:95:ec:a9:88:22:34:9d:36:bc:
                    d8:11:fb:b2:1f:30:88:59:34:77:19:40:9d:a4:d4:
                    93:74:33:d2:15:be:6d:ae:a9:0d:2a:dd:e6:5d:0f:
                    04:e4:37:eb:20:51:26:7d:8c:43:32:20:cb:63:ba:
                    7a:03:00:c7:39:65:9b:c8:2a:a1:ca:eb:bf:4d:60:
                    b2:8d:03:5e:8c:f2:ac:0b:81:e3:b6:51:5c:fa:eb:
                    b4:ab:a7:02:b2:d7:1f:fc:e6:e7:ae:68:1b:b9:5f:
                    90:7f:10:7d:b9:10:55:cc:bd:2d:79:b7:4c:f7:fb:
                    8a:62:6a:4a:4e:ed:75:0b:53:00:33:bb:a2:9d:f0:
                    da:0f:ee:2b:15:d4:3a:be:a9:4c:9e:3f:0a:88:8c:
                    fa:b9:bf:28:c4:71:79:8c:af:06:2d:04:d0:a0:1f:
                    dc:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:66:71:09:2E:76:05:E5:69:E0:2A:A4:B2:6A:CE:48:A3:A5:91:C4
            X509v3 Authority Key Identifier:
                keyid:58:54:5B:9F:BD:01:D2:8C:0E:A6:D0:8F:5B:47:2D:B3:4F:AD:2E:A3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WFRbn70B0owOptCPW0cts0-tLqM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/9cfc79-8bda-4862-a7d8-4f8d9355d862/1/WFRbn70B0owOptCPW0cts0-tLqM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/03/9cfc79-8bda-4862-a7d8-4f8d9355d862/1/WFRbn70B0owOptCPW0cts0-tLqM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:75:e2:28:5d:0f:2e:c3:56:a9:aa:c3:cc:4e:08:4a:78:43:
         b3:e2:5b:90:df:e4:6c:66:5c:8d:13:a6:d6:59:c4:0e:ca:2d:
         10:59:ca:90:03:02:5c:52:27:3c:a6:34:a7:a8:01:8b:e5:b6:
         9c:4b:b3:72:3e:e4:54:d1:61:73:ed:8f:60:22:13:48:fa:17:
         80:31:f1:eb:33:7d:b6:56:a3:c8:60:4f:58:69:72:ca:c4:16:
         d7:df:aa:25:2d:93:de:a3:9f:a0:36:57:fd:fa:b4:2b:8a:88:
         b2:36:e4:c4:4b:8b:e6:2d:80:ee:1a:b8:a1:98:9c:6b:91:d5:
         d2:71:09:b8:13:c8:51:b4:22:49:44:9d:16:af:9d:97:17:42:
         41:b6:e3:aa:db:04:33:42:df:f5:9c:31:6c:2e:63:27:b1:a2:
         3e:cc:fe:f8:e6:8a:02:cd:f3:ca:18:81:46:dc:b7:d3:de:eb:
         c3:b3:90:aa:c6:f0:17:49:8c:9c:8d:11:bb:07:96:f3:24:e2:
         19:33:c3:70:4c:1f:ad:4c:82:d3:0a:d9:1f:ce:a5:64:39:00:
         b7:0c:2b:63:05:b7:3f:30:4d:4b:71:e2:69:e8:fd:c1:63:65:
         f9:5e:08:9f:21:72:c8:ed:30:b9:f0:5a:c6:76:63:c0:85:d5:
         0c:57:49:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:26:44 2025 by rpki-client on console.sobornost.net