Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/50b205-8f21-46f5-a3f6-bca0a8f2f78c/1/w0CQmuwyCowu4cq84TAsu31OBIY.mft
File:                     w0CQmuwyCowu4cq84TAsu31OBIY.mft (raw, json)
Hash identifier:          qDj5f3FJ/I3aTugnlaOWaINh8obWllM6CK60t+71u24=
Subject key identifier:   F6:C5:18:2D:31:B2:F6:F8:C5:E2:95:E1:4F:60:5A:8B:42:E9:89:DB
Authority key identifier: C3:40:90:9A:EC:32:0A:8C:2E:E1:CA:BC:E1:30:2C:BB:7D:4E:04:86
Certificate issuer:       /CN=c340909aec320a8c2ee1cabce1302cbb7d4e0486
Certificate serial:       01962E2B46C0F079F86C1B27E84B6B332015
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/w0CQmuwyCowu4cq84TAsu31OBIY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/28/50b205-8f21-46f5-a3f6-bca0a8f2f78c/1/w0CQmuwyCowu4cq84TAsu31OBIY.mft
Manifest number:          117C
Signing time:             Sun 13 Apr 2025 08:01:50 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:50 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:50 +0000
Files and hashes:         1: 1JRmPjjw2eEyAEj7-d9EaoFd8tQ.roa (hash: qUFNGxht8SatseV7uTcgdf36n0Wje2HhZXA6lIEPzt8=)
                          2: jb-zD-QZseypOhoYrz7-lEkthR4.roa (hash: NVATDU2rQowVsA5kxCOsDlRv1YWlJaECqpg6RYlVt8g=)
                          3: w0CQmuwyCowu4cq84TAsu31OBIY.crl (hash: hrQnncfzFKS2JI8igQc/OYqvNaXhS/iJRMjvQ5qOoh8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2b:46:c0:f0:79:f8:6c:1b:27:e8:4b:6b:33:20:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c340909aec320a8c2ee1cabce1302cbb7d4e0486
        Validity
            Not Before: Apr 13 08:01:50 2025 GMT
            Not After : Apr 14 08:01:50 2025 GMT
        Subject: CN=f6c5182d31b2f6f8c5e295e14f605a8b42e989db
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:4b:0d:83:e1:2e:b4:87:2d:40:f5:39:fd:91:
                    09:68:ab:6e:69:07:20:40:1c:da:b7:1c:22:ff:dc:
                    b6:89:c1:0d:7d:71:9c:84:6e:be:94:b3:08:e0:8f:
                    37:e6:78:90:e2:19:f0:c0:c9:e3:23:a5:af:2d:fc:
                    e6:02:74:89:cc:56:09:5c:d0:d6:2f:d9:c3:f0:f7:
                    87:93:7a:4f:93:91:1d:39:35:be:99:a7:10:c9:46:
                    b6:b3:99:97:8e:da:fe:33:f5:63:d3:f1:ed:84:8e:
                    05:df:d8:fb:09:c7:d7:ca:fd:a3:42:f8:ab:9d:db:
                    ae:31:34:f9:6f:ef:d3:3a:37:ff:e7:53:47:bc:6c:
                    2a:fc:61:60:ea:e8:c5:b9:8b:2b:1e:31:7d:7a:b9:
                    c1:f4:7f:74:eb:4f:61:0a:c6:b7:c8:f7:3e:34:46:
                    a9:a2:c6:74:16:ac:1c:28:07:f8:13:96:eb:ee:2c:
                    f3:b2:d5:78:ac:99:33:74:9d:26:ab:33:15:68:27:
                    98:51:1f:f9:80:5b:ca:ae:cd:ad:ea:5b:a0:57:f2:
                    49:43:bd:82:9c:4a:a8:9f:9b:e3:a8:ef:ea:6e:c1:
                    df:40:79:b6:04:1f:92:ab:db:82:46:e8:ac:70:77:
                    d2:3e:2c:62:7d:e8:1b:bb:59:27:4e:d7:40:16:f6:
                    f0:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:C5:18:2D:31:B2:F6:F8:C5:E2:95:E1:4F:60:5A:8B:42:E9:89:DB
            X509v3 Authority Key Identifier:
                keyid:C3:40:90:9A:EC:32:0A:8C:2E:E1:CA:BC:E1:30:2C:BB:7D:4E:04:86

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w0CQmuwyCowu4cq84TAsu31OBIY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/50b205-8f21-46f5-a3f6-bca0a8f2f78c/1/w0CQmuwyCowu4cq84TAsu31OBIY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/28/50b205-8f21-46f5-a3f6-bca0a8f2f78c/1/w0CQmuwyCowu4cq84TAsu31OBIY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:85:ef:56:e8:4f:8a:f1:82:0c:22:f6:06:49:01:1c:59:e7:
         17:01:9d:e8:66:4e:65:e8:a5:ec:fc:b9:bb:39:e5:4d:a8:5e:
         20:bc:37:d5:24:8f:d7:a5:6b:42:c6:ad:ba:2c:8e:4c:2a:b8:
         8a:14:61:91:1e:39:18:10:c2:3d:2e:71:68:62:06:cd:67:5b:
         97:2f:57:ea:69:82:86:a6:9f:ec:4d:4e:5d:0e:62:6e:aa:9d:
         2c:1f:78:31:cd:86:be:b7:fd:f1:27:ae:49:eb:e2:45:0f:49:
         22:bf:fa:d6:fa:50:b6:92:8c:b1:85:47:8f:14:2f:31:21:15:
         a1:d7:18:ce:13:2d:eb:96:6f:5d:09:89:80:79:27:7c:2c:f5:
         86:ea:0b:28:7e:2b:6a:a7:c1:3c:05:25:19:d4:df:91:39:93:
         c8:20:4d:c8:24:1d:e9:eb:b6:a6:e0:dc:3f:dd:ba:94:0f:92:
         c3:c0:79:7f:ab:41:03:c6:38:72:80:36:19:ae:2a:e5:db:a3:
         d2:24:4f:11:dc:8a:ea:c8:88:5e:73:2a:a2:dc:a3:59:d3:78:
         b4:78:ed:20:ed:3c:6b:41:04:41:47:cd:6b:a8:f0:8b:41:af:
         0f:a4:1e:70:bb:db:41:12:b5:53:80:78:79:a4:07:14:f1:52:
         08:cc:88:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----