Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/f8e67f-8dd1-4f2c-8de9-23064e21d14d/1/VbIFm3SNbd1cWgwdNel173uohEI.mft
File:                     VbIFm3SNbd1cWgwdNel173uohEI.mft (raw, json)
Hash identifier:          rflFc1XCTD54/VWN/O6xw8QKIVaTLb9csjL5MKNz5fg=
Subject key identifier:   3D:16:F4:0E:FF:8F:B3:74:27:F2:14:C1:55:7A:EF:D1:F5:EA:48:27
Authority key identifier: 55:B2:05:9B:74:8D:6D:DD:5C:5A:0C:1D:35:E9:75:EF:7B:A8:84:42
Certificate issuer:       /CN=55b2059b748d6ddd5c5a0c1d35e975ef7ba88442
Certificate serial:       0194BCAA0F7F77221E549159A281B9A47273
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VbIFm3SNbd1cWgwdNel173uohEI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2e/f8e67f-8dd1-4f2c-8de9-23064e21d14d/1/VbIFm3SNbd1cWgwdNel173uohEI.mft
Manifest number:          03E8
Signing time:             Fri 31 Jan 2025 14:00:49 +0000
Manifest this update:     Fri 31 Jan 2025 14:00:49 +0000
Manifest next update:     Sat 01 Feb 2025 14:00:49 +0000
Files and hashes:         1: VbIFm3SNbd1cWgwdNel173uohEI.crl (hash: yJeDPDaZTgSfgm5l5eJStlVGPIYJot17nlKxrDi2mVw=)
                          2: r2ver_B1QfAF2R2XPpvc11DJXmA.roa (hash: 6Y5LmQV5zXuhOo4pwCZR6jl/OtipaY9LyBdb5pEQmos=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:aa:0f:7f:77:22:1e:54:91:59:a2:81:b9:a4:72:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=55b2059b748d6ddd5c5a0c1d35e975ef7ba88442
        Validity
            Not Before: Jan 31 14:00:49 2025 GMT
            Not After : Feb  1 14:00:49 2025 GMT
        Subject: CN=3d16f40eff8fb37427f214c1557aefd1f5ea4827
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:83:4b:d0:4c:20:f5:3c:6d:eb:5e:be:de:8a:
                    ca:4c:5b:df:d5:61:1e:8c:8f:52:3f:d9:c7:9d:63:
                    ab:0e:8d:47:3c:2f:ae:b3:b5:36:56:75:af:6c:f4:
                    83:1b:89:d8:a6:48:3d:b4:d7:d1:da:5f:15:51:14:
                    ea:8b:3d:53:7f:18:e1:e7:68:f1:3e:8c:91:df:82:
                    25:3b:10:07:34:af:28:7e:e2:70:ac:dc:a7:db:01:
                    72:6d:c1:b4:cf:96:f4:d2:fa:c3:b4:e5:83:4a:53:
                    2f:9d:6b:ab:49:4a:1a:0b:bf:ba:30:e6:7d:36:52:
                    3f:bc:fc:26:58:52:41:92:60:c2:51:f9:23:2f:5d:
                    37:82:94:15:b2:32:72:d7:c8:18:b7:4b:ef:9f:b7:
                    68:f6:24:96:a3:01:f0:61:89:f5:7f:44:3a:42:8c:
                    4e:ba:56:ac:49:b0:56:aa:6d:c1:f9:71:e2:1c:af:
                    1a:22:12:31:da:1c:c3:39:e0:1a:4e:f9:71:06:bc:
                    f1:59:5b:20:ce:18:fd:a3:f4:19:46:83:b3:4a:6e:
                    5b:40:a2:3f:1e:90:38:0a:f2:f9:d8:a6:55:f9:ce:
                    4b:99:89:9e:07:5e:72:e7:f3:7c:57:70:1f:38:87:
                    d1:cc:3f:19:e2:89:c1:fa:0f:3a:61:7b:ae:0c:5c:
                    13:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:16:F4:0E:FF:8F:B3:74:27:F2:14:C1:55:7A:EF:D1:F5:EA:48:27
            X509v3 Authority Key Identifier:
                keyid:55:B2:05:9B:74:8D:6D:DD:5C:5A:0C:1D:35:E9:75:EF:7B:A8:84:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VbIFm3SNbd1cWgwdNel173uohEI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/f8e67f-8dd1-4f2c-8de9-23064e21d14d/1/VbIFm3SNbd1cWgwdNel173uohEI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/f8e67f-8dd1-4f2c-8de9-23064e21d14d/1/VbIFm3SNbd1cWgwdNel173uohEI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:ee:fe:f9:94:ce:b1:87:b7:4c:02:ec:01:08:3a:c4:5b:65:
         39:a9:e9:eb:2f:74:e7:3a:da:0b:d9:e1:2a:50:b3:ef:e3:e1:
         19:3e:10:0e:5b:d6:20:36:51:fe:e7:d3:78:b8:46:13:c4:9e:
         07:21:68:48:59:c1:8f:d0:4a:42:45:f5:68:0b:1f:77:ac:9a:
         c1:04:f8:39:e5:37:cc:2b:a4:7e:04:89:fb:a1:15:1e:52:5a:
         6d:00:ea:79:05:30:c5:ef:ef:83:09:60:09:d7:21:fc:9f:be:
         ad:71:c9:0c:53:d2:55:b5:77:65:d4:af:fa:c8:71:d0:4f:e2:
         8c:c0:b6:fa:e3:6d:24:98:14:f3:5f:6f:7c:df:73:7a:8b:ac:
         4b:43:f5:69:ff:32:ce:54:f8:11:00:7a:07:4b:67:a8:f0:05:
         32:33:17:0a:b0:b8:ba:86:ca:a8:7b:df:5e:33:aa:9f:fb:a8:
         55:4b:d9:df:79:4e:aa:a2:5b:26:3b:29:76:ee:67:a4:57:92:
         7c:55:c1:2b:49:df:67:49:21:1a:a6:61:4d:a5:07:e1:eb:6e:
         22:bc:4d:c6:0f:55:17:13:05:f5:1f:56:54:a4:98:ee:05:11:
         88:58:64:0e:a0:77:cd:93:a5:00:f0:5c:cf:71:20:dd:1d:51:
         af:6f:99:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:37:29 2025 by rpki-client