Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/cd1db3-2877-4f32-83c5-370b82e9f90b/1/vptUWMI322WEjLKsvsbblCP8s6Y.mft
File:                     vptUWMI322WEjLKsvsbblCP8s6Y.mft (raw, json)
Hash identifier:          5I5pSEvgkT9Cpa2hwz7KVVciRr7Js/yESp3t3toYfgo=
Subject key identifier:   A9:11:8A:0D:8C:C5:B8:B9:63:44:CC:B6:3F:28:20:6D:0E:E2:57:A2
Authority key identifier: BE:9B:54:58:C2:37:DB:65:84:8C:B2:AC:BE:C6:DB:94:23:FC:B3:A6
Certificate issuer:       /CN=be9b5458c237db65848cb2acbec6db9423fcb3a6
Certificate serial:       0194BC04BCA16B858FF15B1E761EE9F59068
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vptUWMI322WEjLKsvsbblCP8s6Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/36/cd1db3-2877-4f32-83c5-370b82e9f90b/1/vptUWMI322WEjLKsvsbblCP8s6Y.mft
Manifest number:          0FC4
Signing time:             Fri 31 Jan 2025 11:00:14 +0000
Manifest this update:     Fri 31 Jan 2025 11:00:14 +0000
Manifest next update:     Sat 01 Feb 2025 11:00:14 +0000
Files and hashes:         1: SPOdZUKsCzIXgJOCF_UL7n1RilU.roa (hash: AvcsY0IcsdeApRna15WxWc9F7nJGA8l55JTs96Qf9tg=)
                          2: vptUWMI322WEjLKsvsbblCP8s6Y.crl (hash: EAYU6EVgNqYcvkvjzCvgRBMhVIb2cD65KUtz77vUU78=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:04:bc:a1:6b:85:8f:f1:5b:1e:76:1e:e9:f5:90:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=be9b5458c237db65848cb2acbec6db9423fcb3a6
        Validity
            Not Before: Jan 31 11:00:14 2025 GMT
            Not After : Feb  1 11:00:14 2025 GMT
        Subject: CN=a9118a0d8cc5b8b96344ccb63f28206d0ee257a2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:f8:71:6f:7d:80:12:6f:00:c9:2c:c0:85:b9:
                    47:6f:ff:10:e1:35:94:9e:62:e6:c0:9e:94:f7:08:
                    0b:1a:4c:be:a7:0c:ee:2c:f3:f3:0b:76:f3:ad:20:
                    ed:f1:35:22:b3:81:aa:e4:2c:b6:7a:dc:5f:ac:9f:
                    e8:0e:ab:c9:5f:f2:76:b7:fa:ee:ff:cc:cb:bd:ac:
                    35:46:38:1d:7d:f2:21:aa:02:4d:ea:4a:3b:eb:52:
                    22:22:78:16:97:1a:31:51:4a:6c:23:23:93:ca:b4:
                    67:8b:fe:48:55:f0:78:70:c7:f9:03:b3:4e:51:f4:
                    75:28:7a:d0:77:a5:2f:5d:33:d1:07:7f:91:76:0a:
                    0f:38:81:cb:a0:a2:4e:f6:25:f5:5c:d1:7f:8d:17:
                    27:92:a5:b1:62:1d:95:8c:9a:ca:77:55:40:7a:81:
                    50:63:8f:fe:5c:cb:47:b7:8b:14:2a:93:c8:6a:70:
                    5b:1f:de:1c:8e:22:d5:15:84:42:ce:30:f9:87:f8:
                    47:7e:28:c9:9a:78:a6:48:06:bf:41:63:f0:d7:83:
                    ab:63:45:e2:67:39:65:60:0b:bd:b6:25:79:9b:c0:
                    2e:6c:64:f1:3c:d5:7f:91:53:e0:e1:56:f1:98:fd:
                    20:31:0f:b5:fa:4f:2d:eb:31:bf:e6:f3:1e:cf:fd:
                    4b:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:11:8A:0D:8C:C5:B8:B9:63:44:CC:B6:3F:28:20:6D:0E:E2:57:A2
            X509v3 Authority Key Identifier:
                keyid:BE:9B:54:58:C2:37:DB:65:84:8C:B2:AC:BE:C6:DB:94:23:FC:B3:A6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vptUWMI322WEjLKsvsbblCP8s6Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/cd1db3-2877-4f32-83c5-370b82e9f90b/1/vptUWMI322WEjLKsvsbblCP8s6Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/36/cd1db3-2877-4f32-83c5-370b82e9f90b/1/vptUWMI322WEjLKsvsbblCP8s6Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         de:99:19:ad:de:71:5a:2c:75:f7:9f:62:b9:f5:e1:16:16:d7:
         5d:85:8b:bf:08:5f:32:a3:4f:4c:88:23:d8:41:cb:84:e1:ef:
         e8:51:93:60:c2:1e:b0:ba:7f:1d:95:7c:68:d3:f7:96:5a:6d:
         49:ab:1b:4b:3f:50:c4:55:bd:39:99:03:c1:ba:a4:de:b3:2a:
         bc:c3:09:51:dd:cd:a1:e8:31:5c:82:8d:b5:a9:52:2a:64:15:
         00:ec:de:53:1f:c1:87:8a:8a:0c:97:71:02:af:1c:f1:5d:2c:
         41:a0:23:07:05:5d:3b:d7:f4:66:05:9e:f0:3d:a0:5e:ea:1a:
         1b:27:01:ef:77:5f:ed:8a:7c:77:c8:7c:eb:8b:ab:28:e0:bf:
         7d:54:81:69:3b:d4:84:e4:bd:1a:0d:f5:b9:a8:b6:66:7d:8f:
         ea:ac:88:44:6b:30:07:77:15:26:fc:0a:92:fb:47:f0:f4:41:
         93:d1:08:2e:82:fa:2d:4a:12:46:59:fc:73:7b:f2:51:df:c3:
         88:c1:b0:4d:62:31:d8:dc:ab:79:b3:69:e5:73:9e:95:7c:d6:
         a4:21:c7:80:af:7b:35:db:93:ff:63:b1:02:96:ba:af:cf:b8:
         71:2f:e8:8c:b7:d6:77:ed:6e:81:53:00:b3:6e:59:c4:b4:9a:
         19:02:a8:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:02:29 2025 by rpki-client