Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/a96ed6-e806-4185-96e6-3bbfe2be62ab/1/VJby6Q2yvTXVTG0j7tmw-Z-WY6Y.mft
File:                     VJby6Q2yvTXVTG0j7tmw-Z-WY6Y.mft (raw, json)
Hash identifier:          DrlmIz2WbbbJLa0mymT6Kor1UprrH4hq999atEh/lyM=
Subject key identifier:   DB:D0:6F:DE:E9:32:56:19:B7:97:09:3A:57:E9:97:77:B6:44:27:68
Authority key identifier: 54:96:F2:E9:0D:B2:BD:35:D5:4C:6D:23:EE:D9:B0:F9:9F:96:63:A6
Certificate issuer:       /CN=5496f2e90db2bd35d54c6d23eed9b0f99f9663a6
Certificate serial:       0194BBCEA9EF4D90814B1D6F064F234846FB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VJby6Q2yvTXVTG0j7tmw-Z-WY6Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/38/a96ed6-e806-4185-96e6-3bbfe2be62ab/1/VJby6Q2yvTXVTG0j7tmw-Z-WY6Y.mft
Manifest number:          0BF1
Signing time:             Fri 31 Jan 2025 10:01:10 +0000
Manifest this update:     Fri 31 Jan 2025 10:01:10 +0000
Manifest next update:     Sat 01 Feb 2025 10:01:10 +0000
Files and hashes:         1: VJby6Q2yvTXVTG0j7tmw-Z-WY6Y.crl (hash: Mh7q9rHCLJDQJOgTZyu1sG4IOMnP9lk8B8XftzeYYrE=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bb:ce:a9:ef:4d:90:81:4b:1d:6f:06:4f:23:48:46:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5496f2e90db2bd35d54c6d23eed9b0f99f9663a6
        Validity
            Not Before: Jan 31 10:01:10 2025 GMT
            Not After : Feb  1 10:01:10 2025 GMT
        Subject: CN=dbd06fdee9325619b797093a57e99777b6442768
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:52:27:6f:f8:5e:08:7a:1a:93:ec:0d:b5:b4:
                    b8:f2:95:1a:88:8a:9d:4b:2f:de:1d:2e:5b:62:ce:
                    d7:9a:17:bd:40:39:00:b0:4b:db:36:24:c4:d6:f5:
                    63:8d:2e:e9:1b:40:b4:38:71:2c:e5:be:9c:1e:e8:
                    4f:19:ce:d9:2c:02:aa:e8:5d:d9:1f:a5:fa:d6:3f:
                    bd:a6:27:c3:4e:ef:9a:e6:a2:59:cd:89:1e:9c:fe:
                    29:af:3d:4e:e8:57:4b:f3:25:2e:3e:e3:a4:9b:68:
                    4d:d3:98:e9:38:d5:e7:56:d9:69:bb:a2:9c:3e:b5:
                    d4:ef:dc:96:6a:bf:cb:70:80:dc:1d:cd:93:d0:0d:
                    e9:bb:62:a4:ef:92:ab:f3:e5:00:94:1b:cc:52:13:
                    f0:25:ad:e7:9e:1c:c9:10:3e:c6:1b:75:0d:b3:8d:
                    b1:30:f3:90:3a:1a:a6:a0:72:69:67:a8:ce:8e:40:
                    ba:8c:51:07:25:7c:ff:2d:ec:c0:19:5f:ec:98:01:
                    55:16:41:20:02:8e:7f:c8:aa:b1:2a:8d:f1:a4:2b:
                    ae:e1:dc:17:1a:8e:78:9e:42:51:cf:3b:b1:15:7f:
                    6f:3c:82:24:3a:11:50:48:99:f5:f4:d7:a9:24:71:
                    47:ef:ca:1b:7e:51:83:74:29:2e:2c:ba:68:65:f1:
                    53:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:D0:6F:DE:E9:32:56:19:B7:97:09:3A:57:E9:97:77:B6:44:27:68
            X509v3 Authority Key Identifier:
                keyid:54:96:F2:E9:0D:B2:BD:35:D5:4C:6D:23:EE:D9:B0:F9:9F:96:63:A6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJby6Q2yvTXVTG0j7tmw-Z-WY6Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/a96ed6-e806-4185-96e6-3bbfe2be62ab/1/VJby6Q2yvTXVTG0j7tmw-Z-WY6Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/38/a96ed6-e806-4185-96e6-3bbfe2be62ab/1/VJby6Q2yvTXVTG0j7tmw-Z-WY6Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b3:ca:43:12:ba:64:3b:9b:ab:26:42:b2:e5:a7:53:c0:a7:4a:
         f9:73:0a:6f:21:11:25:5c:06:ac:e3:65:6f:2f:a5:0e:93:d8:
         40:e4:96:8d:38:f0:13:c8:1f:18:aa:b9:81:26:da:1b:cd:1a:
         2f:ab:76:8a:28:3f:88:8d:42:7d:ca:06:d1:19:d7:6c:e2:4a:
         5d:3c:9c:ee:ce:d9:fb:f9:01:48:e9:d0:0f:71:f6:ea:1b:9c:
         df:1b:35:f7:9f:95:34:f3:d9:3e:0d:eb:1e:37:c6:37:26:55:
         c7:d1:d5:d7:b7:3c:62:55:3b:79:65:8c:b3:5e:59:2c:a9:92:
         97:b5:a3:db:f7:b4:2d:88:2b:69:3d:89:0f:8a:7c:54:bd:cb:
         6c:f3:77:56:b0:a3:e7:cb:02:37:b0:9e:fb:e8:a2:be:64:e7:
         03:3a:d6:7b:ef:bf:82:33:1f:45:51:5d:6f:6c:ab:88:e5:57:
         05:fe:e2:4c:a4:5a:82:3f:28:16:23:63:ef:a6:ad:74:bd:d7:
         d3:b2:da:df:74:e1:20:a7:e9:bc:b8:6e:b7:7c:82:71:07:e2:
         8c:d4:e5:86:d6:8d:61:e5:2f:30:11:ba:ff:5a:56:78:b3:eb:
         ed:35:e4:4a:1d:8d:51:d8:e2:1d:b9:ae:53:32:0e:67:d2:96:
         13:ef:8e:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:17:50 2025 by rpki-client