Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/65a525-a259-4023-9f95-a6a494562e1d/1/vrPkQJXzjKOIg2v2Zbb58JjcV5Q.mft
File:                     vrPkQJXzjKOIg2v2Zbb58JjcV5Q.mft (raw, json)
Hash identifier:          Too10zIcfz8dDt2jx6Pk6h8QtO8OTmWD0m+a9rILgvs=
Subject key identifier:   B7:CF:94:75:67:DE:26:59:F1:0F:3D:38:5E:F1:D4:16:F5:43:4E:D2
Authority key identifier: BE:B3:E4:40:95:F3:8C:A3:88:83:6B:F6:65:B6:F9:F0:98:DC:57:94
Certificate issuer:       /CN=beb3e44095f38ca388836bf665b6f9f098dc5794
Certificate serial:       0194BBCED26186275004619ED5E1DF98F4B5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vrPkQJXzjKOIg2v2Zbb58JjcV5Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3f/65a525-a259-4023-9f95-a6a494562e1d/1/vrPkQJXzjKOIg2v2Zbb58JjcV5Q.mft
Manifest number:          10FA
Signing time:             Fri 31 Jan 2025 10:01:21 +0000
Manifest this update:     Fri 31 Jan 2025 10:01:21 +0000
Manifest next update:     Sat 01 Feb 2025 10:01:21 +0000
Files and hashes:         1: vrPkQJXzjKOIg2v2Zbb58JjcV5Q.crl (hash: RdH0LmwwhppyaE9I8IRfrGjTy7kmeshVYphPaSJnyf4=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bb:ce:d2:61:86:27:50:04:61:9e:d5:e1:df:98:f4:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=beb3e44095f38ca388836bf665b6f9f098dc5794
        Validity
            Not Before: Jan 31 10:01:21 2025 GMT
            Not After : Feb  1 10:01:21 2025 GMT
        Subject: CN=b7cf947567de2659f10f3d385ef1d416f5434ed2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:33:a5:be:00:a6:b9:41:ec:5c:24:dc:e8:55:
                    69:45:58:90:6e:d9:36:07:b3:9b:a6:b5:2c:61:48:
                    aa:33:90:43:f9:f0:90:18:91:2b:68:ce:08:35:ed:
                    42:2d:f8:60:24:63:55:64:54:25:c2:62:98:41:fe:
                    06:a7:8e:b9:c4:22:86:47:32:1b:9a:91:d6:8d:a7:
                    7b:91:49:eb:eb:cd:a7:5e:c8:ac:2d:da:36:1a:da:
                    d6:dd:b8:63:b9:20:eb:e3:ed:32:9d:af:08:0a:d7:
                    5f:70:f9:8d:22:84:a0:17:ee:9e:38:76:50:06:0b:
                    53:20:93:12:d8:99:8e:07:70:db:83:9e:9c:5a:e6:
                    99:77:d9:76:62:0c:39:30:05:02:a9:ba:23:b3:6c:
                    43:4f:a1:6a:8c:17:3f:fd:99:9a:67:30:7c:f0:33:
                    53:2e:bf:0b:c6:83:2d:51:6b:f2:7a:0f:cd:8c:9f:
                    7b:c4:46:7b:54:f4:8e:a5:0d:9f:4a:58:08:2b:18:
                    c3:29:a4:1a:38:73:bd:0b:ed:5e:ce:d3:1c:79:73:
                    48:7a:43:37:ad:69:4c:17:4d:ab:da:38:6e:d3:0a:
                    be:b5:57:7f:47:ea:17:34:57:ab:d6:bf:36:5c:bd:
                    fd:fa:0d:66:70:0a:d6:0e:29:ca:0b:7d:af:a3:00:
                    75:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:CF:94:75:67:DE:26:59:F1:0F:3D:38:5E:F1:D4:16:F5:43:4E:D2
            X509v3 Authority Key Identifier:
                keyid:BE:B3:E4:40:95:F3:8C:A3:88:83:6B:F6:65:B6:F9:F0:98:DC:57:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vrPkQJXzjKOIg2v2Zbb58JjcV5Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/65a525-a259-4023-9f95-a6a494562e1d/1/vrPkQJXzjKOIg2v2Zbb58JjcV5Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/65a525-a259-4023-9f95-a6a494562e1d/1/vrPkQJXzjKOIg2v2Zbb58JjcV5Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:8e:85:4f:54:fe:9a:e1:f3:d0:b9:a6:36:7b:a7:8b:2d:3b:
         12:06:79:2f:48:1b:ec:e4:4b:07:e1:b3:98:5e:93:1a:9b:98:
         54:03:04:ea:6a:9e:6b:55:19:97:78:5d:31:24:c0:9f:bc:8b:
         69:df:d8:9b:5a:2f:51:d2:2a:23:8c:75:b7:e3:9e:6a:4c:c6:
         84:88:7c:0a:5a:8a:9f:19:8c:ad:42:da:20:86:e6:95:f7:31:
         07:e6:69:bd:fa:63:3b:ea:c6:42:7f:24:0f:7c:fa:3a:07:3b:
         83:ea:f5:b4:8f:83:87:b3:6b:ba:96:df:8e:6e:34:f5:d9:74:
         72:cb:ed:fb:20:20:42:1a:b7:fb:af:32:60:4a:04:64:39:83:
         27:b2:f6:f9:f7:4d:f6:fb:d6:f6:76:20:39:a5:0e:e2:f8:5e:
         a9:66:4d:b1:bd:9f:7b:89:a8:05:1b:67:4f:86:ff:7e:a8:17:
         f5:e0:7e:f4:51:d1:ac:7f:a6:b0:c3:c4:b5:f0:5c:16:cf:0a:
         e9:6e:bd:21:82:d6:22:86:42:2a:3f:f7:ae:5c:38:94:31:b7:
         81:b5:f6:66:09:34:c7:74:59:74:ec:4f:cc:b9:cc:8a:05:41:
         4a:47:cd:3b:f5:b9:1a:5a:a1:f0:de:48:c3:c3:f5:80:4d:70:
         ac:1e:bb:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:07:40 2025 by rpki-client