Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/647a4a-d2fd-43e0-8f3b-44108162e492/1/VwhmHGruys2bcRdqct6WybRQlDk.mft
File:                     VwhmHGruys2bcRdqct6WybRQlDk.mft (raw, json)
Hash identifier:          aL3Bt2LKwKeSpnbvHPvQCUb7tTzlKe4QbMa80RRNa10=
Subject key identifier:   B7:C8:5A:A9:E0:52:11:86:33:99:D2:95:3B:ED:AD:53:FF:C8:08:5E
Authority key identifier: 57:08:66:1C:6A:EE:CA:CD:9B:71:17:6A:72:DE:96:C9:B4:50:94:39
Certificate issuer:       /CN=5708661c6aeecacd9b71176a72de96c9b4509439
Certificate serial:       0194BC7305D04546BCE7DABC9A9CF41DD541
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VwhmHGruys2bcRdqct6WybRQlDk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/45/647a4a-d2fd-43e0-8f3b-44108162e492/1/VwhmHGruys2bcRdqct6WybRQlDk.mft
Manifest number:          0D55
Signing time:             Fri 31 Jan 2025 13:00:42 +0000
Manifest this update:     Fri 31 Jan 2025 13:00:42 +0000
Manifest next update:     Sat 01 Feb 2025 13:00:42 +0000
Files and hashes:         1: 0DRAcYwVU1wTPmKPUVZE-cIvVWk.roa (hash: SCcdCtXYPz3bfVKFsB8kMQkE3rKjzNyXJ29sazaODiU=)
                          2: VwhmHGruys2bcRdqct6WybRQlDk.crl (hash: b1S0kNd7y7HqB5u63J8l9Umt7+yJP3ccHHR+Ysnqt2o=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:73:05:d0:45:46:bc:e7:da:bc:9a:9c:f4:1d:d5:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5708661c6aeecacd9b71176a72de96c9b4509439
        Validity
            Not Before: Jan 31 13:00:42 2025 GMT
            Not After : Feb  1 13:00:42 2025 GMT
        Subject: CN=b7c85aa9e05211863399d2953bedad53ffc8085e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:d0:db:06:c9:e7:c6:c8:fe:61:32:74:dc:f8:
                    cf:45:16:fd:85:47:bf:75:e2:0b:cb:cd:70:f9:3c:
                    cd:52:2c:ca:b1:1f:57:25:5e:3b:28:72:f9:a2:57:
                    37:3c:8a:a6:d4:13:59:72:81:d9:79:c6:a3:28:8f:
                    66:4b:db:f7:b5:4b:e7:66:c1:cf:f5:9e:f7:a9:b6:
                    1f:57:d2:76:8b:21:92:7d:44:17:59:d9:76:e9:e1:
                    c3:43:8a:5a:7b:1c:e6:1e:47:e7:dd:c5:08:6a:7d:
                    6b:98:38:b9:e9:3e:e2:19:01:13:e0:6f:13:53:fc:
                    e5:8a:76:83:37:ff:fc:56:a8:09:75:23:41:da:62:
                    9e:17:8f:fb:a8:89:9c:e3:bc:3c:a7:f0:b5:6c:67:
                    56:71:80:76:2b:41:9e:00:25:bb:e1:63:4a:f1:2f:
                    15:ba:df:1f:85:bd:f3:5a:21:24:f4:47:db:3b:ff:
                    cc:47:67:5c:d4:15:5b:37:55:66:6b:2a:e7:4b:25:
                    d7:19:04:66:66:aa:c4:11:c2:e6:22:c5:3e:7b:16:
                    cb:ed:6b:4b:53:04:eb:c2:30:59:ee:76:70:af:2a:
                    20:b3:4d:a3:13:75:be:cd:2c:3c:d8:91:31:ac:6f:
                    71:85:6b:b8:4a:5e:69:3b:1d:39:a8:9e:6f:5f:ca:
                    45:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:C8:5A:A9:E0:52:11:86:33:99:D2:95:3B:ED:AD:53:FF:C8:08:5E
            X509v3 Authority Key Identifier:
                keyid:57:08:66:1C:6A:EE:CA:CD:9B:71:17:6A:72:DE:96:C9:B4:50:94:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VwhmHGruys2bcRdqct6WybRQlDk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/647a4a-d2fd-43e0-8f3b-44108162e492/1/VwhmHGruys2bcRdqct6WybRQlDk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/45/647a4a-d2fd-43e0-8f3b-44108162e492/1/VwhmHGruys2bcRdqct6WybRQlDk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:e2:c1:15:ed:20:59:2f:1e:15:36:d6:ff:e8:97:af:70:37:
         68:98:a5:f5:6d:22:a0:2f:b7:59:f1:d8:b0:f4:a8:67:64:d3:
         3e:28:bd:7a:ff:3e:81:d5:b1:2f:b5:d0:e4:2b:c2:c7:bd:32:
         97:59:04:fe:7b:fd:fe:fe:3f:e5:f8:51:6a:c1:5e:8c:79:5f:
         25:8a:c0:3e:30:c2:4d:d8:c3:be:b7:ab:66:d4:b6:17:72:57:
         cb:3b:e9:52:3d:2b:9a:55:9c:ef:ba:6a:3c:72:6a:54:07:0e:
         c7:0f:42:9c:0e:67:d2:df:54:08:1a:fc:e6:09:0d:d8:34:23:
         4a:7b:0b:68:0e:ae:f8:66:4c:1f:17:a2:26:a2:06:f8:6c:7c:
         95:c9:32:88:b1:db:7f:08:ec:c7:09:70:f3:d9:2d:eb:b4:2b:
         ef:92:f0:a5:8d:59:2b:7d:06:39:57:f0:6c:bb:df:8a:a4:d7:
         5c:5c:24:0a:e0:91:02:0c:4d:99:86:87:a6:74:5c:9c:d4:43:
         c9:91:07:a6:61:c4:36:e4:28:a7:ad:06:a8:d5:47:fd:e6:a9:
         97:d5:9d:5d:ba:20:13:66:3d:0a:2a:98:e3:e0:f0:85:3a:f9:
         58:01:6d:be:92:16:6d:68:85:1f:92:cb:81:1a:1f:02:48:49:
         b1:9f:9d:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 05:49:10 2025 by rpki-client