Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/c2df59-9f1e-48df-8466-c6495853cc1a/1/HS_vvRaPGGYeyhVWncYhj4Z0aUI.mft
File:                     HS_vvRaPGGYeyhVWncYhj4Z0aUI.mft (raw, json)
Hash identifier:          6GW0MrApA6syh6J7QFkaaFu2lFgC9/XwA1aK1cfb1L0=
Subject key identifier:   D3:56:FE:9B:B6:94:4F:06:7A:7E:38:06:11:F4:7D:B3:1E:55:05:2A
Authority key identifier: 1D:2F:EF:BD:16:8F:18:66:1E:CA:15:56:9D:C6:21:8F:86:74:69:42
Certificate issuer:       /CN=1d2fefbd168f18661eca15569dc6218f86746942
Certificate serial:       0194BBCEB6BAECE2AD5155E9B43DDE73225E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HS_vvRaPGGYeyhVWncYhj4Z0aUI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/53/c2df59-9f1e-48df-8466-c6495853cc1a/1/HS_vvRaPGGYeyhVWncYhj4Z0aUI.mft
Manifest number:          0F84
Signing time:             Fri 31 Jan 2025 10:01:13 +0000
Manifest this update:     Fri 31 Jan 2025 10:01:13 +0000
Manifest next update:     Sat 01 Feb 2025 10:01:13 +0000
Files and hashes:         1: HS_vvRaPGGYeyhVWncYhj4Z0aUI.crl (hash: m8NKwiwpR+2Vptw1gtULjwlkfqkGrXQpkxVYYX9OmCg=)
                          2: jgAsessKAm9uqTW97_vJxlFphmg.roa (hash: SBPtFGq/5yKwTAX24BEiHsnyylA3vI1PAj8aDZuhBbE=)
                          3: kmGblmvAAGyRlFsROEtILxJX0AY.roa (hash: j4zVjRnml2SsYMPrYKgAmMnMiU9kMLQ4Se/WCN6WRCY=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bb:ce:b6:ba:ec:e2:ad:51:55:e9:b4:3d:de:73:22:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1d2fefbd168f18661eca15569dc6218f86746942
        Validity
            Not Before: Jan 31 10:01:13 2025 GMT
            Not After : Feb  1 10:01:13 2025 GMT
        Subject: CN=d356fe9bb6944f067a7e380611f47db31e55052a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:06:52:3b:b7:5c:9f:fd:09:86:77:ab:a9:98:
                    d1:e8:14:6c:20:89:c6:6d:94:2e:bc:5a:52:ab:2d:
                    3c:7b:ab:5a:b4:d2:95:9e:54:71:36:4d:4a:dd:b1:
                    84:5a:fb:cf:62:5f:e7:96:55:0e:aa:83:64:9c:2c:
                    87:fe:42:53:9b:20:45:3d:34:9d:28:04:53:45:32:
                    75:35:ff:5d:c2:67:6f:59:4f:b0:09:cb:35:84:9b:
                    c9:96:42:c5:bd:63:11:64:4e:2e:25:3e:a8:1d:56:
                    6a:8a:5b:df:fb:93:ae:81:10:fa:81:b9:89:1a:1a:
                    51:23:98:a5:98:55:00:56:ac:b0:29:4d:4f:4c:00:
                    12:ed:44:1d:8f:2f:4c:18:cc:a5:cb:53:f6:90:79:
                    ad:2f:98:98:bd:f3:a7:0d:fb:ff:2c:fd:c9:0b:29:
                    e8:78:84:b3:4c:f2:81:09:63:59:3c:7d:09:dc:82:
                    ea:24:04:1f:f0:2a:f3:a1:10:7b:4c:bb:0e:a2:b9:
                    63:37:ab:a0:0e:b7:e0:3e:7d:91:87:3e:0b:46:20:
                    13:8c:39:51:be:11:5c:1e:e2:32:9d:fd:19:4a:c2:
                    50:d7:b1:39:3d:3e:58:80:e3:1a:be:6f:e6:c1:13:
                    26:3c:18:12:1a:30:f1:3e:e9:7f:9f:3a:c2:34:e9:
                    52:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:56:FE:9B:B6:94:4F:06:7A:7E:38:06:11:F4:7D:B3:1E:55:05:2A
            X509v3 Authority Key Identifier:
                keyid:1D:2F:EF:BD:16:8F:18:66:1E:CA:15:56:9D:C6:21:8F:86:74:69:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HS_vvRaPGGYeyhVWncYhj4Z0aUI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/c2df59-9f1e-48df-8466-c6495853cc1a/1/HS_vvRaPGGYeyhVWncYhj4Z0aUI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/53/c2df59-9f1e-48df-8466-c6495853cc1a/1/HS_vvRaPGGYeyhVWncYhj4Z0aUI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:d7:f0:36:71:d0:59:4c:f8:5a:c9:21:8f:37:be:13:dd:b4:
         9d:fe:e0:78:52:31:e6:6c:c8:5e:f0:89:4c:4d:89:97:f4:30:
         7c:f5:f4:31:c1:3d:6d:2e:27:78:9d:3d:df:2b:6c:b4:47:6e:
         c3:b9:a2:e8:b7:c8:f6:0f:b8:b6:d4:80:ef:74:17:33:5d:57:
         94:49:46:19:58:a8:1e:c5:cf:76:a5:01:25:ae:5d:42:17:50:
         d4:40:38:63:25:d6:4b:9a:9a:76:a9:19:66:8c:21:08:3f:89:
         a1:a9:b7:45:36:de:42:52:e8:0c:a2:57:7c:c6:37:e1:d2:13:
         a2:e0:3e:46:83:bb:09:3b:0c:b0:01:3c:99:56:52:90:0d:b2:
         7d:1e:f0:25:af:7f:7f:61:ea:d6:68:0a:62:1e:70:93:6f:30:
         30:0b:f9:72:d7:b2:45:07:3a:3d:8e:40:d4:05:64:c9:d5:cb:
         09:99:a9:66:d4:ed:f9:d9:66:22:f5:28:f9:3e:96:cd:a6:27:
         b5:64:2b:f9:a2:4c:76:4e:ae:d0:10:57:be:ce:7a:73:7c:40:
         f9:71:6d:02:f6:00:dc:35:5e:66:97:2c:e5:a1:73:be:dd:1f:
         6f:e6:a4:be:ed:77:82:b0:6f:33:36:9e:18:d8:2c:a7:69:31:
         5e:96:fe:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:04:42 2025 by rpki-client