Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/446eba-9c0d-4765-b3dc-78308b2f5234/1/VUK3Zu9X1pz0-95Ly28K8Go7IgY.mft
File:                     VUK3Zu9X1pz0-95Ly28K8Go7IgY.mft (raw, json)
Hash identifier:          te9IOmKm5e7wRqtHfC0GDP5g/4augB2SfeD47Ltyt3w=
Subject key identifier:   98:0A:07:0B:A6:8C:65:07:84:DF:7C:F3:76:3E:08:E4:88:5D:10:85
Authority key identifier: 55:42:B7:66:EF:57:D6:9C:F4:FB:DE:4B:CB:6F:0A:F0:6A:3B:22:06
Certificate issuer:       /CN=5542b766ef57d69cf4fbde4bcb6f0af06a3b2206
Certificate serial:       0194BBCDCD3DF02DD9941177BC8517F267A8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VUK3Zu9X1pz0-95Ly28K8Go7IgY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/55/446eba-9c0d-4765-b3dc-78308b2f5234/1/VUK3Zu9X1pz0-95Ly28K8Go7IgY.mft
Manifest number:          02E2
Signing time:             Fri 31 Jan 2025 10:00:14 +0000
Manifest this update:     Fri 31 Jan 2025 10:00:14 +0000
Manifest next update:     Sat 01 Feb 2025 10:00:14 +0000
Files and hashes:         1: VUK3Zu9X1pz0-95Ly28K8Go7IgY.crl (hash: kiQpoGJVX3CZWx199rHDRauC/5LZ/xM//47Mz3/VFYQ=)
                          2: zG1LsNOebUzuPc00J0IFIKriwG4.roa (hash: eQXTqod6VUNMvJMdBIHtPJpSpipS6FsaoAARJhSyhHI=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bb:cd:cd:3d:f0:2d:d9:94:11:77:bc:85:17:f2:67:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5542b766ef57d69cf4fbde4bcb6f0af06a3b2206
        Validity
            Not Before: Jan 31 10:00:14 2025 GMT
            Not After : Feb  1 10:00:14 2025 GMT
        Subject: CN=980a070ba68c650784df7cf3763e08e4885d1085
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:25:07:fd:bf:3b:e0:8a:0e:46:21:26:a5:98:
                    53:53:c1:60:2b:ff:b9:d1:5a:91:62:23:65:b1:77:
                    ed:1b:3f:e3:79:28:bd:cb:85:1c:0f:0a:63:2b:09:
                    a2:32:d4:3d:bf:2d:76:4d:60:d1:b3:42:f1:13:8c:
                    a8:17:2c:c6:a5:8d:c8:91:fa:12:0a:fb:3f:54:aa:
                    27:ad:f5:7f:43:69:ba:8c:c8:e4:52:43:58:f6:fe:
                    3a:2b:72:eb:b2:3f:6c:5c:11:ee:7f:cc:a9:b6:6f:
                    f8:e7:af:c0:79:9c:29:da:e9:a9:25:a7:02:6e:eb:
                    3f:cd:5c:8d:3a:23:13:8a:7a:70:39:06:79:4b:94:
                    10:dd:3b:11:03:99:23:23:cd:4e:07:36:f3:b2:6e:
                    6a:da:ba:4a:01:7e:b5:31:21:78:50:62:6b:c7:e9:
                    db:8d:83:03:f0:d4:2c:d8:c5:f9:a8:17:6a:9f:c1:
                    fa:0d:ab:7d:6c:06:37:01:bd:ec:40:75:fb:e7:f2:
                    2d:e4:6c:9e:7a:cf:7f:f9:a2:04:43:87:47:e7:d3:
                    26:84:8d:37:91:2a:8e:45:d6:08:da:24:ab:46:f1:
                    ec:74:04:03:9d:2c:e2:e3:d7:ac:49:75:43:81:99:
                    fd:53:ea:e0:58:80:26:61:0a:fe:74:41:8d:39:af:
                    f2:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:0A:07:0B:A6:8C:65:07:84:DF:7C:F3:76:3E:08:E4:88:5D:10:85
            X509v3 Authority Key Identifier:
                keyid:55:42:B7:66:EF:57:D6:9C:F4:FB:DE:4B:CB:6F:0A:F0:6A:3B:22:06

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VUK3Zu9X1pz0-95Ly28K8Go7IgY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/446eba-9c0d-4765-b3dc-78308b2f5234/1/VUK3Zu9X1pz0-95Ly28K8Go7IgY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/55/446eba-9c0d-4765-b3dc-78308b2f5234/1/VUK3Zu9X1pz0-95Ly28K8Go7IgY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:45:3a:99:12:d0:e9:65:ab:aa:6e:5d:f9:16:06:ad:97:ef:
         b8:3e:12:53:bf:08:5a:60:b8:74:e9:db:68:ba:d0:e2:2e:cd:
         57:67:32:0d:51:80:8d:93:14:d8:c1:e4:7e:c6:63:a5:a5:70:
         2b:90:72:3a:55:1c:ec:78:25:50:d3:1a:7c:23:df:b6:ae:11:
         0b:a0:fd:1c:b3:e7:fa:97:27:53:94:1d:d6:36:a2:0d:cc:4a:
         89:22:59:dd:b7:fc:a8:7b:83:62:ac:54:70:90:01:48:9f:c9:
         9d:d3:1e:cf:a4:35:49:52:db:58:8d:4c:d3:28:cc:65:74:86:
         74:0b:73:93:c6:73:3f:3f:02:ce:4f:64:09:a7:8a:6b:6f:a9:
         f6:16:c6:c3:0f:ac:11:94:5c:08:ab:cc:f6:12:b8:03:01:47:
         ba:70:03:67:80:a3:7e:92:35:e7:a9:df:d0:07:8f:b7:48:b0:
         fd:a0:93:5a:96:5b:dc:13:83:2b:a1:1d:97:99:ea:c3:1b:39:
         8d:58:cf:30:5c:cb:4f:f8:b4:88:32:45:f2:4f:b6:66:a5:d6:
         4e:78:0c:c0:3f:45:51:09:0e:35:96:62:74:01:52:f8:51:26:
         51:17:83:05:87:4c:5e:e1:79:5f:af:2c:34:71:da:3e:c7:92:
         04:57:64:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 07:21:54 2025 by rpki-client