Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/f826a5-8e95-4513-b726-abd6f2b3410b/1/vBwW9b43_2xdQgXyq6JfzjWJAzU.mft
File:                     vBwW9b43_2xdQgXyq6JfzjWJAzU.mft (raw, json)
Hash identifier:          tPcIhI4tpDpIiKYO2+vIs0DuEfJhGQMFPac7XQxCuRU=
Subject key identifier:   7A:13:22:73:44:D4:CC:10:58:32:60:A9:90:F7:B7:C5:76:82:8C:52
Authority key identifier: BC:1C:16:F5:BE:37:FF:6C:5D:42:05:F2:AB:A2:5F:CE:35:89:03:35
Certificate issuer:       /CN=bc1c16f5be37ff6c5d4205f2aba25fce35890335
Certificate serial:       0194BC04E083FDC88EB7BFE77A89FB2F554E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vBwW9b43_2xdQgXyq6JfzjWJAzU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5a/f826a5-8e95-4513-b726-abd6f2b3410b/1/vBwW9b43_2xdQgXyq6JfzjWJAzU.mft
Manifest number:          0CAD
Signing time:             Fri 31 Jan 2025 11:00:23 +0000
Manifest this update:     Fri 31 Jan 2025 11:00:23 +0000
Manifest next update:     Sat 01 Feb 2025 11:00:23 +0000
Files and hashes:         1: vBwW9b43_2xdQgXyq6JfzjWJAzU.crl (hash: JkvuP7/ldkFnSvTn5cn1jhs7k4XlN61K2vaQeEReRu4=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:04:e0:83:fd:c8:8e:b7:bf:e7:7a:89:fb:2f:55:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bc1c16f5be37ff6c5d4205f2aba25fce35890335
        Validity
            Not Before: Jan 31 11:00:23 2025 GMT
            Not After : Feb  1 11:00:23 2025 GMT
        Subject: CN=7a13227344d4cc10583260a990f7b7c576828c52
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:0a:b6:95:ae:6a:9b:35:1b:92:21:f9:bd:b1:
                    92:75:97:c5:e0:5d:72:1b:bd:8d:dd:88:14:f6:8b:
                    9e:d2:98:06:0a:eb:b4:bc:37:b7:43:53:54:8e:7d:
                    45:e5:f4:a2:ae:de:70:c5:ca:c6:19:07:81:0c:32:
                    bf:dd:8c:e6:1a:58:1f:7a:54:d7:dd:30:8b:49:71:
                    0a:33:e4:f5:73:a9:e3:72:aa:97:80:95:e3:76:c6:
                    47:0c:1e:34:37:0b:73:24:08:57:29:0d:67:75:56:
                    88:bf:f0:c8:67:2b:00:14:4c:3e:53:c7:4f:66:41:
                    9d:a9:79:7d:07:28:33:46:54:42:1d:48:bc:f3:98:
                    68:bc:11:7b:3c:f6:87:92:ac:f4:b0:31:3a:aa:2b:
                    f7:18:4f:a2:d7:fd:c7:54:3b:aa:1d:02:43:64:43:
                    85:bb:78:9f:67:72:2f:f0:bf:7b:33:67:61:0d:99:
                    e5:5b:34:ee:3f:74:72:8c:6f:d6:ab:bb:00:35:a3:
                    35:52:77:c2:74:7a:59:a7:6c:f9:07:99:51:82:52:
                    ce:40:ac:b0:4c:cf:01:60:a9:21:61:0a:26:0e:1e:
                    fb:0c:27:4e:b0:e6:1d:fc:5d:a7:4f:1c:27:2d:50:
                    7e:24:ed:ea:72:ec:3c:c8:c8:37:69:a8:6f:f3:9c:
                    6d:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:13:22:73:44:D4:CC:10:58:32:60:A9:90:F7:B7:C5:76:82:8C:52
            X509v3 Authority Key Identifier:
                keyid:BC:1C:16:F5:BE:37:FF:6C:5D:42:05:F2:AB:A2:5F:CE:35:89:03:35

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vBwW9b43_2xdQgXyq6JfzjWJAzU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/f826a5-8e95-4513-b726-abd6f2b3410b/1/vBwW9b43_2xdQgXyq6JfzjWJAzU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/f826a5-8e95-4513-b726-abd6f2b3410b/1/vBwW9b43_2xdQgXyq6JfzjWJAzU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a0:b0:45:18:8d:74:c5:53:23:f3:ee:37:ef:c2:53:f4:78:10:
         b7:69:98:aa:58:b1:b1:b9:c9:65:3d:9f:b3:77:1c:42:ce:ad:
         4e:3b:f4:23:ea:db:7b:e1:62:98:cf:4c:a9:a4:cf:13:83:9a:
         f3:a2:19:0c:44:de:b4:06:b6:cc:61:a7:0f:c0:79:e9:8a:4c:
         22:ef:63:f1:30:af:de:99:2a:7f:c0:a8:c1:1e:b1:d0:72:d5:
         36:9d:9e:8f:bc:6e:5c:e5:c1:67:e6:8b:ed:af:71:74:d9:3d:
         04:d6:a2:50:37:78:33:7d:2a:c3:7d:93:57:0f:13:9e:6f:e8:
         65:58:ef:c6:d4:de:ce:b5:1a:de:48:24:09:d1:c2:c0:51:46:
         f6:77:60:47:ae:b5:4e:a1:fc:ed:89:09:bd:4b:3b:4f:e5:8d:
         98:49:23:4e:79:7b:f3:eb:eb:79:45:e2:92:77:a4:cf:7f:2e:
         c5:c0:96:7c:1f:87:d4:99:04:b3:08:37:38:75:6e:e5:28:ae:
         ed:84:ff:5b:61:29:b6:8e:d3:ed:5d:b6:8c:ae:30:2b:3f:56:
         16:f4:da:ba:9f:75:d9:19:5d:2f:92:39:47:c4:26:e3:76:01:
         56:8c:3e:fd:8f:86:6b:cd:c0:fc:88:11:e8:e2:5d:8b:5a:82:
         de:d6:47:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:07:30 2025 by rpki-client