Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/62ed0f-a81f-434f-b975-071fb1f3b985/1/VZhirROQ5Nv4grUie8kzUPLYBxM.mft
File:                     VZhirROQ5Nv4grUie8kzUPLYBxM.mft (raw, json)
Hash identifier:          /wV1tyxrRg7LC7j/HG2VQJBd2dTX1uMnsGO7cYB5M0I=
Subject key identifier:   F1:2A:5E:CE:C6:E8:68:75:B9:81:D6:56:0E:6D:46:F0:D0:D8:D9:7C
Authority key identifier: 55:98:62:AD:13:90:E4:DB:F8:82:B5:22:7B:C9:33:50:F2:D8:07:13
Certificate issuer:       /CN=559862ad1390e4dbf882b5227bc93350f2d80713
Certificate serial:       0194BC731B96672895143AE9A75CF1D51393
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VZhirROQ5Nv4grUie8kzUPLYBxM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6f/62ed0f-a81f-434f-b975-071fb1f3b985/1/VZhirROQ5Nv4grUie8kzUPLYBxM.mft
Manifest number:          0559
Signing time:             Fri 31 Jan 2025 13:00:47 +0000
Manifest this update:     Fri 31 Jan 2025 13:00:47 +0000
Manifest next update:     Sat 01 Feb 2025 13:00:47 +0000
Files and hashes:         1: VZhirROQ5Nv4grUie8kzUPLYBxM.crl (hash: qvvM5BR93H0cgAg1eoD3CdfUJz19W1XI27ZTR6kUTeI=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:73:1b:96:67:28:95:14:3a:e9:a7:5c:f1:d5:13:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=559862ad1390e4dbf882b5227bc93350f2d80713
        Validity
            Not Before: Jan 31 13:00:47 2025 GMT
            Not After : Feb  1 13:00:47 2025 GMT
        Subject: CN=f12a5ecec6e86875b981d6560e6d46f0d0d8d97c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:6f:11:b6:e3:a3:a6:e8:1e:31:48:41:db:4c:
                    37:c6:c3:5f:aa:a7:90:33:91:bb:5b:40:b2:c2:cc:
                    41:ff:e2:55:e5:b9:b9:e7:04:f6:a0:0b:fe:56:c5:
                    92:a2:b6:64:ae:1f:60:c0:94:1c:07:19:f9:2f:87:
                    8b:67:0f:e0:26:2a:b3:2b:56:b2:fd:11:1a:d6:22:
                    e4:18:b0:86:44:38:c1:44:af:e4:e4:e7:a0:f6:e3:
                    08:8e:ae:d5:9b:0c:e1:3f:cc:5f:c4:ba:52:0d:4e:
                    0f:8d:62:d4:0d:2b:ea:00:61:20:2b:fa:63:30:dd:
                    e9:7f:7f:c9:cd:5c:12:2c:50:dd:89:6d:d4:3f:0c:
                    f2:4d:25:29:fc:00:90:95:db:e5:8b:a7:e6:1b:63:
                    e9:5b:fe:54:bb:d4:8b:dd:e9:eb:09:f2:5e:2e:db:
                    e6:ea:02:6a:7c:bc:b8:a5:ac:d8:07:65:b5:94:c1:
                    d7:b5:da:0b:01:4a:06:9e:cd:f1:69:a4:44:87:34:
                    e4:37:7b:20:85:f8:d6:86:7f:28:7e:7f:ee:0a:81:
                    69:52:de:a2:73:c3:49:9d:3d:cd:c8:f2:82:be:3e:
                    13:74:2e:a4:28:41:c9:8a:d0:af:12:de:cd:a7:5c:
                    22:d3:03:9a:a0:fd:ba:c2:e6:2b:e4:ae:cf:3e:a0:
                    68:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:2A:5E:CE:C6:E8:68:75:B9:81:D6:56:0E:6D:46:F0:D0:D8:D9:7C
            X509v3 Authority Key Identifier:
                keyid:55:98:62:AD:13:90:E4:DB:F8:82:B5:22:7B:C9:33:50:F2:D8:07:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VZhirROQ5Nv4grUie8kzUPLYBxM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/62ed0f-a81f-434f-b975-071fb1f3b985/1/VZhirROQ5Nv4grUie8kzUPLYBxM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/62ed0f-a81f-434f-b975-071fb1f3b985/1/VZhirROQ5Nv4grUie8kzUPLYBxM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:9b:61:e8:1f:89:17:fd:52:2c:89:71:75:44:9b:99:f2:83:
         8e:eb:3c:c5:51:3b:62:31:f4:01:8c:ce:ed:dc:64:05:c2:dc:
         38:3a:ba:c6:1b:88:01:3f:3d:f0:8f:af:12:3d:d0:88:42:e4:
         37:7d:8a:07:ea:51:8d:7f:36:a5:36:b8:4d:a5:c4:b6:d1:f1:
         16:94:7c:3a:5d:ae:ef:5e:a1:0b:73:c8:b1:62:ec:34:6c:78:
         e9:0e:08:c9:2a:77:3c:10:64:61:11:90:df:4f:20:87:b7:e8:
         cc:74:49:42:fc:07:d8:85:32:b0:72:fd:d8:24:16:b9:9d:1c:
         d1:db:21:22:93:8c:ed:e6:86:10:bc:a1:21:38:09:7d:66:59:
         ec:41:0d:90:43:33:42:9d:a4:ce:bb:a8:e7:ab:18:76:93:77:
         d2:32:cf:d0:ae:65:50:88:1a:a1:1b:ce:5e:c7:b7:f0:13:05:
         63:90:7f:cf:e2:3a:12:10:f5:60:72:24:23:f8:5f:5e:80:44:
         f8:dc:fa:df:e9:cb:87:bc:6a:f9:33:dc:26:c5:2a:6f:86:e8:
         fc:13:b7:38:60:e5:b8:2a:d5:d3:a8:70:84:4c:47:af:ae:62:
         c7:1f:f8:4f:ca:38:ea:8e:d7:2e:db:06:d3:e8:87:fb:5d:6d:
         e1:9a:54:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:52:24 2025 by rpki-client