Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/edaf99-6f94-4e2c-8654-0dfb84718edf/1/VhxILbWscM1l8s5s5ffiW4929Gk.mft
File:                     VhxILbWscM1l8s5s5ffiW4929Gk.mft (raw, json)
Hash identifier:          Y0dyf6BNokhxkLBV9+Jk/GN9csLre/zMoMaoquMCHyc=
Subject key identifier:   AD:B0:36:DA:58:B4:A3:68:D1:06:3B:40:04:85:01:F0:D8:14:35:B6
Authority key identifier: 56:1C:48:2D:B5:AC:70:CD:65:F2:CE:6C:E5:F7:E2:5B:8F:76:F4:69
Certificate issuer:       /CN=561c482db5ac70cd65f2ce6ce5f7e25b8f76f469
Certificate serial:       0194BBCE009CE7DAF39545CE019FC1B4A219
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VhxILbWscM1l8s5s5ffiW4929Gk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9a/edaf99-6f94-4e2c-8654-0dfb84718edf/1/VhxILbWscM1l8s5s5ffiW4929Gk.mft
Manifest number:          07FF
Signing time:             Fri 31 Jan 2025 10:00:27 +0000
Manifest this update:     Fri 31 Jan 2025 10:00:27 +0000
Manifest next update:     Sat 01 Feb 2025 10:00:27 +0000
Files and hashes:         1: VhxILbWscM1l8s5s5ffiW4929Gk.crl (hash: xMySHiuuS5nIfs3zn3LZCEdSzsLcdMB2OJwEaABQM9o=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bb:ce:00:9c:e7:da:f3:95:45:ce:01:9f:c1:b4:a2:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=561c482db5ac70cd65f2ce6ce5f7e25b8f76f469
        Validity
            Not Before: Jan 31 10:00:27 2025 GMT
            Not After : Feb  1 10:00:27 2025 GMT
        Subject: CN=adb036da58b4a368d1063b40048501f0d81435b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:bb:c1:e8:cf:57:7e:17:df:66:98:ab:0b:8c:
                    f7:9d:10:50:9f:b5:29:b1:5a:74:d0:0d:70:e2:20:
                    be:50:c3:52:1f:64:b9:0b:f5:fc:03:ad:f6:cf:46:
                    05:f7:92:97:ae:a1:1f:6f:6b:88:3c:42:22:ad:bb:
                    ac:c3:62:fe:67:30:f7:e1:d9:c5:ba:77:0b:51:e6:
                    08:5a:2f:d2:a2:30:67:79:91:9b:ca:4b:69:5e:e0:
                    38:52:9c:45:b7:e6:4d:2e:c5:9c:b6:f2:a5:bf:0c:
                    b7:96:53:27:63:97:68:4d:bd:d4:c7:a6:d3:9d:69:
                    75:f9:7a:b2:01:af:8e:00:77:02:8b:06:db:4b:59:
                    e6:e1:ce:bf:89:02:c2:1c:d4:3e:2b:84:08:c6:d3:
                    40:3a:4c:09:4a:4e:9e:10:ef:79:ec:81:d8:21:d5:
                    e4:9c:3f:b5:63:51:ec:25:7e:4a:8f:6f:6d:36:fd:
                    bb:37:43:48:58:51:ba:d7:cc:42:5f:fd:12:44:53:
                    6b:b7:3d:cb:81:ba:48:2d:64:c1:c5:ba:87:19:ff:
                    53:ec:ae:ef:82:f9:c6:34:32:43:40:8c:62:20:7d:
                    f0:05:76:c1:95:5c:71:3e:14:46:c7:1d:ef:9a:75:
                    10:df:dd:f3:33:c9:fe:47:cb:4c:72:6c:af:7a:46:
                    f4:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:B0:36:DA:58:B4:A3:68:D1:06:3B:40:04:85:01:F0:D8:14:35:B6
            X509v3 Authority Key Identifier:
                keyid:56:1C:48:2D:B5:AC:70:CD:65:F2:CE:6C:E5:F7:E2:5B:8F:76:F4:69

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VhxILbWscM1l8s5s5ffiW4929Gk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/edaf99-6f94-4e2c-8654-0dfb84718edf/1/VhxILbWscM1l8s5s5ffiW4929Gk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/edaf99-6f94-4e2c-8654-0dfb84718edf/1/VhxILbWscM1l8s5s5ffiW4929Gk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:e7:a1:67:14:54:76:fd:d5:5e:2b:70:30:48:86:28:00:1a:
         66:00:c0:c1:85:50:99:b9:02:4b:d8:00:77:55:8a:e7:91:6c:
         b5:54:fe:05:b5:53:81:7c:39:de:b9:33:31:09:94:58:b0:c1:
         95:f6:e6:b9:2c:72:f0:c7:4a:9b:00:28:ab:ab:36:f2:f6:64:
         83:4a:27:74:b6:5f:95:0d:4c:bd:c6:95:10:4f:97:8d:52:ec:
         f8:92:25:cb:35:fe:c5:a5:e8:5d:f3:6d:17:69:e4:e8:ea:0b:
         9e:47:fd:bb:30:29:dc:80:7d:97:23:85:8b:6c:8c:f4:6e:b1:
         8e:e5:8e:f0:b2:fd:b9:a2:23:29:06:b6:31:2a:31:88:93:07:
         9d:cd:6f:13:1a:25:eb:4f:3e:cb:37:d2:3a:5a:da:a2:e3:49:
         85:fb:59:83:8a:0d:ba:75:9e:46:a3:c6:fb:80:e7:63:c3:d4:
         8a:5a:7a:7e:82:27:4d:9d:cb:f3:fb:ea:45:2b:fd:d3:cd:5b:
         88:e4:9e:9f:db:9c:cc:8d:eb:0b:11:ae:3f:a0:43:ad:c0:21:
         9f:24:0e:21:14:d2:bf:db:87:79:5b:22:d7:81:d1:28:08:82:
         02:a5:75:5d:fe:89:eb:66:a6:12:9c:ee:03:a6:12:80:ee:83:
         35:a7:85:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 16:24:38 2025 by rpki-client