Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/080361-1bbe-4763-800b-619c26194168/1/VKMasDPP0t7mhS-p2L9aSg41JBQ.mft
File:                     VKMasDPP0t7mhS-p2L9aSg41JBQ.mft (raw, json)
Hash identifier:          NbT+wUd9BEhkzWyOoWbcO2T5LjFlNvOLezF0BBrUs7E=
Subject key identifier:   B1:B6:5A:EC:F0:94:F4:09:DF:B4:FF:59:B5:5C:83:41:F2:22:C5:E6
Authority key identifier: 54:A3:1A:B0:33:CF:D2:DE:E6:85:2F:A9:D8:BF:5A:4A:0E:35:24:14
Certificate issuer:       /CN=54a31ab033cfd2dee6852fa9d8bf5a4a0e352414
Certificate serial:       0194BD4E4B176FB73EB695BF3D734F1089A7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VKMasDPP0t7mhS-p2L9aSg41JBQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a2/080361-1bbe-4763-800b-619c26194168/1/VKMasDPP0t7mhS-p2L9aSg41JBQ.mft
Manifest number:          12C7
Signing time:             Fri 31 Jan 2025 17:00:12 +0000
Manifest this update:     Fri 31 Jan 2025 17:00:12 +0000
Manifest next update:     Sat 01 Feb 2025 17:00:12 +0000
Files and hashes:         1: 3K2zhAcdKtLzb7_Jnbk2BtRstac.roa (hash: Nhwyd3BNcUeHDaZYJor5anwz5rb2CFfZTtP7ROQybhk=)
                          2: 6q_G_Z0qExivoFkdxz0SlPRdfWc.roa (hash: 4SryP0DdQLuQOQZ+IBOlNc/zDAm8n4lQ1lbM4SRDA1Y=)
                          3: VKMasDPP0t7mhS-p2L9aSg41JBQ.crl (hash: vNKJSy6TRLyC/zYYXUM5dbjtvuwqATNqb9m9l2fV40E=)
                          4: ifGxlDc1irW7Eg9g-9ztDuocTCk.roa (hash: ZhfDpWXnZEi0EZr5I/ly231LZJr36arOyCqZMKGb1rE=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bd:4e:4b:17:6f:b7:3e:b6:95:bf:3d:73:4f:10:89:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54a31ab033cfd2dee6852fa9d8bf5a4a0e352414
        Validity
            Not Before: Jan 31 17:00:12 2025 GMT
            Not After : Feb  1 17:00:12 2025 GMT
        Subject: CN=b1b65aecf094f409dfb4ff59b55c8341f222c5e6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:bb:6f:5e:08:07:55:ed:93:2f:58:5f:0d:9c:
                    1f:e3:7c:75:43:bb:fe:16:7b:60:42:0b:62:1d:9e:
                    ef:65:4b:ab:43:6c:9d:92:c9:6f:b9:7e:f5:ca:c5:
                    02:e7:7e:bb:98:d5:bc:8e:c1:e5:32:57:8d:53:19:
                    1d:25:3c:ba:f7:f4:0c:53:7d:c1:b2:d8:4e:cd:fc:
                    ef:42:99:13:bb:7f:e0:b0:0d:bc:47:93:27:de:80:
                    0a:19:5d:72:90:d3:a5:14:7b:72:75:f3:0c:01:b3:
                    34:f2:96:99:a3:6b:c6:5e:ad:22:33:8c:ce:a1:c3:
                    67:15:93:fd:c0:7c:c6:1e:3b:05:42:a9:59:fb:76:
                    50:78:83:35:06:b2:78:9b:e2:75:d7:03:de:c4:c5:
                    ea:4b:31:70:a4:42:d1:bd:95:12:db:e6:a6:f4:ef:
                    aa:df:5c:89:1c:37:19:5c:55:2d:dd:3c:07:e0:b9:
                    6a:bb:a1:3c:a6:99:33:2d:fb:8a:cb:9f:b7:ef:11:
                    35:22:76:d6:63:b7:69:4e:3f:9c:20:04:1b:e8:4e:
                    91:96:48:a1:23:c4:34:fc:64:d2:c1:e6:e7:4a:ad:
                    22:13:08:67:28:40:a0:7e:b4:f4:ac:fd:ff:06:10:
                    c9:26:36:c4:ba:a5:ec:d9:bb:b5:5a:73:2c:34:ce:
                    5a:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:B6:5A:EC:F0:94:F4:09:DF:B4:FF:59:B5:5C:83:41:F2:22:C5:E6
            X509v3 Authority Key Identifier:
                keyid:54:A3:1A:B0:33:CF:D2:DE:E6:85:2F:A9:D8:BF:5A:4A:0E:35:24:14

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VKMasDPP0t7mhS-p2L9aSg41JBQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/080361-1bbe-4763-800b-619c26194168/1/VKMasDPP0t7mhS-p2L9aSg41JBQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/080361-1bbe-4763-800b-619c26194168/1/VKMasDPP0t7mhS-p2L9aSg41JBQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:d9:a6:15:eb:e3:5c:db:c7:e1:35:d8:6d:ef:33:d8:70:d7:
         89:24:2e:09:d7:93:80:c6:e5:de:1a:a9:c3:f8:85:7b:3f:5d:
         f6:7e:4d:2a:cf:01:cd:e1:63:c5:0f:21:84:d9:57:bf:60:e5:
         30:07:f0:0d:17:f0:0a:e3:90:d9:56:d2:e0:85:b7:d6:db:4a:
         7a:af:c1:58:6b:18:52:6c:f1:b9:d3:ff:94:a0:44:7d:e1:67:
         8e:97:25:be:a2:81:94:46:d8:c8:cb:fc:e6:e4:8c:dd:f8:cc:
         ab:09:11:eb:df:8f:e0:6f:7d:67:12:94:97:62:6f:a9:5a:d1:
         f9:7e:85:43:58:4a:5e:22:44:bb:72:e6:e4:bb:70:ab:74:35:
         43:4c:21:4c:f7:30:b5:2b:80:8b:61:33:d7:3c:cd:af:85:56:
         8f:a6:f0:58:52:55:08:6d:e9:da:04:17:72:6c:28:3f:ad:58:
         b7:85:8b:c1:ac:14:15:67:97:aa:26:29:76:19:b4:28:9a:04:
         34:c1:5a:94:d3:9e:85:f5:87:d5:3b:56:cb:1d:75:6d:a1:c4:
         2d:81:6d:46:12:56:77:36:fe:a1:31:71:57:d2:95:79:92:b0:
         ad:e9:90:dd:21:dd:08:b2:cc:88:65:85:99:a6:54:d2:24:fd:
         38:1b:96:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:41:34 2025 by rpki-client