Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/566ef5-d13d-474c-a299-298fbe7dc168/1/VyumSzqQYLRkM3rTCgK-xLEaVR8.mft
File:                     VyumSzqQYLRkM3rTCgK-xLEaVR8.mft (raw, json)
Hash identifier:          AsQErazLYoWBiI/y1i8wQHV8taXGGKktw30dh/AgfdY=
Subject key identifier:   34:59:EF:E2:15:11:77:AD:0B:4F:EA:46:D7:56:ED:EA:79:F7:55:A3
Authority key identifier: 57:2B:A6:4B:3A:90:60:B4:64:33:7A:D3:0A:02:BE:C4:B1:1A:55:1F
Certificate issuer:       /CN=572ba64b3a9060b464337ad30a02bec4b11a551f
Certificate serial:       0194BD175515D1CC909D6C768B678F6BAE49
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VyumSzqQYLRkM3rTCgK-xLEaVR8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b4/566ef5-d13d-474c-a299-298fbe7dc168/1/VyumSzqQYLRkM3rTCgK-xLEaVR8.mft
Manifest number:          10BE
Signing time:             Fri 31 Jan 2025 16:00:10 +0000
Manifest this update:     Fri 31 Jan 2025 16:00:10 +0000
Manifest next update:     Sat 01 Feb 2025 16:00:10 +0000
Files and hashes:         1: 5qUvekTWUz1S_FpeM2NZS67ck3M.roa (hash: Ds6B6jSVUXQz1ysU6aXSYe/Qz8BnngsQCcW1L3O8G5E=)
                          2: VyumSzqQYLRkM3rTCgK-xLEaVR8.crl (hash: 5SL7kdTkQ5LuRtgOWsnMHE5s+A3lkkkPdqjiOuzJPp8=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bd:17:55:15:d1:cc:90:9d:6c:76:8b:67:8f:6b:ae:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=572ba64b3a9060b464337ad30a02bec4b11a551f
        Validity
            Not Before: Jan 31 16:00:10 2025 GMT
            Not After : Feb  1 16:00:10 2025 GMT
        Subject: CN=3459efe2151177ad0b4fea46d756edea79f755a3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:90:3e:d8:02:d0:a5:57:65:ef:6c:bd:bb:7c:
                    a9:6f:cb:13:d0:9c:11:b5:b8:f4:48:64:4f:bb:17:
                    a0:6b:19:bb:54:46:6c:ae:d1:b0:0f:69:dd:ad:bb:
                    9e:0a:06:ca:b9:03:e1:5d:4f:01:74:2a:43:9a:83:
                    aa:ac:d5:aa:e2:2b:64:2e:56:c8:e8:8d:dd:c6:b3:
                    a5:04:20:df:40:c8:8c:22:bd:93:72:5f:2f:04:ff:
                    29:4c:f6:b8:36:69:99:5b:b9:b2:48:75:ea:60:0f:
                    a0:d2:ee:db:b0:ce:45:71:82:d7:f4:20:d0:b7:6e:
                    b3:00:c2:38:3c:d0:58:d5:5b:4e:3d:3a:9c:80:55:
                    65:ad:b8:20:51:8f:d4:56:e3:3c:6b:65:83:05:02:
                    b7:a9:bf:f1:e6:e6:9c:b9:8c:a0:23:8c:9c:cf:c2:
                    b5:da:75:ab:08:45:5b:0d:14:49:f4:4c:eb:93:20:
                    89:86:c1:68:9b:96:9e:3c:44:dc:12:72:44:81:01:
                    e4:af:ec:de:00:3b:cf:ac:d4:b3:d3:3c:7d:ea:1e:
                    ee:d7:dc:46:f0:3b:97:f2:d3:9b:8c:fc:f0:62:30:
                    22:bd:d0:3f:44:88:f7:0f:5d:d2:95:9b:97:a2:30:
                    25:94:e7:33:b5:d5:2b:bc:68:aa:65:8f:00:1d:8a:
                    bd:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:59:EF:E2:15:11:77:AD:0B:4F:EA:46:D7:56:ED:EA:79:F7:55:A3
            X509v3 Authority Key Identifier:
                keyid:57:2B:A6:4B:3A:90:60:B4:64:33:7A:D3:0A:02:BE:C4:B1:1A:55:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VyumSzqQYLRkM3rTCgK-xLEaVR8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/566ef5-d13d-474c-a299-298fbe7dc168/1/VyumSzqQYLRkM3rTCgK-xLEaVR8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/566ef5-d13d-474c-a299-298fbe7dc168/1/VyumSzqQYLRkM3rTCgK-xLEaVR8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:85:cf:cc:d9:bc:57:cc:87:31:5c:db:43:c4:77:3b:87:f1:
         2e:77:aa:45:1d:90:31:c3:f4:b6:91:b3:3b:54:1c:04:e5:51:
         94:27:75:0e:88:f2:00:fb:14:c0:4a:02:6a:5d:de:7a:91:f7:
         35:fd:14:ca:6f:fc:de:11:8d:7f:2d:94:5a:6a:9c:32:85:fc:
         de:ef:c8:cb:aa:3b:1e:4d:d4:99:e0:f9:8a:40:db:28:c8:9c:
         29:89:ad:60:6e:9d:71:65:a8:7d:db:db:b1:18:ff:f6:19:70:
         55:af:4b:70:e0:8a:84:1d:85:3f:d7:f4:2c:5c:54:0f:94:f7:
         ba:1b:8e:11:0a:54:76:67:dd:3f:76:8d:b7:f6:16:b5:e8:b3:
         e8:9d:17:f9:cd:6d:8b:d2:ce:29:6d:16:c3:a9:65:06:8f:61:
         91:cf:4f:90:35:c2:aa:56:4a:88:a6:d4:dc:93:d9:66:b2:53:
         e4:96:ed:d7:83:e3:3d:36:b5:10:98:26:1b:d9:b6:a4:f8:4a:
         76:7f:1d:95:ad:fb:02:b3:ba:01:32:c6:71:dc:5e:5e:44:60:
         5b:33:6b:13:94:56:2e:b9:2a:5a:64:0e:77:fd:11:03:f5:48:
         2e:69:ee:0a:98:bb:5e:65:9d:fc:53:9e:bb:21:48:b5:e9:aa:
         c9:27:47:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:41:46 2025 by rpki-client