Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/4f3254-5442-4c87-8b14-9813f0906c4b/1/VkQtN4qHkyt22vks6Pye80Hrx1k.mft
File:                     VkQtN4qHkyt22vks6Pye80Hrx1k.mft (raw, json)
Hash identifier:          uchYMn65MPn7RaLy9Jly6aFYxqCUwOxxIaEcHJrSRZQ=
Subject key identifier:   C5:75:87:8A:DC:94:9E:08:1E:17:44:4D:B8:94:5C:C9:AD:57:8B:23
Authority key identifier: 56:44:2D:37:8A:87:93:2B:76:DA:F9:2C:E8:FC:9E:F3:41:EB:C7:59
Certificate issuer:       /CN=56442d378a87932b76daf92ce8fc9ef341ebc759
Certificate serial:       0194BC72FB642C9960A7FC961D17B44526FC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VkQtN4qHkyt22vks6Pye80Hrx1k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c7/4f3254-5442-4c87-8b14-9813f0906c4b/1/VkQtN4qHkyt22vks6Pye80Hrx1k.mft
Manifest number:          09EC
Signing time:             Fri 31 Jan 2025 13:00:39 +0000
Manifest this update:     Fri 31 Jan 2025 13:00:39 +0000
Manifest next update:     Sat 01 Feb 2025 13:00:39 +0000
Files and hashes:         1: VkQtN4qHkyt22vks6Pye80Hrx1k.crl (hash: DpJP328YFOI6xLnPU8+mhjgfhSFwD7R6aobPSdY4pUI=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:72:fb:64:2c:99:60:a7:fc:96:1d:17:b4:45:26:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=56442d378a87932b76daf92ce8fc9ef341ebc759
        Validity
            Not Before: Jan 31 13:00:39 2025 GMT
            Not After : Feb  1 13:00:39 2025 GMT
        Subject: CN=c575878adc949e081e17444db8945cc9ad578b23
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:a9:64:56:3a:86:b8:79:02:8f:f2:c4:9f:a5:
                    bf:61:39:0b:59:8d:bf:b5:d2:4e:08:ad:c2:c8:08:
                    89:7f:ae:99:03:5b:87:43:d7:c5:26:06:b9:94:98:
                    0a:4e:22:ff:f9:a8:55:1a:84:bf:0c:a8:fb:7b:34:
                    c6:3a:cd:bd:e5:a8:a4:d3:12:0b:17:1b:6c:d2:65:
                    39:e7:9e:7c:eb:fd:93:8d:9b:e9:80:42:77:28:f8:
                    84:40:93:3c:5c:90:35:ca:1c:90:48:ed:3d:b9:ff:
                    a3:6b:fa:41:40:5e:26:2b:f7:15:6e:2d:f9:c2:67:
                    56:e1:11:53:75:8f:c0:35:2c:84:29:10:2c:92:4c:
                    f8:83:33:c4:fa:41:fc:82:86:18:f7:79:ce:b7:97:
                    7a:f5:a4:3b:9f:f4:e4:2e:fc:c2:4b:29:31:02:af:
                    a2:ae:f1:18:f7:ec:d3:af:fe:16:59:67:1e:ca:2c:
                    9e:97:d7:69:1e:51:f1:c8:d7:9a:f4:78:6d:dc:74:
                    df:2d:86:81:7b:24:84:7a:d1:de:10:18:fe:81:8b:
                    bf:ea:3c:69:3d:e7:62:c9:7d:88:e1:4a:9d:a6:ac:
                    3b:b1:ce:2e:01:07:e4:e2:65:89:9b:b7:26:62:cb:
                    8b:50:33:1f:c4:ef:4a:eb:4b:36:63:39:8b:74:8b:
                    fe:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:75:87:8A:DC:94:9E:08:1E:17:44:4D:B8:94:5C:C9:AD:57:8B:23
            X509v3 Authority Key Identifier:
                keyid:56:44:2D:37:8A:87:93:2B:76:DA:F9:2C:E8:FC:9E:F3:41:EB:C7:59

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VkQtN4qHkyt22vks6Pye80Hrx1k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/4f3254-5442-4c87-8b14-9813f0906c4b/1/VkQtN4qHkyt22vks6Pye80Hrx1k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/4f3254-5442-4c87-8b14-9813f0906c4b/1/VkQtN4qHkyt22vks6Pye80Hrx1k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         97:8f:d8:56:bb:1f:48:9f:66:b0:92:80:f2:b9:34:26:c6:02:
         97:9a:c2:02:ab:5b:5a:60:90:5b:48:da:bf:01:df:48:5e:7f:
         e8:1e:ed:9a:e7:1b:e8:e2:6b:b8:be:4e:8e:a1:4c:7d:6f:33:
         10:f0:8b:a8:c5:a4:22:56:32:1d:0a:52:3d:6c:fc:c2:cd:72:
         8a:8e:1c:f3:c7:73:52:a9:58:84:7c:47:5e:11:59:47:3c:a2:
         28:5f:0d:26:46:4f:83:08:ef:6e:15:59:18:90:7a:25:41:63:
         4e:41:33:3d:a6:ed:b3:9c:fe:4d:de:3f:74:72:85:aa:be:22:
         17:06:8e:2f:75:7a:98:28:25:98:a4:1e:dc:a3:7e:0c:8d:6c:
         88:b8:af:f2:90:ca:d2:c0:a9:9a:f2:2d:18:85:42:3c:41:d4:
         b2:98:ea:46:f8:da:e8:30:50:99:3d:1c:c0:a4:82:4c:46:b6:
         e3:6e:bd:90:a7:b8:38:a2:b8:88:b3:3e:3b:3f:cd:3b:a5:82:
         fc:a1:fe:62:d7:ad:da:41:01:e6:10:1c:80:bb:3d:0c:e0:bc:
         e2:30:e4:9d:48:29:24:2f:fc:5f:17:20:cd:e3:96:c9:09:45:
         ac:93:21:c4:28:c2:62:cb:43:b3:d8:f5:01:51:47:4c:b9:70:
         73:49:7e:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:38:00 2025 by rpki-client