Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/d1e68a-1c87-483d-a89d-56dbff14ee05/1/_VPDr_MeJ9KhvE2bPudbuKm1eDg.mft
File:                     _VPDr_MeJ9KhvE2bPudbuKm1eDg.mft (raw, json)
Hash identifier:          1E1b2hTqH+TPlSY8y39ptzXaCzYlzjQNh95IKVC1c4U=
Subject key identifier:   43:81:8A:31:7A:2B:0B:B3:A6:FB:A3:6D:C5:DE:DA:91:57:7D:0D:BA
Authority key identifier: FD:53:C3:AF:F3:1E:27:D2:A1:BC:4D:9B:3E:E7:5B:B8:A9:B5:78:38
Certificate issuer:       /CN=fd53c3aff31e27d2a1bc4d9b3ee75bb8a9b57838
Certificate serial:       0194BD17E99412EF2754955C941268F88FEE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_VPDr_MeJ9KhvE2bPudbuKm1eDg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d3/d1e68a-1c87-483d-a89d-56dbff14ee05/1/_VPDr_MeJ9KhvE2bPudbuKm1eDg.mft
Manifest number:          1431
Signing time:             Fri 31 Jan 2025 16:00:48 +0000
Manifest this update:     Fri 31 Jan 2025 16:00:48 +0000
Manifest next update:     Sat 01 Feb 2025 16:00:48 +0000
Files and hashes:         1: VMGZvIIUss5Ve2mGDXunD7HdEJs.roa (hash: bbDq804eTxYilw+nJ5y9e4tqkryqldjqvyQs2qpxXbA=)
                          2: _VPDr_MeJ9KhvE2bPudbuKm1eDg.crl (hash: p+7gxK3A2U7tT0cQI6HQBGjH9BhjvHx8QlxTfgdmPGM=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bd:17:e9:94:12:ef:27:54:95:5c:94:12:68:f8:8f:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fd53c3aff31e27d2a1bc4d9b3ee75bb8a9b57838
        Validity
            Not Before: Jan 31 16:00:48 2025 GMT
            Not After : Feb  1 16:00:48 2025 GMT
        Subject: CN=43818a317a2b0bb3a6fba36dc5deda91577d0dba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:06:73:46:28:d4:ce:01:6e:3b:e7:ec:1e:cc:
                    ad:f3:81:8c:f1:ef:5e:64:d9:eb:96:be:38:7f:50:
                    c3:c7:c3:ea:57:e3:81:98:de:73:ea:5a:3e:86:b9:
                    ba:6d:da:5e:22:e3:0d:46:9e:0b:9d:cc:25:5e:de:
                    a0:8a:5c:67:6a:59:fd:96:8b:db:b7:67:7a:2f:33:
                    7a:fe:88:13:86:2e:99:8b:32:cf:0a:7b:55:dd:08:
                    15:86:db:53:1f:17:ea:3a:6b:7c:64:fe:1c:1c:1e:
                    51:3d:38:4f:a8:c0:9d:e9:cc:0b:84:3c:5c:1d:90:
                    86:c6:7f:ef:61:18:af:01:e2:42:ab:12:51:c7:9d:
                    b0:fd:e4:27:5b:51:d7:a7:66:5f:b7:b4:1f:e8:17:
                    6d:d4:eb:3e:53:6b:2c:23:64:7e:89:ee:de:81:51:
                    d7:6e:dd:4c:d7:28:de:00:15:d8:34:ed:aa:a3:ea:
                    02:22:c4:c4:59:3b:e6:5f:64:4d:68:47:29:69:a9:
                    a2:55:4c:14:c9:f1:c6:7f:ef:d2:d9:66:bc:56:50:
                    51:43:bf:7e:c1:4c:b2:b0:77:b3:eb:a1:6a:13:26:
                    72:85:d0:72:6b:16:1e:c8:49:3b:30:57:ec:73:fb:
                    d4:05:eb:9f:5e:44:81:52:0e:21:30:ac:e8:e1:13:
                    af:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:81:8A:31:7A:2B:0B:B3:A6:FB:A3:6D:C5:DE:DA:91:57:7D:0D:BA
            X509v3 Authority Key Identifier:
                keyid:FD:53:C3:AF:F3:1E:27:D2:A1:BC:4D:9B:3E:E7:5B:B8:A9:B5:78:38

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_VPDr_MeJ9KhvE2bPudbuKm1eDg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/d1e68a-1c87-483d-a89d-56dbff14ee05/1/_VPDr_MeJ9KhvE2bPudbuKm1eDg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/d1e68a-1c87-483d-a89d-56dbff14ee05/1/_VPDr_MeJ9KhvE2bPudbuKm1eDg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:5a:8a:08:2f:a5:22:83:13:e9:36:2b:f0:13:55:d0:0f:de:
         6c:7a:51:f7:a2:17:b4:bd:f0:9f:70:30:e6:dd:be:76:3d:25:
         a3:06:34:55:44:e3:c3:c3:5c:40:7c:ed:f1:16:53:c8:cb:33:
         cf:f1:0a:45:c2:39:8a:5d:4d:05:90:d1:45:d0:4e:dd:54:01:
         ff:ba:3e:f0:b0:a5:b2:cf:69:92:53:9e:0e:93:6f:9d:bf:65:
         93:b9:7f:4b:c6:c3:4e:27:9b:c2:98:8b:1e:1e:46:5a:d5:ab:
         5b:bb:16:5c:c0:c1:cf:64:f7:54:c4:3d:97:cb:c4:08:e4:2a:
         48:a3:d2:60:f9:ca:78:da:a6:0e:f2:e5:61:e0:93:0a:ec:4d:
         df:e0:5d:0f:9b:f8:75:e3:d6:b6:d0:24:5e:2f:b2:0f:5a:81:
         28:a5:9a:23:6c:3e:a6:4a:91:f9:8e:11:60:50:b5:84:32:a7:
         24:8d:3e:5d:4c:d3:ac:39:b7:bf:1d:e2:18:0c:18:a0:d8:23:
         31:f5:5f:7a:10:ec:45:50:b6:b7:0b:ee:c7:f8:7f:05:c1:28:
         03:55:06:3a:9b:ee:ba:24:7d:d4:d7:07:80:a7:c5:a2:1a:33:
         20:a5:4d:04:4d:d2:ce:29:59:a0:09:c7:5d:08:4e:6e:7f:76:
         d2:4e:95:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 05:08:10 2025 by rpki-client