Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/439285-722a-42df-b185-303151d76ace/1/VHbDyngMxXdErb6QoPOU8dHNcvM.mft
File:                     VHbDyngMxXdErb6QoPOU8dHNcvM.mft (raw, json)
Hash identifier:          poFHWjTU1RPhSXoIWE8JZCB0T6WZTP7fvv6M+QzGSpo=
Subject key identifier:   53:02:60:43:CC:61:A4:B9:64:8D:A9:65:57:A6:C3:50:55:2A:14:9D
Authority key identifier: 54:76:C3:CA:78:0C:C5:77:44:AD:BE:90:A0:F3:94:F1:D1:CD:72:F3
Certificate issuer:       /CN=5476c3ca780cc57744adbe90a0f394f1d1cd72f3
Certificate serial:       0194BCAA0CBDB790FB8268E500CA001335AF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VHbDyngMxXdErb6QoPOU8dHNcvM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ef/439285-722a-42df-b185-303151d76ace/1/VHbDyngMxXdErb6QoPOU8dHNcvM.mft
Manifest number:          93
Signing time:             Fri 31 Jan 2025 14:00:48 +0000
Manifest this update:     Fri 31 Jan 2025 14:00:48 +0000
Manifest next update:     Sat 01 Feb 2025 14:00:48 +0000
Files and hashes:         1: J1F-UaHfYAClgmD-n-h_bemva1g.roa (hash: LkkLFeCVLkb+GZvSdm+hQS9Yt//NS73l5BEh3ajjGOM=)
                          2: Mzf3T5ZCYDRP9VJBsVQOjUFWDdY.roa (hash: fMfmlTHaxDxkKj4QIO7HlLPP5wMEtHiZKgYxRA6zmJA=)
                          3: VHbDyngMxXdErb6QoPOU8dHNcvM.crl (hash: RLbMl1SUQeyH27fOFLTd7cOJB54+BxBx5m/Zlc4fj0w=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:aa:0c:bd:b7:90:fb:82:68:e5:00:ca:00:13:35:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5476c3ca780cc57744adbe90a0f394f1d1cd72f3
        Validity
            Not Before: Jan 31 14:00:48 2025 GMT
            Not After : Feb  1 14:00:48 2025 GMT
        Subject: CN=53026043cc61a4b9648da96557a6c350552a149d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:32:05:24:47:51:6b:4f:d4:f2:87:d7:94:57:
                    2a:4d:2c:c0:5e:15:35:45:75:ee:de:46:1f:5a:8d:
                    0e:f3:3b:a1:bb:5e:ff:b6:fc:33:b4:aa:eb:01:4f:
                    f9:48:98:c9:5d:69:ba:ea:3f:66:0a:92:fa:4d:6e:
                    0f:f7:eb:61:59:f9:c4:7f:cb:ec:a3:51:c9:e0:e4:
                    10:15:3c:52:ad:bb:5f:be:9c:5c:8b:7f:5f:4e:8f:
                    e8:79:e3:f9:1b:46:d1:99:62:60:64:91:87:28:91:
                    4f:3b:fa:f8:8a:72:0a:e6:40:b0:7b:92:fe:61:76:
                    1a:95:2c:e0:5f:23:43:f6:29:85:8d:e4:b0:c8:ad:
                    e5:a6:02:24:fe:d8:5c:d5:13:3c:ab:74:28:bd:e5:
                    bc:a3:aa:64:31:9f:5f:34:67:2e:6c:55:a6:fe:cb:
                    90:f6:99:db:25:dc:11:61:6e:4b:c4:f9:29:91:a0:
                    35:8c:e0:02:1c:8e:21:a8:ea:fa:69:98:a2:03:16:
                    62:a2:94:d7:e3:99:59:f6:92:eb:3a:26:37:c2:61:
                    85:c1:73:4e:38:52:c5:ff:5b:5c:d7:3a:b3:85:a1:
                    88:94:5c:eb:83:53:cb:a7:db:fe:fe:14:66:3b:6b:
                    a5:15:fa:4f:eb:58:49:5c:f7:dd:d0:8c:d5:98:4b:
                    59:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:02:60:43:CC:61:A4:B9:64:8D:A9:65:57:A6:C3:50:55:2A:14:9D
            X509v3 Authority Key Identifier:
                keyid:54:76:C3:CA:78:0C:C5:77:44:AD:BE:90:A0:F3:94:F1:D1:CD:72:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VHbDyngMxXdErb6QoPOU8dHNcvM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/439285-722a-42df-b185-303151d76ace/1/VHbDyngMxXdErb6QoPOU8dHNcvM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/439285-722a-42df-b185-303151d76ace/1/VHbDyngMxXdErb6QoPOU8dHNcvM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:b6:1f:8f:2a:0d:64:44:8d:8e:7c:73:04:57:c1:98:c9:5a:
         46:77:c7:a9:c7:21:e0:a3:52:f6:51:50:3a:39:23:4d:20:00:
         76:2f:48:c8:5b:4b:eb:c7:11:5f:4b:2a:7c:9b:27:6f:f5:bc:
         ca:4f:88:42:6a:e7:eb:48:04:77:7e:71:87:2f:06:cf:c1:12:
         40:4c:96:27:22:f4:a4:9d:38:f9:b4:a5:db:90:b2:bb:23:93:
         00:05:77:1e:70:69:66:9e:2c:80:2a:5a:73:70:dc:5d:f5:9f:
         8c:05:10:4e:1b:bf:8f:26:c9:ae:04:60:7e:94:7b:20:d9:a2:
         fb:a8:ab:e2:fd:f5:a9:38:c8:01:d6:32:22:9d:00:5d:d1:40:
         ff:b1:84:25:cc:d3:b7:e7:af:e4:2f:68:88:0b:a4:ff:bb:4f:
         af:37:c7:63:1a:2f:4e:90:4a:73:da:ad:e5:cb:6c:15:58:b1:
         35:85:33:db:88:6d:bb:af:dc:2b:fc:bd:61:fc:6b:21:bb:4e:
         f7:04:44:cc:d0:e8:cb:3a:ff:da:74:ee:15:29:16:29:79:7e:
         b5:0f:05:10:76:f2:4b:07:83:e9:e2:26:79:23:07:c7:65:40:
         ef:11:65:f2:7a:b0:4b:8d:af:72:68:19:c1:ac:1e:ee:ba:24:
         6d:22:4b:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:56:01 2025 by rpki-client