Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/08949f-c79a-46ca-b50b-0fc9bfcd74a6/1/VKbEbX2Q_rSnKK8PiuEb-g1PjLE.mft
File:                     VKbEbX2Q_rSnKK8PiuEb-g1PjLE.mft (raw, json)
Hash identifier:          F5K7OyN3GwBpgNv1mPlteZCv7DiL0viFaXbhiZONXwE=
Subject key identifier:   48:61:1D:EC:4B:04:23:BA:8C:C9:D4:D6:4D:9A:71:F5:08:31:0D:9A
Authority key identifier: 54:A6:C4:6D:7D:90:FE:B4:A7:28:AF:0F:8A:E1:1B:FA:0D:4F:8C:B1
Certificate issuer:       /CN=54a6c46d7d90feb4a728af0f8ae11bfa0d4f8cb1
Certificate serial:       0194BC3BE1ACF1BD19216F54417694C3AD48
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VKbEbX2Q_rSnKK8PiuEb-g1PjLE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ff/08949f-c79a-46ca-b50b-0fc9bfcd74a6/1/VKbEbX2Q_rSnKK8PiuEb-g1PjLE.mft
Manifest number:          0777
Signing time:             Fri 31 Jan 2025 12:00:28 +0000
Manifest this update:     Fri 31 Jan 2025 12:00:28 +0000
Manifest next update:     Sat 01 Feb 2025 12:00:28 +0000
Files and hashes:         1: 3wR1X7qeiV3Us_sYJwiLPsDNiag.roa (hash: sVmRoOG1wqqDxd7JOMuBur0va/KN44y5/hVue29WGbc=)
                          2: VKbEbX2Q_rSnKK8PiuEb-g1PjLE.crl (hash: yVxe2RNBTVQypDsz6aOpW/kQKTZmYdOiA4Z4CtD2IAo=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:3b:e1:ac:f1:bd:19:21:6f:54:41:76:94:c3:ad:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54a6c46d7d90feb4a728af0f8ae11bfa0d4f8cb1
        Validity
            Not Before: Jan 31 12:00:28 2025 GMT
            Not After : Feb  1 12:00:28 2025 GMT
        Subject: CN=48611dec4b0423ba8cc9d4d64d9a71f508310d9a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:15:57:88:6c:9a:f6:05:f9:32:02:91:5f:83:
                    e8:98:41:8c:22:43:4b:9d:b5:7d:2c:f9:02:c2:48:
                    7f:ca:9f:65:6c:b6:42:36:b3:92:8e:b4:7a:d4:4a:
                    d5:d7:3d:df:5d:dd:29:02:7f:eb:63:f0:7d:95:71:
                    6d:82:e4:80:c0:f4:93:7e:85:1c:c5:b6:b4:79:13:
                    42:d7:aa:58:12:db:99:bb:1a:ef:c8:ee:0a:05:46:
                    68:3c:b3:9b:94:db:6d:bb:a7:3b:fc:d9:78:e0:e2:
                    80:42:fa:ae:56:f9:0b:40:00:28:79:c3:bd:00:64:
                    17:0d:06:99:4f:a2:ac:e6:6f:36:43:98:be:fb:ae:
                    cb:d0:df:b5:88:e1:35:1b:04:89:05:f7:2d:4c:5d:
                    81:90:5a:e3:c3:15:93:53:eb:56:14:07:e1:4c:5a:
                    6c:6b:47:4d:21:fb:a2:bd:80:06:7f:9f:01:69:22:
                    16:61:cf:35:13:27:bf:ed:87:2a:68:e3:b1:c1:08:
                    f4:ac:6e:72:3c:cb:3c:58:17:6f:86:ff:ed:ee:f2:
                    b4:8b:54:99:4b:ac:1b:43:10:77:3b:66:6d:e6:91:
                    c4:e0:4b:fd:cd:ad:02:82:0d:b5:f5:39:e1:dc:96:
                    2b:9e:66:2c:cd:53:62:64:6c:ee:80:63:cc:b6:28:
                    f1:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:61:1D:EC:4B:04:23:BA:8C:C9:D4:D6:4D:9A:71:F5:08:31:0D:9A
            X509v3 Authority Key Identifier:
                keyid:54:A6:C4:6D:7D:90:FE:B4:A7:28:AF:0F:8A:E1:1B:FA:0D:4F:8C:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VKbEbX2Q_rSnKK8PiuEb-g1PjLE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/08949f-c79a-46ca-b50b-0fc9bfcd74a6/1/VKbEbX2Q_rSnKK8PiuEb-g1PjLE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/08949f-c79a-46ca-b50b-0fc9bfcd74a6/1/VKbEbX2Q_rSnKK8PiuEb-g1PjLE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bf:0c:b4:81:eb:56:fe:bc:41:40:18:4c:7a:44:99:27:d3:95:
         22:22:a4:47:43:01:70:cd:6a:4f:eb:81:e9:77:88:96:a5:c9:
         4d:b2:04:34:04:14:06:99:94:91:3f:8b:ff:2a:f4:0a:ca:ff:
         83:0a:03:af:be:6d:54:8a:59:43:d5:fd:73:3b:8c:70:3a:83:
         13:84:45:99:79:57:23:35:27:7b:66:d6:6e:2c:42:81:6c:c2:
         52:2a:86:09:f0:eb:64:25:42:5f:87:d8:c6:00:07:78:0d:39:
         a0:5d:40:fa:ea:04:07:e3:44:f4:fc:67:2f:c8:1e:b9:d3:28:
         b3:50:e8:21:38:85:d3:cb:76:28:b5:05:d2:6a:5e:cb:e7:bb:
         18:26:7b:1c:db:c3:c2:92:37:3b:a5:88:74:9f:b8:53:c5:15:
         cf:0f:d7:d5:c2:db:36:ef:f5:89:8c:a6:75:4a:35:c7:75:fa:
         1e:6c:6f:b8:be:89:eb:61:97:c1:b2:81:a9:d7:84:d3:80:14:
         ed:4e:fa:4a:f6:81:04:98:b8:28:8f:47:09:fe:70:43:65:c1:
         5f:3f:fb:2b:03:ad:3a:95:04:0e:70:84:c6:b3:05:a4:ac:3d:
         bd:2c:8b:e2:39:88:f8:fd:56:e9:d7:5c:c5:55:7c:be:4b:48:
         61:5c:11:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:09:11 2025 by rpki-client