Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/28bef5-75d6-421e-a323-47b7c2bc3d02/1/vvXOSh87d09Kv60911eDyp5rmMI.mft
File:                     vvXOSh87d09Kv60911eDyp5rmMI.mft (raw, json)
Hash identifier:          0BOeEyU8JK6rhRFEAnh66LIYPxWJs9kCmSH9MRRdDMo=
Subject key identifier:   7A:40:BD:A0:13:DE:70:49:EC:D0:19:C4:5A:42:8E:84:1A:CC:51:78
Authority key identifier: BE:F5:CE:4A:1F:3B:77:4F:4A:BF:AD:3D:D7:57:83:CA:9E:6B:98:C2
Certificate issuer:       /CN=bef5ce4a1f3b774f4abfad3dd75783ca9e6b98c2
Certificate serial:       018A41CF584BEEE167F629C8477681FB9CF8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vvXOSh87d09Kv60911eDyp5rmMI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6b/28bef5-75d6-421e-a323-47b7c2bc3d02/1/vvXOSh87d09Kv60911eDyp5rmMI.mft
Manifest number:          0AA2
Signing time:             Tue 29 Aug 2023 15:00:22 +0000
Manifest this update:     Tue 29 Aug 2023 15:00:22 +0000
Manifest next update:     Wed 30 Aug 2023 15:00:22 +0000
Files and hashes:         1: 7bXWz6UGj34x8B20q3ImeOrdzYM.roa (hash: Z/7eUftRVw0gbdyAq9R3ehwHjjcSbBT9ICFbkyjC3sw=)
                          2: vvXOSh87d09Kv60911eDyp5rmMI.crl (hash: BGNYtpBz3Om9ExEhFuL0kKKqb61/QQu8ZybuR5qQdkE=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8a:41:cf:58:4b:ee:e1:67:f6:29:c8:47:76:81:fb:9c:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bef5ce4a1f3b774f4abfad3dd75783ca9e6b98c2
        Validity
            Not Before: Aug 29 15:00:22 2023 GMT
            Not After : Aug 30 15:00:22 2023 GMT
        Subject: CN=7a40bda013de7049ecd019c45a428e841acc5178
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:53:d8:d5:aa:34:95:a1:fe:74:c5:ac:c6:a8:
                    5f:8f:d6:68:ca:28:1d:bd:50:8c:9b:00:e3:e5:83:
                    ab:f9:53:3f:28:fa:4b:0e:87:38:56:fe:24:6a:c3:
                    5f:5b:17:86:9d:9b:f4:12:38:7d:b6:6a:d4:d6:27:
                    af:29:28:17:a1:49:e1:25:f9:fa:d7:aa:1b:80:37:
                    13:53:20:df:dc:16:9b:f1:6f:e1:1e:35:c8:d8:b8:
                    df:cb:1c:4f:d1:4c:3f:56:c4:30:cc:bd:89:cf:c6:
                    38:97:86:28:e5:93:a4:be:b8:e8:9a:6e:12:65:64:
                    a8:58:3d:16:d5:a5:f6:22:0d:9f:ff:6d:69:31:73:
                    30:6a:7e:2a:66:f0:7e:d2:10:ef:ba:b6:7b:40:06:
                    68:d4:c1:b2:3a:63:60:92:2a:eb:a2:46:66:ee:80:
                    0b:52:1d:cd:d3:69:36:6e:16:75:8e:da:31:44:03:
                    e0:f3:4c:54:60:1e:fe:e8:2c:59:b4:7a:2e:07:9e:
                    5d:4b:e5:99:a9:ae:5c:95:1b:fa:12:81:95:9d:46:
                    5f:92:26:d7:b6:a9:4d:3c:3c:3d:16:33:30:cd:04:
                    5f:ff:f3:9c:d4:dd:9e:25:05:7a:9c:d3:75:23:9e:
                    1f:ef:3d:46:8f:2f:6e:69:ed:cf:2f:6a:67:1a:b9:
                    fe:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:40:BD:A0:13:DE:70:49:EC:D0:19:C4:5A:42:8E:84:1A:CC:51:78
            X509v3 Authority Key Identifier:
                keyid:BE:F5:CE:4A:1F:3B:77:4F:4A:BF:AD:3D:D7:57:83:CA:9E:6B:98:C2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vvXOSh87d09Kv60911eDyp5rmMI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/28bef5-75d6-421e-a323-47b7c2bc3d02/1/vvXOSh87d09Kv60911eDyp5rmMI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/28bef5-75d6-421e-a323-47b7c2bc3d02/1/vvXOSh87d09Kv60911eDyp5rmMI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:26:bc:b4:89:f4:e9:c9:2b:62:1d:56:e0:b0:42:27:ef:30:
         d3:67:9c:64:ac:64:67:fe:1e:bd:dd:9a:4d:e6:e8:4c:2e:9d:
         48:fc:49:c0:2d:35:e9:da:7c:0d:1a:db:fe:05:a5:a9:0d:57:
         00:20:11:ce:aa:42:4b:58:e3:24:a6:58:a9:02:03:c6:86:fd:
         5d:41:9e:71:93:bd:f2:42:6d:56:ab:bc:22:a7:ae:2b:eb:53:
         84:8e:47:b6:df:78:9c:39:78:13:5a:00:af:50:3b:fd:1a:97:
         66:62:5f:b5:ab:dc:98:c8:7e:f4:49:b7:99:b4:18:2d:e4:b2:
         df:7a:b8:34:17:dd:4a:03:df:e5:02:cb:6c:59:22:e3:78:63:
         0f:43:52:81:fc:80:25:d5:40:5b:4d:0e:75:46:47:1a:af:b6:
         82:67:03:4b:b0:5d:63:e8:71:1e:c1:32:e5:7a:cf:94:68:62:
         76:de:c2:10:c5:06:98:7f:c9:90:6f:ed:b0:3e:b2:0c:62:65:
         5f:56:23:2d:59:f5:e5:d2:a0:fb:29:ca:fe:c4:09:bf:0c:7d:
         18:56:73:d6:9a:bf:49:79:3a:a0:23:bb:30:4e:be:2e:e5:18:
         be:e2:27:73:5a:8c:8c:c6:77:ff:59:32:94:57:53:9a:69:ab:
         f3:05:12:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 03:39:24 2025 by rpki-client