Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/44ecc3-1525-45a6-9248-99528cf45a98/1/VSna2lwfQ2ejPLx11M6akAF4MpQ.mft
File:                     VSna2lwfQ2ejPLx11M6akAF4MpQ.mft (raw, json)
Hash identifier:          Qri+Ay7mcdhtw4rmP3ZX3MB7XifMENcWpZA1xA8pA4E=
Subject key identifier:   36:12:AE:61:93:B9:BF:F2:00:BE:0D:03:4C:26:6C:21:F9:B8:6B:20
Authority key identifier: 55:29:DA:DA:5C:1F:43:67:A3:3C:BC:75:D4:CE:9A:90:01:78:32:94
Certificate issuer:       /CN=5529dada5c1f4367a33cbc75d4ce9a9001783294
Certificate serial:       0193D3344917D3B287E02BE9FD606AFE1207
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VSna2lwfQ2ejPLx11M6akAF4MpQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/84/44ecc3-1525-45a6-9248-99528cf45a98/1/VSna2lwfQ2ejPLx11M6akAF4MpQ.mft
Manifest number:          0356
Signing time:             Tue 17 Dec 2024 06:00:39 +0000
Manifest this update:     Tue 17 Dec 2024 06:00:39 +0000
Manifest next update:     Wed 18 Dec 2024 06:00:39 +0000
Files and hashes:         1: ANM-v9-I63cEw8UYmAlep2Pbk70.roa (hash: U4kwAhVQkG03CjYTrLkiTa8Bs9RnjuessfCM72NjLh0=)
                          2: VSna2lwfQ2ejPLx11M6akAF4MpQ.crl (hash: SA47AX9p+Y4+XIWv9b5vfWSCZXp34BUR0oePTo9pRGE=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:d3:34:49:17:d3:b2:87:e0:2b:e9:fd:60:6a:fe:12:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5529dada5c1f4367a33cbc75d4ce9a9001783294
        Validity
            Not Before: Dec 17 06:00:39 2024 GMT
            Not After : Dec 18 06:00:39 2024 GMT
        Subject: CN=3612ae6193b9bff200be0d034c266c21f9b86b20
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:a5:8e:28:f5:18:0c:95:74:bd:3c:45:c2:8d:
                    87:1b:70:d9:e5:13:b6:90:ba:22:2f:6d:09:a2:1a:
                    ee:57:9e:68:7d:a7:e3:3c:3d:03:8e:3b:4b:2f:ac:
                    45:b1:a9:ff:2c:9b:46:11:b8:34:cc:c4:88:0c:ec:
                    e8:b4:3e:ca:77:5f:d5:f8:dd:85:e7:41:16:7e:d2:
                    c0:6f:e2:9b:b2:8c:3e:94:23:eb:20:87:70:53:87:
                    c7:95:ef:e6:54:0b:c3:5b:0a:9d:74:40:a4:71:da:
                    42:48:d1:67:e8:5a:92:74:c3:c6:f2:7e:71:b8:7b:
                    60:2f:2e:9c:ce:8f:77:5e:57:cd:cf:b4:4f:4f:15:
                    26:39:6e:3e:af:50:e7:b0:69:ba:14:a4:44:c8:03:
                    c3:dd:a4:4e:0e:5c:8a:bf:f2:77:e5:2f:d7:c9:97:
                    be:43:91:3a:db:d8:df:a6:52:88:c4:ad:e1:44:38:
                    a3:e7:7f:99:8b:3e:c3:eb:1e:2b:ea:d1:08:03:47:
                    fb:25:4d:e8:a2:95:5f:83:a3:75:1f:5a:b3:8d:ad:
                    c4:fd:bf:d9:87:1b:19:e8:ad:68:ae:c0:d7:44:ec:
                    22:a0:d1:10:82:f4:9d:76:1a:37:0a:c7:6d:5d:8b:
                    5f:07:2f:37:fc:8e:83:a1:64:a1:4b:5d:aa:da:86:
                    f8:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:12:AE:61:93:B9:BF:F2:00:BE:0D:03:4C:26:6C:21:F9:B8:6B:20
            X509v3 Authority Key Identifier:
                keyid:55:29:DA:DA:5C:1F:43:67:A3:3C:BC:75:D4:CE:9A:90:01:78:32:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VSna2lwfQ2ejPLx11M6akAF4MpQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/44ecc3-1525-45a6-9248-99528cf45a98/1/VSna2lwfQ2ejPLx11M6akAF4MpQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/84/44ecc3-1525-45a6-9248-99528cf45a98/1/VSna2lwfQ2ejPLx11M6akAF4MpQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:87:cb:b3:f1:11:4e:2b:f6:55:53:39:f4:0a:6f:4f:05:ba:
         46:c2:0d:34:ac:5a:7a:39:38:3b:35:bb:c5:5a:a9:84:d7:ac:
         d1:5a:b3:35:4b:22:f6:ca:fd:ea:9d:ed:43:44:fa:68:0a:d3:
         52:78:f1:d8:14:c8:9f:b7:95:b1:02:72:e1:b3:bc:f0:45:4c:
         a8:cf:be:94:21:23:a3:bf:46:81:38:4b:6b:02:d6:c5:fd:c1:
         9d:59:e7:c9:5b:16:a1:a1:18:66:4b:7c:90:bc:af:e1:db:17:
         04:38:e1:65:da:6e:49:71:12:f8:ee:cf:5e:01:23:e7:c1:55:
         6f:e9:94:46:f4:60:30:2b:f2:6a:a7:3e:c7:71:03:8b:d3:7c:
         ef:6b:74:65:e5:00:48:b6:9a:06:f8:34:0a:7b:a7:e9:55:32:
         00:01:7c:9e:cc:2d:77:4e:2d:dd:f3:2c:66:d3:5e:d9:bc:9d:
         33:72:3f:a7:4e:c9:e1:84:ac:90:15:50:f3:f6:10:e4:34:0f:
         bf:04:1a:68:6d:9c:03:59:46:5b:8a:93:f9:ce:f8:e8:b9:cf:
         bc:e3:98:96:ff:20:cb:4b:91:20:62:a0:b9:e3:cf:bc:82:2f:
         14:a1:44:48:4f:a7:5d:78:9e:99:ab:70:48:4e:d8:f0:78:1a:
         60:4a:cd:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 07:59:33 2025 by rpki-client