Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/279510-87c6-4075-b69e-c949ef0b4172/1/VD-NThL0vRFQ8TA9bZ0XRf1TAKw.mft
File:                     VD-NThL0vRFQ8TA9bZ0XRf1TAKw.mft (raw, json)
Hash identifier:          8RiYPch+zpr8gKvgcACrWWGkr49qC0vt9MxU46L8I58=
Subject key identifier:   4B:AB:2B:D1:29:FC:C4:9E:33:B9:42:48:93:C7:1C:BD:CE:1C:38:75
Authority key identifier: 54:3F:8D:4E:12:F4:BD:11:50:F1:30:3D:6D:9D:17:45:FD:53:00:AC
Certificate issuer:       /CN=543f8d4e12f4bd1150f1303d6d9d1745fd5300ac
Certificate serial:       018949BC7A1D1A3C34FA5D00B4E3CB4FAEE0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VD-NThL0vRFQ8TA9bZ0XRf1TAKw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a3/279510-87c6-4075-b69e-c949ef0b4172/1/VD-NThL0vRFQ8TA9bZ0XRf1TAKw.mft
Manifest number:          04C5
Signing time:             Wed 12 Jul 2023 10:53:56 +0000
Manifest this update:     Wed 12 Jul 2023 10:53:56 +0000
Manifest next update:     Thu 13 Jul 2023 10:53:56 +0000
Files and hashes:         1: VD-NThL0vRFQ8TA9bZ0XRf1TAKw.crl (hash: RPFw3SNWkAXbjzm/7l58wlfOTY8utsfazMAa4SJRfUU=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:89:49:bc:7a:1d:1a:3c:34:fa:5d:00:b4:e3:cb:4f:ae:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=543f8d4e12f4bd1150f1303d6d9d1745fd5300ac
        Validity
            Not Before: Jul 12 10:53:56 2023 GMT
            Not After : Jul 13 10:53:56 2023 GMT
        Subject: CN=4bab2bd129fcc49e33b9424893c71cbdce1c3875
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:bb:8c:7d:74:b5:b3:f3:77:ce:d0:c2:b0:3b:
                    db:51:bc:fd:f8:2e:01:c2:bc:ba:80:4f:b5:67:2c:
                    12:cf:a5:a6:07:be:f0:ea:76:27:87:02:45:a1:56:
                    ad:6f:cb:aa:0b:aa:bf:0e:bd:2e:a4:77:93:a5:b9:
                    64:d8:56:73:44:5f:43:c8:58:9d:13:79:c4:97:a7:
                    49:fe:ab:b0:bb:8a:1f:bd:af:25:d2:e5:59:9d:25:
                    46:01:d3:8d:96:85:44:0e:96:f9:83:f8:5a:01:94:
                    9b:ed:89:69:4c:ab:48:d7:75:7f:51:17:93:88:07:
                    b0:20:5c:f1:6b:a2:1e:53:5c:28:fe:65:68:0b:e7:
                    21:19:21:0c:c6:27:d9:b4:82:91:8b:89:36:64:fc:
                    5d:4d:fa:01:45:49:55:42:5d:71:14:1b:7b:3e:30:
                    6c:d2:66:be:8d:75:54:c7:bd:4e:eb:23:b2:f3:b9:
                    3d:26:1d:b0:24:93:9f:0d:c4:f9:27:bf:1e:b1:fc:
                    91:a2:eb:e2:9f:f9:19:e5:0b:06:cb:f4:92:ec:c2:
                    c4:c6:f5:66:6d:cf:90:b2:51:bf:e1:52:9f:12:fc:
                    a3:63:0f:ea:dd:67:fd:28:bd:6b:dc:43:ed:74:89:
                    61:cd:1a:f3:3f:d9:c3:cb:c2:9b:28:5a:01:c1:5a:
                    05:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:AB:2B:D1:29:FC:C4:9E:33:B9:42:48:93:C7:1C:BD:CE:1C:38:75
            X509v3 Authority Key Identifier:
                keyid:54:3F:8D:4E:12:F4:BD:11:50:F1:30:3D:6D:9D:17:45:FD:53:00:AC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VD-NThL0vRFQ8TA9bZ0XRf1TAKw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/279510-87c6-4075-b69e-c949ef0b4172/1/VD-NThL0vRFQ8TA9bZ0XRf1TAKw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/279510-87c6-4075-b69e-c949ef0b4172/1/VD-NThL0vRFQ8TA9bZ0XRf1TAKw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:6b:6e:e1:55:06:7f:95:1f:35:66:b9:cb:e4:75:a4:e8:c9:
         74:39:90:b7:86:74:fe:19:98:30:4d:1d:2f:13:70:e8:09:57:
         a1:45:d9:eb:13:56:e6:6f:aa:4f:6f:90:3e:9a:f6:32:a0:17:
         fc:8d:07:d3:63:2c:4d:1e:7a:d7:99:19:ef:57:a3:4f:63:31:
         1a:ce:4b:4f:93:18:bd:92:f7:a0:f2:4d:4f:b1:10:ca:2e:7e:
         a6:f3:fb:e6:e9:87:56:fc:fb:05:07:fc:8d:54:ee:13:98:be:
         64:03:fd:af:3f:59:6a:df:cf:d4:c2:b9:80:39:ab:5c:f8:89:
         e4:72:e3:e7:a6:6e:41:50:87:a8:0c:4c:b2:38:da:b2:fd:ca:
         c8:d6:35:f4:76:6e:d3:ed:9a:b2:1e:6d:06:cf:36:a5:08:a1:
         03:07:56:c9:36:27:53:df:9a:80:7d:23:d8:95:39:81:b4:f9:
         d9:b9:0e:61:cf:ee:3e:32:23:30:da:bf:52:65:77:ab:a1:cd:
         9b:89:76:72:8a:7b:f3:df:3f:3f:49:1d:39:88:4c:94:ac:b6:
         ad:a2:3f:d5:52:52:a5:13:d5:7c:cf:82:b3:51:fc:4f:fa:3c:
         fe:45:c7:08:e9:2f:19:c1:4c:cb:c5:35:38:42:24:19:a9:54:
         0e:df:c4:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:49:38 2025 by rpki-client