Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/5e6720-0f51-4014-ba1f-bda0bb885544/1/Vr-wzLXZvLOXSrk54gyJXSH0bHE.mft
File:                     Vr-wzLXZvLOXSrk54gyJXSH0bHE.mft (raw, json)
Hash identifier:          ldVXjcIGOImucxUFvJoj5OMfxtZWuJzexhkjhywy370=
Subject key identifier:   DC:E3:05:21:C8:BC:0C:FC:BB:E9:3B:AE:CE:C3:AC:C3:11:C9:AA:77
Authority key identifier: 56:BF:B0:CC:B5:D9:BC:B3:97:4A:B9:39:E2:0C:89:5D:21:F4:6C:71
Certificate issuer:       /CN=56bfb0ccb5d9bcb3974ab939e20c895d21f46c71
Certificate serial:       01957EA42967CD0FF6C6A0C97C1721C60614
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Vr-wzLXZvLOXSrk54gyJXSH0bHE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/aa/5e6720-0f51-4014-ba1f-bda0bb885544/1/Vr-wzLXZvLOXSrk54gyJXSH0bHE.mft
Manifest number:          1476
Signing time:             Mon 10 Mar 2025 06:00:42 +0000
Manifest this update:     Mon 10 Mar 2025 06:00:42 +0000
Manifest next update:     Tue 11 Mar 2025 06:00:42 +0000
Files and hashes:         1: TaFyA_yuFS97pLhaFyD2cw_w1Ww.roa (hash: Zi7/itKdtRu4VQNXXM+cjcg2959LUhBqNqAHvORJ/d0=)
                          2: Vr-wzLXZvLOXSrk54gyJXSH0bHE.crl (hash: xsZ/QAwO6DFWCTSStGzWqBJupZQZp4nyPIm402b+nbQ=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:7e:a4:29:67:cd:0f:f6:c6:a0:c9:7c:17:21:c6:06:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=56bfb0ccb5d9bcb3974ab939e20c895d21f46c71
        Validity
            Not Before: Mar 10 06:00:42 2025 GMT
            Not After : Mar 11 06:00:42 2025 GMT
        Subject: CN=dce30521c8bc0cfcbbe93baecec3acc311c9aa77
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:98:37:d1:2d:12:e0:79:fa:be:7f:d9:16:d0:
                    4c:e1:93:89:d5:c9:62:05:fa:12:e4:d3:2e:8f:a7:
                    0e:5c:d8:27:10:21:e5:b1:77:71:6c:0f:bd:01:72:
                    ee:c2:cb:11:1d:e5:4b:e0:de:45:4c:22:f2:47:95:
                    65:81:f5:60:d4:e4:4c:68:a2:d4:d9:28:45:98:3b:
                    7b:da:e2:41:65:5c:7d:84:7c:b0:65:a3:9e:37:61:
                    13:30:44:58:a3:1d:44:55:6e:c4:93:70:5d:db:07:
                    98:ad:7d:3f:9f:57:97:5e:bf:58:16:9d:b8:08:27:
                    b2:5c:1e:8b:85:24:96:2c:b0:99:56:a3:0a:b5:79:
                    ef:77:7b:6e:a1:1e:6f:59:06:9a:d9:3c:e7:5f:f0:
                    47:03:1a:b0:c1:a8:a5:c7:42:2f:a3:66:02:41:a7:
                    98:6c:92:a4:5c:bb:65:57:31:1d:08:fc:c3:20:ff:
                    99:07:fc:35:06:08:3a:db:18:52:42:53:ef:13:d8:
                    83:de:a1:c9:6c:54:ab:6f:5f:fe:91:5b:17:5d:61:
                    39:5a:e8:be:16:6b:eb:13:45:db:1a:70:32:4b:52:
                    d5:30:7b:4e:53:3e:1e:e8:2b:e9:94:68:a6:35:32:
                    6a:8a:d8:50:74:92:45:11:33:63:82:53:f5:1f:29:
                    79:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:E3:05:21:C8:BC:0C:FC:BB:E9:3B:AE:CE:C3:AC:C3:11:C9:AA:77
            X509v3 Authority Key Identifier:
                keyid:56:BF:B0:CC:B5:D9:BC:B3:97:4A:B9:39:E2:0C:89:5D:21:F4:6C:71

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vr-wzLXZvLOXSrk54gyJXSH0bHE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/5e6720-0f51-4014-ba1f-bda0bb885544/1/Vr-wzLXZvLOXSrk54gyJXSH0bHE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/5e6720-0f51-4014-ba1f-bda0bb885544/1/Vr-wzLXZvLOXSrk54gyJXSH0bHE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:9b:e0:d8:e9:a6:c4:33:a1:45:06:74:c1:d1:57:0c:a6:2b:
         97:a2:83:ec:65:8e:f1:ef:ea:29:fb:07:e7:69:ae:9e:d3:52:
         aa:fb:43:5d:c9:bd:e7:a8:f6:64:e6:3d:0b:b9:30:c4:c5:68:
         fb:cf:a7:3b:e9:6e:34:46:3f:86:6d:48:ef:63:8e:d7:44:eb:
         65:fc:6a:f2:96:9f:99:a1:6f:7f:3a:b9:47:b7:29:bb:ff:52:
         17:44:8c:ca:13:12:77:81:ec:ea:c0:4f:a9:d6:73:b6:bb:e9:
         6d:fa:49:75:1b:03:ca:c3:e2:c0:e2:06:d8:c6:61:21:1c:ee:
         cb:8f:df:07:7d:d5:eb:a5:bb:75:47:e6:90:c0:93:62:46:37:
         53:e8:8b:11:5e:7e:52:80:c4:9a:24:dd:59:92:85:8b:e9:ce:
         92:95:79:fc:c2:10:fb:14:52:46:a0:dd:94:05:3d:40:fd:26:
         30:15:27:7f:4c:81:35:30:3b:ae:f0:c6:3b:e1:41:01:43:50:
         ab:84:0a:94:15:11:5c:b1:0f:70:a7:2f:93:db:e3:8d:df:51:
         19:25:b1:b6:d0:03:a2:c7:23:70:3f:a4:85:8a:a5:dd:f7:04:
         80:77:25:09:9f:bd:ca:64:c6:92:c6:aa:a3:65:6f:4b:22:d7:
         16:d9:64:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 05:27:39 2025 by rpki-client