Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/a31b25-e927-4ea2-a8a0-20f44b9f4ee7/1/VRfJBSP1ZkGA9x4wYN2iMXLkz3U.mft
File:                     VRfJBSP1ZkGA9x4wYN2iMXLkz3U.mft (raw, json)
Hash identifier:          VQBXq6kv2GxoAiS7OEBnWJKRVbitjRClF8QSmtGhlCI=
Subject key identifier:   86:66:CB:A5:CC:47:FD:4A:5D:37:EA:99:18:98:63:D3:BB:9B:A3:13
Authority key identifier: 55:17:C9:05:23:F5:66:41:80:F7:1E:30:60:DD:A2:31:72:E4:CF:75
Certificate issuer:       /CN=5517c90523f5664180f71e3060dda23172e4cf75
Certificate serial:       01988355E6D81BC06E0EEE5118F7465130BB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VRfJBSP1ZkGA9x4wYN2iMXLkz3U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/48/a31b25-e927-4ea2-a8a0-20f44b9f4ee7/1/VRfJBSP1ZkGA9x4wYN2iMXLkz3U.mft
Manifest number:          0EF5
Signing time:             Thu 07 Aug 2025 07:01:41 +0000
Manifest this update:     Thu 07 Aug 2025 07:01:41 +0000
Manifest next update:     Fri 08 Aug 2025 07:01:41 +0000
Files and hashes:         1: VRfJBSP1ZkGA9x4wYN2iMXLkz3U.crl (hash: l8ZlftBCb/OGCYzu+k0X8ffzef4zHcSaRbYajLgejgQ=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:83:55:e6:d8:1b:c0:6e:0e:ee:51:18:f7:46:51:30:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5517c90523f5664180f71e3060dda23172e4cf75
        Validity
            Not Before: Aug  7 07:01:41 2025 GMT
            Not After : Aug  8 07:01:41 2025 GMT
        Subject: CN=8666cba5cc47fd4a5d37ea99189863d3bb9ba313
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:80:b8:18:7e:b6:17:ca:2d:61:22:3e:53:13:
                    2e:19:96:0f:27:fd:d4:c8:0c:24:fb:47:4f:61:a7:
                    d7:0e:4b:60:42:01:9f:60:bb:6e:d1:62:03:10:68:
                    ee:b5:8b:ab:13:4c:4c:c5:93:dc:d8:fc:48:87:39:
                    99:23:bc:45:55:e6:a9:65:ad:84:66:9e:4e:4a:fc:
                    8d:8d:b8:47:5b:78:65:5c:ec:83:f6:62:18:6d:e6:
                    92:96:3c:2a:7b:5d:fa:0d:cf:e3:f5:a5:75:61:26:
                    c8:81:e5:81:6c:13:76:e9:44:21:0b:f1:3c:a2:b0:
                    08:67:57:3a:36:c8:bf:57:a9:4b:9a:5f:35:9d:78:
                    c0:df:da:37:e7:59:37:9e:2f:d9:2e:34:80:39:4d:
                    97:c8:00:7d:7e:98:b9:bc:36:8f:d1:98:e7:fe:f1:
                    3c:4e:d8:76:aa:7c:59:3e:c0:3f:ba:94:20:be:68:
                    26:b4:fc:14:42:39:e3:f1:b9:2e:8d:f1:88:ca:60:
                    9b:2d:4a:3b:03:1b:c9:5c:b6:1a:08:2b:c8:f6:d9:
                    dd:2d:9a:08:d9:47:73:1e:aa:c6:59:ff:7c:2c:67:
                    91:c9:f6:cb:5c:85:88:2b:77:33:05:f8:8d:69:96:
                    5c:e7:39:d5:8d:e3:aa:89:04:c0:52:73:a6:62:c0:
                    9c:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:66:CB:A5:CC:47:FD:4A:5D:37:EA:99:18:98:63:D3:BB:9B:A3:13
            X509v3 Authority Key Identifier:
                keyid:55:17:C9:05:23:F5:66:41:80:F7:1E:30:60:DD:A2:31:72:E4:CF:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VRfJBSP1ZkGA9x4wYN2iMXLkz3U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/a31b25-e927-4ea2-a8a0-20f44b9f4ee7/1/VRfJBSP1ZkGA9x4wYN2iMXLkz3U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/48/a31b25-e927-4ea2-a8a0-20f44b9f4ee7/1/VRfJBSP1ZkGA9x4wYN2iMXLkz3U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b7:29:e3:3e:12:b6:46:73:b0:12:99:fe:9d:b4:d9:c4:e1:88:
         cd:38:90:4e:5d:5b:f7:97:cb:81:9d:a6:bb:1c:0b:11:57:c5:
         e2:08:92:08:bc:b9:73:55:04:b7:9b:b6:a1:46:07:62:a4:d0:
         59:9a:ec:84:a7:bf:bf:1a:4f:8d:86:94:ec:be:4c:3c:39:ab:
         3d:7b:12:8b:0c:07:16:d3:d2:c6:2c:ad:04:18:12:4e:c7:c5:
         11:fc:05:9c:85:0c:93:35:9e:79:dd:cc:bc:65:93:6f:8e:fa:
         74:e8:a4:30:77:68:e1:e8:e0:ae:ac:40:5d:48:32:80:cf:1c:
         ac:0f:68:9a:8d:29:30:00:a5:84:77:21:cd:00:5a:66:cd:68:
         26:91:ea:42:2b:46:d0:6b:0d:eb:e4:a8:8b:a4:b1:39:1d:a9:
         9e:8c:cf:cf:64:82:d1:e0:59:3b:a6:b4:76:75:3b:48:33:83:
         6d:56:db:7f:f1:0d:5e:6b:dd:d2:d9:74:8b:eb:e9:16:54:b3:
         89:b3:3d:5e:c2:6c:02:86:40:64:91:09:bb:3f:ee:ff:35:6b:
         5c:62:5f:c0:c5:86:e0:a3:00:ef:0e:c2:e3:13:d5:bc:99:a0:
         db:1b:c2:3c:81:a5:a9:de:75:6c:3b:cf:17:7b:f3:0a:26:11:
         6e:33:2d:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 05:50:49 2025 by rpki-client