Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/40d57a-44d3-41d5-8b41-69705b37698e/1/B9Ok5mL3EpVnzRij4ZvnuvKBpKM.mft
File:                     B9Ok5mL3EpVnzRij4ZvnuvKBpKM.mft (raw, json)
Hash identifier:          QRkLPoKeZs1MXgt/HEECOpZXtTuT2c7x6xJ77rp/hhU=
Subject key identifier:   FE:9E:18:81:5B:84:2E:D3:1D:1B:30:36:99:8F:8D:5D:68:58:29:C4
Authority key identifier: 07:D3:A4:E6:62:F7:12:95:67:CD:18:A3:E1:9B:E7:BA:F2:81:A4:A3
Certificate issuer:       /CN=07d3a4e662f7129567cd18a3e19be7baf281a4a3
Certificate serial:       019812AE63896781B5747C0BB278242B8DE5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/B9Ok5mL3EpVnzRij4ZvnuvKBpKM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e3/40d57a-44d3-41d5-8b41-69705b37698e/1/B9Ok5mL3EpVnzRij4ZvnuvKBpKM.mft
Manifest number:          02EE
Signing time:             Wed 16 Jul 2025 10:01:15 +0000
Manifest this update:     Wed 16 Jul 2025 10:01:15 +0000
Manifest next update:     Thu 17 Jul 2025 10:01:15 +0000
Files and hashes:         1: B9Ok5mL3EpVnzRij4ZvnuvKBpKM.crl (hash: 3Sphz1Qvu7+68umc6j2UA5p8hSRgwkvp+p6PVlv6z/M=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:12:ae:63:89:67:81:b5:74:7c:0b:b2:78:24:2b:8d:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07d3a4e662f7129567cd18a3e19be7baf281a4a3
        Validity
            Not Before: Jul 16 10:01:15 2025 GMT
            Not After : Jul 17 10:01:15 2025 GMT
        Subject: CN=fe9e18815b842ed31d1b3036998f8d5d685829c4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:03:6c:8b:fa:97:04:aa:ab:14:94:12:2b:7f:
                    fe:52:ff:bb:34:d0:e0:98:fd:69:4e:2f:04:8b:ab:
                    c0:c9:51:0f:7d:de:5b:45:54:c7:35:80:b3:d3:a3:
                    24:67:c3:77:ab:df:5d:c5:b9:46:3e:8b:a4:bd:74:
                    6f:da:6f:f8:69:9b:66:3a:c5:8a:68:0d:91:7d:62:
                    2b:c2:5d:b6:ff:0d:19:f9:1f:7f:6b:f6:3d:85:38:
                    79:f5:0f:f1:cf:35:3b:2e:e0:71:f9:af:7a:c5:21:
                    b0:01:5b:44:f5:d6:d1:ee:67:e9:2b:91:14:ec:da:
                    3a:90:e8:7d:01:cd:72:38:61:17:54:ae:8d:6c:37:
                    4f:9c:2f:84:ea:4f:02:d9:69:cc:29:9b:65:d6:77:
                    0a:a2:1d:7b:34:95:d0:b2:04:09:09:17:6f:f4:c9:
                    2d:64:e3:77:53:5c:e8:8d:32:e5:2d:5d:2a:c4:54:
                    84:95:c6:9a:84:92:21:09:c5:7e:dd:75:6c:10:0d:
                    43:1f:24:d2:8b:92:03:10:fe:8c:f1:d3:25:31:e1:
                    b2:e9:60:35:85:c3:9f:6d:a2:e1:3f:1d:44:52:86:
                    35:a9:4d:0d:4d:e3:6f:6a:a6:9d:cc:7a:7c:96:77:
                    64:d0:5a:c6:22:6c:9d:7c:c3:b8:7e:dc:b1:0e:c5:
                    ca:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:9E:18:81:5B:84:2E:D3:1D:1B:30:36:99:8F:8D:5D:68:58:29:C4
            X509v3 Authority Key Identifier:
                keyid:07:D3:A4:E6:62:F7:12:95:67:CD:18:A3:E1:9B:E7:BA:F2:81:A4:A3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B9Ok5mL3EpVnzRij4ZvnuvKBpKM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/40d57a-44d3-41d5-8b41-69705b37698e/1/B9Ok5mL3EpVnzRij4ZvnuvKBpKM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/40d57a-44d3-41d5-8b41-69705b37698e/1/B9Ok5mL3EpVnzRij4ZvnuvKBpKM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bd:a6:50:0f:29:91:90:a2:e4:d0:7e:7c:8a:6f:c8:c4:e0:5b:
         42:e8:75:c1:05:a6:e3:da:cb:c0:1e:fd:2b:40:4d:8c:06:c1:
         19:25:d5:d1:9b:e2:32:5d:fa:e1:aa:99:71:dd:05:cd:3b:c8:
         e9:0d:fa:f0:37:d5:18:38:3e:58:a0:50:be:1f:f9:ae:00:e9:
         be:fb:f2:21:57:4c:5a:cb:c9:2e:b9:8e:0f:71:0d:15:a0:f5:
         b3:22:dd:b9:77:ee:17:5b:c0:52:1a:75:57:7f:db:c1:72:69:
         69:a1:2b:00:15:6c:a7:13:2c:d4:2c:8f:3e:f3:db:a9:15:53:
         f1:4b:7e:80:75:b4:ac:46:c9:4b:90:d5:2f:bd:4d:be:10:ad:
         c2:6d:67:e9:20:dd:93:73:14:ce:ca:b8:0b:56:ee:df:4c:03:
         1e:c7:46:a9:f4:73:9a:ba:e9:c2:16:cf:8d:38:35:e7:af:90:
         eb:d6:b9:e3:89:f7:01:66:9c:55:a7:b2:fb:2b:a7:36:e8:21:
         b0:83:df:13:85:18:e4:1f:f0:27:d5:b7:b7:00:1c:ea:96:3c:
         e6:3a:d5:b1:68:99:d6:fe:fe:7c:71:2d:fd:1a:2a:ea:24:47:
         a2:2e:c3:8c:8a:59:bb:20:57:b9:da:32:ee:bf:1e:d0:db:ad:
         cc:e8:0d:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 07:14:44 2025 by rpki-client