Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/0100dc-6be9-40e1-9138-45b863fea7ac/1/u0RrRpwZ6VUOQ8xnPKMVpkg_reo.mft
File:                     u0RrRpwZ6VUOQ8xnPKMVpkg_reo.mft (raw, json)
Hash identifier:          9tmOozqLp7oikojWP5d3HK+OZFnS2t0JEOJPhqSYQno=
Subject key identifier:   02:23:B3:80:4C:3C:8C:66:65:A0:FA:2B:54:84:B9:A3:9C:5C:ED:03
Authority key identifier: BB:44:6B:46:9C:19:E9:55:0E:43:CC:67:3C:A3:15:A6:48:3F:AD:EA
Certificate issuer:       /CN=bb446b469c19e9550e43cc673ca315a6483fadea
Certificate serial:       0195A2E8497892C72A3F0F563C335E7ACC7B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/u0RrRpwZ6VUOQ8xnPKMVpkg_reo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/65/0100dc-6be9-40e1-9138-45b863fea7ac/1/u0RrRpwZ6VUOQ8xnPKMVpkg_reo.mft
Manifest number:          10D6
Signing time:             Mon 17 Mar 2025 07:01:26 +0000
Manifest this update:     Mon 17 Mar 2025 07:01:26 +0000
Manifest next update:     Tue 18 Mar 2025 07:01:26 +0000
Files and hashes:         1: u0RrRpwZ6VUOQ8xnPKMVpkg_reo.crl (hash: yhdXfR30OT3mt5TOEtly/UMa+IQizMJxyAAgtkMtdeE=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:a2:e8:49:78:92:c7:2a:3f:0f:56:3c:33:5e:7a:cc:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bb446b469c19e9550e43cc673ca315a6483fadea
        Validity
            Not Before: Mar 17 07:01:26 2025 GMT
            Not After : Mar 18 07:01:26 2025 GMT
        Subject: CN=0223b3804c3c8c6665a0fa2b5484b9a39c5ced03
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:84:4a:a4:1a:cd:23:ea:26:5d:64:e2:a1:3b:
                    cb:9d:6c:d0:02:4b:c0:26:59:6e:43:a2:94:b8:7e:
                    53:cb:65:4d:a4:ba:c0:bf:6d:61:f2:b7:f8:4e:c3:
                    dc:15:9b:ee:31:e9:5d:fc:59:fa:c2:d5:bc:ed:0b:
                    b8:16:71:32:eb:87:a4:79:5c:b5:e3:0b:f7:bd:d4:
                    84:40:80:9b:a4:67:d3:e4:a3:44:d4:32:bf:22:9c:
                    3f:4e:a9:0b:ba:cc:c2:49:c5:5f:43:68:5b:bf:b1:
                    b8:c6:3a:f9:30:a0:d5:d4:1a:af:27:c5:19:2e:78:
                    1e:cf:01:16:48:af:d4:fe:a4:3c:95:cb:bc:8d:83:
                    59:32:3a:2c:59:81:4f:c9:79:08:25:8d:41:03:4d:
                    a1:d5:55:8b:49:86:8b:36:de:87:33:e1:7a:85:39:
                    a6:16:66:42:48:73:be:7f:37:ea:60:8e:49:29:64:
                    ae:21:77:35:ae:0f:16:5d:75:a8:19:1b:f9:52:c9:
                    30:a0:13:cd:7d:45:6b:25:f7:46:36:3c:2e:84:aa:
                    74:84:0b:86:5f:02:cf:97:40:b8:e8:e7:9d:11:07:
                    2b:43:00:d9:8e:74:8b:20:f1:6a:5d:6f:3f:ff:e3:
                    2e:1d:e6:6f:11:63:3f:d6:01:c4:b5:5d:37:ef:7c:
                    13:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:23:B3:80:4C:3C:8C:66:65:A0:FA:2B:54:84:B9:A3:9C:5C:ED:03
            X509v3 Authority Key Identifier:
                keyid:BB:44:6B:46:9C:19:E9:55:0E:43:CC:67:3C:A3:15:A6:48:3F:AD:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u0RrRpwZ6VUOQ8xnPKMVpkg_reo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/0100dc-6be9-40e1-9138-45b863fea7ac/1/u0RrRpwZ6VUOQ8xnPKMVpkg_reo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/65/0100dc-6be9-40e1-9138-45b863fea7ac/1/u0RrRpwZ6VUOQ8xnPKMVpkg_reo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:e9:61:e8:ea:7d:55:33:e3:93:b9:3e:d1:b9:05:ec:d0:57:
         df:1c:96:78:d6:42:56:9b:90:73:70:fe:79:2d:bd:42:c9:65:
         1a:fb:e5:85:28:a6:dd:ca:f6:4d:4b:4a:44:22:c1:e7:37:50:
         85:a6:a9:66:78:bd:04:d9:01:a0:0b:52:69:45:63:60:c4:95:
         70:f1:e5:30:bf:27:e2:5f:c4:98:7f:1d:3f:3a:bc:a7:39:af:
         c8:18:4f:fe:fc:67:7f:47:6a:f5:f9:de:be:ce:4d:87:2d:fe:
         3b:d9:ae:0f:fd:d4:5d:63:82:49:3f:a2:63:32:03:14:e1:53:
         53:90:d6:3c:d2:0c:7d:d9:87:17:2a:76:fe:74:dc:0e:3c:8d:
         1d:d7:63:91:d9:05:14:a5:56:2d:4d:84:51:ec:e9:84:70:73:
         70:eb:db:2b:ea:d7:80:f4:85:83:9b:ce:59:82:f8:6d:f4:1e:
         7d:00:09:9d:78:a7:24:fb:f4:92:95:98:e5:c3:c1:fa:e6:fb:
         4c:ee:ea:8d:2f:f5:d4:c9:95:67:55:f8:41:ac:46:43:27:4b:
         06:01:15:b0:c1:05:a3:1b:d2:6f:f3:0d:79:2c:4f:29:72:45:
         d0:db:ad:0e:5b:9f:b0:a1:eb:2b:f5:55:58:a4:51:56:58:c6:
         b1:b2:1a:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 11:08:40 2025 by rpki-client