Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/4ada16-b6a2-457e-bee3-d0090762b500/1/0F0mBw9bGN3jJab4CxONzCIb4eU.mft
File:                     0F0mBw9bGN3jJab4CxONzCIb4eU.mft (raw, json)
Hash identifier:          dcEYnuVV0VR52r3vq4NdG7bElHjTuevNprQFfKZeBqM=
Subject key identifier:   50:D1:96:37:BD:E3:02:96:63:21:52:82:A8:E8:64:46:E7:3C:DB:F1
Authority key identifier: D0:5D:26:07:0F:5B:18:DD:E3:25:A6:F8:0B:13:8D:CC:22:1B:E1:E5
Certificate issuer:       /CN=d05d26070f5b18dde325a6f80b138dcc221be1e5
Certificate serial:       0186B5F6C061EF1294B5DD8D5F5B7A09154F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0F0mBw9bGN3jJab4CxONzCIb4eU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/92/4ada16-b6a2-457e-bee3-d0090762b500/1/0F0mBw9bGN3jJab4CxONzCIb4eU.mft
Manifest number:          0185
Signing time:             Mon 06 Mar 2023 08:08:12 +0000
Manifest this update:     Mon 06 Mar 2023 08:08:12 +0000
Manifest next update:     Tue 07 Mar 2023 08:08:12 +0000
Files and hashes:         1: 0F0mBw9bGN3jJab4CxONzCIb4eU.crl (hash: ZE1MpKOCnTZH+Lg9rPyMZo3OPVhF9pUaJzau+1E+Or4=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:86:b5:f6:c0:61:ef:12:94:b5:dd:8d:5f:5b:7a:09:15:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d05d26070f5b18dde325a6f80b138dcc221be1e5
        Validity
            Not Before: Mar  6 08:08:12 2023 GMT
            Not After : Mar  7 08:08:12 2023 GMT
        Subject: CN=50d19637bde3029663215282a8e86446e73cdbf1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:bf:f4:80:1c:3e:b7:dc:bd:f5:55:3e:7e:f8:
                    84:d4:03:84:41:91:bc:73:bb:bb:8a:d4:ba:c9:09:
                    5d:65:a3:7a:09:2e:7c:24:1b:33:cd:80:63:2d:90:
                    f2:32:8e:b7:ca:44:f9:42:04:61:79:f7:9e:30:5d:
                    18:18:23:a0:ac:2e:76:37:69:47:c4:4f:e7:05:07:
                    aa:fc:95:4f:4e:56:8d:d0:aa:94:76:53:54:a3:cf:
                    51:a6:e2:00:03:03:8d:ba:93:9d:36:06:dd:8c:cc:
                    d4:a1:c4:b7:42:89:3c:b9:cd:58:fd:e4:15:05:d2:
                    09:7c:e4:cc:9a:28:2c:9d:e8:ae:2f:24:bd:0d:77:
                    be:21:fa:fa:0b:2c:cf:e8:96:30:4a:97:76:ef:fb:
                    13:1a:e0:42:bb:75:23:ae:b1:20:c9:03:7e:c9:03:
                    fd:27:68:bb:a6:c8:0b:e6:6e:38:ce:0a:59:72:c8:
                    5a:e3:4d:7d:ce:c7:62:5a:c8:62:e3:ad:9f:f0:78:
                    0b:a9:72:56:3a:70:44:b9:d1:34:78:d2:0e:3d:b8:
                    28:dc:21:ec:03:a6:09:50:62:c2:27:a1:4c:03:cc:
                    19:d0:43:11:f6:dc:83:9e:77:00:6e:a4:56:57:df:
                    e2:23:1c:b9:b1:d6:bc:17:a0:21:cb:08:33:6f:e7:
                    7f:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:D1:96:37:BD:E3:02:96:63:21:52:82:A8:E8:64:46:E7:3C:DB:F1
            X509v3 Authority Key Identifier:
                keyid:D0:5D:26:07:0F:5B:18:DD:E3:25:A6:F8:0B:13:8D:CC:22:1B:E1:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0F0mBw9bGN3jJab4CxONzCIb4eU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/4ada16-b6a2-457e-bee3-d0090762b500/1/0F0mBw9bGN3jJab4CxONzCIb4eU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/92/4ada16-b6a2-457e-bee3-d0090762b500/1/0F0mBw9bGN3jJab4CxONzCIb4eU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:ba:0c:3e:a6:88:c5:c7:62:b0:19:21:0b:47:61:12:07:64:
         8d:25:dc:c9:f0:9a:0d:4f:89:62:eb:84:78:7f:4d:87:c7:13:
         5e:88:c5:7e:16:63:4c:92:f4:ee:6e:89:1f:2a:64:24:6d:e9:
         26:f0:8c:4c:f5:25:6a:6b:5b:bf:cd:57:3b:d8:06:6a:d1:0c:
         f2:d2:1e:db:2f:4d:4f:cc:83:b6:3f:ef:27:1e:ac:c2:51:7d:
         75:a1:1c:10:3b:a6:d9:b7:94:72:bd:0c:f1:df:47:9d:f2:64:
         ad:23:b5:4c:c6:e3:09:a5:7c:28:d6:8c:58:33:05:d9:10:78:
         fe:f2:40:6a:47:9c:cb:1c:cd:68:d0:7e:ec:f4:7c:35:c3:0b:
         c9:48:df:65:10:94:75:53:dd:68:63:67:1d:ae:db:dd:b2:b7:
         86:d3:4c:aa:42:f1:70:bc:af:76:77:0a:09:f3:e1:d0:94:32:
         a8:c5:da:9a:ed:85:ce:28:36:36:66:94:af:87:94:a8:a7:a4:
         8b:e4:1f:5b:ad:18:c1:ca:37:83:e7:42:6a:4b:6e:f9:5d:7a:
         51:02:76:66:ad:d2:31:2b:7f:04:c3:0f:d4:97:3c:48:93:0a:
         77:8e:95:f1:71:a3:ae:0a:63:87:6f:68:ce:b1:1c:54:c3:48:
         65:a4:76:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:43:55 2025 by rpki-client