Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/d2e093-c264-4d78-97b7-620c6a36e0b8/1/Ds0nJ-dKnGquiPmgEQ0MlJselzU.mft
File:                     Ds0nJ-dKnGquiPmgEQ0MlJselzU.mft (raw, json)
Hash identifier:          Nz4NfjL/KyrTbWiH7dPN7L/zen6e/YUhFt2BP7jup74=
Subject key identifier:   E0:0B:5B:E7:98:89:66:A3:7B:6E:BA:C5:9C:AF:8D:B6:F5:B5:95:8A
Authority key identifier: 0E:CD:27:27:E7:4A:9C:6A:AE:88:F9:A0:11:0D:0C:94:9B:1E:97:35
Certificate issuer:       /CN=0ecd2727e74a9c6aae88f9a0110d0c949b1e9735
Certificate serial:       0196C34BE90ADBF697365423020B2567D491
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ds0nJ-dKnGquiPmgEQ0MlJselzU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/93/d2e093-c264-4d78-97b7-620c6a36e0b8/1/Ds0nJ-dKnGquiPmgEQ0MlJselzU.mft
Manifest number:          0CA2
Signing time:             Mon 12 May 2025 07:00:54 +0000
Manifest this update:     Mon 12 May 2025 07:00:54 +0000
Manifest next update:     Tue 13 May 2025 07:00:54 +0000
Files and hashes:         1: Ds0nJ-dKnGquiPmgEQ0MlJselzU.crl (hash: 64GLS6uKmiJqWVDYg/1jGYMbEEOY52mlOxNv24gbg0Y=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:c3:4b:e9:0a:db:f6:97:36:54:23:02:0b:25:67:d4:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0ecd2727e74a9c6aae88f9a0110d0c949b1e9735
        Validity
            Not Before: May 12 07:00:54 2025 GMT
            Not After : May 13 07:00:54 2025 GMT
        Subject: CN=e00b5be7988966a37b6ebac59caf8db6f5b5958a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:0d:34:bf:b6:4f:2c:23:df:58:df:0b:b5:15:
                    7c:3c:43:48:6f:a4:4f:78:88:6a:fc:61:c3:6b:f8:
                    57:7e:58:7e:c7:ab:94:f8:9b:f3:c0:ca:38:f7:d7:
                    f8:99:8f:5a:5a:1b:04:39:48:3d:d2:10:75:e6:b1:
                    22:c0:66:20:0d:3c:f5:d7:02:8d:d7:71:8b:95:49:
                    af:1b:e9:0b:19:4e:f2:d4:3b:ee:98:9e:a4:df:8d:
                    3d:96:55:d9:1c:7e:c4:45:a6:83:cf:f9:00:b0:31:
                    47:58:e1:99:1c:17:93:d5:35:76:95:cd:eb:86:7d:
                    16:cf:d2:98:fa:8b:98:f0:6c:59:c5:f7:a0:f6:47:
                    88:9c:f7:44:68:78:e4:5c:a3:d5:e7:e6:72:5a:fa:
                    f3:9f:b2:7c:93:19:a3:89:ac:a9:3e:42:e9:c5:2d:
                    1f:fb:76:1b:d1:38:23:51:08:3c:d2:93:2e:20:84:
                    75:6d:94:3f:77:ad:ee:86:42:58:1d:08:74:8b:2c:
                    67:d1:81:1f:bc:33:d1:bd:76:12:34:57:f1:93:b2:
                    18:4a:b6:58:c4:0e:40:4d:77:70:56:b2:59:40:c5:
                    79:0f:a9:5e:af:ba:22:92:d1:f9:ad:cb:7d:6d:01:
                    ef:78:20:f7:44:83:8c:d6:1f:79:3f:e0:93:37:54:
                    a6:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:0B:5B:E7:98:89:66:A3:7B:6E:BA:C5:9C:AF:8D:B6:F5:B5:95:8A
            X509v3 Authority Key Identifier:
                keyid:0E:CD:27:27:E7:4A:9C:6A:AE:88:F9:A0:11:0D:0C:94:9B:1E:97:35

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ds0nJ-dKnGquiPmgEQ0MlJselzU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/d2e093-c264-4d78-97b7-620c6a36e0b8/1/Ds0nJ-dKnGquiPmgEQ0MlJselzU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/93/d2e093-c264-4d78-97b7-620c6a36e0b8/1/Ds0nJ-dKnGquiPmgEQ0MlJselzU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         55:40:ec:f8:0b:e8:24:61:8b:d1:90:c7:59:4b:8b:24:fa:80:
         a9:4e:27:f5:2a:fc:a0:2f:b8:a2:a1:f0:da:6f:50:d3:4a:50:
         ba:48:d4:f9:91:26:56:46:0e:bf:7d:b4:c3:87:ef:10:ec:62:
         3a:2a:60:f3:61:ef:f5:f7:b0:b4:44:03:e0:df:6c:6e:2e:46:
         b7:40:df:41:cc:83:01:4a:ce:3a:59:01:be:a6:30:e0:be:e6:
         9a:4d:b3:e0:39:1b:6a:03:3d:43:98:a6:93:86:16:3a:0d:52:
         9a:f8:12:4c:4c:a0:d9:6b:94:9c:da:0e:fd:1b:70:80:ed:26:
         e0:14:16:00:20:c0:03:10:f0:fb:a2:8c:83:2b:a5:de:64:c0:
         e1:8d:1d:5e:88:5d:31:84:69:c7:a3:c2:17:5d:03:b9:fa:21:
         0f:5a:1e:60:f7:ce:37:b6:fe:12:6f:58:62:a6:be:40:66:23:
         4a:51:04:8a:2c:9a:27:63:fb:14:4e:e5:e2:4a:d5:e9:26:ac:
         87:2e:66:6b:b5:41:10:be:c4:b0:b5:29:ab:1e:15:c5:15:8f:
         0f:36:7a:dc:81:eb:b9:4d:f7:c4:7f:23:65:64:25:42:ac:1e:
         63:cf:98:ee:db:23:ed:4c:71:36:91:ec:7a:67:81:54:2f:4b:
         e1:de:04:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 18:38:03 2025 by rpki-client