Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/0f1ed9-09a1-4e14-9b17-8bc37a64e6c7/1/OlT5wevI3FcDHlPDJfbpO94rqFU.mft
File:                     OlT5wevI3FcDHlPDJfbpO94rqFU.mft (raw, json)
Hash identifier:          CVwQ75gAqGPfeqLXPdEssryleLyKDkAEbD4FRyaAz0k=
Subject key identifier:   C8:B7:49:BF:89:55:0A:9E:85:27:23:3A:BE:F4:81:0A:12:DE:B4:2D
Authority key identifier: 3A:54:F9:C1:EB:C8:DC:57:03:1E:53:C3:25:F6:E9:3B:DE:2B:A8:55
Certificate issuer:       /CN=3a54f9c1ebc8dc57031e53c325f6e93bde2ba855
Certificate serial:       018E09C3E9A82F29D8F8CC6717EAB4416D06
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OlT5wevI3FcDHlPDJfbpO94rqFU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e4/0f1ed9-09a1-4e14-9b17-8bc37a64e6c7/1/OlT5wevI3FcDHlPDJfbpO94rqFU.mft
Manifest number:          10AE
Signing time:             Mon 04 Mar 2024 14:00:17 +0000
Manifest this update:     Mon 04 Mar 2024 14:00:17 +0000
Manifest next update:     Tue 05 Mar 2024 14:00:17 +0000
Files and hashes:         1: OlT5wevI3FcDHlPDJfbpO94rqFU.crl (hash: gGuli+Ht5n9HHvnNNzgwvLOWRMsuY8j+Te+y8ibumAc=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8e:09:c3:e9:a8:2f:29:d8:f8:cc:67:17:ea:b4:41:6d:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3a54f9c1ebc8dc57031e53c325f6e93bde2ba855
        Validity
            Not Before: Mar  4 14:00:17 2024 GMT
            Not After : Mar  5 14:00:17 2024 GMT
        Subject: CN=c8b749bf89550a9e8527233abef4810a12deb42d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:0b:6c:03:81:fd:7b:43:56:1c:2b:6e:49:58:
                    c8:ba:b3:6d:c6:d6:0a:4e:f0:a4:10:b0:dc:8f:23:
                    55:a4:a6:74:bc:9e:bb:fc:76:60:de:a9:84:1b:33:
                    d1:3e:b7:a9:c6:d2:a5:18:01:ab:21:b9:72:73:39:
                    2a:f1:60:22:80:77:a9:de:be:86:63:65:c7:94:09:
                    33:05:d5:70:e0:2e:45:d4:9c:7a:f5:2d:36:db:da:
                    9e:20:e5:ff:7c:72:98:b6:f6:dc:b9:99:14:3b:93:
                    47:a5:f8:0b:87:40:a8:2b:d9:bc:e6:78:9c:c5:ca:
                    5d:c4:b9:38:a0:8b:67:d7:98:6b:d3:a0:78:c1:b6:
                    25:f1:8f:57:69:ee:48:55:e3:06:e6:59:ef:3f:07:
                    a4:e6:80:12:7a:19:7d:4e:10:2c:57:a5:fd:09:20:
                    84:25:cc:d4:8b:dd:f6:69:d4:02:52:a8:df:46:da:
                    24:3f:8c:20:8c:67:1f:1e:d8:af:a6:9a:dd:1e:b2:
                    d5:e2:6f:df:84:70:09:e2:9b:07:f2:2e:04:d9:79:
                    92:84:1d:8e:48:01:54:1b:03:ed:af:5d:f3:33:26:
                    99:7c:a3:0c:bc:97:8e:ad:18:a9:96:72:31:bb:a5:
                    2c:99:77:eb:2e:88:6c:e5:61:33:bf:72:d2:12:70:
                    b0:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:B7:49:BF:89:55:0A:9E:85:27:23:3A:BE:F4:81:0A:12:DE:B4:2D
            X509v3 Authority Key Identifier:
                keyid:3A:54:F9:C1:EB:C8:DC:57:03:1E:53:C3:25:F6:E9:3B:DE:2B:A8:55

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OlT5wevI3FcDHlPDJfbpO94rqFU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/0f1ed9-09a1-4e14-9b17-8bc37a64e6c7/1/OlT5wevI3FcDHlPDJfbpO94rqFU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/0f1ed9-09a1-4e14-9b17-8bc37a64e6c7/1/OlT5wevI3FcDHlPDJfbpO94rqFU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:15:99:ea:cd:5d:91:ee:50:4e:ed:9f:a3:71:0b:35:a3:34:
         7c:0d:17:b3:78:1f:8f:50:0c:58:1c:a4:dd:eb:9c:7b:b1:c8:
         87:6a:40:bb:ab:78:9d:ca:88:64:cd:02:fe:6d:9a:c8:32:f0:
         00:14:1d:85:f8:fb:11:a5:0a:91:90:e8:9c:c5:d4:bc:1a:c3:
         1d:45:70:a2:e8:72:3b:5d:f3:ac:08:b8:ba:3c:51:b9:2d:72:
         1a:cd:07:6b:ba:be:6e:06:67:59:d7:87:57:45:de:d5:0e:1b:
         24:c0:34:62:1e:c6:de:85:24:a7:ec:46:92:c2:be:4a:32:83:
         0f:86:6e:83:b8:42:f4:81:41:f2:f5:eb:14:a6:cf:52:10:8c:
         b0:85:7d:01:4c:cd:e5:44:b0:81:18:99:49:0c:44:f3:88:5d:
         d9:40:4d:37:51:32:51:c5:4e:44:1c:af:71:94:e4:a3:23:1c:
         fa:ba:ab:ca:1c:e9:46:d6:1c:ed:96:6a:a1:3e:68:42:01:a0:
         8a:3e:9d:8b:c2:a4:fa:00:c1:f4:13:a7:32:88:40:99:69:3e:
         e4:04:47:6e:4e:eb:e9:f6:86:91:ab:cd:df:9c:f1:15:b2:57:
         1c:3b:7e:6e:43:a8:b0:70:a1:f4:99:8a:59:91:b4:ea:7a:e2:
         f9:fc:3c:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 20:27:19 2025 by rpki-client