Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/365a98-b803-4fc6-97be-253ab7aac417/1/B9R7Icw7opzI-Kk1TzN_LVwwIVQ.mft
File:                     B9R7Icw7opzI-Kk1TzN_LVwwIVQ.mft (raw, json)
Hash identifier:          AbtnmBNIFbrlf6RTA4jJUHHZyXNluC+g8lWdSFiES/U=
Subject key identifier:   0C:8F:33:47:B6:EB:65:D6:FF:1C:90:F0:F5:DB:B1:90:F0:90:1D:C1
Authority key identifier: 07:D4:7B:21:CC:3B:A2:9C:C8:F8:A9:35:4F:33:7F:2D:5C:30:21:54
Certificate issuer:       /CN=07d47b21cc3ba29cc8f8a9354f337f2d5c302154
Certificate serial:       019937CA51BF8271D3809B91703D4F71D793
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/B9R7Icw7opzI-Kk1TzN_LVwwIVQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/43/365a98-b803-4fc6-97be-253ab7aac417/1/B9R7Icw7opzI-Kk1TzN_LVwwIVQ.mft
Manifest number:          167A
Signing time:             Thu 11 Sep 2025 08:00:30 +0000
Manifest this update:     Thu 11 Sep 2025 08:00:30 +0000
Manifest next update:     Fri 12 Sep 2025 08:00:30 +0000
Files and hashes:         1: B9R7Icw7opzI-Kk1TzN_LVwwIVQ.crl (hash: Luvj2kS0pBxMKIAcZlzGA2/bfRT6zla49mEYm110xbA=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:37:ca:51:bf:82:71:d3:80:9b:91:70:3d:4f:71:d7:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07d47b21cc3ba29cc8f8a9354f337f2d5c302154
        Validity
            Not Before: Sep 11 08:00:30 2025 GMT
            Not After : Sep 12 08:00:30 2025 GMT
        Subject: CN=0c8f3347b6eb65d6ff1c90f0f5dbb190f0901dc1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:0c:07:c8:83:35:04:dc:14:fd:06:9b:2c:86:
                    a5:fb:a8:a4:d6:50:e9:f6:8d:51:ce:2f:b2:38:b7:
                    ed:3a:88:1e:d6:63:a6:0b:08:68:15:98:b2:54:e6:
                    c7:cd:54:98:cc:c6:5f:ac:a1:ca:c5:9f:f8:e3:af:
                    ef:81:52:49:97:e2:97:04:cd:44:dd:06:fa:94:1f:
                    13:f8:75:25:87:2b:3e:7b:44:ab:b9:38:6a:d8:7b:
                    24:be:b0:47:7d:e7:0c:22:c9:54:17:5e:04:3e:de:
                    98:d1:1c:70:90:57:7e:aa:0f:52:58:99:ff:df:cf:
                    62:69:4a:f1:bd:10:cd:06:7f:de:4a:b5:40:0a:b2:
                    a0:fe:73:99:fc:9d:14:05:9a:9b:28:59:ee:2f:69:
                    6d:f8:68:17:cd:6b:f1:42:9b:03:92:72:93:cf:44:
                    f8:10:9b:2d:9a:fd:2f:3d:a6:99:a7:db:ed:ac:c7:
                    9d:5f:a2:d5:c5:79:8e:d6:44:b6:1c:20:8a:e1:2d:
                    ca:a4:47:a1:b3:75:72:33:ad:ce:5e:64:66:bb:b7:
                    ac:87:94:81:55:0b:8c:c3:22:89:9c:dd:0f:2e:7e:
                    83:47:8a:d8:50:e2:15:47:3b:35:bb:5c:a1:c7:d3:
                    3c:1c:d9:19:c8:58:d3:14:b3:03:82:7f:bb:90:4d:
                    0c:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:8F:33:47:B6:EB:65:D6:FF:1C:90:F0:F5:DB:B1:90:F0:90:1D:C1
            X509v3 Authority Key Identifier:
                keyid:07:D4:7B:21:CC:3B:A2:9C:C8:F8:A9:35:4F:33:7F:2D:5C:30:21:54

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B9R7Icw7opzI-Kk1TzN_LVwwIVQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/365a98-b803-4fc6-97be-253ab7aac417/1/B9R7Icw7opzI-Kk1TzN_LVwwIVQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/43/365a98-b803-4fc6-97be-253ab7aac417/1/B9R7Icw7opzI-Kk1TzN_LVwwIVQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ae:1a:23:a8:95:55:3c:3b:a9:61:26:41:a9:1a:a7:4e:e0:21:
         b8:a7:45:47:88:0b:11:07:8b:ed:25:5e:d2:48:94:f9:51:fd:
         c9:3d:42:3e:8d:92:77:a7:a1:46:4c:df:b4:9f:65:b7:4e:9a:
         6b:fc:f8:c0:77:86:49:56:31:ad:54:e1:7e:fc:1e:bf:99:85:
         c9:cd:2f:ca:78:90:5f:85:db:71:10:58:3f:9f:7d:d3:1e:a1:
         e9:4b:4e:8e:2f:a9:19:9a:ea:1c:51:53:a8:39:aa:95:1b:ee:
         45:b8:0b:27:90:c8:7b:b4:0d:97:23:bf:10:5f:ed:1b:26:ac:
         17:cc:44:64:7d:86:7a:61:b2:e5:2c:a4:87:85:70:92:77:7c:
         c3:ac:ba:2f:c3:5d:93:4f:e6:eb:61:4e:35:a5:59:b5:d1:cf:
         6f:47:eb:09:78:9e:db:07:a4:21:27:c2:b4:66:cc:41:48:72:
         ee:96:c8:0d:fb:9e:14:d1:40:c9:dc:db:1e:31:09:f1:19:57:
         68:8c:19:cb:c4:da:e7:d1:07:41:25:ff:e5:31:00:28:11:0a:
         ec:ec:44:8e:55:a0:02:d7:88:db:47:e6:e9:ea:ca:c9:bf:2f:
         e8:5b:c1:5d:e3:1f:1d:85:12:ff:5f:57:02:cf:8b:c0:75:d4:
         03:04:0c:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:10:01 2025 by rpki-client