Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/be3474-3d78-4bae-96e7-b4a2b49fbc1c/1/bgE5p90AvHR-C-c-5yiIC4FVAIU.mft
File:                     bgE5p90AvHR-C-c-5yiIC4FVAIU.mft (raw, json)
Hash identifier:          ENz80kb5Ve3ljFUySY+pGrcuCrOESPnK6LfqEMsd22s=
Subject key identifier:   A2:7A:39:2D:C2:4F:93:BD:C2:42:1A:72:70:72:91:1F:DC:AC:81:48
Authority key identifier: 6E:01:39:A7:DD:00:BC:74:7E:0B:E7:3E:E7:28:88:0B:81:55:00:85
Certificate issuer:       /CN=6e0139a7dd00bc747e0be73ee728880b81550085
Certificate serial:       0198EAC2EFB4F85526793EBC2D9D9CAEFE13
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bgE5p90AvHR-C-c-5yiIC4FVAIU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/46/be3474-3d78-4bae-96e7-b4a2b49fbc1c/1/bgE5p90AvHR-C-c-5yiIC4FVAIU.mft
Manifest number:          05EA
Signing time:             Wed 27 Aug 2025 09:01:40 +0000
Manifest this update:     Wed 27 Aug 2025 09:01:40 +0000
Manifest next update:     Thu 28 Aug 2025 09:01:40 +0000
Files and hashes:         1: bgE5p90AvHR-C-c-5yiIC4FVAIU.crl (hash: 5xMHeuunp1ZcBbxAQrgVzkKksJVeLI06SJ3vJmIoxH0=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:ea:c2:ef:b4:f8:55:26:79:3e:bc:2d:9d:9c:ae:fe:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6e0139a7dd00bc747e0be73ee728880b81550085
        Validity
            Not Before: Aug 27 09:01:40 2025 GMT
            Not After : Aug 28 09:01:40 2025 GMT
        Subject: CN=a27a392dc24f93bdc2421a727072911fdcac8148
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:34:15:3a:bd:24:0e:4c:dc:3f:b3:70:a5:0a:
                    f2:41:13:8d:b8:e7:0d:2d:ba:c9:da:1f:cb:5c:76:
                    a5:29:33:2f:87:41:82:80:d7:2a:49:45:91:71:90:
                    4f:6a:da:4a:96:49:b3:7a:c0:8b:cc:df:fd:de:5f:
                    d8:51:b3:d3:7d:c6:5f:bd:f0:7a:4a:b3:63:eb:81:
                    39:3d:db:1a:33:17:56:d2:b8:58:e5:11:e3:fa:46:
                    61:d3:9b:b8:fb:a0:a8:33:4b:9f:6b:51:f0:5e:70:
                    96:1f:fa:78:62:26:12:f6:7b:76:54:88:4b:5c:47:
                    05:fc:fb:a8:e1:d2:52:3c:66:90:c2:25:bc:0c:d7:
                    95:17:fb:b4:99:4c:82:56:c6:25:2a:d7:50:15:ce:
                    9c:22:87:37:ac:01:dd:3b:24:0e:ab:f0:7d:3e:87:
                    19:81:2d:ef:09:1a:c4:4b:25:c2:f0:6f:84:f8:5e:
                    d0:3d:cf:f3:34:47:16:7a:6d:35:86:b4:11:5f:50:
                    9d:c8:2b:97:a3:99:be:b9:f3:22:ac:6e:94:ea:f2:
                    ac:49:a7:6c:09:14:77:78:83:ca:f1:2d:48:c3:97:
                    e8:d4:b6:aa:9b:85:89:ef:0b:a7:d4:61:d4:50:b3:
                    f6:12:a7:c5:41:d2:32:20:4e:17:56:97:be:7a:f7:
                    16:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:7A:39:2D:C2:4F:93:BD:C2:42:1A:72:70:72:91:1F:DC:AC:81:48
            X509v3 Authority Key Identifier:
                keyid:6E:01:39:A7:DD:00:BC:74:7E:0B:E7:3E:E7:28:88:0B:81:55:00:85

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bgE5p90AvHR-C-c-5yiIC4FVAIU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/be3474-3d78-4bae-96e7-b4a2b49fbc1c/1/bgE5p90AvHR-C-c-5yiIC4FVAIU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/46/be3474-3d78-4bae-96e7-b4a2b49fbc1c/1/bgE5p90AvHR-C-c-5yiIC4FVAIU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:2b:eb:64:65:ab:d5:b4:59:85:d8:dc:62:7c:96:52:e8:f6:
         9a:44:a6:25:31:6e:75:f2:a2:3e:31:3c:45:e0:f3:b6:7b:5f:
         2d:b7:6f:d3:33:85:39:26:ed:01:e3:48:d5:81:1e:11:c8:8b:
         de:45:8e:fa:e5:6c:38:1d:80:cc:d5:49:83:6f:25:01:6e:ab:
         95:e6:2c:48:3a:03:34:80:55:3e:70:fb:7d:77:13:9c:df:51:
         e4:d1:4a:36:2c:a5:62:9e:05:40:92:7c:df:e9:a5:5e:17:f4:
         0b:3c:49:28:be:33:78:80:15:7e:73:8b:05:16:f8:67:5a:b9:
         e8:50:ea:f6:a6:e5:5e:9b:62:f8:d0:9e:30:09:b3:b6:77:5d:
         78:37:a4:96:af:f8:47:b0:4e:bc:3d:45:05:54:84:03:1a:6d:
         c2:5c:fa:30:3f:da:25:d1:42:8c:9c:98:73:98:10:46:65:e0:
         69:df:cb:45:24:69:1b:a3:0e:25:59:57:d3:48:4a:e6:2d:03:
         d2:36:2a:74:d5:87:25:71:f7:10:34:92:13:95:39:ca:06:4a:
         ed:47:0b:9a:c8:93:cb:1e:83:9b:f1:8a:09:c0:a3:19:7f:ab:
         69:cd:b4:f7:d6:ff:af:49:76:a8:02:42:9a:c1:dc:7e:3a:47:
         cc:ef:7b:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 10:51:26 2025 by rpki-client