Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/1be093-c108-43b3-bb52-0b9bfb19f2ee/1/wLi5L51itcMXfVLrNqUyVn70sPI.mft
File:                     wLi5L51itcMXfVLrNqUyVn70sPI.mft (raw, json)
Hash identifier:          IoRadb0Ezn0xkldE92b00rCjl3C263kT3RBgR1GbyGk=
Subject key identifier:   A8:7B:18:69:45:40:00:9A:09:A1:C4:7C:21:66:80:6B:A8:93:15:6E
Authority key identifier: C0:B8:B9:2F:9D:62:B5:C3:17:7D:52:EB:36:A5:32:56:7E:F4:B0:F2
Certificate issuer:       /CN=c0b8b92f9d62b5c3177d52eb36a532567ef4b0f2
Certificate serial:       0199A3154B67EFBC628F62DBD414DDA10750
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wLi5L51itcMXfVLrNqUyVn70sPI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b2/1be093-c108-43b3-bb52-0b9bfb19f2ee/1/wLi5L51itcMXfVLrNqUyVn70sPI.mft
Manifest number:          0B05
Signing time:             Thu 02 Oct 2025 04:01:45 +0000
Manifest this update:     Thu 02 Oct 2025 04:01:45 +0000
Manifest next update:     Fri 03 Oct 2025 04:01:45 +0000
Files and hashes:         1: wLi5L51itcMXfVLrNqUyVn70sPI.crl (hash: snGM3b8l5mqUeqiTNLMReaw0NNMkhTCqyFQJtKumBmI=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:a3:15:4b:67:ef:bc:62:8f:62:db:d4:14:dd:a1:07:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c0b8b92f9d62b5c3177d52eb36a532567ef4b0f2
        Validity
            Not Before: Oct  2 04:01:45 2025 GMT
            Not After : Oct  3 04:01:45 2025 GMT
        Subject: CN=a87b18694540009a09a1c47c2166806ba893156e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:ad:4b:db:47:49:52:cd:4d:cf:2f:5b:0f:1a:
                    9e:a0:e5:b1:22:ee:b5:02:a0:b6:ee:08:d1:99:eb:
                    dd:77:fc:ee:3f:ff:ca:53:d5:1a:b3:c1:6c:ec:a8:
                    c3:b2:59:f5:7c:02:d3:24:12:e9:a3:ed:75:e7:14:
                    75:17:9a:41:84:f7:4d:23:41:e5:61:95:cd:1b:88:
                    3a:2d:b4:b4:da:f6:0e:6c:e6:8a:27:f0:8e:6c:95:
                    c3:8e:59:52:23:4b:42:e4:5f:ac:08:d4:9e:ea:73:
                    e8:b0:93:96:10:96:69:21:4b:c8:18:73:e7:da:8b:
                    a4:71:cb:ea:2a:a1:7e:af:24:52:6c:a0:1f:37:bc:
                    c2:ff:f5:bf:a5:8c:ec:42:61:fc:8d:4f:2b:ad:31:
                    31:2b:2e:f8:51:3a:05:4e:c0:b9:4a:45:af:e5:ea:
                    db:08:f6:a5:a1:62:6e:5e:e9:0c:62:ed:07:8c:de:
                    20:bb:7a:70:5d:20:f7:96:9a:ea:dc:8e:85:f5:ec:
                    c3:51:8e:5c:6c:87:2c:08:e7:89:db:52:ca:01:da:
                    dc:3d:99:93:f2:2f:c4:67:1f:cb:64:12:4f:ec:1f:
                    1a:59:79:1a:65:6f:56:3d:42:09:cc:54:4a:50:28:
                    1e:12:bc:cb:f1:3f:7f:d7:76:90:9a:da:a2:10:a8:
                    bb:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:7B:18:69:45:40:00:9A:09:A1:C4:7C:21:66:80:6B:A8:93:15:6E
            X509v3 Authority Key Identifier:
                keyid:C0:B8:B9:2F:9D:62:B5:C3:17:7D:52:EB:36:A5:32:56:7E:F4:B0:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wLi5L51itcMXfVLrNqUyVn70sPI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/1be093-c108-43b3-bb52-0b9bfb19f2ee/1/wLi5L51itcMXfVLrNqUyVn70sPI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/1be093-c108-43b3-bb52-0b9bfb19f2ee/1/wLi5L51itcMXfVLrNqUyVn70sPI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a8:b4:4f:f9:33:06:f8:18:2c:7e:61:b0:d6:7c:2f:9e:be:27:
         d7:09:b2:58:96:bd:15:05:3a:ac:b5:c4:f6:94:65:50:dc:14:
         9e:23:a9:ef:18:12:a4:ab:c6:0e:8a:6f:d9:a2:77:8d:2d:fd:
         f9:b7:a9:8a:87:c3:94:a8:ee:fa:66:1c:5a:9d:da:f5:eb:4f:
         8c:94:f9:26:88:dd:5c:6c:89:8f:0c:f1:51:ae:4c:70:41:02:
         66:d4:56:81:6e:fe:2c:e2:3a:35:99:59:af:2f:1a:14:a9:63:
         a1:37:03:de:75:99:bd:0a:34:42:cb:0e:97:e6:cd:3c:70:ce:
         5e:41:c6:c3:67:58:d0:6e:76:7a:7c:d6:f4:8f:ef:a3:03:9e:
         4f:b0:0c:3e:c7:be:7c:e9:39:d8:cb:83:15:11:38:10:30:87:
         e9:f9:46:0d:7d:4f:c6:c7:ae:d4:8d:d2:6e:a3:d4:73:59:17:
         9c:7a:4f:07:80:d7:79:60:14:7b:5c:25:09:1f:a1:1f:7c:07:
         e0:62:5e:6e:29:68:6c:34:1b:90:99:3c:e7:e2:1a:fd:6a:36:
         cd:79:15:f4:6f:10:f7:dc:aa:eb:5e:55:36:58:a7:4a:71:5f:
         5a:93:58:3b:05:d8:b9:4b:bd:8a:27:ad:d0:d8:55:3b:59:e2:
         eb:23:04:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:47:14 2025 by rpki-client