Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/fcc58b-e615-4dc9-9150-fd8c36b6bc00/1/XNyNOwxhTdPD8OsWySe3ypiXFNI.mft
File:                     XNyNOwxhTdPD8OsWySe3ypiXFNI.mft (raw, json)
Hash identifier:          Z2wyZKn2LRA8r00FSXblNhHfp0bB5OiWtNGhT7ScYhE=
Subject key identifier:   DC:AD:0F:53:65:99:88:39:FF:41:2F:1B:A5:E3:68:BE:BE:28:42:41
Authority key identifier: 5C:DC:8D:3B:0C:61:4D:D3:C3:F0:EB:16:C9:27:B7:CA:98:97:14:D2
Certificate issuer:       /CN=5cdc8d3b0c614dd3c3f0eb16c927b7ca989714d2
Certificate serial:       018ADFBE657A94E095AE0148CBF25C859CB0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XNyNOwxhTdPD8OsWySe3ypiXFNI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bc/fcc58b-e615-4dc9-9150-fd8c36b6bc00/1/XNyNOwxhTdPD8OsWySe3ypiXFNI.mft
Manifest number:          06BC
Signing time:             Fri 29 Sep 2023 07:01:51 +0000
Manifest this update:     Fri 29 Sep 2023 07:01:51 +0000
Manifest next update:     Sat 30 Sep 2023 07:01:51 +0000
Files and hashes:         1: XNyNOwxhTdPD8OsWySe3ypiXFNI.crl (hash: Dp9hu2aDNxNE8tPmzx/7JqPJDu3h0yDdWDMyW5UxQxs=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8a:df:be:65:7a:94:e0:95:ae:01:48:cb:f2:5c:85:9c:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5cdc8d3b0c614dd3c3f0eb16c927b7ca989714d2
        Validity
            Not Before: Sep 29 07:01:51 2023 GMT
            Not After : Sep 30 07:01:51 2023 GMT
        Subject: CN=dcad0f5365998839ff412f1ba5e368bebe284241
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:35:1e:cc:82:4a:5c:1d:7d:58:41:a7:1e:d2:
                    64:b7:25:77:08:7a:d3:73:ad:c9:bc:a5:2f:d0:ca:
                    93:98:a0:35:cf:b1:24:bd:76:31:4c:4a:39:51:85:
                    16:e0:0c:54:7b:1f:f8:fe:2a:fd:3f:a6:45:ca:d4:
                    10:96:ea:17:ea:0c:a4:ac:c3:f0:ff:a6:7d:9f:64:
                    41:67:7f:bf:17:ee:87:1e:0c:2d:3c:41:07:ac:1a:
                    e2:06:74:e8:5a:2f:57:fe:da:bd:d2:2c:19:99:fc:
                    6e:ab:9b:f1:a9:a1:3a:1a:5a:2b:46:57:e8:28:96:
                    0a:29:98:a7:86:7d:22:bd:64:fc:70:54:d7:5e:2c:
                    01:87:d7:83:d3:44:b3:47:b5:00:68:2a:a6:5d:2a:
                    19:c5:2d:52:58:ed:6b:23:c8:e4:3a:15:04:02:0b:
                    58:ab:98:b9:e5:89:25:96:f5:12:dd:06:17:7e:4c:
                    0c:19:42:70:bb:0b:5a:8a:48:d8:91:6b:09:86:32:
                    3a:9e:75:1c:f5:17:98:93:65:99:88:43:b5:ba:c8:
                    99:d4:01:54:be:6c:04:d6:e0:72:01:25:3c:b2:2b:
                    78:77:cf:0e:41:fe:ca:d2:01:ab:96:7d:53:11:8d:
                    e5:3f:2f:53:93:20:e5:c4:8c:ec:19:78:3e:22:0c:
                    d8:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:AD:0F:53:65:99:88:39:FF:41:2F:1B:A5:E3:68:BE:BE:28:42:41
            X509v3 Authority Key Identifier:
                keyid:5C:DC:8D:3B:0C:61:4D:D3:C3:F0:EB:16:C9:27:B7:CA:98:97:14:D2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XNyNOwxhTdPD8OsWySe3ypiXFNI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/fcc58b-e615-4dc9-9150-fd8c36b6bc00/1/XNyNOwxhTdPD8OsWySe3ypiXFNI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/fcc58b-e615-4dc9-9150-fd8c36b6bc00/1/XNyNOwxhTdPD8OsWySe3ypiXFNI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:f8:37:06:a1:0b:9f:89:db:fe:88:0c:11:bb:50:36:32:7c:
         a4:c9:ca:8c:42:eb:dd:27:75:17:60:f0:c3:6e:41:36:50:ed:
         32:52:03:e6:fd:d5:84:3e:35:02:65:cd:bc:88:df:20:62:d8:
         ae:f7:ff:18:ab:ed:0d:03:23:dd:b8:5b:a4:2c:a2:71:1b:3f:
         79:1e:a1:3c:ec:bc:39:5f:4c:24:ce:62:50:04:c1:18:ba:b6:
         8a:fe:71:42:97:9b:33:c9:35:d2:d6:7d:e9:0d:60:46:06:6b:
         34:50:21:d5:0d:37:d1:ce:22:ed:b5:64:c9:e7:41:9a:c5:12:
         7d:ee:9d:82:72:a5:0d:f2:32:7d:5e:fc:95:e9:46:ce:20:ea:
         2e:50:97:41:0e:f0:35:9f:ed:06:18:e8:43:6a:61:06:84:e7:
         f9:18:96:a7:f0:bc:d0:7d:14:6b:5f:8b:b9:3a:7f:3e:30:c7:
         ec:b6:13:94:fe:a3:f7:7b:1b:ee:72:de:e0:45:b6:99:16:17:
         c5:65:c3:6d:ea:c0:c9:ad:41:27:f6:f0:37:4d:1e:76:06:88:
         66:7d:f5:2f:5c:c7:71:79:2a:be:41:92:bb:25:b9:50:b1:b3:
         bd:c3:a4:c6:d9:26:60:2c:8a:e0:ca:5b:7b:2a:62:0c:51:f1:
         7c:29:c9:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 22:17:21 2025 by rpki-client