Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0e/a5e058-f475-47cc-b9ec-ae46094389ba/1/9qD_yrRKardihf2LFfuprgRywAo.mft
File:                     9qD_yrRKardihf2LFfuprgRywAo.mft (raw, json)
Hash identifier:          Z9GyzW5YT8EIxFyXXif/NYx8dPqZpcyM8TasHVMucno=
Subject key identifier:   A5:7F:B4:E6:48:1B:07:8B:FD:0C:F3:D6:C8:61:27:2F:DF:6D:1F:36
Authority key identifier: F6:A0:FF:CA:B4:4A:6A:B7:62:85:FD:8B:15:FB:A9:AE:04:72:C0:0A
Certificate issuer:       /CN=f6a0ffcab44a6ab76285fd8b15fba9ae0472c00a
Certificate serial:       019F2369FEBCBB10AC02476B107DBA686C31
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9qD_yrRKardihf2LFfuprgRywAo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0e/a5e058-f475-47cc-b9ec-ae46094389ba/1/9qD_yrRKardihf2LFfuprgRywAo.mft
Manifest number:          198F
Signing time:             Thu 02 Jul 2026 15:19:36 +0000
Manifest this update:     Thu 02 Jul 2026 15:19:36 +0000
Manifest next update:     Fri 03 Jul 2026 15:19:36 +0000
Files and hashes:         1: 9qD_yrRKardihf2LFfuprgRywAo.crl (hash: 7R6iuyv7KBeUsqWf4oHZL1Et41yufNjG6Yyzswgtoj8=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:23:69:fe:bc:bb:10:ac:02:47:6b:10:7d:ba:68:6c:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f6a0ffcab44a6ab76285fd8b15fba9ae0472c00a
        Validity
            Not Before: Jul  2 15:19:36 2026 GMT
            Not After : Jul  3 15:19:36 2026 GMT
        Subject: CN=a57fb4e6481b078bfd0cf3d6c861272fdf6d1f36
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:13:6b:75:50:0c:00:1f:62:19:1d:ee:18:1f:
                    45:84:f5:78:08:ea:5a:7c:d2:f1:72:5b:8f:b1:fd:
                    04:8f:d7:72:8a:fc:6a:d2:26:8b:a9:e3:68:7c:77:
                    4c:cf:90:c8:65:fc:39:14:47:17:16:1d:51:51:cb:
                    1f:99:17:15:58:4a:6b:af:11:51:58:97:84:0d:0d:
                    fe:3e:55:99:a1:93:ba:66:5e:aa:73:16:49:96:e5:
                    e8:a5:da:ea:bd:42:62:f5:25:ca:83:5c:aa:1a:d5:
                    ea:73:54:be:da:37:d5:d8:33:16:a2:72:11:11:b6:
                    e9:db:8c:23:f5:85:46:9e:10:f8:da:64:08:72:6a:
                    b0:a8:38:d6:ef:13:cb:51:4f:c6:3c:95:61:c8:a8:
                    40:71:26:b9:51:48:a5:d1:bd:ec:ba:0b:bb:6f:af:
                    f1:7d:b4:23:33:46:06:46:35:d2:83:1f:07:3a:e2:
                    d7:ba:20:0c:15:24:05:db:4d:8b:96:ca:32:c7:8e:
                    5e:30:b4:03:7e:30:80:cf:dc:b4:e6:4a:56:2a:c2:
                    fb:f1:75:24:b9:98:3c:c8:85:34:46:5b:63:e3:0c:
                    9e:8a:52:96:9e:5d:f9:ae:92:c5:aa:3f:99:4a:63:
                    0c:bb:05:18:d5:c7:48:52:cd:0b:67:8c:d2:61:4d:
                    9a:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:7F:B4:E6:48:1B:07:8B:FD:0C:F3:D6:C8:61:27:2F:DF:6D:1F:36
            X509v3 Authority Key Identifier:
                keyid:F6:A0:FF:CA:B4:4A:6A:B7:62:85:FD:8B:15:FB:A9:AE:04:72:C0:0A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9qD_yrRKardihf2LFfuprgRywAo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/a5e058-f475-47cc-b9ec-ae46094389ba/1/9qD_yrRKardihf2LFfuprgRywAo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/a5e058-f475-47cc-b9ec-ae46094389ba/1/9qD_yrRKardihf2LFfuprgRywAo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:44:6b:89:f7:d5:ba:3b:0a:0a:bc:ad:ed:58:43:fd:a1:9e:
         95:84:f6:f3:4d:16:7f:13:3b:66:f9:f8:f8:9d:08:a6:25:04:
         09:0d:76:a1:8b:80:41:04:c8:a5:c3:d6:01:b6:5b:20:5c:5b:
         5a:47:0a:cf:23:d0:d9:c0:a9:3a:14:e7:17:f6:ed:3a:36:18:
         06:9d:4b:48:a7:52:01:7e:9f:f3:30:4d:60:f6:1a:96:3b:13:
         ed:b4:47:a0:01:f0:ab:0c:bb:f7:b6:8a:61:ca:36:87:24:93:
         9a:1b:a9:2b:74:b8:90:2b:17:e6:6e:6f:f9:dd:6d:8d:53:81:
         fd:d8:49:a9:0c:8d:fb:5d:1b:72:fe:a8:40:ad:6a:59:78:10:
         5a:73:69:69:c1:56:ba:83:66:23:9a:d6:63:e5:42:d8:ca:4e:
         b4:e3:d7:6f:cc:fc:3e:f6:c2:30:23:75:4a:db:9e:7d:34:b8:
         ad:db:86:20:f3:d5:97:37:f8:0a:d5:84:15:56:22:8c:55:2c:
         4f:81:71:0f:1f:2a:ca:58:06:3f:57:fc:b1:06:97:b5:02:b1:
         57:af:6d:77:87:9e:1f:03:46:c9:d3:bc:8d:ee:fe:d2:b6:12:
         5e:16:bd:bf:d4:bb:ce:f3:28:77:40:cd:19:df:1d:cc:40:f9:
         f8:d0:e5:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----