Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/13/a9a479-9e2f-4cb0-8ded-7781681077f7/1/ApHU3hMNpqrOIu2ZZQvhgkl-C88.mft
File:                     ApHU3hMNpqrOIu2ZZQvhgkl-C88.mft (raw, json)
Hash identifier:          dOZi4nqQzx0VW9NZfdJhFLty/SygeOG0fagoUBW0OSk=
Subject key identifier:   27:72:05:9F:E0:B2:DD:DD:E8:35:C7:B3:21:76:35:31:87:99:8B:71
Authority key identifier: 02:91:D4:DE:13:0D:A6:AA:CE:22:ED:99:65:0B:E1:82:49:7E:0B:CF
Certificate issuer:       /CN=0291d4de130da6aace22ed99650be182497e0bcf
Certificate serial:       019F236A5FFB64B1A1CD7A4917B0DD735F6E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ApHU3hMNpqrOIu2ZZQvhgkl-C88.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/13/a9a479-9e2f-4cb0-8ded-7781681077f7/1/ApHU3hMNpqrOIu2ZZQvhgkl-C88.mft
Manifest number:          198D
Signing time:             Thu 02 Jul 2026 15:20:01 +0000
Manifest this update:     Thu 02 Jul 2026 15:20:01 +0000
Manifest next update:     Fri 03 Jul 2026 15:20:01 +0000
Files and hashes:         1: ApHU3hMNpqrOIu2ZZQvhgkl-C88.crl (hash: Ywo2uL5LyptenFpIUDlVFoxM6RS4TGC+elPtrMdp0fw=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:23:6a:5f:fb:64:b1:a1:cd:7a:49:17:b0:dd:73:5f:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0291d4de130da6aace22ed99650be182497e0bcf
        Validity
            Not Before: Jul  2 15:20:01 2026 GMT
            Not After : Jul  3 15:20:01 2026 GMT
        Subject: CN=2772059fe0b2dddde835c7b32176353187998b71
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:0a:fe:58:cc:73:d5:d4:85:a4:bf:c4:51:6b:
                    17:6f:2b:21:b7:c5:29:9b:c1:45:29:d1:cd:8c:65:
                    b7:c5:bf:51:91:a9:39:44:07:fd:58:79:ef:c3:09:
                    7f:fc:12:2d:99:51:4c:8f:97:e8:34:83:e0:91:89:
                    2b:d9:03:20:ba:66:76:dc:db:88:38:6c:84:06:2d:
                    61:b4:7c:4d:e2:ad:2e:2e:0c:51:78:86:d3:b3:95:
                    97:7b:35:91:7d:5e:5c:20:8d:d4:95:06:d2:33:98:
                    86:1c:aa:bb:85:2e:71:ec:f6:fd:7c:a6:85:60:7e:
                    0a:e1:f4:27:02:7c:ce:30:b1:ad:d9:17:cd:71:f5:
                    25:e8:c9:98:7d:7e:22:bc:1d:1f:33:f6:d0:d6:87:
                    66:8f:05:23:48:0f:a5:1d:01:80:e3:0b:ff:ee:30:
                    90:32:66:f0:10:be:b6:19:3d:68:85:4b:56:05:08:
                    78:45:6b:fd:5c:b2:f0:32:54:e2:e8:80:eb:61:01:
                    3f:e2:40:1e:79:5b:66:b1:bc:2b:43:4c:3b:34:6d:
                    1b:54:fc:03:7a:c9:07:b9:e9:06:1d:4d:ba:bd:f5:
                    4f:26:8f:ab:e4:f8:64:0b:5c:43:59:48:03:8e:17:
                    2f:9e:da:9c:fd:fc:7d:b7:db:a9:c3:22:5c:04:dd:
                    df:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:72:05:9F:E0:B2:DD:DD:E8:35:C7:B3:21:76:35:31:87:99:8B:71
            X509v3 Authority Key Identifier:
                keyid:02:91:D4:DE:13:0D:A6:AA:CE:22:ED:99:65:0B:E1:82:49:7E:0B:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ApHU3hMNpqrOIu2ZZQvhgkl-C88.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/a9a479-9e2f-4cb0-8ded-7781681077f7/1/ApHU3hMNpqrOIu2ZZQvhgkl-C88.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/13/a9a479-9e2f-4cb0-8ded-7781681077f7/1/ApHU3hMNpqrOIu2ZZQvhgkl-C88.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:13:50:94:43:4a:05:ab:39:59:95:0e:01:ce:aa:0d:24:8b:
         82:c3:d5:3e:79:4d:28:b1:14:dd:6a:d5:cb:a0:dc:b1:8d:8c:
         b4:1f:52:91:16:96:28:fd:3e:52:f2:90:45:11:44:93:c0:9f:
         3f:1e:7f:94:db:47:a6:26:e7:4e:c2:9a:9a:f3:d3:98:37:38:
         18:4a:41:c0:06:6a:8a:ac:3b:77:79:27:13:ce:91:52:01:9a:
         fe:b1:1b:44:ac:fe:64:3b:f3:7f:5b:77:c1:33:0f:d1:c4:68:
         f8:b4:68:cb:21:9e:a9:4f:5c:12:0c:3c:5d:65:11:a3:a7:f4:
         5f:5a:e0:61:77:6b:93:d3:db:7f:85:c7:30:63:f2:fa:1c:4c:
         3b:16:31:a8:06:ad:86:21:0a:0c:d9:b9:aa:5a:cf:d9:60:41:
         d2:3a:a3:64:f9:5a:e9:46:ca:bb:26:36:a5:e6:b8:e5:3d:fe:
         49:6f:d2:e5:c1:09:22:46:a9:aa:ca:dd:8e:8e:83:f7:9f:be:
         e8:43:d1:8d:1a:9c:f9:44:bf:fe:57:ef:eb:03:ac:89:96:53:
         52:ef:76:fb:0b:09:11:8d:ea:19:ec:53:0c:7e:a2:ec:7c:8e:
         d7:07:80:4b:76:24:78:9e:9a:eb:4a:2d:82:25:34:c5:74:a7:
         4e:67:a9:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----