Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/33/9bc5bc-8f99-42ed-a8ce-5b86ba585922/1/2zdeFqGTZ96ZuySsEV0lmioEgaw.mft
File:                     2zdeFqGTZ96ZuySsEV0lmioEgaw.mft (raw, json)
Hash identifier:          zsOXCb1c9iXHtlWyoSXLcnBWLBbgD24gdzqoVArrguY=
Subject key identifier:   14:99:A8:9E:3A:31:39:72:F4:5D:3A:FD:6C:C5:1A:1E:58:D1:73:4D
Authority key identifier: DB:37:5E:16:A1:93:67:DE:99:BB:24:AC:11:5D:25:9A:2A:04:81:AC
Certificate issuer:       /CN=db375e16a19367de99bb24ac115d259a2a0481ac
Certificate serial:       019F2369DD51045DE374CDDCCCC1CCC64893
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2zdeFqGTZ96ZuySsEV0lmioEgaw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/33/9bc5bc-8f99-42ed-a8ce-5b86ba585922/1/2zdeFqGTZ96ZuySsEV0lmioEgaw.mft
Manifest number:          0F28
Signing time:             Thu 02 Jul 2026 15:19:28 +0000
Manifest this update:     Thu 02 Jul 2026 15:19:28 +0000
Manifest next update:     Fri 03 Jul 2026 15:19:28 +0000
Files and hashes:         1: 2zdeFqGTZ96ZuySsEV0lmioEgaw.crl (hash: 9Zol60BZlNjS7WpLSHt1mEt8JSsES9fL6fIZBoNdSn4=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:23:69:dd:51:04:5d:e3:74:cd:dc:cc:c1:cc:c6:48:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=db375e16a19367de99bb24ac115d259a2a0481ac
        Validity
            Not Before: Jul  2 15:19:28 2026 GMT
            Not After : Jul  3 15:19:28 2026 GMT
        Subject: CN=1499a89e3a313972f45d3afd6cc51a1e58d1734d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:73:80:f7:2c:67:20:67:50:22:09:af:a0:ee:
                    5f:ca:71:c1:58:75:f6:3b:77:d1:fb:7a:a6:68:4e:
                    01:66:56:69:4b:01:29:e1:17:06:85:cb:69:96:6a:
                    e7:35:01:ad:d7:59:34:f1:ac:58:37:16:cd:4b:7d:
                    5a:97:30:f1:47:16:c7:02:5a:f9:a4:0d:71:d6:30:
                    b3:61:64:9a:24:db:3e:62:2b:e2:2e:90:3c:27:a5:
                    7d:6b:b4:a1:22:8d:4a:e1:fe:fe:fe:02:7b:ae:ba:
                    f3:df:7a:1a:6a:51:4e:0a:2a:29:89:ab:0d:22:ee:
                    c0:0b:5f:63:84:52:6b:2a:43:b1:7d:2d:8d:89:2d:
                    e4:ec:f7:a8:9f:18:85:f3:b5:59:9d:30:13:72:2c:
                    01:70:df:c9:d3:f1:29:31:dd:24:e7:f3:a7:af:5b:
                    bf:45:b5:ee:f6:d3:23:d7:18:e0:f4:19:d6:56:88:
                    b5:8c:34:31:ce:b6:49:4f:14:f5:95:91:67:76:b8:
                    d9:c8:de:16:91:7b:6e:b4:19:f2:55:46:67:a7:3b:
                    5a:b2:ac:3c:3f:05:e0:60:01:0a:57:a2:c7:c7:b6:
                    0a:0d:9d:bf:80:9a:cd:c9:a2:ac:ff:d0:7f:ba:2c:
                    49:e1:36:16:67:7c:24:70:51:dd:1e:59:70:c1:5a:
                    2e:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:99:A8:9E:3A:31:39:72:F4:5D:3A:FD:6C:C5:1A:1E:58:D1:73:4D
            X509v3 Authority Key Identifier:
                keyid:DB:37:5E:16:A1:93:67:DE:99:BB:24:AC:11:5D:25:9A:2A:04:81:AC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2zdeFqGTZ96ZuySsEV0lmioEgaw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/9bc5bc-8f99-42ed-a8ce-5b86ba585922/1/2zdeFqGTZ96ZuySsEV0lmioEgaw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/33/9bc5bc-8f99-42ed-a8ce-5b86ba585922/1/2zdeFqGTZ96ZuySsEV0lmioEgaw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:3f:66:e0:b9:c5:8e:72:ce:a3:ac:3e:ff:4d:86:f9:1b:43:
         06:54:d5:12:f3:1a:3e:60:8f:48:d0:b4:7d:22:11:92:9c:8c:
         9a:81:be:be:ae:85:4f:77:4a:5b:2b:39:ee:69:77:98:bd:60:
         2c:32:8c:9f:03:c5:dc:e9:b3:95:24:3c:c1:47:e3:64:b0:36:
         67:f9:b8:52:2c:67:de:ef:d1:c8:9f:5f:8b:d4:02:da:b8:e8:
         d5:ff:2e:79:d8:e6:89:6c:57:70:5e:b8:57:54:23:33:8a:f0:
         84:10:c0:36:dd:05:ab:87:e8:7a:f0:8b:57:0c:9a:45:71:1c:
         68:f7:c8:00:f3:fa:96:2a:23:e5:28:a9:25:67:24:51:97:8c:
         7e:a4:b8:25:22:08:34:d5:2c:7d:42:93:04:c5:40:fc:0b:55:
         72:c4:85:31:97:e1:d1:7b:78:f0:a7:bf:9d:83:dc:c3:ee:fd:
         72:b1:34:b7:44:57:8b:5e:bc:9c:42:71:91:9f:6d:37:d3:48:
         c3:f6:d1:f3:ff:c7:fc:d2:16:0c:f9:5a:52:79:61:93:9e:9d:
         1a:2c:23:07:20:b1:25:cb:83:23:64:23:c0:a4:11:8f:d5:f2:
         8a:0a:c7:cd:f1:c3:0f:86:56:56:a9:1b:5a:c5:5e:93:0c:74:
         a7:75:ae:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----