Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5a/87312c-69c4-4813-b740-1c9667730534/1/1PvHTNH4egvxbEgvYgHJueskTqI.mft
File:                     1PvHTNH4egvxbEgvYgHJueskTqI.mft (raw, json)
Hash identifier:          rSPzAFe0mw443M4I/05OMo5epSSSI+QjT07fcZHSoec=
Subject key identifier:   7F:70:88:51:26:02:31:45:AB:A9:ED:22:E0:E2:DE:AB:54:43:57:F4
Authority key identifier: D4:FB:C7:4C:D1:F8:7A:0B:F1:6C:48:2F:62:01:C9:B9:EB:24:4E:A2
Certificate issuer:       /CN=d4fbc74cd1f87a0bf16c482f6201c9b9eb244ea2
Certificate serial:       019F236994B35AD6562C2EEC9EA9A65BC1AD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1PvHTNH4egvxbEgvYgHJueskTqI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5a/87312c-69c4-4813-b740-1c9667730534/1/1PvHTNH4egvxbEgvYgHJueskTqI.mft
Manifest number:          1990
Signing time:             Thu 02 Jul 2026 15:19:09 +0000
Manifest this update:     Thu 02 Jul 2026 15:19:09 +0000
Manifest next update:     Fri 03 Jul 2026 15:19:09 +0000
Files and hashes:         1: 1PvHTNH4egvxbEgvYgHJueskTqI.crl (hash: nYWZD92j0IjDniFVQpvuNZHIsphMsyT/F8b+BwhpO2A=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:23:69:94:b3:5a:d6:56:2c:2e:ec:9e:a9:a6:5b:c1:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d4fbc74cd1f87a0bf16c482f6201c9b9eb244ea2
        Validity
            Not Before: Jul  2 15:19:09 2026 GMT
            Not After : Jul  3 15:19:09 2026 GMT
        Subject: CN=7f70885126023145aba9ed22e0e2deab544357f4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:6c:e8:8b:45:dd:0c:96:f8:0b:22:cf:7c:f2:
                    10:48:31:20:be:ba:9e:ba:d5:08:31:7e:62:3f:f9:
                    33:9d:08:f4:c8:83:f2:09:17:d5:61:dd:1a:7b:18:
                    ab:f4:85:d1:d3:fd:14:63:38:88:15:7d:d2:87:68:
                    84:ab:0f:74:69:df:56:15:ce:1a:79:df:67:3a:3a:
                    43:ed:c1:e9:e3:83:3c:8b:c6:c0:0d:74:c6:0d:88:
                    e0:ba:d8:6d:96:b2:ac:a7:23:dd:e6:52:76:7a:33:
                    87:50:e8:f7:5f:c0:7f:6d:c2:e2:3e:9b:1b:c4:37:
                    62:e3:2f:18:12:3a:f4:7d:3a:5c:45:c1:da:86:e4:
                    c6:cf:f4:00:9b:4b:20:11:1e:c8:f8:29:92:57:6c:
                    6c:45:b5:0e:a2:61:54:85:1b:be:b0:ee:22:5f:38:
                    2d:02:9b:47:3c:e9:17:7f:c7:00:83:8a:37:fa:0e:
                    62:0e:4c:f6:c4:24:e1:1c:ae:d1:69:fc:fc:e0:06:
                    d4:d1:fe:e9:dc:f6:e4:d9:51:d3:da:a3:25:c6:3f:
                    52:99:df:fd:33:14:60:3f:1c:45:2f:a7:be:94:09:
                    42:82:80:8a:21:db:c8:e2:f8:8f:7d:71:8f:82:72:
                    5d:6f:ff:3d:9e:42:96:75:6b:e8:e0:df:57:21:2c:
                    3a:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:70:88:51:26:02:31:45:AB:A9:ED:22:E0:E2:DE:AB:54:43:57:F4
            X509v3 Authority Key Identifier:
                keyid:D4:FB:C7:4C:D1:F8:7A:0B:F1:6C:48:2F:62:01:C9:B9:EB:24:4E:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1PvHTNH4egvxbEgvYgHJueskTqI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/87312c-69c4-4813-b740-1c9667730534/1/1PvHTNH4egvxbEgvYgHJueskTqI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/87312c-69c4-4813-b740-1c9667730534/1/1PvHTNH4egvxbEgvYgHJueskTqI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:42:fd:9f:2d:47:31:51:89:09:dd:f3:5e:95:54:8f:dc:2c:
         22:f8:20:69:5e:6a:a3:7a:cc:3a:f5:7e:9d:8c:fd:b7:88:d8:
         34:19:8c:88:3f:43:ea:61:0c:23:8f:33:ac:d7:88:07:f1:15:
         0b:a7:18:2c:cd:7e:f4:ab:d3:09:8e:ad:e2:02:56:64:08:33:
         4f:74:14:07:b7:e2:23:6e:1c:7f:96:60:de:7d:da:3c:99:e6:
         3c:6c:cc:99:5e:14:67:05:64:cd:f1:36:10:2c:4d:72:d8:c9:
         52:10:27:06:86:4d:5a:94:b3:89:a5:42:82:5d:d5:1a:56:64:
         ed:95:25:2e:b0:6e:e0:97:8c:81:72:35:d6:bd:e3:32:50:53:
         e5:4e:4b:c6:0b:12:fd:97:86:5c:e0:11:4b:03:c7:f1:24:ff:
         2b:46:44:69:78:75:bb:8b:57:d6:f9:ce:59:b2:57:6a:dc:f3:
         91:3a:ff:73:07:8b:49:05:27:7d:3a:3e:a9:3d:ed:73:00:e9:
         9b:7e:fe:b8:a1:22:6c:02:a4:a1:1f:0e:8c:6c:56:86:25:d0:
         de:43:81:0e:96:f1:db:01:4b:ba:98:d1:4e:02:ee:1e:f2:8a:
         d7:4a:80:4a:f4:bd:29:ee:3e:99:12:68:1f:00:31:c7:10:dc:
         c1:37:f9:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----