Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a0/220ce4-11a3-4d92-a488-c3947e76be75/1/83BjqFRFAZq4RaW35UOVzdOZJ_Y.mft
File:                     83BjqFRFAZq4RaW35UOVzdOZJ_Y.mft (raw, json)
Hash identifier:          EJZarzDyqQNWIHT+C5zapNC2IC91Jve3QVTgTUuPBF0=
Subject key identifier:   ED:D5:83:05:39:44:EF:C5:B6:C9:92:04:69:85:C8:B0:D5:9C:55:A6
Authority key identifier: F3:70:63:A8:54:45:01:9A:B8:45:A5:B7:E5:43:95:CD:D3:99:27:F6
Certificate issuer:       /CN=f37063a85445019ab845a5b7e54395cdd39927f6
Certificate serial:       019F236A18C65D71AAD37DB502E82DB76E70
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/83BjqFRFAZq4RaW35UOVzdOZJ_Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a0/220ce4-11a3-4d92-a488-c3947e76be75/1/83BjqFRFAZq4RaW35UOVzdOZJ_Y.mft
Manifest number:          14C8
Signing time:             Thu 02 Jul 2026 15:19:43 +0000
Manifest this update:     Thu 02 Jul 2026 15:19:43 +0000
Manifest next update:     Fri 03 Jul 2026 15:19:43 +0000
Files and hashes:         1: 83BjqFRFAZq4RaW35UOVzdOZJ_Y.crl (hash: e9WQwT9SH/pbWP697UBhheYdyBTb8ktrlJQc9asrxKU=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:23:6a:18:c6:5d:71:aa:d3:7d:b5:02:e8:2d:b7:6e:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f37063a85445019ab845a5b7e54395cdd39927f6
        Validity
            Not Before: Jul  2 15:19:43 2026 GMT
            Not After : Jul  3 15:19:43 2026 GMT
        Subject: CN=edd583053944efc5b6c992046985c8b0d59c55a6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:44:cf:84:6f:91:4a:1c:74:f4:b8:62:f5:83:
                    39:2a:8c:f7:d7:4a:d5:21:55:36:9c:5f:e9:0f:29:
                    c7:2c:58:10:74:0a:d1:f3:ba:1e:a9:54:ee:39:cc:
                    88:31:48:36:8a:0a:f9:c7:a6:31:2c:34:68:84:ed:
                    93:8c:e0:09:1f:68:ea:b2:18:01:2b:02:3e:b8:bc:
                    1a:17:b8:3e:cd:4e:13:e6:b5:d0:a5:99:dd:d1:59:
                    2c:bd:05:ec:dd:eb:70:e3:81:4e:72:56:6c:8b:1e:
                    82:1d:45:ac:a8:e2:25:0c:27:9e:a8:5b:58:09:eb:
                    62:2c:a5:38:1e:a1:a3:8c:35:ff:f3:03:94:1a:d2:
                    04:91:bc:6f:43:a6:56:47:e0:f0:63:13:af:8a:b0:
                    ee:9a:36:c4:17:89:f7:a7:b1:68:c0:74:da:14:83:
                    2f:2b:20:4e:b5:ac:b2:89:c0:4d:fd:a9:a9:47:72:
                    69:19:9e:0f:1e:48:42:f5:b1:38:53:53:32:51:2b:
                    48:1a:98:cd:e7:aa:e4:ac:d9:c5:f2:1f:94:f9:da:
                    f5:64:ce:2e:12:ed:95:35:8e:d2:80:c9:21:09:9a:
                    42:00:03:65:33:d8:ea:21:d8:43:24:d4:01:34:66:
                    78:55:5a:95:b6:3e:61:09:cb:f3:04:99:eb:b6:eb:
                    e1:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:D5:83:05:39:44:EF:C5:B6:C9:92:04:69:85:C8:B0:D5:9C:55:A6
            X509v3 Authority Key Identifier:
                keyid:F3:70:63:A8:54:45:01:9A:B8:45:A5:B7:E5:43:95:CD:D3:99:27:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/83BjqFRFAZq4RaW35UOVzdOZJ_Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/220ce4-11a3-4d92-a488-c3947e76be75/1/83BjqFRFAZq4RaW35UOVzdOZJ_Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/220ce4-11a3-4d92-a488-c3947e76be75/1/83BjqFRFAZq4RaW35UOVzdOZJ_Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9f:7e:40:02:f7:88:42:1c:09:7f:99:21:27:5c:77:7a:d9:94:
         eb:d0:af:57:f0:21:51:df:b2:30:b0:f7:03:5c:ae:8d:1e:09:
         d4:b1:63:3e:3b:c1:f0:9c:4a:2b:4e:5b:d2:d7:43:46:9e:91:
         17:77:fe:db:7d:6a:10:01:97:32:54:14:a0:2b:c3:60:19:61:
         02:7c:3d:a4:78:4f:74:41:07:40:18:63:6c:d5:cb:bc:44:eb:
         61:19:4a:53:ef:34:04:6f:4a:4d:1b:fc:eb:bb:26:f1:0e:63:
         a7:d1:37:f7:d4:a6:2a:b6:22:14:87:25:b6:30:20:c2:9a:21:
         3a:15:a6:6e:c9:f0:af:ca:22:be:d5:f7:f7:5d:85:7d:46:ad:
         99:e0:5c:25:41:ea:1f:5d:02:cd:62:3c:e5:5c:4d:0f:cf:00:
         25:8d:10:50:90:62:92:dd:63:76:da:38:9f:1e:d6:29:1e:9c:
         bd:1c:d1:24:55:c4:2b:c3:10:64:98:b9:7b:6f:d4:9b:62:b8:
         f8:37:82:ff:d7:74:05:b2:ac:00:9e:5a:0a:1e:41:36:af:cb:
         4c:89:45:b9:53:df:f1:35:4d:79:44:a9:9f:94:bb:07:6f:de:
         0f:ba:22:6d:61:7e:bc:16:b5:18:72:39:0e:e3:dd:33:56:4f:
         2d:7b:ff:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----