Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/060cea-e920-40de-90da-8d49ebcae9b3/1/5gSc-H3Y8f1MgCS1psnqlPF7b70.mft
File:                     5gSc-H3Y8f1MgCS1psnqlPF7b70.mft (raw, json)
Hash identifier:          b/pf848SFK+Upc1a+UTeSIEcH8zUtcla5j3wY2eQfXs=
Subject key identifier:   87:DE:8D:3D:45:89:8E:E4:A0:BD:80:17:52:FF:15:CF:02:58:54:06
Authority key identifier: E6:04:9C:F8:7D:D8:F1:FD:4C:80:24:B5:A6:C9:EA:94:F1:7B:6F:BD
Certificate issuer:       /CN=e6049cf87dd8f1fd4c8024b5a6c9ea94f17b6fbd
Certificate serial:       019F236A5999FE91C341404FE0457847999F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5gSc-H3Y8f1MgCS1psnqlPF7b70.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a5/060cea-e920-40de-90da-8d49ebcae9b3/1/5gSc-H3Y8f1MgCS1psnqlPF7b70.mft
Manifest number:          1922
Signing time:             Thu 02 Jul 2026 15:19:59 +0000
Manifest this update:     Thu 02 Jul 2026 15:19:59 +0000
Manifest next update:     Fri 03 Jul 2026 15:19:59 +0000
Files and hashes:         1: 5gSc-H3Y8f1MgCS1psnqlPF7b70.crl (hash: ZLJY31GTN2COg7V2Sn7i8J9y+recdgLkOy7VHEEpjdo=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:23:6a:59:99:fe:91:c3:41:40:4f:e0:45:78:47:99:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e6049cf87dd8f1fd4c8024b5a6c9ea94f17b6fbd
        Validity
            Not Before: Jul  2 15:19:59 2026 GMT
            Not After : Jul  3 15:19:59 2026 GMT
        Subject: CN=87de8d3d45898ee4a0bd801752ff15cf02585406
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:16:0e:c5:4a:8e:db:c7:9c:fd:ac:09:89:ab:
                    5b:6b:54:4f:62:37:d0:5b:21:77:f3:86:7b:92:13:
                    11:c7:b3:27:14:37:25:e6:4e:aa:53:a0:8e:70:7d:
                    a9:3b:02:19:c9:d8:20:b8:68:be:89:e3:fb:bb:eb:
                    a0:e6:d7:48:08:ff:93:9d:e2:99:2e:0e:fc:86:36:
                    8b:36:44:db:5c:c3:2f:1e:6e:a3:5d:27:ed:e9:af:
                    22:3a:3a:cd:38:dc:b2:5d:be:a0:94:5a:f3:dd:3b:
                    2a:15:9b:d6:22:96:bf:7f:3e:86:fa:f3:6b:99:3b:
                    fa:3c:54:f1:6f:0d:15:04:9f:92:64:dd:d6:1b:6f:
                    93:c1:6a:ca:7e:95:94:f4:ee:85:29:e3:d4:cb:a1:
                    53:7b:0c:cf:55:7e:14:2a:f1:1c:7e:5b:50:4f:e7:
                    c7:2e:94:cb:ee:41:0c:b5:6e:51:e1:6c:98:e5:3a:
                    42:2a:3c:06:a1:4e:f4:91:bb:e0:b9:c5:86:05:9d:
                    cb:70:6f:5c:a3:de:e7:5b:81:cd:6c:aa:c6:cc:be:
                    19:72:94:99:35:ad:8b:d9:5e:81:22:03:64:4d:b8:
                    6d:db:59:26:6b:03:bf:4d:39:67:68:7b:e8:3a:d4:
                    5f:86:25:e5:8f:b0:23:44:2f:6e:1f:bd:e5:96:6c:
                    2b:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:DE:8D:3D:45:89:8E:E4:A0:BD:80:17:52:FF:15:CF:02:58:54:06
            X509v3 Authority Key Identifier:
                keyid:E6:04:9C:F8:7D:D8:F1:FD:4C:80:24:B5:A6:C9:EA:94:F1:7B:6F:BD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5gSc-H3Y8f1MgCS1psnqlPF7b70.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/060cea-e920-40de-90da-8d49ebcae9b3/1/5gSc-H3Y8f1MgCS1psnqlPF7b70.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/060cea-e920-40de-90da-8d49ebcae9b3/1/5gSc-H3Y8f1MgCS1psnqlPF7b70.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:84:ac:0b:29:e1:53:73:a1:f3:d7:cc:41:62:61:e9:8c:c2:
         a7:92:8f:d5:e9:7d:fb:4b:60:26:1b:f9:37:9a:76:2d:74:6f:
         8b:20:f4:08:c9:de:4e:08:d7:2c:03:6c:c1:74:0b:8d:6f:11:
         1f:20:51:b1:2b:68:3f:94:1a:51:bb:e4:34:16:27:7a:45:59:
         b0:9a:c9:5f:ab:a2:b5:22:c4:34:7a:a9:ac:68:05:33:d2:c9:
         1e:73:fe:3e:b8:0c:92:82:05:cd:39:1d:11:f6:38:d3:fc:e9:
         7e:ff:96:38:92:17:5b:23:a7:8b:3c:ed:95:6d:0c:f6:ae:5b:
         48:7e:85:bd:21:04:68:2e:6a:24:f6:9f:06:af:d0:a9:9b:59:
         4e:75:7b:c9:2c:c5:d5:39:d0:3f:4c:f1:11:0d:8d:de:b0:95:
         7d:72:59:0c:04:f1:0f:b9:fa:04:f5:c0:e9:5b:17:29:67:b9:
         f9:72:d1:80:8d:cd:52:d6:6e:53:8c:48:66:ca:b0:98:67:44:
         ba:77:ee:18:51:de:85:6b:b3:61:9e:5e:27:61:97:b8:d4:ee:
         bf:d1:2c:f2:c3:08:92:85:a8:1a:44:e5:08:77:0d:67:28:45:
         46:52:7f:20:a2:7e:60:75:f5:09:69:a7:a4:52:56:33:5e:b2:
         9f:cc:20:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 19:21:57 2026 by rpki-client