Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b1/979bdb-01a3-4d17-8746-fe44772d5ae1/1/8d15W-NuS1swnryOBOpzlBNccUw.mft
File:                     8d15W-NuS1swnryOBOpzlBNccUw.mft (raw, json)
Hash identifier:          W5xjMpLGYuthesXa5FE2FikygqIXaUVW69TGpn6fgC4=
Subject key identifier:   6B:A1:15:E8:06:E7:A9:D3:29:50:5A:93:B6:E4:39:44:D6:46:0C:38
Authority key identifier: F1:DD:79:5B:E3:6E:4B:5B:30:9E:BC:8E:04:EA:73:94:13:5C:71:4C
Certificate issuer:       /CN=f1dd795be36e4b5b309ebc8e04ea7394135c714c
Certificate serial:       019F236A1AFC31F2170FAA4D66151A07B9B7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8d15W-NuS1swnryOBOpzlBNccUw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b1/979bdb-01a3-4d17-8746-fe44772d5ae1/1/8d15W-NuS1swnryOBOpzlBNccUw.mft
Manifest number:          198F
Signing time:             Thu 02 Jul 2026 15:19:43 +0000
Manifest this update:     Thu 02 Jul 2026 15:19:43 +0000
Manifest next update:     Fri 03 Jul 2026 15:19:43 +0000
Files and hashes:         1: 8d15W-NuS1swnryOBOpzlBNccUw.crl (hash: 8QRgu2iDD6DSR4PsCmfkDcipEE2bcp3GZLUArwmIJ6U=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:23:6a:1a:fc:31:f2:17:0f:aa:4d:66:15:1a:07:b9:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f1dd795be36e4b5b309ebc8e04ea7394135c714c
        Validity
            Not Before: Jul  2 15:19:43 2026 GMT
            Not After : Jul  3 15:19:43 2026 GMT
        Subject: CN=6ba115e806e7a9d329505a93b6e43944d6460c38
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:1b:ca:19:ae:7a:3e:54:d3:a6:22:00:8e:30:
                    d0:61:0b:e6:a2:d4:60:27:3f:78:2d:f9:64:66:ce:
                    59:ae:2c:14:c8:46:71:eb:98:11:d1:02:36:44:3c:
                    33:cd:cc:c3:06:74:3b:a5:d6:ef:a7:ca:70:d1:6e:
                    a1:54:1c:b1:ca:4c:f8:d8:11:0b:a7:31:1e:cf:4e:
                    ec:64:94:c1:ef:39:30:32:05:a8:74:06:71:0b:cc:
                    25:7d:4f:42:2b:f6:85:5a:8d:4f:f7:02:e5:17:c2:
                    96:14:5d:12:b0:81:35:73:80:23:7c:a9:9b:32:bc:
                    d3:26:01:8f:0e:24:fd:b8:54:48:dc:21:0b:f3:a4:
                    31:e4:d4:eb:71:70:1a:fe:b6:68:a8:82:81:97:5e:
                    c9:e2:7a:fd:b3:58:3c:79:57:07:f6:8b:48:84:98:
                    e1:5c:93:fe:91:db:35:ea:74:8b:78:79:6c:5d:09:
                    a9:ba:92:b1:42:18:3e:cb:e8:fe:5d:ae:89:01:6c:
                    d2:e2:8b:7c:5c:38:2a:8d:d7:f6:29:25:d0:65:e5:
                    bf:a8:05:0d:78:11:40:aa:cc:5d:1a:04:60:e6:8c:
                    a6:c3:74:a1:4b:3a:5c:b0:6f:90:7a:48:a6:fa:30:
                    1a:5e:27:47:c9:7e:26:94:49:0f:b7:3a:8e:47:b8:
                    15:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:A1:15:E8:06:E7:A9:D3:29:50:5A:93:B6:E4:39:44:D6:46:0C:38
            X509v3 Authority Key Identifier:
                keyid:F1:DD:79:5B:E3:6E:4B:5B:30:9E:BC:8E:04:EA:73:94:13:5C:71:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d15W-NuS1swnryOBOpzlBNccUw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/979bdb-01a3-4d17-8746-fe44772d5ae1/1/8d15W-NuS1swnryOBOpzlBNccUw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/979bdb-01a3-4d17-8746-fe44772d5ae1/1/8d15W-NuS1swnryOBOpzlBNccUw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:d2:3d:91:12:e2:47:a3:0a:f7:9a:fb:d3:91:14:84:41:23:
         be:ca:76:24:e5:f7:a0:d3:6b:8b:a0:af:21:95:86:e3:47:f5:
         ec:c4:e3:13:37:26:06:c8:35:9c:e0:dc:1b:ea:68:f6:8b:24:
         1c:aa:bc:89:8e:1d:cd:45:53:1a:36:2f:a8:bd:d3:94:25:af:
         40:38:40:52:1d:be:39:eb:aa:a2:c3:74:37:09:90:0f:74:be:
         c3:e1:4c:38:e9:8c:55:13:8b:3a:0d:2f:e3:4c:9b:c7:b1:9a:
         29:65:7c:78:bf:73:e0:78:89:a4:06:c9:82:3a:42:5b:8b:28:
         dd:f0:96:07:e0:5d:82:71:77:e9:24:0f:98:b7:c1:5c:65:e0:
         eb:82:a8:84:8d:83:6f:50:d3:c4:b7:a6:f9:33:67:13:c9:99:
         50:13:dd:3b:6f:e6:85:2a:8b:5a:91:9b:ce:e1:38:43:5e:8e:
         b0:ba:fd:c9:e6:25:6b:bd:7e:38:f6:25:e0:18:8e:5f:0e:de:
         96:de:98:42:dd:63:52:97:6b:83:a0:1f:c4:e1:73:c8:c7:20:
         43:4b:64:02:ea:03:b1:10:2f:8c:82:9f:28:86:db:38:7f:b1:
         5f:8a:0d:0d:f2:61:f7:e2:2c:98:86:5c:ae:70:c1:f9:f6:3e:
         68:36:42:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----