Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b7/4e5c10-71ed-4deb-b4e0-19d57ff1fbd9/1/20iBY9r1DbZG3k3yTTTLrJk_RX8.mft
File:                     20iBY9r1DbZG3k3yTTTLrJk_RX8.mft (raw, json)
Hash identifier:          IpBq4b4JfM8vlxCnB9kbRaXTItZ3IiZjHUBL3ep59gw=
Subject key identifier:   31:CA:0D:7B:09:44:7B:3B:4B:1D:21:CE:EE:41:C1:05:3B:EC:79:B6
Authority key identifier: DB:48:81:63:DA:F5:0D:B6:46:DE:4D:F2:4D:34:CB:AC:99:3F:45:7F
Certificate issuer:       /CN=db488163daf50db646de4df24d34cbac993f457f
Certificate serial:       01A08979DED6849C27792E9442DF1E0F4C66
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/20iBY9r1DbZG3k3yTTTLrJk_RX8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b7/4e5c10-71ed-4deb-b4e0-19d57ff1fbd9/1/20iBY9r1DbZG3k3yTTTLrJk_RX8.mft
Manifest number:          1A45
Signing time:             Thu 10 Sep 2026 04:01:00 +0000
Manifest this update:     Thu 10 Sep 2026 04:01:00 +0000
Manifest next update:     Fri 11 Sep 2026 04:01:00 +0000
Files and hashes:         1: 20iBY9r1DbZG3k3yTTTLrJk_RX8.crl (hash: D702+nyl4WMFZ0iONle6vU4cWCPX+G3YO6V42yjpGnk=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:89:79:de:d6:84:9c:27:79:2e:94:42:df:1e:0f:4c:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=db488163daf50db646de4df24d34cbac993f457f
        Validity
            Not Before: Sep 10 04:01:00 2026 GMT
            Not After : Sep 11 04:01:00 2026 GMT
        Subject: CN=31ca0d7b09447b3b4b1d21ceee41c1053bec79b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:92:5e:cb:23:22:e5:41:39:5d:78:dd:56:c0:
                    54:c0:9c:ce:58:7c:0a:98:3a:f3:d0:63:d7:8e:c0:
                    0f:08:8e:21:a0:6a:a8:4c:19:78:9a:f8:41:6a:fc:
                    46:d6:66:9e:31:f1:f5:26:31:f7:f0:9c:4b:ed:23:
                    c5:d5:17:3a:b9:50:f4:d6:7b:29:4d:c0:a5:c0:6b:
                    81:3a:9e:ac:d5:0f:1e:33:2c:b4:30:18:59:71:c3:
                    c8:f3:0e:0d:10:09:be:f8:d3:f4:f8:64:dd:c3:95:
                    76:38:4a:e0:b9:40:38:e2:cb:ab:31:0f:4b:22:c7:
                    47:3a:b7:8e:2c:8d:65:02:d4:ea:84:0e:91:44:eb:
                    76:88:a0:97:87:2a:28:4c:1b:ba:e1:dd:e6:63:31:
                    b5:26:5f:7f:5b:5b:63:52:02:24:b3:e7:9e:90:da:
                    4a:22:e8:bb:6d:7d:07:c3:20:0b:1e:7b:ee:6f:e4:
                    da:85:16:71:24:43:da:65:b8:66:4a:bd:9e:ca:36:
                    a8:0a:7d:ac:cb:61:a1:59:73:d8:63:59:ab:3d:08:
                    b2:c8:82:91:43:52:50:a1:5b:e8:cc:3e:43:a3:28:
                    8c:b7:55:e7:98:c6:8f:97:94:2c:b9:a9:72:19:d4:
                    36:6d:b7:9b:18:43:f6:f0:e1:19:b0:87:84:9e:59:
                    f8:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:CA:0D:7B:09:44:7B:3B:4B:1D:21:CE:EE:41:C1:05:3B:EC:79:B6
            X509v3 Authority Key Identifier:
                keyid:DB:48:81:63:DA:F5:0D:B6:46:DE:4D:F2:4D:34:CB:AC:99:3F:45:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/20iBY9r1DbZG3k3yTTTLrJk_RX8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/4e5c10-71ed-4deb-b4e0-19d57ff1fbd9/1/20iBY9r1DbZG3k3yTTTLrJk_RX8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/4e5c10-71ed-4deb-b4e0-19d57ff1fbd9/1/20iBY9r1DbZG3k3yTTTLrJk_RX8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b6:31:10:34:e2:ed:fe:b8:76:ee:3b:8e:93:b8:ba:d7:a9:a0:
         81:d3:88:8f:70:8e:59:cc:7e:5d:32:89:07:30:01:3f:8b:05:
         2e:07:34:6d:33:d1:c4:d3:1e:c5:45:1d:b5:f6:36:1d:e5:61:
         e7:a8:2f:57:08:bc:9d:69:a6:f0:c1:e6:ae:94:12:c3:f6:f6:
         93:63:f9:51:d2:8e:af:e2:6a:fb:0e:19:00:42:d3:4b:09:8e:
         5f:e4:9d:9d:45:ba:cd:fd:c7:31:4c:63:f1:1f:6a:55:a6:19:
         c3:c2:ef:b4:ba:dc:02:0e:d6:36:82:d6:1a:26:87:00:48:17:
         0c:e7:dc:63:4f:d2:10:ca:a2:cf:ec:2d:8b:44:88:36:87:59:
         61:85:1e:43:b5:c5:6a:f7:6e:ab:fa:a3:f8:4f:75:87:86:66:
         71:76:0d:c3:06:5f:3d:d6:1a:45:0a:95:dc:6f:5c:41:19:ce:
         3a:55:47:85:1e:f5:f2:f4:c6:e2:8d:62:3c:e3:89:df:e1:0a:
         b6:bc:d6:ec:1f:82:89:80:ca:74:e2:3f:e7:50:a8:cd:7a:3f:
         c4:f8:03:95:86:05:51:73:14:db:24:a5:21:4a:ad:80:cf:e4:
         a9:0b:57:b5:8c:d9:ac:c6:13:84:33:3e:49:6f:2e:0b:21:6e:
         01:29:b2:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----