Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b9/1afe53-f1b8-4315-ab1c-f474f7bd3531/1/A3hitGCMefRQKV7FyAx8etbf4qI.mft
File:                     A3hitGCMefRQKV7FyAx8etbf4qI.mft (raw, json)
Hash identifier:          37aWkr0l2v/kDuJuMvzAFhtabmB1rb9nNrsQiAtlLXk=
Subject key identifier:   E1:8E:C3:C9:6F:57:A9:12:FB:02:E8:EA:A7:1C:AC:86:FB:F4:33:D9
Authority key identifier: 03:78:62:B4:60:8C:79:F4:50:29:5E:C5:C8:0C:7C:7A:D6:DF:E2:A2
Certificate issuer:       /CN=037862b4608c79f450295ec5c80c7c7ad6dfe2a2
Certificate serial:       019F236A826DC81EA8C0CC5BB983E00F2AE1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/A3hitGCMefRQKV7FyAx8etbf4qI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b9/1afe53-f1b8-4315-ab1c-f474f7bd3531/1/A3hitGCMefRQKV7FyAx8etbf4qI.mft
Manifest number:          149F
Signing time:             Thu 02 Jul 2026 15:20:10 +0000
Manifest this update:     Thu 02 Jul 2026 15:20:10 +0000
Manifest next update:     Fri 03 Jul 2026 15:20:10 +0000
Files and hashes:         1: A3hitGCMefRQKV7FyAx8etbf4qI.crl (hash: vPR3IxkmcnXbEgGaZbLOBjeOEx1UlL9C6UYprPEZiWU=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:23:6a:82:6d:c8:1e:a8:c0:cc:5b:b9:83:e0:0f:2a:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=037862b4608c79f450295ec5c80c7c7ad6dfe2a2
        Validity
            Not Before: Jul  2 15:20:10 2026 GMT
            Not After : Jul  3 15:20:10 2026 GMT
        Subject: CN=e18ec3c96f57a912fb02e8eaa71cac86fbf433d9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:a1:72:c8:29:52:c9:a2:cd:da:32:c8:9a:82:
                    ed:c5:f7:aa:d5:59:0d:4a:ac:97:43:00:83:61:b5:
                    09:77:24:ea:2d:32:18:6c:49:52:42:fa:e4:17:d8:
                    f8:f8:ff:d6:1e:73:d2:94:61:72:be:4a:77:1b:19:
                    36:a4:fd:96:c2:5f:53:ae:71:a9:c4:7c:c9:2a:7e:
                    50:25:9c:90:3a:74:c6:d5:d9:6b:58:ed:54:a4:e7:
                    58:e4:b6:1f:dc:aa:ae:2a:1a:6b:e5:36:d6:52:d4:
                    39:a6:13:77:1c:a2:91:c9:30:7c:92:cb:1c:dd:69:
                    82:bc:8e:99:b7:d9:37:34:bf:61:11:25:3a:ac:42:
                    9a:1d:58:6d:23:c3:36:a8:b1:4f:00:0e:f2:a5:7c:
                    4e:8a:20:b5:a4:b4:54:28:26:97:1c:fd:08:5e:f3:
                    2b:08:8a:10:fb:bb:3e:96:22:d2:d8:e9:97:a5:e2:
                    cf:d6:f9:5b:46:99:d7:a8:e4:0b:23:26:9b:07:50:
                    08:d3:c0:28:c7:c0:c4:9e:46:d9:21:e2:e1:72:1e:
                    b9:08:58:51:71:a8:34:5d:c6:dd:e1:b7:84:48:bc:
                    b0:ce:ee:32:f0:3a:e2:b7:88:8e:58:15:46:ee:f2:
                    00:5d:50:cc:d4:47:4c:dc:e9:d4:58:24:c6:a5:30:
                    45:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:8E:C3:C9:6F:57:A9:12:FB:02:E8:EA:A7:1C:AC:86:FB:F4:33:D9
            X509v3 Authority Key Identifier:
                keyid:03:78:62:B4:60:8C:79:F4:50:29:5E:C5:C8:0C:7C:7A:D6:DF:E2:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A3hitGCMefRQKV7FyAx8etbf4qI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/1afe53-f1b8-4315-ab1c-f474f7bd3531/1/A3hitGCMefRQKV7FyAx8etbf4qI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/1afe53-f1b8-4315-ab1c-f474f7bd3531/1/A3hitGCMefRQKV7FyAx8etbf4qI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:2f:79:56:8b:88:fc:3f:f9:2a:24:7f:43:a4:c1:c7:c9:25:
         a1:d9:55:70:71:53:a0:98:0e:fb:3f:75:a7:d0:7b:bc:b2:07:
         eb:25:f4:59:dc:b6:28:ee:46:84:c6:5e:07:2c:e2:d2:1f:4e:
         4d:12:6e:4d:65:3b:a4:23:ea:e3:00:40:bf:74:24:fa:a4:fe:
         a8:b4:86:ae:5d:03:5d:3c:c7:a2:81:80:25:e8:ca:51:68:9c:
         7b:a5:f3:1f:69:e9:41:6e:e4:e5:aa:45:28:a5:21:df:61:1e:
         08:c3:68:99:38:74:d5:e1:bf:3f:4a:f0:f6:38:07:97:26:e3:
         e3:02:28:95:4e:f2:41:d7:08:61:e0:7b:b3:b2:5f:49:5c:61:
         71:59:a7:e2:60:5d:44:00:ad:e7:e3:6e:6b:e9:39:fc:b8:d8:
         82:de:7f:bc:34:00:04:3c:8f:f2:45:dd:b4:87:37:d6:4b:46:
         67:b0:3f:bc:aa:c6:2c:66:c7:07:cd:5b:9d:e3:57:1f:18:e1:
         f5:36:a3:90:21:69:45:a4:5e:ac:4c:52:bc:14:dc:3b:47:fe:
         d0:1a:00:6b:c1:a3:32:5a:d3:74:ed:48:5b:4d:9d:f7:22:be:
         b0:d2:2c:ed:6b:01:a9:12:c2:dd:d5:93:c5:4b:81:12:46:17:
         32:06:c7:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----