Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ba/b51890-22f0-46f7-94f9-220ddbe2c09f/1/4Ct7MHuMlubHe1uKeD_1XjeQdjY.mft
File:                     4Ct7MHuMlubHe1uKeD_1XjeQdjY.mft (raw, json)
Hash identifier:          PMp1DGRwlVNAeqdz3U7BbCMEHjJRR3aN3WrpdJ8kha4=
Subject key identifier:   7A:21:C2:20:A1:B2:9E:60:EC:85:B6:CE:53:69:35:8A:D6:09:A2:73
Authority key identifier: E0:2B:7B:30:7B:8C:96:E6:C7:7B:5B:8A:78:3F:F5:5E:37:90:76:36
Certificate issuer:       /CN=e02b7b307b8c96e6c77b5b8a783ff55e37907636
Certificate serial:       019F23592204F34A36B7B341FCDD1F69BDF1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4Ct7MHuMlubHe1uKeD_1XjeQdjY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ba/b51890-22f0-46f7-94f9-220ddbe2c09f/1/4Ct7MHuMlubHe1uKeD_1XjeQdjY.mft
Manifest number:          1072
Signing time:             Thu 02 Jul 2026 15:01:11 +0000
Manifest this update:     Thu 02 Jul 2026 15:01:11 +0000
Manifest next update:     Fri 03 Jul 2026 15:01:11 +0000
Files and hashes:         1: 4Ct7MHuMlubHe1uKeD_1XjeQdjY.crl (hash: GGCvTLPeNDAVns+RwsZ7OcjwwSiKCm4BwE70K2c5qAQ=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:23:59:22:04:f3:4a:36:b7:b3:41:fc:dd:1f:69:bd:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e02b7b307b8c96e6c77b5b8a783ff55e37907636
        Validity
            Not Before: Jul  2 15:01:11 2026 GMT
            Not After : Jul  3 15:01:11 2026 GMT
        Subject: CN=7a21c220a1b29e60ec85b6ce5369358ad609a273
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:7c:80:8c:69:6e:dc:97:29:dc:9e:40:bd:2d:
                    27:91:f7:40:f3:7b:50:a2:e4:d1:29:b2:89:47:a7:
                    8b:cf:40:8d:9e:8c:43:36:98:da:8d:84:c8:9d:bc:
                    f0:b0:eb:4d:40:cb:c4:49:4c:b9:3b:9b:cf:c4:55:
                    d7:39:ea:0e:9d:cb:9e:9c:4c:55:5f:80:34:5f:a7:
                    22:b3:43:3a:78:e7:64:2d:22:b7:d0:3c:fe:47:80:
                    28:4f:0c:9d:d4:2c:b9:f0:84:0d:a0:3f:70:f3:c0:
                    16:cf:bc:90:7e:cf:49:9d:59:98:97:91:dd:7e:6b:
                    de:88:7b:fc:25:b8:6a:52:88:4e:c0:ce:10:f0:ab:
                    69:5f:e3:cf:b8:d3:75:af:1a:8b:fc:1d:f1:ee:e1:
                    69:0a:40:78:c4:1c:09:23:d4:46:a9:bf:3f:7a:ea:
                    ba:3b:83:65:14:6f:60:4d:70:33:ab:4e:d3:98:ac:
                    26:06:aa:93:16:07:af:9f:83:20:a6:62:af:87:a2:
                    e1:e2:4b:f8:55:cc:e4:51:cb:fb:b5:ab:77:d7:f0:
                    02:b2:b1:2e:25:ea:79:09:3c:fa:8a:d5:a4:d1:83:
                    52:0a:af:10:22:ae:bf:fa:a1:dc:7b:89:09:0e:81:
                    40:b3:0c:d6:10:be:c8:53:89:02:77:74:00:67:3f:
                    83:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:21:C2:20:A1:B2:9E:60:EC:85:B6:CE:53:69:35:8A:D6:09:A2:73
            X509v3 Authority Key Identifier:
                keyid:E0:2B:7B:30:7B:8C:96:E6:C7:7B:5B:8A:78:3F:F5:5E:37:90:76:36

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4Ct7MHuMlubHe1uKeD_1XjeQdjY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/b51890-22f0-46f7-94f9-220ddbe2c09f/1/4Ct7MHuMlubHe1uKeD_1XjeQdjY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/b51890-22f0-46f7-94f9-220ddbe2c09f/1/4Ct7MHuMlubHe1uKeD_1XjeQdjY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:00:21:cf:db:d2:69:14:6d:7f:cb:87:7e:bc:89:97:b8:b4:
         3c:ab:13:dd:58:b0:eb:70:a0:35:4c:12:97:99:14:87:98:19:
         18:57:97:96:b5:bf:0b:45:43:95:1e:83:4e:4b:5d:75:cd:c8:
         10:db:c3:3c:7e:8e:69:d0:a2:1b:3c:54:db:69:09:c0:fe:63:
         5c:0f:40:35:1d:b7:75:85:cf:92:ed:03:54:49:57:af:fe:5c:
         1e:c3:17:fe:fe:60:df:03:74:63:67:ea:23:7f:ff:5a:2d:49:
         a5:15:d9:82:bc:a6:1b:3b:6b:a4:f5:fe:c7:f4:44:4e:9b:a2:
         77:d9:38:56:ef:bc:65:b2:77:95:b7:00:af:10:e5:0b:59:bd:
         7a:fc:2a:d8:50:8f:f1:cf:70:9c:fd:35:13:c1:ec:ae:cb:88:
         91:51:57:57:c9:9f:fe:9d:7e:cf:27:41:0c:d2:32:ce:0a:68:
         ca:94:bd:78:c1:ec:df:18:2e:e3:95:72:c5:44:81:c0:ee:b2:
         e2:84:75:42:3b:f4:8d:38:e9:01:98:80:8e:81:37:ba:54:96:
         ae:f5:9e:fc:fa:35:dd:0a:8b:40:7c:ec:7e:c0:36:d0:ed:19:
         71:d1:60:1c:89:1f:36:4d:89:58:12:a0:09:bf:af:14:1d:a0:
         83:2a:5e:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----