Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bd/56cc91-ba62-4037-b57f-6bddb317e78b/1/B6BIbcC0unMJA3iP8_P3yCSbkh8.mft
File:                     B6BIbcC0unMJA3iP8_P3yCSbkh8.mft (raw, json)
Hash identifier:          ZLuimIvOfWCDdcBgsGcd6iIyx4MklAw7eiazH1h9As8=
Subject key identifier:   DB:95:89:19:A3:4B:FE:89:76:A7:17:C8:3B:E8:34:D1:AC:AF:8B:C9
Authority key identifier: 07:A0:48:6D:C0:B4:BA:73:09:03:78:8F:F3:F3:F7:C8:24:9B:92:1F
Certificate issuer:       /CN=07a0486dc0b4ba730903788ff3f3f7c8249b921f
Certificate serial:       019F236A7F23BBBB8D898E8F08A75C9BC075
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/B6BIbcC0unMJA3iP8_P3yCSbkh8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bd/56cc91-ba62-4037-b57f-6bddb317e78b/1/B6BIbcC0unMJA3iP8_P3yCSbkh8.mft
Manifest number:          198F
Signing time:             Thu 02 Jul 2026 15:20:09 +0000
Manifest this update:     Thu 02 Jul 2026 15:20:09 +0000
Manifest next update:     Fri 03 Jul 2026 15:20:09 +0000
Files and hashes:         1: B6BIbcC0unMJA3iP8_P3yCSbkh8.crl (hash: QU1+Es1DL5mb+VM/F9+XtN1oAktOrDgc7Qk54pWMAv4=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:23:6a:7f:23:bb:bb:8d:89:8e:8f:08:a7:5c:9b:c0:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07a0486dc0b4ba730903788ff3f3f7c8249b921f
        Validity
            Not Before: Jul  2 15:20:09 2026 GMT
            Not After : Jul  3 15:20:09 2026 GMT
        Subject: CN=db958919a34bfe8976a717c83be834d1acaf8bc9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:c2:30:3b:da:42:8c:c1:53:c4:68:4e:d0:cf:
                    df:c4:0a:3a:15:8d:25:da:ca:69:0d:65:99:f5:ac:
                    42:9b:06:57:12:13:17:4e:93:00:e8:42:70:95:7b:
                    88:2b:5f:e7:f4:f9:32:6e:2d:67:98:9e:e0:bc:a7:
                    c0:1d:8e:a0:fd:91:e1:a6:06:7d:2e:8b:7b:60:20:
                    6b:42:1a:bb:a7:33:6f:2c:b0:44:6d:4b:44:87:df:
                    e2:66:7c:1a:05:8b:6b:d2:80:25:cd:66:09:59:ab:
                    29:6e:0d:a1:ba:2e:cf:b5:37:1e:9e:c5:92:6c:bd:
                    11:aa:44:64:94:c1:30:2a:e1:aa:da:69:95:89:5c:
                    63:3b:47:0a:61:2a:9a:e6:2e:d9:86:9c:14:16:f1:
                    89:24:b3:9b:8c:a4:1e:79:97:44:9b:10:c2:3d:ee:
                    2c:c5:59:70:12:7d:2e:0a:82:26:d2:95:0c:36:c6:
                    a5:bf:c0:42:85:ad:21:04:2c:0d:5e:ef:f3:01:63:
                    b2:f7:c6:a1:98:6e:7a:a3:5d:82:d6:8b:25:f3:b5:
                    8b:7a:dd:0c:ba:22:87:34:c3:01:88:53:bd:b7:b6:
                    8d:44:83:27:e1:5c:eb:ec:75:35:c0:35:f3:8d:12:
                    aa:a8:87:95:90:b9:27:98:69:04:d1:69:3d:f7:1a:
                    c9:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:95:89:19:A3:4B:FE:89:76:A7:17:C8:3B:E8:34:D1:AC:AF:8B:C9
            X509v3 Authority Key Identifier:
                keyid:07:A0:48:6D:C0:B4:BA:73:09:03:78:8F:F3:F3:F7:C8:24:9B:92:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B6BIbcC0unMJA3iP8_P3yCSbkh8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/56cc91-ba62-4037-b57f-6bddb317e78b/1/B6BIbcC0unMJA3iP8_P3yCSbkh8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/56cc91-ba62-4037-b57f-6bddb317e78b/1/B6BIbcC0unMJA3iP8_P3yCSbkh8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:09:19:58:2d:23:21:d2:cc:c0:50:8c:c2:94:80:13:c9:c5:
         fa:80:ca:f5:50:df:82:a7:14:4d:8e:e2:b2:a0:76:48:49:52:
         fb:32:04:8d:b9:d8:5b:8c:1f:ff:db:23:eb:7a:b9:32:40:08:
         df:c5:84:30:6f:dd:f1:ef:c6:bf:f1:f7:3c:b5:4f:d7:90:f3:
         3c:7c:9f:e4:d7:b2:0d:a8:5b:e3:94:65:81:b1:20:32:57:93:
         9a:b5:29:85:0b:53:15:36:69:4a:bc:02:7e:63:15:b9:85:b5:
         5d:1d:91:43:1d:53:b6:3b:0d:e4:0e:9e:a1:a8:80:df:5f:ca:
         e1:6e:e2:cc:3e:e6:5d:fc:7a:5f:38:96:8a:23:24:f5:9c:d5:
         74:02:63:a1:ca:28:9d:48:4a:3b:23:b9:68:d0:ea:3e:f4:a7:
         3b:50:57:94:7d:f5:f8:d8:ee:f4:af:33:79:db:b7:35:ea:6f:
         18:32:b9:24:df:e7:fe:2d:28:e5:b3:a9:12:98:04:64:65:b3:
         b8:c9:36:51:72:96:1a:df:35:8a:50:8c:89:0e:eb:3e:6f:95:
         7c:0a:8c:55:aa:da:a6:cc:8a:05:26:4d:27:b2:95:f5:fb:18:
         71:e2:d3:d9:fd:f0:7c:4f:40:63:24:10:3d:a7:86:f6:74:3a:
         cd:a8:02:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----