Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/dc573d-a3db-41f9-8c3f-867965eb50ca/1/g7W0kTzHjkCAPAC-xrGp3Ej_NoQ.mft
File:                     g7W0kTzHjkCAPAC-xrGp3Ej_NoQ.mft (raw, json)
Hash identifier:          g8slQCuR915Veake2n9g6jIz25kj+ZzhQRCd8p/h2o8=
Subject key identifier:   06:DB:DA:34:03:59:D7:68:D3:97:6E:24:F3:E6:48:7A:65:C2:09:CE
Authority key identifier: 83:B5:B4:91:3C:C7:8E:40:80:3C:00:BE:C6:B1:A9:DC:48:FF:36:84
Certificate issuer:       /CN=83b5b4913cc78e40803c00bec6b1a9dc48ff3684
Certificate serial:       019D7632DDAFC4FAAD1469B50DFB09AB1C52
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/g7W0kTzHjkCAPAC-xrGp3Ej_NoQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/da/dc573d-a3db-41f9-8c3f-867965eb50ca/1/g7W0kTzHjkCAPAC-xrGp3Ej_NoQ.mft
Manifest number:          07B7
Signing time:             Fri 10 Apr 2026 07:02:18 +0000
Manifest this update:     Fri 10 Apr 2026 07:02:18 +0000
Manifest next update:     Sat 11 Apr 2026 07:02:18 +0000
Files and hashes:         1: HdtIM72Je6eID2UflpjXv9hX0Fg.roa (hash: c++PW514MuKO6i2Ca50xS+brdGSlfDfubR4SvsYDiXQ=)
                          2: g7W0kTzHjkCAPAC-xrGp3Ej_NoQ.crl (hash: Vd8IZvD/YriGdiouC4AJBRlJ1yjOTtZRFdZihaILnJo=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:76:32:dd:af:c4:fa:ad:14:69:b5:0d:fb:09:ab:1c:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=83b5b4913cc78e40803c00bec6b1a9dc48ff3684
        Validity
            Not Before: Apr 10 07:02:18 2026 GMT
            Not After : Apr 11 07:02:18 2026 GMT
        Subject: CN=06dbda340359d768d3976e24f3e6487a65c209ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:43:cf:86:90:08:30:7e:dd:a9:4b:22:7b:67:
                    29:fc:60:31:7a:d4:5d:d4:46:a3:44:97:60:a2:c4:
                    20:3b:81:ef:4f:ef:0d:20:d9:1e:98:2b:5d:a2:62:
                    f7:fc:27:24:41:00:51:ee:97:3a:de:2d:2c:d0:86:
                    ac:e3:a2:e4:df:0d:c2:10:f7:d6:54:e3:4c:ff:0d:
                    ae:14:57:28:5f:c7:d4:36:ff:04:4e:ed:11:5b:d9:
                    16:69:22:1e:37:1e:50:13:6b:92:1d:ec:ca:92:75:
                    48:5a:60:a3:dc:8c:25:9f:d9:ed:f8:63:f3:c4:38:
                    42:a1:c7:3b:93:ce:14:fc:0f:43:0e:17:b6:05:e4:
                    87:87:8a:14:15:5d:65:aa:df:5e:a4:e9:de:34:5e:
                    d6:61:d2:5d:6b:4f:d4:33:6a:ea:32:1a:26:ac:48:
                    21:88:eb:2c:ae:87:42:7c:a3:6f:ac:09:15:40:0a:
                    6c:50:51:98:d5:b9:4b:f9:dd:71:aa:f0:d3:cc:5d:
                    6e:7f:f1:61:76:4c:1a:cf:8a:21:d4:6b:2c:b0:83:
                    94:0d:1c:20:71:db:b8:c0:b1:22:80:10:69:0e:37:
                    a8:92:a0:6e:e3:ab:77:b5:76:84:a5:1d:c8:e4:22:
                    bd:04:5d:68:18:90:c5:a6:34:ec:2f:7f:91:fc:15:
                    ff:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:DB:DA:34:03:59:D7:68:D3:97:6E:24:F3:E6:48:7A:65:C2:09:CE
            X509v3 Authority Key Identifier:
                keyid:83:B5:B4:91:3C:C7:8E:40:80:3C:00:BE:C6:B1:A9:DC:48:FF:36:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g7W0kTzHjkCAPAC-xrGp3Ej_NoQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/dc573d-a3db-41f9-8c3f-867965eb50ca/1/g7W0kTzHjkCAPAC-xrGp3Ej_NoQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/da/dc573d-a3db-41f9-8c3f-867965eb50ca/1/g7W0kTzHjkCAPAC-xrGp3Ej_NoQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:d5:b6:a2:82:3b:20:de:a6:7e:00:22:2e:f5:64:e8:5b:55:
         a7:17:b0:d9:c4:cc:9b:37:24:62:21:46:c5:02:31:b3:0d:b9:
         ac:81:5f:fe:b7:41:18:53:c9:c7:a6:22:d1:e6:ad:b8:f4:b6:
         99:aa:f2:ea:43:93:0f:47:2b:8d:10:7b:6b:e8:96:e8:54:9a:
         69:dd:c1:69:d3:16:bd:1c:d9:a4:1e:95:85:75:66:e6:e7:ee:
         00:d2:46:05:5f:7f:3d:e9:44:aa:3b:02:73:49:29:33:03:ac:
         fd:1f:aa:e6:d7:92:62:70:5a:ad:a8:f4:2f:17:bf:3a:a8:ba:
         5b:11:28:ec:4f:20:b2:e2:56:ad:11:95:9b:7c:43:08:d2:c6:
         06:27:83:59:a0:e1:a5:e4:10:ea:df:a4:15:cf:08:21:fe:a9:
         83:53:b8:eb:01:9c:21:39:f7:e4:96:87:58:b8:34:3d:bb:bf:
         97:ce:95:cc:20:2b:97:8c:9c:32:d3:45:4c:75:9d:5a:65:60:
         27:1c:2c:11:80:dc:23:01:6e:38:8c:16:14:ec:45:4f:e2:e9:
         77:25:f3:dd:c5:16:6b:e4:8b:52:d2:e5:82:3d:50:b7:98:1d:
         a0:94:58:62:2f:a1:b5:30:8d:b5:f4:8e:d3:8f:97:f2:d7:82:
         2f:e1:35:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:35:08 2026 by rpki-client