Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/b66986-8f6b-46b9-bccd-f7369f9dcc9c/1/in1zAecVR30mgJu6u0zQMr07Vhg.mft
File:                     in1zAecVR30mgJu6u0zQMr07Vhg.mft (raw, json)
Hash identifier:          rPxpESYkqHRlqoTdua54eCqpJMcRoC4yvvN1JSiZej4=
Subject key identifier:   B4:E6:9A:ED:BD:08:84:D2:B0:63:2F:97:AC:16:7C:4F:12:43:14:AD
Authority key identifier: 8A:7D:73:01:E7:15:47:7D:26:80:9B:BA:BB:4C:D0:32:BD:3B:56:18
Certificate issuer:       /CN=8a7d7301e715477d26809bbabb4cd032bd3b5618
Certificate serial:       019BB515D1EA778CBF9EF056A4FA6592701E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/in1zAecVR30mgJu6u0zQMr07Vhg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/db/b66986-8f6b-46b9-bccd-f7369f9dcc9c/1/in1zAecVR30mgJu6u0zQMr07Vhg.mft
Manifest number:          0475
Signing time:             Tue 13 Jan 2026 02:01:04 +0000
Manifest this update:     Tue 13 Jan 2026 02:01:04 +0000
Manifest next update:     Wed 14 Jan 2026 02:01:04 +0000
Files and hashes:         1: in1zAecVR30mgJu6u0zQMr07Vhg.crl (hash: c6DKjVRvYsIRmX1XaESjQ5F/Uky0gxK3YciGnH6GUcw=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:b5:15:d1:ea:77:8c:bf:9e:f0:56:a4:fa:65:92:70:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8a7d7301e715477d26809bbabb4cd032bd3b5618
        Validity
            Not Before: Jan 13 02:01:04 2026 GMT
            Not After : Jan 14 02:01:04 2026 GMT
        Subject: CN=b4e69aedbd0884d2b0632f97ac167c4f124314ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:be:44:e3:0c:6a:61:41:e4:43:b3:c0:be:86:
                    7b:8d:77:c3:f5:b4:c8:32:73:36:b9:2c:49:91:8e:
                    47:58:f0:9b:9f:1a:37:c3:02:e5:d9:13:7d:c1:0e:
                    69:5d:57:99:3d:bc:eb:14:8d:98:ba:12:aa:57:d6:
                    65:c1:fc:45:22:7d:b5:3a:54:b5:51:0e:f6:8b:ab:
                    2c:57:b3:cf:37:f2:90:8a:cf:e8:ae:e9:78:63:94:
                    3d:f2:b1:4e:ce:98:95:33:a0:2e:8d:22:08:99:9f:
                    01:b2:d4:a0:c3:db:f6:49:9b:84:3e:bd:e3:e4:c3:
                    00:4d:12:e5:53:92:6f:1d:dd:9a:c3:fd:eb:1d:05:
                    8d:aa:ab:42:55:80:bf:0c:bc:8b:4e:49:73:34:9f:
                    c3:25:3f:2b:f4:8f:08:6f:0e:63:76:ca:ca:bf:13:
                    7b:19:d9:ae:d8:09:ee:1a:c2:d7:8c:43:7d:1d:48:
                    8e:b6:8c:eb:9c:e1:24:cb:f1:9a:b9:82:bf:18:58:
                    d3:74:88:c7:2a:12:11:f6:24:17:73:b0:51:7f:33:
                    e7:09:39:ee:38:01:ac:3b:0f:7d:61:00:43:8c:ae:
                    e5:b0:2f:16:b8:fd:d5:a8:76:5f:2a:4b:b3:f8:ed:
                    69:cc:f6:50:1e:e2:c7:df:0a:c8:c0:00:92:2a:36:
                    6e:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:E6:9A:ED:BD:08:84:D2:B0:63:2F:97:AC:16:7C:4F:12:43:14:AD
            X509v3 Authority Key Identifier:
                keyid:8A:7D:73:01:E7:15:47:7D:26:80:9B:BA:BB:4C:D0:32:BD:3B:56:18

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/in1zAecVR30mgJu6u0zQMr07Vhg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/b66986-8f6b-46b9-bccd-f7369f9dcc9c/1/in1zAecVR30mgJu6u0zQMr07Vhg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/db/b66986-8f6b-46b9-bccd-f7369f9dcc9c/1/in1zAecVR30mgJu6u0zQMr07Vhg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:84:5e:93:c6:af:3f:ba:f2:df:7a:17:d3:2a:77:08:eb:77:
         2c:3f:71:c6:f2:ff:55:aa:ef:64:26:5a:9c:dc:0b:64:1c:29:
         fe:f1:e0:14:57:ea:d2:e5:76:bd:a3:17:ba:ad:fa:15:12:41:
         cd:e9:ad:a6:7c:8a:f8:55:31:7c:1c:65:67:33:95:25:92:f3:
         84:da:b0:06:3f:01:d9:7e:80:78:79:68:9f:f8:89:de:58:07:
         28:ef:85:9e:5a:e7:53:95:c7:fc:86:21:e9:a9:89:a4:46:3a:
         87:83:2d:14:c8:12:d6:8d:06:b4:c9:02:29:20:6c:cd:79:7f:
         89:03:52:47:17:3d:0f:7e:e0:6c:2a:60:5d:48:dc:44:4d:b1:
         23:60:d6:c5:7d:0f:25:75:c1:f7:01:4a:e7:fa:d5:43:d6:98:
         1e:8c:d9:4a:20:18:39:8d:40:d9:00:ee:1d:93:87:4c:36:94:
         b2:85:44:af:68:04:ab:11:e5:a7:8c:b6:16:32:8c:1b:2d:a4:
         c8:50:95:f2:7f:f7:55:25:f3:82:76:37:80:02:17:21:1a:8c:
         b1:c7:0a:a2:95:47:96:ae:a4:a3:dd:fd:00:1b:96:f6:fc:18:
         32:f4:76:d4:01:c2:b7:e1:f6:c6:1c:c2:ba:a4:b1:ee:5a:08:
         4a:45:02:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 17:30:09 2026 by rpki-client