Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/32/797e65-3da0-4d6e-b695-346bd973c843/1/2J8W9XSSQzePgUyUskA010s5J98.mft
File:                     2J8W9XSSQzePgUyUskA010s5J98.mft (raw, json)
Hash identifier:          Gh5mlCbOQXKbX7KI2rHsDNsLptHy9dOc1mXTsmzirY0=
Subject key identifier:   C5:3F:11:9A:C3:C2:C9:7B:F1:84:94:DE:D9:2C:86:CC:5C:AD:7A:07
Authority key identifier: D8:9F:16:F5:74:92:43:37:8F:81:4C:94:B2:40:34:D7:4B:39:27:DF
Certificate issuer:       /CN=d89f16f5749243378f814c94b24034d74b3927df
Certificate serial:       019F216B97B73E255325D99F3C81792E46B0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2J8W9XSSQzePgUyUskA010s5J98.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/32/797e65-3da0-4d6e-b695-346bd973c843/1/2J8W9XSSQzePgUyUskA010s5J98.mft
Manifest number:          063B
Signing time:             Thu 02 Jul 2026 06:02:07 +0000
Manifest this update:     Thu 02 Jul 2026 06:02:07 +0000
Manifest next update:     Fri 03 Jul 2026 06:02:07 +0000
Files and hashes:         1: 2J8W9XSSQzePgUyUskA010s5J98.crl (hash: GfHsYNhkW1No5nFxW4co4f6q4pabL4TTgfCacIuZjQQ=)
                          2: 4vjv7ETAasx0tRKIpHxecSePkHs.roa (hash: 2AsMwZr9rbOc2Qfm0AhPalnC6K6xXB1YyB0oF7P/lrY=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:21:6b:97:b7:3e:25:53:25:d9:9f:3c:81:79:2e:46:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d89f16f5749243378f814c94b24034d74b3927df
        Validity
            Not Before: Jul  2 06:02:07 2026 GMT
            Not After : Jul  3 06:02:07 2026 GMT
        Subject: CN=c53f119ac3c2c97bf18494ded92c86cc5cad7a07
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:db:bb:1f:56:d4:f8:86:d6:07:25:a1:68:78:
                    bd:ba:53:11:fb:10:8c:4f:da:49:cb:74:24:57:9d:
                    ad:53:c8:8b:f1:19:19:ed:74:9f:da:5b:1e:25:8a:
                    86:6c:5e:dd:7c:f6:42:7b:99:65:55:0a:d1:44:f5:
                    cf:1f:7a:86:94:b6:3b:f7:9c:fc:72:fb:9b:ab:3a:
                    cc:d1:bb:e5:4a:ad:79:9c:59:e2:12:58:1f:4a:49:
                    e6:a6:59:49:c3:c5:cd:33:90:9d:27:b5:57:f6:62:
                    98:c1:f7:ed:47:9a:82:11:50:b6:c0:70:b2:b4:e9:
                    2c:3f:a3:0a:d3:09:41:63:38:4f:3c:bb:67:fc:6f:
                    e9:45:ce:37:af:fd:fc:01:b6:ca:8f:bc:1d:92:36:
                    cf:3d:c7:0f:bb:d6:bc:f0:a7:5e:4f:43:ae:84:e2:
                    a9:93:33:2a:72:db:d9:f6:8e:1c:d9:e2:f2:75:dd:
                    81:00:26:d4:87:55:d3:da:37:65:96:c9:20:e3:83:
                    4d:fb:2b:77:3d:d6:0d:0c:bb:98:e1:03:c3:41:3a:
                    7f:ef:8e:3b:7c:7d:08:fc:4c:38:30:1a:f5:64:f9:
                    80:44:4a:d5:4f:4c:6d:fd:70:1d:72:f9:b4:ba:bd:
                    2d:65:a1:f6:b1:20:cf:51:46:8c:d8:f9:9b:e6:b7:
                    54:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:3F:11:9A:C3:C2:C9:7B:F1:84:94:DE:D9:2C:86:CC:5C:AD:7A:07
            X509v3 Authority Key Identifier:
                keyid:D8:9F:16:F5:74:92:43:37:8F:81:4C:94:B2:40:34:D7:4B:39:27:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2J8W9XSSQzePgUyUskA010s5J98.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/797e65-3da0-4d6e-b695-346bd973c843/1/2J8W9XSSQzePgUyUskA010s5J98.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/32/797e65-3da0-4d6e-b695-346bd973c843/1/2J8W9XSSQzePgUyUskA010s5J98.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:00:ce:0a:58:6e:40:32:06:0f:b7:70:f3:95:56:28:c3:2e:
         7d:0e:ee:d4:eb:00:0c:62:b8:f3:6f:73:22:79:de:90:e0:cc:
         f0:77:3b:51:69:1f:a5:c9:31:4b:70:6c:40:a3:39:7b:e8:db:
         34:94:32:4f:d3:5b:e9:29:25:a0:29:17:5e:24:37:c2:3c:b7:
         9b:31:c7:5c:15:ab:c1:1e:29:7d:7e:b7:29:59:5d:40:2f:2e:
         2c:21:ca:83:b0:85:12:be:0b:52:04:86:01:e8:f8:ba:3d:85:
         cc:c1:43:1f:cc:0d:5f:48:a8:4c:b8:00:f5:92:62:e5:36:6b:
         f3:c6:68:fc:47:0a:32:9b:8a:97:af:04:9a:61:c2:dd:b7:f8:
         96:2d:da:99:3b:3d:bf:a6:01:c6:9d:b8:b1:8e:ba:2d:7f:9a:
         0f:30:05:ea:c9:8a:75:8e:72:fa:7e:16:e2:4e:cf:b5:97:88:
         b6:d9:be:5c:13:02:9d:ca:d6:18:27:83:fd:02:5f:70:56:5b:
         c9:92:44:ca:1a:7c:ce:ca:be:7a:f4:9e:9b:b6:a6:91:42:69:
         75:06:ec:00:a3:97:e5:95:26:df:b0:4e:3a:b3:53:50:4a:6b:
         d7:b9:48:6a:a5:5e:2b:72:8a:f4:42:ea:ca:09:9d:ff:f4:05:
         a8:f9:50:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----