Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/34/5bcee0-512e-41f4-8d6b-95d16364dbb9/1/CASs5pRvtwG7LEXjCsr-pm2sL3o.mft
File:                     CASs5pRvtwG7LEXjCsr-pm2sL3o.mft (raw, json)
Hash identifier:          1fZpRqdRvlWhRFPIuc/9qQ8qN/8B7aw81bPnsrhLFSg=
Subject key identifier:   FE:99:2B:DD:17:5E:D3:BA:DA:6D:86:57:C8:3A:5F:86:01:F6:15:4C
Authority key identifier: 08:04:AC:E6:94:6F:B7:01:BB:2C:45:E3:0A:CA:FE:A6:6D:AC:2F:7A
Certificate issuer:       /CN=0804ace6946fb701bb2c45e30acafea66dac2f7a
Certificate serial:       019F216B3AB17CC7910BBCD6838151930B68
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CASs5pRvtwG7LEXjCsr-pm2sL3o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/34/5bcee0-512e-41f4-8d6b-95d16364dbb9/1/CASs5pRvtwG7LEXjCsr-pm2sL3o.mft
Manifest number:          0A89
Signing time:             Thu 02 Jul 2026 06:01:43 +0000
Manifest this update:     Thu 02 Jul 2026 06:01:43 +0000
Manifest next update:     Fri 03 Jul 2026 06:01:43 +0000
Files and hashes:         1: CASs5pRvtwG7LEXjCsr-pm2sL3o.crl (hash: x7rZ+sS7ezJ8GyMGKHVUodY3xLee/Nlw8Q6ia5C5SvU=)
                          2: jUi6SuFHxWUcf3BLcRXfDSJcijA.roa (hash: j8KVEbuo6sxSwDOmodToJ+V3aOkB4CrJpEr50CscFoI=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:21:6b:3a:b1:7c:c7:91:0b:bc:d6:83:81:51:93:0b:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0804ace6946fb701bb2c45e30acafea66dac2f7a
        Validity
            Not Before: Jul  2 06:01:43 2026 GMT
            Not After : Jul  3 06:01:43 2026 GMT
        Subject: CN=fe992bdd175ed3bada6d8657c83a5f8601f6154c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:32:db:7f:4e:95:60:0f:f5:e8:45:28:14:3f:
                    49:5b:bc:21:5b:22:ba:c4:cd:f1:ab:c9:42:e9:bc:
                    84:b1:e8:7e:a0:0f:68:1b:02:5f:1d:c6:39:31:36:
                    31:2e:a2:35:52:8e:ff:2e:db:a0:34:1e:eb:20:73:
                    05:1b:57:3d:b5:52:bf:21:93:94:79:fb:64:83:3f:
                    34:af:a4:e6:9c:43:08:76:9b:7e:d8:95:86:24:e8:
                    db:85:4d:76:31:3e:b8:f7:0b:1b:9b:23:06:21:e1:
                    d2:64:a4:6a:52:67:e4:86:a8:4d:58:59:e7:4e:44:
                    15:b6:f1:16:59:e2:fa:94:48:fd:9e:57:5f:97:86:
                    be:d1:6a:10:6a:5d:01:5c:1f:14:57:ab:91:17:17:
                    32:e9:ba:3f:6b:cf:ef:fa:2f:e2:21:43:40:00:4b:
                    0c:67:0d:92:a3:67:1b:13:f0:bf:fe:40:0c:7c:ee:
                    c8:2e:31:e8:9a:06:88:68:02:02:3a:f9:b2:c9:eb:
                    0d:84:e8:a0:a4:8e:04:d5:33:13:fc:16:c0:0a:98:
                    91:9d:fb:20:4d:7f:a7:f5:f2:f8:28:94:47:97:9a:
                    e1:a3:b9:bb:c0:5d:31:ea:7c:8a:65:1b:5c:9f:e0:
                    12:07:04:b3:2f:b1:83:bc:b8:2f:8e:9b:c0:9d:ea:
                    df:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:99:2B:DD:17:5E:D3:BA:DA:6D:86:57:C8:3A:5F:86:01:F6:15:4C
            X509v3 Authority Key Identifier:
                keyid:08:04:AC:E6:94:6F:B7:01:BB:2C:45:E3:0A:CA:FE:A6:6D:AC:2F:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CASs5pRvtwG7LEXjCsr-pm2sL3o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/5bcee0-512e-41f4-8d6b-95d16364dbb9/1/CASs5pRvtwG7LEXjCsr-pm2sL3o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/34/5bcee0-512e-41f4-8d6b-95d16364dbb9/1/CASs5pRvtwG7LEXjCsr-pm2sL3o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:d8:ff:6d:78:e8:ec:53:78:97:ec:08:74:d2:8c:b1:4c:5e:
         8b:38:ca:18:ad:ce:4e:b8:29:2e:bc:c0:f9:1f:c8:50:0d:fd:
         6c:66:85:9c:3d:f4:7c:e0:0a:35:c9:83:65:92:d1:66:c9:1b:
         8e:32:76:09:c4:ce:6f:94:2e:4c:89:c1:c0:35:7f:89:97:39:
         09:15:a9:10:15:e3:cc:f3:99:da:c1:aa:43:bc:a8:83:a3:7e:
         28:35:0f:7c:d5:44:26:28:c0:e3:38:24:82:4b:90:f5:80:a1:
         01:79:69:f2:76:5f:a6:1e:2b:ed:1c:66:55:f2:74:87:6d:53:
         fd:ad:7f:9b:26:c1:07:72:0b:a6:c9:4f:3c:63:f9:2a:6e:b8:
         d5:05:6d:32:9c:1b:15:7a:0d:0c:41:8c:c4:10:6a:2c:38:ec:
         da:18:c3:67:24:74:5a:80:b9:c7:b0:24:09:81:de:47:95:c9:
         41:ab:8c:fd:8a:97:5a:8a:f4:69:31:fd:6c:f2:56:4b:55:c9:
         32:e1:8e:7a:f7:ee:96:e6:25:db:82:39:d1:b8:92:9e:9a:0a:
         39:09:4c:8a:42:16:8b:bb:97:e8:96:38:3a:76:0e:65:d9:2f:
         93:ef:c4:09:f8:fb:94:b1:7d:33:63:f5:59:8b:27:51:b0:87:
         f0:ca:8b:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----