Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3b/523b95-3ddc-4818-9265-daaf29211949/1/Dz8TMs_wWyKjpmptTDSPvAHeEVw.mft
File:                     Dz8TMs_wWyKjpmptTDSPvAHeEVw.mft (raw, json)
Hash identifier:          ZV73QZiF0vfqYohJZxU7xq74eg2/Nny2oMBuAWyIO9s=
Subject key identifier:   01:FF:29:98:E6:9C:48:95:0E:F2:9F:5F:65:A3:CE:DE:B2:E9:5A:67
Authority key identifier: 0F:3F:13:32:CF:F0:5B:22:A3:A6:6A:6D:4C:34:8F:BC:01:DE:11:5C
Certificate issuer:       /CN=0f3f1332cff05b22a3a66a6d4c348fbc01de115c
Certificate serial:       019F2246A4D945FCD1B348A596E8EA1BAAD4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Dz8TMs_wWyKjpmptTDSPvAHeEVw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3b/523b95-3ddc-4818-9265-daaf29211949/1/Dz8TMs_wWyKjpmptTDSPvAHeEVw.mft
Manifest number:          198C
Signing time:             Thu 02 Jul 2026 10:01:22 +0000
Manifest this update:     Thu 02 Jul 2026 10:01:22 +0000
Manifest next update:     Fri 03 Jul 2026 10:01:22 +0000
Files and hashes:         1: Dz8TMs_wWyKjpmptTDSPvAHeEVw.crl (hash: VsolaNuC35AK6zaViQR/lm5ldam4eldemYmH1zKppsg=)
                          2: dLnEEciYoxf4zHYKdVd3Cs6UXwE.roa (hash: fuSsuZb+gCHUO48DwmuXqWY4VCL5Q795gkNmczjB/Fk=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:22:46:a4:d9:45:fc:d1:b3:48:a5:96:e8:ea:1b:aa:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0f3f1332cff05b22a3a66a6d4c348fbc01de115c
        Validity
            Not Before: Jul  2 10:01:22 2026 GMT
            Not After : Jul  3 10:01:22 2026 GMT
        Subject: CN=01ff2998e69c48950ef29f5f65a3cedeb2e95a67
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:59:d5:c4:6c:ba:6e:5d:d2:e4:51:d6:6c:7a:
                    a8:69:b3:9b:0d:13:91:f2:06:f5:a1:52:a1:fa:46:
                    a1:a8:fd:aa:ce:b9:74:7e:3b:7e:91:71:bb:32:03:
                    0f:23:9c:c5:99:7c:27:84:91:04:dc:49:29:bc:7d:
                    12:cf:ac:16:33:62:51:92:c9:91:be:8d:08:68:34:
                    7f:70:9d:ff:46:c3:4f:70:39:11:49:d8:87:ea:1e:
                    77:d0:22:45:0b:65:c0:bd:11:dd:43:9e:03:8e:85:
                    de:4b:cd:48:2f:62:e8:13:0a:d7:67:c4:1e:a3:94:
                    32:b7:a5:5d:1f:89:fa:1d:6b:a1:42:a7:19:db:68:
                    fa:35:00:a9:59:bb:0d:d5:81:63:03:09:6f:32:13:
                    6b:e7:6a:f1:1e:05:8c:52:99:32:8c:4e:c3:c5:d3:
                    6c:4c:df:11:63:6e:88:c6:99:b9:26:6d:ae:e2:dd:
                    aa:23:92:9a:a5:42:6e:73:9f:9e:b7:ab:52:5f:cc:
                    64:58:63:63:15:ab:28:54:57:be:00:06:65:ab:4e:
                    81:c1:e8:e8:6e:94:e1:eb:c0:87:b5:fb:63:83:11:
                    6d:7f:b3:f2:d4:7d:ca:04:ce:f8:de:14:54:64:0f:
                    54:31:e4:9a:8a:04:e8:bd:f4:e6:36:1e:4d:87:95:
                    c5:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:FF:29:98:E6:9C:48:95:0E:F2:9F:5F:65:A3:CE:DE:B2:E9:5A:67
            X509v3 Authority Key Identifier:
                keyid:0F:3F:13:32:CF:F0:5B:22:A3:A6:6A:6D:4C:34:8F:BC:01:DE:11:5C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dz8TMs_wWyKjpmptTDSPvAHeEVw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/523b95-3ddc-4818-9265-daaf29211949/1/Dz8TMs_wWyKjpmptTDSPvAHeEVw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/523b95-3ddc-4818-9265-daaf29211949/1/Dz8TMs_wWyKjpmptTDSPvAHeEVw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:44:f3:24:f7:b9:ed:45:9c:67:b6:94:86:0e:37:1b:f5:05:
         03:d5:d2:e6:ee:cb:68:31:5e:fd:d0:82:ea:eb:09:a6:df:6a:
         39:f3:f1:21:04:db:2b:d0:5b:39:63:87:40:a5:ba:bc:53:44:
         0d:80:ef:27:d8:81:68:f6:dd:c1:5d:17:a2:e3:78:68:60:3d:
         10:54:3e:4d:51:a3:de:75:0b:e7:f4:80:d0:c7:36:2d:5f:36:
         31:f1:2b:66:15:f7:c5:36:f6:28:11:92:8f:7d:06:23:65:89:
         ac:77:4d:33:85:e8:ed:d2:01:6e:6c:25:30:fd:d1:fe:d7:65:
         1e:39:94:2a:72:58:16:d8:f7:37:69:b8:17:b1:fb:b6:7b:cb:
         2f:07:b7:8f:44:28:7a:f9:2d:8b:ae:db:41:9c:eb:d0:1e:4c:
         74:e2:8b:f7:31:a5:3b:81:4e:e7:ab:a5:3a:c0:b5:68:85:74:
         c4:28:0a:dd:97:b7:d2:b7:90:33:f0:de:03:a4:70:af:58:f4:
         42:40:25:9e:37:0a:c0:b5:ec:3b:5c:5b:ec:82:46:86:ec:30:
         60:1d:c6:ef:da:3e:bc:72:92:6b:dd:d7:10:13:b6:d2:a5:5a:
         5f:6e:1f:c1:a0:cf:d9:91:56:4e:20:c8:85:05:b3:d4:a4:dc:
         1e:79:66:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----