Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3f/0f8fea-f00a-4415-b396-399fc9693b22/1/Njdp-GRKWnGK5isFjdH7YstaPCA.mft
File:                     Njdp-GRKWnGK5isFjdH7YstaPCA.mft (raw, json)
Hash identifier:          zoqtwO9FTRPgZB+2KX3LjUOIX/wLStEv7F3IgHxhtvU=
Subject key identifier:   FB:58:97:24:F8:9A:9A:9B:07:9C:13:A3:98:BF:20:80:B1:3F:EE:5B
Authority key identifier: 36:37:69:F8:64:4A:5A:71:8A:E6:2B:05:8D:D1:FB:62:CB:5A:3C:20
Certificate issuer:       /CN=363769f8644a5a718ae62b058dd1fb62cb5a3c20
Certificate serial:       019F23698B4446F2F89E89343E7826F1DC0F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Njdp-GRKWnGK5isFjdH7YstaPCA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3f/0f8fea-f00a-4415-b396-399fc9693b22/1/Njdp-GRKWnGK5isFjdH7YstaPCA.mft
Manifest number:          15EB
Signing time:             Thu 02 Jul 2026 15:19:07 +0000
Manifest this update:     Thu 02 Jul 2026 15:19:07 +0000
Manifest next update:     Fri 03 Jul 2026 15:19:07 +0000
Files and hashes:         1: Njdp-GRKWnGK5isFjdH7YstaPCA.crl (hash: 8gCbxKzah/R3lvAz9cZDrlkB0tkG1RBc1Un2CZ9/Haw=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:23:69:8b:44:46:f2:f8:9e:89:34:3e:78:26:f1:dc:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=363769f8644a5a718ae62b058dd1fb62cb5a3c20
        Validity
            Not Before: Jul  2 15:19:07 2026 GMT
            Not After : Jul  3 15:19:07 2026 GMT
        Subject: CN=fb589724f89a9a9b079c13a398bf2080b13fee5b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:ef:83:a7:57:f5:63:d8:98:19:56:11:96:bf:
                    26:f4:94:85:3c:f4:4a:64:58:9d:cd:17:89:86:ce:
                    c1:6e:1e:03:ab:76:ef:21:96:0a:83:19:72:db:12:
                    65:69:20:b5:4f:e7:60:4a:01:1e:c9:43:97:14:bb:
                    12:05:e9:33:0f:31:84:b5:07:9e:8f:f7:cd:c6:a3:
                    99:45:5c:09:41:ee:d4:a9:cd:c6:83:97:88:18:df:
                    9a:08:ba:e5:ed:9a:64:48:24:22:9b:3c:7b:c6:96:
                    09:60:e0:5a:d4:5b:e5:6e:02:58:44:e7:b8:ee:97:
                    54:72:06:a3:66:70:3c:99:93:69:62:0c:e8:17:b2:
                    9b:97:c6:99:d8:fb:f6:3a:ba:56:cb:a8:18:d8:1d:
                    1a:b2:57:37:1a:6e:83:a6:23:e1:d9:dc:58:45:ae:
                    a6:d3:67:3c:8f:b1:f9:4c:2e:72:02:5c:1c:c5:b1:
                    01:e4:0a:d7:df:b9:6c:9f:61:b0:cb:29:52:c6:44:
                    17:0c:58:6c:b3:47:11:2e:5e:66:0f:eb:c7:d2:83:
                    24:39:a5:95:42:55:7a:b3:ff:c5:45:bd:ac:bc:1e:
                    8f:8c:20:53:04:05:3f:45:6c:95:16:3c:c4:a6:6e:
                    44:96:11:0e:69:4d:12:d6:71:42:7f:7e:04:69:0d:
                    7e:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:58:97:24:F8:9A:9A:9B:07:9C:13:A3:98:BF:20:80:B1:3F:EE:5B
            X509v3 Authority Key Identifier:
                keyid:36:37:69:F8:64:4A:5A:71:8A:E6:2B:05:8D:D1:FB:62:CB:5A:3C:20

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Njdp-GRKWnGK5isFjdH7YstaPCA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/0f8fea-f00a-4415-b396-399fc9693b22/1/Njdp-GRKWnGK5isFjdH7YstaPCA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/0f8fea-f00a-4415-b396-399fc9693b22/1/Njdp-GRKWnGK5isFjdH7YstaPCA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:d6:11:35:69:97:55:69:ee:86:be:6d:cc:c9:16:89:a1:a2:
         bb:68:60:23:5a:92:f4:12:d9:d7:1a:b3:37:51:d0:56:5d:6a:
         70:c6:3a:ed:73:e8:54:9e:f9:74:c3:8e:c3:b7:a4:9e:2b:08:
         0e:c8:10:f3:51:18:05:07:78:8a:fc:bc:19:e3:7e:db:48:d7:
         b6:17:e9:8a:f1:e6:8e:a4:0c:dd:25:6c:3e:94:1c:57:d8:bb:
         ca:29:ed:ba:35:ec:3a:83:77:24:e3:fb:96:f2:90:54:1a:3f:
         bc:38:e8:d6:45:3f:ea:1f:27:c1:24:48:d9:7e:d9:b6:af:ab:
         b0:82:41:c4:f9:d0:83:bf:fe:0c:b0:74:16:df:84:44:87:69:
         71:5e:2b:e1:4e:25:15:00:ea:70:aa:51:3d:46:45:1d:a0:80:
         ef:ac:f4:3b:06:7f:ce:f4:a7:89:5f:44:a7:21:18:e4:11:c8:
         d0:70:fe:5f:c2:7e:89:2d:87:51:b4:58:b8:3e:fa:2f:da:89:
         42:fc:cc:69:ac:56:c2:c7:c1:45:d9:3c:ad:cb:8b:93:3a:a9:
         1b:1b:20:6a:d1:32:e0:48:10:42:c5:e7:f1:a5:dc:95:f5:1e:
         f9:be:c6:e6:d1:7a:ef:35:16:73:94:41:1a:b3:3b:c7:94:82:
         bf:9a:60:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----