Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/71/712b40-53ae-4953-aff5-56a33057497b/1/3MIAShrwMLqZ_PRR872I78U4Rqk.mft
File:                     3MIAShrwMLqZ_PRR872I78U4Rqk.mft (raw, json)
Hash identifier:          HKUpEirxFJs5BUMqc17cMr4ipzLY/3zOA6jJu9G4IYE=
Subject key identifier:   CC:1E:EE:A1:2D:3A:1D:FA:9E:06:17:BC:4B:56:1A:9E:33:BD:E1:F2
Authority key identifier: DC:C2:00:4A:1A:F0:30:BA:99:FC:F4:51:F3:BD:88:EF:C5:38:46:A9
Certificate issuer:       /CN=dcc2004a1af030ba99fcf451f3bd88efc53846a9
Certificate serial:       019F21D9EBF820E493C40F690F2DCF354EBF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3MIAShrwMLqZ_PRR872I78U4Rqk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/71/712b40-53ae-4953-aff5-56a33057497b/1/3MIAShrwMLqZ_PRR872I78U4Rqk.mft
Manifest number:          198D
Signing time:             Thu 02 Jul 2026 08:02:37 +0000
Manifest this update:     Thu 02 Jul 2026 08:02:37 +0000
Manifest next update:     Fri 03 Jul 2026 08:02:37 +0000
Files and hashes:         1: 1-xMK4DdvzyhB-krONEqltikgBg0.roa (hash: g4tuxw1k3rYBSc3hMJC6RVLR5yBR/1vY5hHFRctb5CY=)
                          2: 3MIAShrwMLqZ_PRR872I78U4Rqk.crl (hash: obDLTGvD3R1V5cXXW8zGKLUvE2RzecHm47wCpCL74Ps=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:21:d9:eb:f8:20:e4:93:c4:0f:69:0f:2d:cf:35:4e:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dcc2004a1af030ba99fcf451f3bd88efc53846a9
        Validity
            Not Before: Jul  2 08:02:37 2026 GMT
            Not After : Jul  3 08:02:37 2026 GMT
        Subject: CN=cc1eeea12d3a1dfa9e0617bc4b561a9e33bde1f2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:ad:35:b7:0c:48:c1:71:96:4a:8b:2f:a7:cc:
                    64:26:8b:90:1c:9d:e7:95:83:79:dc:20:c8:52:c6:
                    98:d2:7b:2f:b2:fc:48:d9:26:c9:33:d0:81:ce:64:
                    a9:c9:b2:12:94:6b:d2:fa:0b:8a:e2:d4:22:32:70:
                    8f:43:21:b0:80:ab:1f:41:b9:34:3b:de:b1:6d:6d:
                    5d:f2:82:b7:1b:d1:bb:3c:13:7c:fb:9c:9c:89:c9:
                    dc:ea:fa:60:26:8b:c2:39:fc:d9:99:13:20:e1:db:
                    00:b2:b4:f0:e2:57:ac:db:98:e0:bc:25:96:82:99:
                    61:1b:7d:35:e1:d3:55:f4:82:08:65:1e:58:66:26:
                    dc:03:d5:f3:44:94:77:c1:0c:8b:71:9c:cc:9d:2a:
                    87:e6:15:6f:7f:bf:39:c8:48:98:4e:d4:10:76:85:
                    05:dc:4a:f3:7e:db:ae:22:6f:7f:14:30:84:0c:43:
                    bd:92:24:5d:c3:d9:1f:0a:75:c6:84:15:7a:df:6e:
                    3f:fb:99:ca:b0:88:3b:59:72:da:91:01:32:2b:74:
                    ce:9b:17:14:53:dd:f8:88:d2:6c:3d:12:90:26:8c:
                    b6:39:84:40:9b:4a:9f:57:53:93:14:90:2b:a2:84:
                    e2:d3:b8:01:02:ad:19:a0:8f:48:9e:c2:49:57:5b:
                    3e:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:1E:EE:A1:2D:3A:1D:FA:9E:06:17:BC:4B:56:1A:9E:33:BD:E1:F2
            X509v3 Authority Key Identifier:
                keyid:DC:C2:00:4A:1A:F0:30:BA:99:FC:F4:51:F3:BD:88:EF:C5:38:46:A9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3MIAShrwMLqZ_PRR872I78U4Rqk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/712b40-53ae-4953-aff5-56a33057497b/1/3MIAShrwMLqZ_PRR872I78U4Rqk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/71/712b40-53ae-4953-aff5-56a33057497b/1/3MIAShrwMLqZ_PRR872I78U4Rqk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:9a:ca:f9:25:91:85:ed:17:1c:28:0b:61:fc:4f:30:70:b7:
         b1:ad:f1:2e:3f:dc:2b:ff:1a:c5:7c:3f:90:91:58:df:86:0c:
         da:08:5d:df:ac:59:b2:53:df:55:a9:cb:c5:b7:25:ce:44:6b:
         8d:39:34:c6:0e:82:73:c0:1d:87:db:18:2a:d8:27:94:d7:47:
         f1:a5:7b:4b:1e:c5:7c:a8:5f:69:9f:7f:2c:2f:5d:72:61:1f:
         0f:ec:7c:6a:e0:54:d1:23:03:d8:3d:fa:b2:9b:ed:b2:bc:5e:
         e6:7a:02:28:2d:2e:4a:cb:a9:13:0c:34:bc:e3:f3:d2:8c:bd:
         a4:6e:91:5c:cf:d6:4e:e8:3c:03:f9:02:a9:44:b2:28:00:6d:
         b6:76:85:f5:6b:20:89:a0:4c:15:53:af:06:a5:5f:2d:66:ba:
         37:20:2b:f8:0d:86:bd:36:7f:7a:d5:37:61:2e:ad:55:37:62:
         17:e0:d8:2b:aa:60:2f:51:82:1b:2b:f0:9a:59:fa:cd:04:56:
         82:bc:01:97:08:ac:ac:71:36:5c:d3:6f:4b:b0:7f:05:c7:64:
         b9:fe:ac:29:69:8b:9d:2f:fa:9c:db:25:70:1b:71:08:c2:79:
         dd:49:18:f1:38:12:14:5d:09:4e:26:97:bb:75:85:a3:06:b5:
         70:9b:49:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----