Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/73/004284-d4a7-4962-9697-f23b077edb96/1/g_s0shoO-MQBkcDgfDtFJOMjss8.mft
File:                     g_s0shoO-MQBkcDgfDtFJOMjss8.mft (raw, json)
Hash identifier:          ouOWmhzpWvAPvRod4G+y8VERAqU6oKVPVTOnBZeJEPs=
Subject key identifier:   F8:B2:66:52:55:A0:13:B3:B1:62:2E:18:0B:1E:93:F2:76:F3:00:EB
Authority key identifier: 83:FB:34:B2:1A:0E:F8:C4:01:91:C0:E0:7C:3B:45:24:E3:23:B2:CF
Certificate issuer:       /CN=83fb34b21a0ef8c40191c0e07c3b4524e323b2cf
Certificate serial:       019D6687BEA0AE68AC3C42A84CEE34511662
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/g_s0shoO-MQBkcDgfDtFJOMjss8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/73/004284-d4a7-4962-9697-f23b077edb96/1/g_s0shoO-MQBkcDgfDtFJOMjss8.mft
Manifest number:          15AF
Signing time:             Tue 07 Apr 2026 06:01:05 +0000
Manifest this update:     Tue 07 Apr 2026 06:01:05 +0000
Manifest next update:     Wed 08 Apr 2026 06:01:05 +0000
Files and hashes:         1: g_s0shoO-MQBkcDgfDtFJOMjss8.crl (hash: yuFBudlT+FOfFYXOF4sq3q030dLzBRWLFius/eNitlA=)
                          2: mj008ZBThqouoibk7dGm4Ll0iRc.roa (hash: eaUut3ld4CKzlD3QYCYu9OoqJfcd+Rj1aPxNKdwJaAw=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:66:87:be:a0:ae:68:ac:3c:42:a8:4c:ee:34:51:16:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=83fb34b21a0ef8c40191c0e07c3b4524e323b2cf
        Validity
            Not Before: Apr  7 06:01:05 2026 GMT
            Not After : Apr  8 06:01:05 2026 GMT
        Subject: CN=f8b2665255a013b3b1622e180b1e93f276f300eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:bd:f5:df:90:d0:ee:a9:2a:69:95:41:8b:03:
                    57:64:1a:4c:31:47:66:d6:ad:30:7f:1a:2a:86:be:
                    41:60:83:51:b1:40:86:d9:ef:f8:7d:df:84:46:b6:
                    40:c8:d8:ca:48:8c:0e:5b:82:75:2a:c4:5c:8f:86:
                    53:4d:ef:f2:4f:84:92:6c:96:f0:d8:b2:88:eb:49:
                    39:0f:9e:a8:58:9f:9c:d6:0c:cd:67:34:e3:8f:e5:
                    40:23:47:15:84:c2:19:ac:1e:6a:2d:d7:a2:ea:68:
                    51:74:3c:11:4c:89:8b:ce:e6:81:08:4d:4d:49:ea:
                    f5:52:f5:d1:49:e7:48:65:1c:ff:30:2f:62:c0:06:
                    7d:56:10:f3:ca:b6:09:ff:8b:06:61:0f:f6:f3:ff:
                    3a:c8:99:0e:a5:dd:32:91:9a:52:e1:98:29:53:c8:
                    b0:98:28:47:8c:a0:3e:6e:1a:f5:af:79:ae:38:58:
                    37:47:38:62:55:c8:32:70:bf:5b:07:f2:4a:00:99:
                    12:e1:c3:e0:6a:f6:fa:2b:02:69:52:86:fa:db:f0:
                    61:6b:ab:31:54:ac:84:a6:89:92:ac:29:8c:aa:7a:
                    22:53:28:c8:07:f2:aa:4d:5d:92:57:df:2f:bd:2c:
                    cf:e8:46:d8:88:d6:d5:89:27:e5:19:ed:7b:bd:c7:
                    0d:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:B2:66:52:55:A0:13:B3:B1:62:2E:18:0B:1E:93:F2:76:F3:00:EB
            X509v3 Authority Key Identifier:
                keyid:83:FB:34:B2:1A:0E:F8:C4:01:91:C0:E0:7C:3B:45:24:E3:23:B2:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g_s0shoO-MQBkcDgfDtFJOMjss8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/004284-d4a7-4962-9697-f23b077edb96/1/g_s0shoO-MQBkcDgfDtFJOMjss8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/73/004284-d4a7-4962-9697-f23b077edb96/1/g_s0shoO-MQBkcDgfDtFJOMjss8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:fd:dc:8f:c2:65:0b:87:90:0a:6c:be:20:b4:72:69:a2:91:
         51:1f:94:72:c5:42:14:13:8d:b5:3c:a8:b1:35:40:47:46:d9:
         c3:4c:b9:01:e6:89:73:92:6d:3b:b6:b5:4f:ac:ca:b6:64:20:
         2a:59:e4:9f:6b:c3:44:f0:d0:0f:c4:94:3d:07:9c:c5:4a:08:
         d4:d5:ef:b6:8d:b9:e2:38:e0:93:41:fa:e7:be:a6:f2:19:4d:
         0c:1a:8e:af:44:88:86:bd:f4:3a:41:ae:02:0e:2f:b0:ac:d7:
         63:1d:37:b4:0d:27:01:c6:da:8e:23:fb:38:a5:a0:4d:c0:d5:
         10:44:5e:e1:ae:dd:e5:f3:dc:fb:ee:62:c9:1b:44:a9:29:bf:
         e5:4c:68:a7:93:b2:8a:df:6a:d8:02:91:cd:79:5a:ea:47:b8:
         9a:34:60:a4:0a:18:0b:c6:89:24:77:3f:b8:b2:5a:28:6a:88:
         1c:42:44:f0:b7:93:c0:23:c5:54:79:bb:92:d9:6b:26:ec:5e:
         90:f7:3d:bb:01:0f:36:d6:a1:e4:64:f8:6c:71:ee:1a:02:ad:
         ce:58:a2:96:6b:ea:d9:27:56:34:c8:ad:1e:be:31:5d:82:81:
         a6:e1:4d:67:4f:ca:6e:b7:d2:3e:06:67:34:1c:ef:82:7d:b8:
         c9:a1:7a:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----