Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/79/daf850-f587-44b2-8de4-a8585ff93546/1/ItxuR0PtXMhDAyhSiW7xX0iS7bA.mft
File:                     ItxuR0PtXMhDAyhSiW7xX0iS7bA.mft (raw, json)
Hash identifier:          ki8vXkQX1wcYhXaFVegaZ+QOQjLgDGXn/kFTEngi42E=
Subject key identifier:   E4:0F:6C:A5:62:DB:07:61:0A:90:9C:8D:E3:08:86:41:A0:23:EF:A0
Authority key identifier: 22:DC:6E:47:43:ED:5C:C8:43:03:28:52:89:6E:F1:5F:48:92:ED:B0
Certificate issuer:       /CN=22dc6e4743ed5cc843032852896ef15f4892edb0
Certificate serial:       019F21A22EB2E8AAA458DB3479AFB64D1C0E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ItxuR0PtXMhDAyhSiW7xX0iS7bA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/79/daf850-f587-44b2-8de4-a8585ff93546/1/ItxuR0PtXMhDAyhSiW7xX0iS7bA.mft
Manifest number:          0F90
Signing time:             Thu 02 Jul 2026 07:01:44 +0000
Manifest this update:     Thu 02 Jul 2026 07:01:44 +0000
Manifest next update:     Fri 03 Jul 2026 07:01:44 +0000
Files and hashes:         1: ItxuR0PtXMhDAyhSiW7xX0iS7bA.crl (hash: 4eBZik0PWq9z3qkok8WKMA2+OVWWdoQaxJoDqicIIT4=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:21:a2:2e:b2:e8:aa:a4:58:db:34:79:af:b6:4d:1c:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22dc6e4743ed5cc843032852896ef15f4892edb0
        Validity
            Not Before: Jul  2 07:01:44 2026 GMT
            Not After : Jul  3 07:01:44 2026 GMT
        Subject: CN=e40f6ca562db07610a909c8de3088641a023efa0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:a1:1d:26:9a:24:12:c9:3c:12:aa:9c:e7:f3:
                    f8:0f:9c:84:1e:d4:db:97:67:96:42:c7:41:02:eb:
                    53:bd:82:c0:ef:88:4f:0e:90:2e:42:88:ce:b6:b3:
                    19:a6:92:ed:8f:fb:f6:af:80:f2:b2:82:66:5b:c1:
                    01:03:12:ab:bf:16:e7:c4:d6:25:5d:f7:f2:0f:64:
                    62:7b:68:af:f4:13:7f:10:93:dc:6c:c1:a6:a0:c5:
                    87:b7:29:8b:23:67:f9:ad:0b:6d:a4:03:ac:c5:ec:
                    7c:cc:8f:a1:2d:89:b1:45:0c:fd:27:8d:e7:37:47:
                    5d:27:b6:00:5e:6c:fd:ac:5a:07:1b:be:a9:f2:bf:
                    25:fb:21:90:a9:49:fe:f2:33:71:df:f5:52:dc:ef:
                    0f:d9:09:78:ed:17:8d:d6:a8:2c:47:6d:e3:63:fe:
                    b2:5d:89:83:f9:63:54:72:1a:af:1b:05:b1:33:4d:
                    73:ef:7c:fb:17:55:aa:cc:d3:99:61:fe:5c:4a:64:
                    cf:a2:51:9e:d2:a9:45:63:79:33:21:47:5c:f5:9e:
                    65:4c:ea:b8:20:81:ec:3f:32:a4:29:89:69:73:85:
                    c5:4c:e2:72:fd:a5:32:f5:05:b9:1a:19:e0:ec:9a:
                    9d:0c:c1:d0:f8:8d:92:ec:ec:fb:58:a0:09:15:4d:
                    24:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:0F:6C:A5:62:DB:07:61:0A:90:9C:8D:E3:08:86:41:A0:23:EF:A0
            X509v3 Authority Key Identifier:
                keyid:22:DC:6E:47:43:ED:5C:C8:43:03:28:52:89:6E:F1:5F:48:92:ED:B0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ItxuR0PtXMhDAyhSiW7xX0iS7bA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/daf850-f587-44b2-8de4-a8585ff93546/1/ItxuR0PtXMhDAyhSiW7xX0iS7bA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/79/daf850-f587-44b2-8de4-a8585ff93546/1/ItxuR0PtXMhDAyhSiW7xX0iS7bA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:f2:24:77:45:32:96:d8:b8:b1:92:c9:9e:c1:6a:c5:6e:45:
         5f:52:a2:ed:74:98:f2:d5:62:dc:50:b1:5e:95:67:5f:85:c5:
         42:91:a5:c6:89:87:1b:60:ed:c2:e7:9b:4a:df:ee:a0:3f:29:
         a5:29:98:d9:aa:a6:db:fe:20:a0:24:0c:a1:92:cf:5c:29:be:
         da:8d:17:a0:6f:09:f3:18:65:a1:25:d0:5f:9b:15:25:95:dd:
         b4:03:cd:83:ee:10:f5:e1:c5:c4:ee:cd:14:95:08:31:b2:cf:
         b7:66:83:95:12:98:2d:d8:9f:9f:f8:27:2d:13:5d:c3:a9:fd:
         ce:1e:86:d4:7d:ff:5b:75:59:86:ed:c8:42:00:dc:10:af:93:
         77:8d:95:96:91:ee:3d:9c:14:46:0d:a5:99:cc:04:dd:ac:b1:
         7a:93:94:d9:5f:16:71:e4:be:83:09:c6:e1:bc:66:77:5a:53:
         41:e5:33:50:a4:9b:d1:8a:94:b9:cd:9a:df:b7:6a:f6:8f:aa:
         19:79:bc:59:e8:16:b7:dc:ad:17:25:76:e9:42:b4:71:d9:66:
         38:98:90:c9:a7:91:e2:7b:7b:82:6c:36:41:a1:59:78:31:d6:
         de:94:d0:23:eb:2c:1c:24:23:b8:f8:6b:27:f9:4a:41:7f:f8:
         6b:b4:59:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----