Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7b/473768-3a59-4b0b-ad26-19136b7b0396/1/kxqerhFBEi0V8KZO8HjIAp_r_jw.mft
File:                     kxqerhFBEi0V8KZO8HjIAp_r_jw.mft (raw, json)
Hash identifier:          utt6IQ6bymI9F/l1rI99IDqhESLzD2rvRy8gvhIZdhE=
Subject key identifier:   B5:EA:71:D8:26:54:0B:DC:27:0C:17:CE:4C:BF:5D:5C:BC:03:7C:BB
Authority key identifier: 93:1A:9E:AE:11:41:12:2D:15:F0:A6:4E:F0:78:C8:02:9F:EB:FE:3C
Certificate issuer:       /CN=931a9eae1141122d15f0a64ef078c8029febfe3c
Certificate serial:       019F21D9B9D25387A34596A5FE374A6677BB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kxqerhFBEi0V8KZO8HjIAp_r_jw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7b/473768-3a59-4b0b-ad26-19136b7b0396/1/kxqerhFBEi0V8KZO8HjIAp_r_jw.mft
Manifest number:          1989
Signing time:             Thu 02 Jul 2026 08:02:24 +0000
Manifest this update:     Thu 02 Jul 2026 08:02:24 +0000
Manifest next update:     Fri 03 Jul 2026 08:02:24 +0000
Files and hashes:         1: kxqerhFBEi0V8KZO8HjIAp_r_jw.crl (hash: Skk2kMVMgkGA6MEZxa8j6vSwiw04U5z8GadBnfm6AAo=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:21:d9:b9:d2:53:87:a3:45:96:a5:fe:37:4a:66:77:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=931a9eae1141122d15f0a64ef078c8029febfe3c
        Validity
            Not Before: Jul  2 08:02:24 2026 GMT
            Not After : Jul  3 08:02:24 2026 GMT
        Subject: CN=b5ea71d826540bdc270c17ce4cbf5d5cbc037cbb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:df:b9:fb:43:e6:5c:2e:59:ac:bc:34:33:6c:
                    5a:cf:a5:0e:9c:c0:84:fc:99:15:37:bc:60:0e:bb:
                    57:8a:02:f2:c6:f4:99:1d:d1:4f:f1:06:5a:14:b2:
                    0d:1f:9f:dd:15:64:80:3c:ad:f0:b6:3b:01:33:ff:
                    7c:4a:8a:c6:22:35:2d:92:9b:f9:61:75:65:48:6c:
                    d3:5c:18:95:a1:e4:a7:75:3e:db:d6:ba:28:3b:e2:
                    ab:90:c2:04:87:89:69:9c:42:cc:0d:45:60:c3:53:
                    26:a2:30:f1:a6:22:9c:23:8d:b3:d1:78:e0:41:62:
                    63:5e:66:e6:0a:87:36:66:70:05:32:e9:24:2a:ef:
                    6d:ef:67:69:67:ab:af:8b:c9:c4:8c:21:56:71:92:
                    d5:e7:f6:53:41:35:d7:9a:82:21:a3:d4:ac:66:85:
                    ba:95:9f:06:5b:a5:f2:09:6f:7e:af:2c:73:1f:17:
                    25:e4:ab:60:d6:bd:2d:61:dc:09:22:f0:5b:9b:64:
                    de:16:2e:25:c6:79:56:50:d0:fd:be:7b:4a:5a:8c:
                    02:93:cf:c1:20:bf:04:46:54:b1:02:cb:2d:ce:93:
                    36:40:93:87:21:91:22:36:66:34:50:23:45:c0:b8:
                    71:6f:db:1b:ab:2f:f8:61:3f:99:00:da:b3:72:7b:
                    b6:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:EA:71:D8:26:54:0B:DC:27:0C:17:CE:4C:BF:5D:5C:BC:03:7C:BB
            X509v3 Authority Key Identifier:
                keyid:93:1A:9E:AE:11:41:12:2D:15:F0:A6:4E:F0:78:C8:02:9F:EB:FE:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kxqerhFBEi0V8KZO8HjIAp_r_jw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/473768-3a59-4b0b-ad26-19136b7b0396/1/kxqerhFBEi0V8KZO8HjIAp_r_jw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/473768-3a59-4b0b-ad26-19136b7b0396/1/kxqerhFBEi0V8KZO8HjIAp_r_jw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:b4:f7:c0:c6:18:48:42:41:83:4b:65:e9:96:88:37:b8:76:
         62:d1:f1:2e:14:fb:09:09:fe:3a:14:56:58:5d:b6:32:9c:99:
         ae:29:a7:21:90:96:d6:88:26:5b:45:da:96:6c:a7:81:90:2b:
         2f:56:57:21:a7:23:de:d4:93:7b:d0:4c:be:c6:e0:f5:c8:3d:
         2c:1b:47:89:fe:15:08:44:33:d3:df:34:92:04:01:1a:a0:d0:
         bb:ab:ff:c3:3a:b7:d8:e1:b6:91:04:61:94:76:51:83:6b:c2:
         e4:00:0e:05:dd:bf:78:79:eb:13:a6:3c:39:6e:6b:aa:6b:b6:
         fb:26:cd:62:69:b7:99:43:c8:05:0b:9d:c3:bc:a4:cd:36:fb:
         37:22:38:8e:b6:69:04:36:b8:79:81:7c:9c:7e:83:b9:27:f0:
         4a:3f:6a:a6:c5:dc:23:48:10:9f:a5:bb:d2:99:26:67:e9:67:
         1f:e9:9a:ff:08:b3:d2:75:ec:a3:b9:c5:c6:b4:fc:03:f7:b4:
         f9:b9:d7:8b:65:ea:e4:b2:ea:18:e2:da:23:ad:75:f2:e3:df:
         a5:16:78:51:b5:ab:97:34:e7:b1:8c:40:8f:ca:15:f7:8f:51:
         8f:27:00:51:8a:95:67:b9:a3:5b:00:4e:a3:8b:31:e3:8f:2b:
         df:cc:f2:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----