Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/80/f0767c-b019-463c-a0b1-8d4bfd0aace8/1/klzs7-UigXQF0m_JK7UQSskM_cU.mft
File:                     klzs7-UigXQF0m_JK7UQSskM_cU.mft (raw, json)
Hash identifier:          MII9DDVfOui6MvjilV6rQhyuR09SGA/gzCIOKnZG/i8=
Subject key identifier:   1C:9D:C2:11:D8:16:52:93:8E:D9:49:E6:1F:5E:FC:E4:85:20:6D:44
Authority key identifier: 92:5C:EC:EF:E5:22:81:74:05:D2:6F:C9:2B:B5:10:4A:C9:0C:FD:C5
Certificate issuer:       /CN=925cecefe522817405d26fc92bb5104ac90cfdc5
Certificate serial:       019F22101087970C09576438C3287D7C111C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/klzs7-UigXQF0m_JK7UQSskM_cU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/80/f0767c-b019-463c-a0b1-8d4bfd0aace8/1/klzs7-UigXQF0m_JK7UQSskM_cU.mft
Manifest number:          1930
Signing time:             Thu 02 Jul 2026 09:01:45 +0000
Manifest this update:     Thu 02 Jul 2026 09:01:45 +0000
Manifest next update:     Fri 03 Jul 2026 09:01:45 +0000
Files and hashes:         1: 0GCsGSEu6DSdqgQKkWIJMKqEzcA.asa (hash: 6gVpx5jmmmCx0ej4LCILiXSE1CBS1qBw2+guqoZYU2M=)
                          2: 6ivdGkU4JpcdJeEUFclfUNispsA.roa (hash: pfbQDLdc9UvvbTXv81c/HKOtEm0dsqUfCqMUxvYHjrw=)
                          3: HWe81iVnCrvWZ5i70lYuwQBI6vo.asa (hash: O8hn1wn8hJYxcK/0FDMVDJ2dqEBCiZuaFkqQn8V67K4=)
                          4: KW_8cQbCRZrMxXEyWhTa1RCtzvY.roa (hash: lmD03CJD5jyT9rgsLt03/38cv3snb1tZTQ3m9TewTSk=)
                          5: klzs7-UigXQF0m_JK7UQSskM_cU.crl (hash: AyL0UlyyW7Zu2D8NqZTHOA8nDdHspHJxEJYqMIkjQWw=)
                          6: vIN44HyEP5wnRYxa1TMQU9fUKVk.roa (hash: UPxjEVREQVIYJdYxcduu/9fmVIgZHpDXz79ozRrZ6Fs=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:22:10:10:87:97:0c:09:57:64:38:c3:28:7d:7c:11:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=925cecefe522817405d26fc92bb5104ac90cfdc5
        Validity
            Not Before: Jul  2 09:01:45 2026 GMT
            Not After : Jul  3 09:01:45 2026 GMT
        Subject: CN=1c9dc211d81652938ed949e61f5efce485206d44
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:1b:11:2a:40:aa:e1:25:17:00:38:33:84:ad:
                    80:5d:41:db:c7:0e:d6:06:ec:0f:73:64:74:71:28:
                    3a:ef:67:47:fd:3c:9e:33:bc:da:9a:49:e3:d1:ea:
                    01:26:1a:52:d7:be:f2:7b:33:40:b4:9c:d4:44:a6:
                    d0:8f:3b:68:35:45:e5:56:3a:62:7b:8b:a7:6e:2a:
                    f6:6a:ef:ee:b0:2b:f9:75:89:5e:4e:1b:8e:e7:98:
                    c2:ef:1c:c1:2b:e0:bf:64:5f:c9:1c:eb:70:39:7e:
                    c8:f6:b6:fc:ba:1a:5e:42:ff:a4:21:14:e3:eb:15:
                    2b:12:31:c5:b3:56:52:2f:45:04:1b:6f:60:71:8c:
                    71:e6:1f:b7:aa:a7:3a:08:e2:0a:cc:ac:61:84:77:
                    08:a1:f1:67:2a:82:7b:03:8a:95:6d:71:0f:a6:27:
                    4b:8d:28:65:6e:4e:2d:fa:dc:6f:71:fb:50:31:24:
                    dc:d6:61:0a:6c:e0:40:2a:89:f3:54:66:30:41:18:
                    1c:24:0d:a7:3a:32:f8:96:17:4f:37:17:23:77:8d:
                    62:e6:b4:74:25:9c:5e:ef:5b:6c:05:2d:f1:45:6b:
                    7c:70:92:45:64:20:cf:a2:a7:93:73:f4:d6:ba:6a:
                    a3:1f:7e:5c:f2:5f:7c:03:01:98:fd:ae:12:11:4d:
                    b0:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:9D:C2:11:D8:16:52:93:8E:D9:49:E6:1F:5E:FC:E4:85:20:6D:44
            X509v3 Authority Key Identifier:
                keyid:92:5C:EC:EF:E5:22:81:74:05:D2:6F:C9:2B:B5:10:4A:C9:0C:FD:C5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/klzs7-UigXQF0m_JK7UQSskM_cU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/f0767c-b019-463c-a0b1-8d4bfd0aace8/1/klzs7-UigXQF0m_JK7UQSskM_cU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/80/f0767c-b019-463c-a0b1-8d4bfd0aace8/1/klzs7-UigXQF0m_JK7UQSskM_cU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:af:94:06:46:7b:79:5a:24:a9:3b:e4:d8:f0:a8:0f:6a:65:
         bc:ba:15:3d:5d:ec:67:c5:c0:9c:4e:a5:47:6e:49:bc:00:d8:
         a6:1f:03:98:61:5d:8d:b1:ee:df:15:b7:6c:84:2b:2c:b0:aa:
         c3:9d:3b:1a:e5:c0:24:32:5b:eb:b5:d3:a9:0e:1b:94:34:04:
         38:9e:b6:78:42:3c:1a:94:55:a8:cf:a4:a6:bb:69:45:78:1c:
         97:15:fc:59:ee:7e:c0:a8:68:5b:71:c8:bc:84:ed:df:3b:e3:
         48:ae:79:fd:65:f6:d6:4a:a7:45:bb:d4:ec:81:50:bb:2f:d9:
         5f:0e:eb:9d:56:de:6e:65:31:46:b5:cf:7f:b7:19:a0:91:42:
         45:3b:2f:fd:c0:ea:8a:35:df:73:05:0c:d3:60:d3:86:5a:d1:
         96:dd:8d:bb:9d:5a:a8:21:81:83:c1:b1:a9:85:ea:72:31:2d:
         11:40:ee:ff:39:92:07:82:db:d5:40:f0:4a:32:49:c8:19:71:
         c0:51:20:55:67:ff:10:c3:6d:4a:2f:16:a5:3f:47:d2:37:4f:
         85:25:54:f4:16:d4:37:05:65:51:04:1c:3d:ae:56:89:21:65:
         6e:f1:8d:e5:29:26:eb:bc:31:01:88:5e:15:9d:79:0a:1e:22:
         05:d1:2a:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----