Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/82/45df63-95f0-4254-8c9b-b223c72a5593/1/VEi51bhRcfcmQjiyegMGxWz7a08.mft
File:                     VEi51bhRcfcmQjiyegMGxWz7a08.mft (raw, json)
Hash identifier:          aRZ9tqxeJe1jr6Xf19YhzHmiwPPI1uctGKAKyHwEkj4=
Subject key identifier:   3C:97:74:F8:37:D6:CE:4F:CB:30:13:10:1A:91:05:99:96:E8:73:D3
Authority key identifier: 54:48:B9:D5:B8:51:71:F7:26:42:38:B2:7A:03:06:C5:6C:FB:6B:4F
Certificate issuer:       /CN=5448b9d5b85171f7264238b27a0306c56cfb6b4f
Certificate serial:       019E910221D3F645678EE944128DB5BCAB70
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VEi51bhRcfcmQjiyegMGxWz7a08.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/82/45df63-95f0-4254-8c9b-b223c72a5593/1/VEi51bhRcfcmQjiyegMGxWz7a08.mft
Manifest number:          0A89
Signing time:             Thu 04 Jun 2026 05:01:36 +0000
Manifest this update:     Thu 04 Jun 2026 05:01:36 +0000
Manifest next update:     Fri 05 Jun 2026 05:01:36 +0000
Files and hashes:         1: VEi51bhRcfcmQjiyegMGxWz7a08.crl (hash: pa6w+8/4o6v/MnOZuKlW6oISZfXocEI0QPF1ymphsWg=)
                          2: t2Gg0PTvd5lsW3SGsnAPx7-yRi0.roa (hash: Qa5YolQYkhRDzAfNGYYljMdC9amMCOp6hX293alM/xo=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:91:02:21:d3:f6:45:67:8e:e9:44:12:8d:b5:bc:ab:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5448b9d5b85171f7264238b27a0306c56cfb6b4f
        Validity
            Not Before: Jun  4 05:01:36 2026 GMT
            Not After : Jun  5 05:01:36 2026 GMT
        Subject: CN=3c9774f837d6ce4fcb3013101a91059996e873d3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:2c:ae:e2:a1:19:f9:de:78:44:15:f3:ab:2a:
                    d8:8b:fb:3f:17:82:74:df:ca:d9:1d:ac:91:0a:fa:
                    11:91:48:39:ce:dd:a7:db:ac:1b:c3:9d:1d:30:99:
                    08:4e:40:6d:f6:60:4b:c0:7a:19:a8:9b:59:38:47:
                    d2:9b:3b:4d:8a:63:9b:22:32:24:d3:da:ca:0f:a6:
                    bc:89:8e:c6:f8:c5:36:2b:73:b9:8f:83:45:f1:82:
                    bf:7f:e7:60:37:2e:16:69:41:fa:27:47:86:8e:d0:
                    b0:fc:ba:0d:7a:e1:b6:c4:25:f4:3e:9d:5b:c1:6b:
                    bf:d9:97:51:c5:f3:05:7d:4f:74:85:ef:37:28:aa:
                    38:85:ea:b0:7f:db:e7:c3:b6:dd:f8:d2:1a:7f:28:
                    b8:93:1c:3c:67:53:fe:27:03:e7:c7:ff:46:47:bf:
                    ba:54:19:86:74:fe:98:c6:f4:af:27:3d:06:83:4f:
                    0a:40:d7:b6:b6:69:31:f5:39:03:f1:e7:59:cb:f9:
                    dd:fa:d6:f8:7c:53:85:f2:6a:30:52:77:21:b4:d3:
                    56:2c:b1:8b:dc:d0:13:eb:a8:77:c8:6e:36:38:68:
                    8b:84:16:96:d9:16:8e:b3:b5:ee:70:c5:97:99:70:
                    f1:77:f8:a1:a0:85:3c:55:a8:93:a9:7c:80:1b:05:
                    91:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:97:74:F8:37:D6:CE:4F:CB:30:13:10:1A:91:05:99:96:E8:73:D3
            X509v3 Authority Key Identifier:
                keyid:54:48:B9:D5:B8:51:71:F7:26:42:38:B2:7A:03:06:C5:6C:FB:6B:4F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VEi51bhRcfcmQjiyegMGxWz7a08.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/45df63-95f0-4254-8c9b-b223c72a5593/1/VEi51bhRcfcmQjiyegMGxWz7a08.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/82/45df63-95f0-4254-8c9b-b223c72a5593/1/VEi51bhRcfcmQjiyegMGxWz7a08.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:ff:ed:f2:e4:fa:96:c3:28:df:5e:70:dc:4c:88:7a:c0:b0:
         b2:92:5f:a3:5f:7a:f4:43:c9:44:51:e2:3c:2c:48:f9:02:ce:
         43:5b:f7:67:12:c0:7c:47:91:73:09:16:0c:7f:3a:44:76:eb:
         ea:8d:82:a1:d0:64:06:63:95:ba:4d:43:c8:3d:17:60:bb:6b:
         90:59:61:78:17:8a:f8:87:17:f8:42:27:73:5b:4f:4d:6f:55:
         6e:05:3e:0a:e5:62:ae:da:48:57:59:2e:31:03:d6:67:50:66:
         54:47:01:52:a3:cd:8c:d0:71:5c:de:dd:40:a5:83:3f:d5:ec:
         fd:68:2e:ac:b6:9d:26:0f:69:57:cb:9e:e6:18:00:b9:1b:c1:
         8d:14:9c:d3:7b:8b:be:ed:6b:0b:d5:1e:b9:0c:fe:60:72:fc:
         55:b9:f5:fc:cd:e6:af:7e:4c:fb:e4:82:dd:80:7d:7f:54:9a:
         3a:d3:13:07:ad:af:77:b5:68:ca:43:03:75:9c:46:21:41:36:
         df:0c:f1:ac:fa:e6:1b:4b:3b:34:77:62:4f:94:1f:51:af:1a:
         ad:0a:fa:d1:14:4d:40:e1:2c:19:ad:5c:35:f4:bf:2c:88:d7:
         60:e6:35:73:dd:89:69:d5:92:26:e3:1d:5a:6e:57:8b:df:64:
         ac:e8:ce:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----