Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/82/ee138f-5e63-4cc4-8e75-decb188a000d/1/JLCG9IJCZjhOB4z3dzdfIb03C3A.mft
File:                     JLCG9IJCZjhOB4z3dzdfIb03C3A.mft (raw, json)
Hash identifier:          w2eGm/MqRVtUidraM7k35gLj45CBD7j29w/KN51pKf0=
Subject key identifier:   09:D8:89:EF:97:F4:22:9A:C4:A0:52:C0:F0:41:6E:00:AC:1E:98:FF
Authority key identifier: 24:B0:86:F4:82:42:66:38:4E:07:8C:F7:77:37:5F:21:BD:37:0B:70
Certificate issuer:       /CN=24b086f4824266384e078cf777375f21bd370b70
Certificate serial:       019F227D550F17A131B08133FAEA5E280C4B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JLCG9IJCZjhOB4z3dzdfIb03C3A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/82/ee138f-5e63-4cc4-8e75-decb188a000d/1/JLCG9IJCZjhOB4z3dzdfIb03C3A.mft
Manifest number:          1964
Signing time:             Thu 02 Jul 2026 11:01:06 +0000
Manifest this update:     Thu 02 Jul 2026 11:01:06 +0000
Manifest next update:     Fri 03 Jul 2026 11:01:06 +0000
Files and hashes:         1: JLCG9IJCZjhOB4z3dzdfIb03C3A.crl (hash: 3RGRV5oqrm0kxzPw+SHsuC2eqPc0E893fUecu7/pV/0=)
                          2: irId0COEYw7aKHAO1_EyLrYXpp0.roa (hash: 7+faGUD7LHnG4arr/clo8qL3um8HyyqboWUjaQQkIWc=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:22:7d:55:0f:17:a1:31:b0:81:33:fa:ea:5e:28:0c:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=24b086f4824266384e078cf777375f21bd370b70
        Validity
            Not Before: Jul  2 11:01:06 2026 GMT
            Not After : Jul  3 11:01:06 2026 GMT
        Subject: CN=09d889ef97f4229ac4a052c0f0416e00ac1e98ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:28:ef:bc:29:f8:37:a0:6f:e2:f3:bf:2a:e3:
                    1f:c2:a3:c6:8d:80:6f:22:5e:2b:52:ff:b5:72:f3:
                    ec:4a:2d:06:55:03:db:4f:09:fc:7c:ef:d0:91:58:
                    f1:09:e8:f7:fc:4f:1d:78:a4:e7:8f:6d:0b:3c:55:
                    05:1d:df:ec:58:a0:a0:bb:0c:87:4c:9c:f7:a7:7a:
                    e6:5c:c5:36:e6:f9:3c:4a:e0:45:7f:5d:22:db:8e:
                    87:f4:c6:41:74:b6:40:86:c5:38:c8:92:fe:a3:ad:
                    29:41:d1:83:ff:18:e4:63:0e:b4:72:44:39:3a:81:
                    f9:42:20:54:29:0c:30:4e:11:0f:48:cc:be:27:6e:
                    33:99:a9:9a:9e:e6:44:58:96:97:9f:c7:72:d0:40:
                    77:4d:73:76:4c:76:97:f7:af:a1:89:29:63:c9:8a:
                    0a:e4:2c:45:ba:63:e0:69:36:f6:9e:bb:1e:34:44:
                    4e:18:a9:4d:30:48:b1:97:48:ab:95:92:c0:52:fd:
                    f2:0f:f8:75:06:68:1f:e2:92:e0:38:d9:1e:3c:4b:
                    45:7d:c3:55:98:8d:24:f4:79:e8:cc:46:d8:0c:1d:
                    39:0d:64:9c:7c:6e:49:0a:45:83:95:aa:1a:ed:e1:
                    41:3b:c3:a8:d2:f9:6b:c5:6d:ac:d0:8f:6e:3d:03:
                    76:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:D8:89:EF:97:F4:22:9A:C4:A0:52:C0:F0:41:6E:00:AC:1E:98:FF
            X509v3 Authority Key Identifier:
                keyid:24:B0:86:F4:82:42:66:38:4E:07:8C:F7:77:37:5F:21:BD:37:0B:70

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JLCG9IJCZjhOB4z3dzdfIb03C3A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/ee138f-5e63-4cc4-8e75-decb188a000d/1/JLCG9IJCZjhOB4z3dzdfIb03C3A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/82/ee138f-5e63-4cc4-8e75-decb188a000d/1/JLCG9IJCZjhOB4z3dzdfIb03C3A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:78:1b:3c:6b:e7:c6:09:4d:78:a2:d4:77:b8:49:89:42:fd:
         df:08:2f:ad:52:68:d7:25:cd:fa:b6:d1:8a:89:67:fe:0e:74:
         48:72:a0:d1:0e:4a:b4:6c:9b:63:55:d6:4c:4c:1d:64:1a:7f:
         68:82:63:48:c6:e2:bf:e6:a5:ca:53:64:00:7f:8b:90:47:11:
         fc:ee:74:58:71:d7:63:7a:ea:8a:4a:fc:bc:ed:a0:90:b0:19:
         0a:3c:8d:e9:f2:a7:f3:a7:ac:17:e6:b5:80:b3:15:3a:2b:06:
         d4:38:df:11:8b:5a:da:47:47:45:b6:33:30:1c:2e:d4:ea:50:
         e8:18:82:d4:2d:b0:cb:e2:4c:d0:ec:61:b5:25:b0:77:14:b3:
         47:1d:d0:77:14:be:b9:a4:bd:33:8f:33:8e:d8:9a:4d:18:fd:
         a5:a9:86:62:c1:86:6e:be:5b:e3:95:fb:e8:c5:cb:16:2f:dc:
         4a:2e:a3:70:02:a5:9f:db:c0:bd:3b:dd:3c:01:8d:dc:df:73:
         8b:2d:1d:0c:d3:c3:bd:8c:42:f2:18:9e:b9:89:79:6e:76:c2:
         a6:dd:1f:6c:34:26:05:d2:73:9d:53:35:20:64:f7:a9:17:6a:
         a6:47:dc:77:ef:27:40:06:d9:6f:4f:7b:d4:6d:e2:35:5d:2d:
         cc:5f:d8:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----