Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/84/2f689a-29cd-4704-94ce-d90558af2c39/1/vuRUApZHZoHEBIxtZQ0LqqbLmOc.mft
File:                     vuRUApZHZoHEBIxtZQ0LqqbLmOc.mft (raw, json)
Hash identifier:          PcaGQt5tLDG85oie4L4cNitfQJ9blPnrIX0O3PUqIu4=
Subject key identifier:   43:45:6D:1D:66:86:2C:3D:1E:A7:24:89:50:1B:44:6D:81:21:72:8C
Authority key identifier: BE:E4:54:02:96:47:66:81:C4:04:8C:6D:65:0D:0B:AA:A6:CB:98:E7
Certificate issuer:       /CN=bee4540296476681c4048c6d650d0baaa6cb98e7
Certificate serial:       019D653E42628B014FF75A189C887075BC2D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vuRUApZHZoHEBIxtZQ0LqqbLmOc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/84/2f689a-29cd-4704-94ce-d90558af2c39/1/vuRUApZHZoHEBIxtZQ0LqqbLmOc.mft
Manifest number:          17E7
Signing time:             Tue 07 Apr 2026 00:01:12 +0000
Manifest this update:     Tue 07 Apr 2026 00:01:12 +0000
Manifest next update:     Wed 08 Apr 2026 00:01:12 +0000
Files and hashes:         1: vuRUApZHZoHEBIxtZQ0LqqbLmOc.crl (hash: 8qGqqlsQNrFZKxpKVofDLZZFGdCCXXFdT44vqkdx+fE=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:65:3e:42:62:8b:01:4f:f7:5a:18:9c:88:70:75:bc:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bee4540296476681c4048c6d650d0baaa6cb98e7
        Validity
            Not Before: Apr  7 00:01:12 2026 GMT
            Not After : Apr  8 00:01:12 2026 GMT
        Subject: CN=43456d1d66862c3d1ea72489501b446d8121728c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:eb:62:67:70:d7:a1:66:e7:dc:8e:4c:d6:34:
                    e3:99:f3:ea:11:57:6c:02:27:e2:9b:2e:3f:fb:c1:
                    68:65:f6:72:0d:35:d5:83:f4:3f:13:0f:cf:bb:ab:
                    ed:6d:19:bd:2e:be:4b:22:c3:00:16:76:55:78:5f:
                    bf:9b:86:36:d9:a9:cf:b7:93:c9:19:33:44:81:f4:
                    f7:82:86:cf:0b:3f:e5:7a:11:54:37:dd:73:0f:89:
                    88:6f:bd:9f:4f:66:88:71:d4:a1:3c:77:d3:d4:bc:
                    f2:aa:d3:18:74:c2:35:50:f5:81:5a:43:65:d7:2f:
                    10:ad:39:97:c1:df:9e:0b:8e:44:ac:92:b7:df:ea:
                    e6:73:82:fc:5a:49:75:19:a6:74:34:7b:7f:ad:15:
                    ad:d7:70:45:c9:e9:22:a1:74:ac:39:35:1b:80:13:
                    a8:0d:a3:26:07:d9:47:a1:49:cd:c7:47:0b:2c:06:
                    f7:83:e5:9f:01:f9:6e:44:71:0d:60:43:9f:c9:ff:
                    84:17:97:d4:80:8b:2f:1b:6e:5e:3c:03:37:a1:67:
                    e1:12:59:7c:f9:6a:ca:a6:0b:c4:77:db:cb:f9:7a:
                    16:d9:e7:1a:eb:f8:57:40:27:e5:5a:65:60:14:8e:
                    e2:aa:e6:f6:7a:39:84:03:61:81:a0:32:2d:93:00:
                    8c:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:45:6D:1D:66:86:2C:3D:1E:A7:24:89:50:1B:44:6D:81:21:72:8C
            X509v3 Authority Key Identifier:
                keyid:BE:E4:54:02:96:47:66:81:C4:04:8C:6D:65:0D:0B:AA:A6:CB:98:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vuRUApZHZoHEBIxtZQ0LqqbLmOc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/2f689a-29cd-4704-94ce-d90558af2c39/1/vuRUApZHZoHEBIxtZQ0LqqbLmOc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/84/2f689a-29cd-4704-94ce-d90558af2c39/1/vuRUApZHZoHEBIxtZQ0LqqbLmOc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:f6:32:89:fe:55:ad:f2:a5:06:3e:06:e0:9d:10:73:cf:0c:
         5c:39:e7:aa:b7:d9:f5:7d:17:26:02:40:97:a4:32:10:76:d5:
         c7:f4:96:7b:1e:2e:16:ff:a5:cf:9c:d2:04:8b:e1:00:db:61:
         9f:38:1d:5c:5b:8a:2d:16:2e:55:81:b4:b9:26:50:4f:4a:17:
         cb:43:b9:ea:46:90:07:c2:32:9e:ed:23:39:48:96:5a:7b:91:
         86:7d:71:89:6a:22:b7:b3:cd:ca:ab:7c:bd:8f:9e:30:87:14:
         74:d3:2f:62:1c:58:02:74:d8:ff:14:45:6c:04:95:c5:81:8a:
         ba:de:08:23:4d:1b:ed:37:52:ac:84:75:5d:f2:44:15:88:d1:
         74:b3:2d:0f:c2:41:61:0e:2b:4d:84:64:3a:21:e5:a3:11:39:
         f0:3c:ad:21:5c:4a:79:df:1f:77:1e:ba:a3:c7:70:e5:ba:07:
         3c:03:03:c4:fd:d8:65:5d:e7:e2:fb:18:09:9e:9a:e6:dc:44:
         6a:09:c6:d8:1e:95:1e:c7:00:04:08:b2:22:4a:ab:c3:1c:b0:
         b5:67:cd:aa:90:60:7d:fc:83:4c:ff:10:a5:bf:79:0e:ba:66:
         19:e1:81:5c:d7:3f:a6:15:8a:3e:02:11:2b:d9:72:90:11:2f:
         d1:dc:46:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----