Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/84/fbce4a-b6a2-44e5-83fa-0d671d470078/1/deEJHTju5ZeWM68nco7pUjGv9tM.mft
File:                     deEJHTju5ZeWM68nco7pUjGv9tM.mft (raw, json)
Hash identifier:          e9ywYoDD6l6NXON2bNiTJUe3A6aHjJL250GsupSBIDc=
Subject key identifier:   05:02:CD:DC:47:5E:63:C9:E2:97:5F:B1:6A:E9:FA:CD:95:83:CB:F1
Authority key identifier: 75:E1:09:1D:38:EE:E5:97:96:33:AF:27:72:8E:E9:52:31:AF:F6:D3
Certificate issuer:       /CN=75e1091d38eee5979633af27728ee95231aff6d3
Certificate serial:       019CAEDA47CA0B617AF112FEC80238281CF4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/deEJHTju5ZeWM68nco7pUjGv9tM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/84/fbce4a-b6a2-44e5-83fa-0d671d470078/1/deEJHTju5ZeWM68nco7pUjGv9tM.mft
Manifest number:          060D
Signing time:             Mon 02 Mar 2026 14:01:06 +0000
Manifest this update:     Mon 02 Mar 2026 14:01:06 +0000
Manifest next update:     Tue 03 Mar 2026 14:01:06 +0000
Files and hashes:         1: deEJHTju5ZeWM68nco7pUjGv9tM.crl (hash: 6kwh/W73A8DkGwqMSDFI35G0IFHgHePFLmQ4/nbY4n0=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ae:da:47:ca:0b:61:7a:f1:12:fe:c8:02:38:28:1c:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=75e1091d38eee5979633af27728ee95231aff6d3
        Validity
            Not Before: Mar  2 14:01:06 2026 GMT
            Not After : Mar  3 14:01:06 2026 GMT
        Subject: CN=0502cddc475e63c9e2975fb16ae9facd9583cbf1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:8a:fd:79:4f:7f:74:4b:57:26:17:de:ff:85:
                    8c:78:21:bb:09:64:06:d7:49:c1:5f:55:5c:1a:60:
                    9e:d1:d7:82:f9:69:c9:42:8d:89:92:75:fa:46:a3:
                    66:d0:4b:24:32:1e:0f:79:e2:f0:0f:62:91:80:b7:
                    75:23:8e:0f:ff:0b:ba:1d:48:95:b4:1e:ad:db:fc:
                    5f:09:1f:80:5c:c4:e0:b1:c1:83:00:1c:38:68:2e:
                    aa:fc:a3:95:ed:a2:77:ff:f8:1c:18:19:4e:5e:e4:
                    99:2c:76:db:c4:a3:ec:2e:58:1c:5a:d3:29:90:25:
                    64:9d:1a:81:86:18:99:2d:d6:16:a6:05:ac:e3:1f:
                    bb:96:e5:ce:1c:cb:b4:d9:5f:81:1e:e2:e7:e1:7f:
                    88:3d:bd:e0:d0:e7:1c:9c:18:42:4a:3d:e9:8a:9f:
                    45:ec:de:87:6c:51:ad:a1:a9:a7:5c:8b:dc:d6:53:
                    b1:e4:42:7c:c1:73:5e:c1:12:93:ae:82:4f:84:82:
                    41:09:2b:2f:2c:b6:e7:15:7f:71:7a:19:f6:48:f1:
                    41:33:00:d1:43:c7:93:ba:ac:25:2e:0b:09:d9:08:
                    a9:de:29:fd:f1:ac:fb:a5:b5:c1:60:e3:77:26:97:
                    f5:88:21:da:b4:e3:05:64:c0:6d:93:04:cc:02:90:
                    e0:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:02:CD:DC:47:5E:63:C9:E2:97:5F:B1:6A:E9:FA:CD:95:83:CB:F1
            X509v3 Authority Key Identifier:
                keyid:75:E1:09:1D:38:EE:E5:97:96:33:AF:27:72:8E:E9:52:31:AF:F6:D3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/deEJHTju5ZeWM68nco7pUjGv9tM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/fbce4a-b6a2-44e5-83fa-0d671d470078/1/deEJHTju5ZeWM68nco7pUjGv9tM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/84/fbce4a-b6a2-44e5-83fa-0d671d470078/1/deEJHTju5ZeWM68nco7pUjGv9tM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:d9:ae:42:7d:bb:57:7a:bf:3e:9a:83:f6:cb:6c:1b:8f:8d:
         a9:44:a4:03:aa:13:35:11:b9:45:e0:40:f5:e8:fc:fd:0c:0b:
         af:53:3d:ab:ad:1d:6f:a2:ee:34:6a:ea:64:da:62:ec:18:e8:
         2e:ab:36:d3:3a:2b:69:b6:4c:61:c9:74:d3:f2:84:89:19:1b:
         34:7a:14:2a:0c:a6:34:a0:f9:3a:88:2c:21:6e:67:39:ba:55:
         f3:18:f1:91:9d:43:83:6a:4d:30:c1:b3:8f:36:35:96:19:9e:
         71:84:fc:67:5e:ec:69:72:ae:3b:4f:c5:6b:96:bc:13:0a:61:
         f9:1a:3d:11:75:89:97:8d:ff:53:9c:bc:48:ac:e0:76:e8:34:
         ef:be:65:38:6b:c6:25:f8:0d:69:45:cf:eb:4a:83:2f:0d:ea:
         73:cd:33:2d:7f:e4:8c:6c:18:08:3a:d3:bc:a5:80:29:90:0e:
         46:42:a7:28:e1:4b:97:41:f7:d1:3c:b6:60:41:b4:e3:3d:f4:
         08:33:9f:60:cf:96:3c:38:96:a5:b6:fe:a0:c3:7e:44:4b:3e:
         d2:4c:fb:70:5c:9a:c7:a1:4a:d8:70:72:94:a8:db:50:5c:34:
         0e:70:16:f2:c9:04:16:c4:ef:e7:7f:80:db:35:98:32:8b:af:
         84:29:19:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----