Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/85/72cb1f-bd2b-4c22-aaec-a62388ef5b48/1/NDez9zdtPvHNqLyWbxOXCFnPeW4.mft
File:                     NDez9zdtPvHNqLyWbxOXCFnPeW4.mft (raw, json)
Hash identifier:          b5ALK9VJuC+nKLjaNetckLU0Dt+plLCOQRa8wfKw8BQ=
Subject key identifier:   A2:AB:18:29:32:16:AD:8E:68:45:BA:7E:4E:1C:F8:1E:37:D5:83:46
Authority key identifier: 34:37:B3:F7:37:6D:3E:F1:CD:A8:BC:96:6F:13:97:08:59:CF:79:6E
Certificate issuer:       /CN=3437b3f7376d3ef1cda8bc966f13970859cf796e
Certificate serial:       019EF837E1A64C4F3EE55CAFF0D00B400DC8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NDez9zdtPvHNqLyWbxOXCFnPeW4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/85/72cb1f-bd2b-4c22-aaec-a62388ef5b48/1/NDez9zdtPvHNqLyWbxOXCFnPeW4.mft
Manifest number:          0A73
Signing time:             Wed 24 Jun 2026 06:01:12 +0000
Manifest this update:     Wed 24 Jun 2026 06:01:12 +0000
Manifest next update:     Thu 25 Jun 2026 06:01:12 +0000
Files and hashes:         1: NDez9zdtPvHNqLyWbxOXCFnPeW4.crl (hash: A5uamRGk+IAStEeHY54eIsXCB+Xk8Hb3ES0AbIlMZfA=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:f8:37:e1:a6:4c:4f:3e:e5:5c:af:f0:d0:0b:40:0d:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3437b3f7376d3ef1cda8bc966f13970859cf796e
        Validity
            Not Before: Jun 24 06:01:12 2026 GMT
            Not After : Jun 25 06:01:12 2026 GMT
        Subject: CN=a2ab18293216ad8e6845ba7e4e1cf81e37d58346
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:6d:fe:42:44:bc:97:e0:15:85:3b:d9:8c:a0:
                    38:05:1b:b6:4a:3a:a5:2f:5e:3c:bf:23:de:92:c9:
                    7f:b6:ea:e4:4e:db:80:dc:0f:3e:90:63:ba:fe:53:
                    c3:65:f7:f5:c0:69:d9:1e:90:89:05:a7:bd:81:46:
                    54:c3:38:4e:08:17:a9:40:8e:70:3a:33:e7:30:b5:
                    47:08:39:8e:a2:b5:7c:e9:d5:7e:f0:a6:ce:29:30:
                    a5:b8:b2:be:7a:e1:ec:32:db:e2:33:e7:df:b6:cb:
                    06:ce:8a:d7:ed:f4:41:cf:69:ff:0b:26:65:4a:29:
                    30:7a:dc:a5:4b:04:90:8e:7d:82:b8:d1:ec:96:45:
                    01:52:fe:00:ff:87:18:ce:01:a3:63:0a:9d:f9:92:
                    2f:b1:b4:fb:2c:a2:96:f1:e8:2c:3b:10:c9:cd:36:
                    ad:87:a5:46:b5:40:63:7d:86:9f:34:b0:39:15:01:
                    fc:a8:2f:2e:3c:db:c5:e4:a5:d0:90:05:68:8d:93:
                    f1:27:72:18:21:63:dd:2d:c6:8c:2b:75:a7:af:a3:
                    bc:fc:fa:0c:a9:30:df:36:05:d8:c1:4c:b7:05:dc:
                    2b:39:94:41:aa:56:79:c4:45:cd:19:dc:eb:c2:a0:
                    b3:ea:c4:42:ad:8e:e7:67:f3:41:c3:17:b0:dd:a7:
                    ac:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:AB:18:29:32:16:AD:8E:68:45:BA:7E:4E:1C:F8:1E:37:D5:83:46
            X509v3 Authority Key Identifier:
                keyid:34:37:B3:F7:37:6D:3E:F1:CD:A8:BC:96:6F:13:97:08:59:CF:79:6E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NDez9zdtPvHNqLyWbxOXCFnPeW4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/72cb1f-bd2b-4c22-aaec-a62388ef5b48/1/NDez9zdtPvHNqLyWbxOXCFnPeW4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/85/72cb1f-bd2b-4c22-aaec-a62388ef5b48/1/NDez9zdtPvHNqLyWbxOXCFnPeW4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:f9:bd:69:47:8c:b9:b0:6b:e5:58:1e:d9:01:f2:6e:9c:00:
         a4:64:ab:4c:c6:df:37:57:d0:d2:fa:83:e2:fc:1f:c7:04:85:
         97:55:09:43:a0:e9:25:cd:91:94:9c:7e:05:01:cb:c5:7e:16:
         d1:65:0f:74:d1:55:d7:b5:a6:7d:9a:86:34:3f:c9:7a:83:a9:
         32:ed:0b:98:ad:ca:e4:c5:f8:ec:95:44:cf:25:13:10:31:84:
         84:57:42:8d:e7:aa:ae:3b:89:56:5a:7a:98:38:51:f6:8d:ad:
         aa:37:05:52:a5:1b:83:cc:ae:79:23:6f:e8:87:e4:53:c9:34:
         84:4e:1b:03:f4:c7:11:52:4d:0c:6e:28:d3:69:cc:dd:19:e6:
         b4:83:a3:a5:fb:5c:b1:df:87:9b:e5:22:95:b1:c9:9e:de:15:
         01:42:ea:09:d3:f3:24:4f:e4:40:97:bc:d9:cc:e7:8f:aa:7d:
         59:c2:42:09:4f:b3:b6:1b:ac:31:07:38:70:66:3e:e3:93:bc:
         d4:76:58:b7:21:f4:d8:55:d5:38:ef:97:07:1e:8a:3c:48:0e:
         ea:f1:3b:06:7f:7d:5e:de:ef:8c:7d:6a:ad:a2:4f:89:f3:c0:
         cb:4e:87:07:97:79:8d:f7:fb:b3:12:dc:da:b0:08:6b:76:86:
         ef:1b:f0:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----