Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8a/42c1bf-89ff-482f-9f14-498dd1d307d0/1/YepnO-KLST26RBhw-1Dlmg0cF8U.mft
File:                     YepnO-KLST26RBhw-1Dlmg0cF8U.mft (raw, json)
Hash identifier:          nMLSswXwipgTouR55cF8s/GPe9SG7jnuHorR/sHVnAA=
Subject key identifier:   98:0E:4E:82:7B:DD:CB:85:81:5B:1C:CB:03:CC:F1:3A:88:10:3D:D2
Authority key identifier: 61:EA:67:3B:E2:8B:49:3D:BA:44:18:70:FB:50:E5:9A:0D:1C:17:C5
Certificate issuer:       /CN=61ea673be28b493dba441870fb50e59a0d1c17c5
Certificate serial:       019F22EC4ED1A2DFF140ACD20A722D4798F1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YepnO-KLST26RBhw-1Dlmg0cF8U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8a/42c1bf-89ff-482f-9f14-498dd1d307d0/1/YepnO-KLST26RBhw-1Dlmg0cF8U.mft
Manifest number:          198D
Signing time:             Thu 02 Jul 2026 13:02:19 +0000
Manifest this update:     Thu 02 Jul 2026 13:02:19 +0000
Manifest next update:     Fri 03 Jul 2026 13:02:19 +0000
Files and hashes:         1: YepnO-KLST26RBhw-1Dlmg0cF8U.crl (hash: w8LWyvUolyqNqFhRmd9ITV6sypqmiWgK9F6Y9rTkcTw=)
                          2: gIm5Ttt-kadA-HHnl7K2QS3zq4w.roa (hash: k0VLghPFfRvkCor9JH91D2V2IGF1FkPmkcYrg5K87ZU=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:22:ec:4e:d1:a2:df:f1:40:ac:d2:0a:72:2d:47:98:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61ea673be28b493dba441870fb50e59a0d1c17c5
        Validity
            Not Before: Jul  2 13:02:19 2026 GMT
            Not After : Jul  3 13:02:19 2026 GMT
        Subject: CN=980e4e827bddcb85815b1ccb03ccf13a88103dd2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:1d:25:98:12:1f:31:71:06:99:77:51:07:95:
                    3f:a9:1f:5f:16:10:40:9f:37:5e:60:c2:7e:74:f6:
                    f7:a8:a1:d8:e7:ff:79:f2:eb:ec:cc:ee:69:d4:61:
                    6c:32:c8:b3:2d:8b:65:1e:e0:a8:03:5d:7c:f4:8b:
                    62:4e:0a:e3:5e:c3:54:db:92:87:db:03:49:90:ef:
                    9f:98:c8:2a:3f:49:84:8e:fe:6a:6a:52:33:e5:fb:
                    0a:9d:2b:83:12:a3:4a:17:84:3c:ea:dd:06:ed:84:
                    f3:a8:7f:ec:f1:59:77:dc:17:28:0e:76:96:c6:0e:
                    21:72:b7:ef:b7:33:68:ac:fe:10:42:5e:11:bc:ba:
                    ef:bd:31:ef:5e:5f:b1:d8:e4:95:3d:43:05:cc:92:
                    85:6f:48:4a:da:35:e6:88:ac:aa:25:56:5e:84:66:
                    ec:e8:85:22:66:58:1e:ff:bd:1f:ac:f7:75:25:36:
                    fa:63:86:e4:fb:9f:d5:09:a0:9c:d8:29:26:89:27:
                    64:e6:3d:85:42:7a:0f:d0:bc:f9:e9:c2:c2:e8:ac:
                    92:9d:95:2e:b1:a4:c9:76:c7:db:6e:73:60:d9:ea:
                    74:92:76:fd:ad:5b:b1:84:cf:da:bf:19:05:59:34:
                    68:f1:45:2a:88:24:56:65:25:5f:02:c6:78:30:c3:
                    30:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:0E:4E:82:7B:DD:CB:85:81:5B:1C:CB:03:CC:F1:3A:88:10:3D:D2
            X509v3 Authority Key Identifier:
                keyid:61:EA:67:3B:E2:8B:49:3D:BA:44:18:70:FB:50:E5:9A:0D:1C:17:C5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YepnO-KLST26RBhw-1Dlmg0cF8U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/42c1bf-89ff-482f-9f14-498dd1d307d0/1/YepnO-KLST26RBhw-1Dlmg0cF8U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/42c1bf-89ff-482f-9f14-498dd1d307d0/1/YepnO-KLST26RBhw-1Dlmg0cF8U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:87:fb:d6:39:93:8d:f7:0a:48:88:c7:e3:90:84:42:ed:60:
         dd:9c:c4:85:36:25:d4:3d:23:a7:3c:9b:e2:0e:39:db:8c:66:
         06:9b:28:2c:ec:70:23:a6:ff:a8:2e:d4:cb:02:85:73:44:36:
         36:1b:91:3f:76:2b:a3:b3:91:78:79:8a:0d:c9:ff:30:f7:f0:
         98:46:8d:e9:75:93:c2:f4:a9:82:ad:61:c5:b2:18:b9:54:f3:
         bb:b6:58:e0:d2:13:3d:5b:c4:aa:d0:29:76:b8:93:03:4a:c7:
         a3:55:47:08:e6:73:b7:c9:2c:17:ea:a9:0b:b2:93:b3:9e:f2:
         1c:a0:f0:bb:87:51:39:87:3b:3b:fb:bb:e7:5b:52:35:73:b5:
         cb:98:c2:fb:98:26:f6:c9:bb:bf:6c:9c:c3:3d:e5:75:d7:2d:
         45:36:9d:98:df:e7:04:f3:8d:fc:6d:22:05:b4:6d:6f:a2:bb:
         e0:96:ab:98:c0:05:b5:c8:7e:fc:4e:0b:89:8f:4c:7b:33:7f:
         9b:70:41:02:8b:3b:3a:e8:57:66:69:bc:00:b6:00:40:aa:02:
         5f:da:10:17:46:93:93:ff:ae:dc:11:4b:48:5f:0c:50:f1:98:
         08:0a:ca:9c:a1:81:62:06:a7:4e:91:5d:a9:56:ff:62:73:ad:
         0f:0b:07:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----