Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/90/4afeab-02b9-4ebd-bfa2-8e80b496a03e/1/TgTgpximE5qcZfDUiGu4JxTaZoI.mft
File:                     TgTgpximE5qcZfDUiGu4JxTaZoI.mft (raw, json)
Hash identifier:          1+zONw7tNMKk7528utGUBfIszeUMPlgjVNA6KwSggYI=
Subject key identifier:   B7:A9:9B:ED:C8:70:09:DC:A6:75:97:68:2F:15:8D:A1:A6:BC:68:8A
Authority key identifier: 4E:04:E0:A7:18:A6:13:9A:9C:65:F0:D4:88:6B:B8:27:14:DA:66:82
Certificate issuer:       /CN=4e04e0a718a6139a9c65f0d4886bb82714da6682
Certificate serial:       019D04413FDEEAC927A3125E7EB0A359826B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TgTgpximE5qcZfDUiGu4JxTaZoI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/90/4afeab-02b9-4ebd-bfa2-8e80b496a03e/1/TgTgpximE5qcZfDUiGu4JxTaZoI.mft
Manifest number:          1875
Signing time:             Thu 19 Mar 2026 04:01:18 +0000
Manifest this update:     Thu 19 Mar 2026 04:01:18 +0000
Manifest next update:     Fri 20 Mar 2026 04:01:18 +0000
Files and hashes:         1: 5Nquyk_YS8j83lcZJdiswq8j9kg.roa (hash: BfZqdxUYisJtcIB1bX8hB4ZBa8K5totO7lD83EBGvt4=)
                          2: TgTgpximE5qcZfDUiGu4JxTaZoI.crl (hash: cfLkOFcy7i8hx/r0ONgXeTCtrfejEIc1kZ9KfgHhCCU=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:04:41:3f:de:ea:c9:27:a3:12:5e:7e:b0:a3:59:82:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e04e0a718a6139a9c65f0d4886bb82714da6682
        Validity
            Not Before: Mar 19 04:01:18 2026 GMT
            Not After : Mar 20 04:01:18 2026 GMT
        Subject: CN=b7a99bedc87009dca67597682f158da1a6bc688a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:b8:07:ff:f0:14:15:82:3a:2a:af:c8:0b:e1:
                    92:3a:1a:88:5b:4c:98:2a:8c:f0:e4:be:00:78:6b:
                    09:ca:f1:ba:54:c9:72:fd:6a:f6:77:6a:38:ce:0a:
                    ad:c4:d8:bc:3e:8a:20:31:ed:ca:50:81:a2:71:43:
                    ec:87:53:3f:40:b0:dd:c1:98:fc:cb:eb:86:73:7b:
                    ab:72:80:36:fc:f2:48:b1:10:05:bc:5e:e8:46:41:
                    a5:c7:5e:b6:40:d7:1a:f8:63:d0:94:51:96:10:1e:
                    49:ae:38:6b:34:a4:3d:f9:2a:45:06:68:2c:81:19:
                    09:d6:1e:21:da:f4:10:ed:ec:2f:96:fd:9b:16:71:
                    57:27:e4:81:76:1e:51:86:e9:04:63:4d:a9:e5:34:
                    22:c2:4f:c9:54:51:21:8b:2c:b9:b5:b1:e3:f8:cc:
                    ab:5c:4b:e1:eb:65:63:cb:b8:32:d9:f1:f9:09:72:
                    83:45:29:d9:77:89:8e:28:20:88:ca:c5:cd:9b:59:
                    5c:5f:2d:3f:89:b9:a5:e0:a1:de:d2:48:aa:9c:92:
                    1b:39:b9:c1:b0:be:46:79:61:f4:a9:fe:75:e6:cd:
                    20:82:1c:73:d6:da:83:2b:68:bc:33:27:ec:12:01:
                    94:e0:2d:bd:06:6b:98:86:52:a3:7b:40:0b:6f:57:
                    1c:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:A9:9B:ED:C8:70:09:DC:A6:75:97:68:2F:15:8D:A1:A6:BC:68:8A
            X509v3 Authority Key Identifier:
                keyid:4E:04:E0:A7:18:A6:13:9A:9C:65:F0:D4:88:6B:B8:27:14:DA:66:82

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TgTgpximE5qcZfDUiGu4JxTaZoI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/4afeab-02b9-4ebd-bfa2-8e80b496a03e/1/TgTgpximE5qcZfDUiGu4JxTaZoI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/90/4afeab-02b9-4ebd-bfa2-8e80b496a03e/1/TgTgpximE5qcZfDUiGu4JxTaZoI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b6:4b:6b:83:cd:70:6c:75:9c:0d:d1:6d:7b:0e:95:4d:85:f4:
         d2:15:cb:9c:0d:3c:6f:38:c1:ab:24:6c:36:72:0c:d0:7f:50:
         89:42:90:71:74:e7:7d:7e:88:2d:5b:85:4b:98:34:1f:03:43:
         64:37:c7:69:57:ba:d4:6d:28:4a:1e:81:46:9c:19:9f:fe:9d:
         0e:59:09:82:5e:d4:aa:c5:14:25:92:cb:3a:9c:81:86:ce:14:
         54:7f:a6:04:96:fe:f0:00:13:80:52:87:fe:26:d4:ee:97:91:
         b5:c9:8f:ef:a6:09:10:cc:58:c6:06:63:60:6c:0a:1c:e3:56:
         33:61:7f:f9:04:f6:d6:31:8b:65:75:4d:73:a4:45:35:aa:aa:
         d5:81:6d:0f:e4:5d:71:8d:cd:0f:ef:ec:24:c0:3d:9c:70:11:
         57:21:82:5e:4a:c1:2b:de:51:d7:0e:b1:18:3e:62:7e:a3:1f:
         dc:60:d2:f3:81:5d:21:66:90:c4:f5:05:e3:08:7c:65:ee:1d:
         6e:bc:ba:10:89:67:1a:5b:2d:ca:9c:a1:a6:a2:64:29:e3:7f:
         f5:87:06:2d:6f:2e:ba:90:d2:12:1d:4a:d0:9d:cf:14:43:08:
         54:bc:7a:cb:d0:8e:8b:f1:37:2c:8e:df:3f:98:53:7b:98:f6:
         9b:0c:fb:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----