Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/aae17f-c35b-407c-896b-7e57691bbed9/1/214_2Taim0KaFIK070HDJuKTfSo.mft
File:                     214_2Taim0KaFIK070HDJuKTfSo.mft (raw, json)
Hash identifier:          MUwIs2Q4IfDQJi0PxRM5TaNFpQw79k5jYMhQ4jO+430=
Subject key identifier:   9B:2D:75:C4:4F:C2:F5:70:87:2A:B0:D1:D0:93:31:DA:11:A5:6A:CF
Authority key identifier: DB:5E:3F:D9:36:A2:9B:42:9A:14:82:B4:EF:41:C3:26:E2:93:7D:2A
Certificate issuer:       /CN=db5e3fd936a29b429a1482b4ef41c326e2937d2a
Certificate serial:       019BFFF97D5C9D390453BD4067C0321CFFB4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/214_2Taim0KaFIK070HDJuKTfSo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/90/aae17f-c35b-407c-896b-7e57691bbed9/1/214_2Taim0KaFIK070HDJuKTfSo.mft
Manifest number:          17EA
Signing time:             Tue 27 Jan 2026 15:01:39 +0000
Manifest this update:     Tue 27 Jan 2026 15:01:39 +0000
Manifest next update:     Wed 28 Jan 2026 15:01:39 +0000
Files and hashes:         1: 214_2Taim0KaFIK070HDJuKTfSo.crl (hash: 9wFUSlYOd/CX8NvdcP8NwbJwdI2edMcu7k/3b/sVGs0=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:ff:f9:7d:5c:9d:39:04:53:bd:40:67:c0:32:1c:ff:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=db5e3fd936a29b429a1482b4ef41c326e2937d2a
        Validity
            Not Before: Jan 27 15:01:39 2026 GMT
            Not After : Jan 28 15:01:39 2026 GMT
        Subject: CN=9b2d75c44fc2f570872ab0d1d09331da11a56acf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:a5:18:0f:0a:6f:d7:b5:3d:12:48:ec:4a:e8:
                    da:62:76:51:65:a7:b2:a2:ee:36:6c:34:55:a9:9e:
                    b1:9e:ee:3c:8b:51:6d:92:41:a7:f6:07:e8:e0:a8:
                    42:af:4f:3b:d7:2f:48:ad:d1:a0:ab:a5:76:1e:ed:
                    50:76:f4:bd:c2:60:7a:fa:89:b1:26:fb:97:1f:34:
                    8c:68:4a:fd:5f:e9:3b:70:fb:71:5d:a2:f9:6a:b2:
                    4c:6f:f7:fd:ce:b4:02:e1:9d:6d:8a:18:e3:0c:52:
                    e2:65:97:da:a1:b1:3b:b7:da:50:8c:e1:63:ef:bc:
                    fb:56:26:ce:f9:7f:75:8c:09:b1:cf:65:50:e5:9e:
                    d7:50:da:82:0c:4e:95:0c:16:45:cb:a9:65:a0:70:
                    20:b1:d5:e2:02:bd:c9:c9:92:1a:60:18:2e:e7:bc:
                    4c:18:9d:e3:b8:0e:73:06:e6:26:f3:17:60:d5:4d:
                    c5:3d:2e:c2:6f:7c:c4:83:14:8c:0d:7c:ee:6f:11:
                    73:21:43:cb:a9:90:00:8c:52:71:b8:a3:24:99:29:
                    c7:f5:fe:ae:bf:51:ff:20:94:fc:64:76:b0:d7:e9:
                    12:02:48:97:7d:7a:31:a7:10:9a:86:d3:47:4d:d7:
                    87:ee:57:a8:cd:9a:c2:85:45:06:cb:ff:7f:dc:eb:
                    df:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:2D:75:C4:4F:C2:F5:70:87:2A:B0:D1:D0:93:31:DA:11:A5:6A:CF
            X509v3 Authority Key Identifier:
                keyid:DB:5E:3F:D9:36:A2:9B:42:9A:14:82:B4:EF:41:C3:26:E2:93:7D:2A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/214_2Taim0KaFIK070HDJuKTfSo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/aae17f-c35b-407c-896b-7e57691bbed9/1/214_2Taim0KaFIK070HDJuKTfSo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/90/aae17f-c35b-407c-896b-7e57691bbed9/1/214_2Taim0KaFIK070HDJuKTfSo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:18:2d:57:48:4d:3a:3a:ee:32:d9:f3:de:30:15:4f:6e:4c:
         75:68:91:2c:6e:05:54:85:e2:d2:d3:23:b2:a7:cd:1b:46:55:
         89:7f:32:86:9a:8c:7e:f8:b8:51:89:1e:d4:39:65:dc:29:19:
         cb:24:cb:b6:83:50:71:c1:05:ae:89:11:bc:bd:43:aa:cc:1c:
         76:86:93:a9:d8:5e:e0:0c:6e:82:38:95:6b:30:1c:2b:77:08:
         cd:b7:b1:ee:fa:b7:e2:15:68:29:bd:2c:a1:c4:51:8f:86:6f:
         46:74:aa:56:cf:eb:84:d8:3e:08:48:b8:eb:dd:a8:f7:cf:cf:
         db:2f:46:43:dd:a6:24:42:3b:6d:07:0f:ee:f8:b6:38:1e:06:
         46:20:4f:2b:6f:6d:7a:7e:51:03:8a:fc:57:79:d4:c1:fa:7e:
         b4:db:da:92:43:16:ba:4e:97:4b:5d:9b:16:74:63:37:47:01:
         65:9f:86:9a:fb:bc:4a:a2:6c:ac:d7:25:65:8c:8c:8f:56:51:
         c5:2a:68:d6:29:02:05:86:d7:ff:c9:ca:f0:e2:60:5f:e7:10:
         28:87:b4:13:be:91:25:75:ba:c2:61:5d:b0:af:2a:74:3d:bf:
         e2:17:86:98:bd:f5:e3:7d:39:63:a9:d5:96:3b:f3:18:57:96:
         50:46:2a:08
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZv/+X1cnTkEU71AZ8AyHP+0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRiNWUzZmQ5MzZhMjliNDI5YTE0ODJiNGVmNDFjMzI2ZTI5
MzdkMmEwHhcNMjYwMTI3MTUwMTM5WhcNMjYwMTI4MTUwMTM5WjAzMTEwLwYDVQQD
Eyg5YjJkNzVjNDRmYzJmNTcwODcyYWIwZDFkMDkzMzFkYTExYTU2YWNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApqUYDwpv17U9EkjsSujaYnZRZaey
ou42bDRVqZ6xnu48i1FtkkGn9gfo4KhCr0871y9IrdGgq6V2Hu1QdvS9wmB6+omx
JvuXHzSMaEr9X+k7cPtxXaL5arJMb/f9zrQC4Z1tihjjDFLiZZfaobE7t9pQjOFj
77z7VibO+X91jAmxz2VQ5Z7XUNqCDE6VDBZFy6lloHAgsdXiAr3JyZIaYBgu57xM
GJ3juA5zBuYm8xdg1U3FPS7Cb3zEgxSMDXzubxFzIUPLqZAAjFJxuKMkmSnH9f6u
v1H/IJT8ZHaw1+kSAkiXfXoxpxCahtNHTdeH7leozZrChUUGy/9/3OvfQwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJstdcRPwvVwhyqw0dCTMdoRpWrPMB8GA1UdIwQY
MBaAFNteP9k2optCmhSCtO9Bwybik30qMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMjE0XzJUYWltMEthRklLMDcwSERKdUtUZlNvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MC9hYWUxN2YtYzM1Yi00MDdjLTg5NmIt
N2U1NzY5MWJiZWQ5LzEvMjE0XzJUYWltMEthRklLMDcwSERKdUtUZlNvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85MC9hYWUxN2YtYzM1Yi00MDdjLTg5NmItN2U1NzY5MWJiZWQ5
LzEvMjE0XzJUYWltMEthRklLMDcwSERKdUtUZlNvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABhgtV0hN
OjruMtnz3jAVT25MdWiRLG4FVIXi0tMjsqfNG0ZViX8yhpqMfvi4UYke1Dll3CkZ
yyTLtoNQccEFrokRvL1DqswcdoaTqdhe4AxugjiVazAcK3cIzbex7vq34hVoKb0s
ocRRj4ZvRnSqVs/rhNg+CEi4692o98/P2y9GQ92mJEI7bQcP7vi2OB4GRiBPK29t
en5RA4r8V3nUwfp+tNvakkMWuk6XS12bFnRjN0cBZZ+Gmvu8SqJsrNclZYyMj1ZR
xSpo1ikCBYbX/8nK8OJgX+cQKIe0E76RJXW6wmFdsK8qdD2/4heGmL314305Y6nV
ljvzGFeWUEYqCA==
-----END CERTIFICATE-----
Generated at Sat May 16 16:25:01 2026 by rpki-client