Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/91/ef40b8-8313-4618-9d35-eddef87e241b/1/3Rm1BHrMV9_dL4cEV2SVb0tgMGY.mft
File:                     3Rm1BHrMV9_dL4cEV2SVb0tgMGY.mft (raw, json)
Hash identifier:          q6daQkA4Adn69mczmSS2ryfPpCwT0BVaOH2nkP0je3s=
Subject key identifier:   71:11:10:C2:EF:D7:FC:1F:E6:C9:1B:26:82:F3:DF:1B:9F:05:6B:8B
Authority key identifier: DD:19:B5:04:7A:CC:57:DF:DD:2F:87:04:57:64:95:6F:4B:60:30:66
Certificate issuer:       /CN=dd19b5047acc57dfdd2f87045764956f4b603066
Certificate serial:       019F22EC2B4AF19889A70ACA73A1DD9F5920
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3Rm1BHrMV9_dL4cEV2SVb0tgMGY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/91/ef40b8-8313-4618-9d35-eddef87e241b/1/3Rm1BHrMV9_dL4cEV2SVb0tgMGY.mft
Manifest number:          10A8
Signing time:             Thu 02 Jul 2026 13:02:10 +0000
Manifest this update:     Thu 02 Jul 2026 13:02:10 +0000
Manifest next update:     Fri 03 Jul 2026 13:02:10 +0000
Files and hashes:         1: 3Rm1BHrMV9_dL4cEV2SVb0tgMGY.crl (hash: b/GlbudGUCf87wQaWhj/p6CWFjO1HgLCqozjIIeKCUM=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:22:ec:2b:4a:f1:98:89:a7:0a:ca:73:a1:dd:9f:59:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dd19b5047acc57dfdd2f87045764956f4b603066
        Validity
            Not Before: Jul  2 13:02:10 2026 GMT
            Not After : Jul  3 13:02:10 2026 GMT
        Subject: CN=711110c2efd7fc1fe6c91b2682f3df1b9f056b8b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:2f:1c:ac:b5:58:6d:d5:2d:07:47:72:b8:ad:
                    a2:0a:b4:8b:54:19:fa:7d:fa:01:10:3e:7a:03:4d:
                    2c:8f:f2:2e:a3:26:7c:88:c0:8a:f3:6b:56:23:8f:
                    54:79:1a:96:5e:7c:d3:48:35:e1:37:7f:7f:e6:d1:
                    3d:a9:ec:22:c8:e3:b3:6d:bc:73:53:73:16:e3:d4:
                    4c:84:b0:6d:43:3e:ea:6b:77:8c:c2:60:f2:9c:9c:
                    6e:1b:f5:e9:73:99:c0:7e:23:34:96:ab:46:cc:1c:
                    a8:f3:ec:3c:0f:3a:cf:ee:0f:f3:10:81:34:9f:d0:
                    30:0d:a2:b4:b9:19:e6:9b:17:dc:42:a8:25:ad:15:
                    c3:7c:e1:db:f6:fc:bf:9d:cf:5d:10:14:4b:58:d0:
                    2b:0a:a2:99:38:a2:ff:86:92:30:8f:69:b3:1d:7e:
                    d4:c6:47:61:ff:64:1b:48:58:59:f7:0b:a6:94:fc:
                    f2:53:3a:6d:32:4d:e1:34:ed:4e:e4:27:65:34:5d:
                    10:43:77:a5:b4:f4:1c:09:1c:ae:34:00:92:d0:a3:
                    b3:94:5c:8b:f1:2b:59:76:21:37:76:df:50:6b:69:
                    34:29:4d:8e:71:a1:30:a8:4e:13:6f:1c:41:8e:ce:
                    aa:f4:da:e5:9a:48:15:da:74:5f:7c:8e:f1:8b:c7:
                    13:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:11:10:C2:EF:D7:FC:1F:E6:C9:1B:26:82:F3:DF:1B:9F:05:6B:8B
            X509v3 Authority Key Identifier:
                keyid:DD:19:B5:04:7A:CC:57:DF:DD:2F:87:04:57:64:95:6F:4B:60:30:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3Rm1BHrMV9_dL4cEV2SVb0tgMGY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/ef40b8-8313-4618-9d35-eddef87e241b/1/3Rm1BHrMV9_dL4cEV2SVb0tgMGY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/91/ef40b8-8313-4618-9d35-eddef87e241b/1/3Rm1BHrMV9_dL4cEV2SVb0tgMGY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:45:81:d8:10:a1:20:da:4d:32:c7:18:f0:1a:6d:61:4e:f9:
         cb:2e:38:bb:30:a4:5d:48:54:d3:e9:db:66:b4:05:91:6b:4d:
         b5:8a:09:d6:62:7c:e3:28:b8:6a:27:82:0f:81:bc:0a:f9:bb:
         0d:30:52:46:6f:a8:f3:e0:76:53:09:aa:4a:06:4e:f4:e0:94:
         23:ff:48:49:c5:86:d9:c3:ff:94:89:74:1e:ec:fe:a5:e1:be:
         8b:98:85:4d:ba:5a:ed:08:23:ce:5c:17:c4:96:30:31:ca:8d:
         cd:2c:b3:0f:bd:d1:f5:1d:f5:38:21:56:e6:0b:0f:88:17:f7:
         0f:b4:d0:b1:83:21:2b:a2:18:20:49:74:54:af:f7:a9:24:8b:
         6b:60:bf:b1:71:67:24:14:c4:eb:aa:3a:24:e7:c5:97:a8:6a:
         51:60:4d:21:39:68:2f:bc:80:14:0b:bd:bf:49:96:c8:07:96:
         1f:3d:12:19:66:34:26:6d:0e:a2:d1:3c:9f:41:b6:a5:90:c1:
         55:ac:60:d1:62:a0:94:5b:37:e3:ce:83:5c:5e:d5:89:e1:ff:
         78:5e:4c:3e:f2:63:b8:8e:05:51:d5:ff:1c:bb:91:8a:51:4f:
         e1:24:0f:01:9e:91:41:05:e6:cc:fd:33:f7:80:9c:19:a9:40:
         d9:b0:7e:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----