Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/98/c92bd2-fba9-4794-ac9a-c911568c8c64/1/tDGAKt-CucbF8IagvPYLr9MnyGU.mft
File:                     tDGAKt-CucbF8IagvPYLr9MnyGU.mft (raw, json)
Hash identifier:          B3s0G3EkAwpFtXX6USOGU1f/LguoqQUN6G+VOoKtU60=
Subject key identifier:   2D:77:73:57:6E:D8:1D:FD:DC:35:5A:87:0B:08:3E:0F:9A:7D:7A:D8
Authority key identifier: B4:31:80:2A:DF:82:B9:C6:C5:F0:86:A0:BC:F6:0B:AF:D3:27:C8:65
Certificate issuer:       /CN=b431802adf82b9c6c5f086a0bcf60bafd327c865
Certificate serial:       019F34F17347D4F5B0EDD41D08280B856998
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tDGAKt-CucbF8IagvPYLr9MnyGU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/98/c92bd2-fba9-4794-ac9a-c911568c8c64/1/tDGAKt-CucbF8IagvPYLr9MnyGU.mft
Manifest number:          0892
Signing time:             Mon 06 Jul 2026 01:01:06 +0000
Manifest this update:     Mon 06 Jul 2026 01:01:06 +0000
Manifest next update:     Tue 07 Jul 2026 01:01:06 +0000
Files and hashes:         1: tDGAKt-CucbF8IagvPYLr9MnyGU.crl (hash: 2mxBr+4SNWDPuYuW0k0U0FTMdjj2XQWUp4LOpYooTt4=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:34:f1:73:47:d4:f5:b0:ed:d4:1d:08:28:0b:85:69:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b431802adf82b9c6c5f086a0bcf60bafd327c865
        Validity
            Not Before: Jul  6 01:01:06 2026 GMT
            Not After : Jul  7 01:01:06 2026 GMT
        Subject: CN=2d7773576ed81dfddc355a870b083e0f9a7d7ad8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:37:1b:2a:9d:5e:ed:d4:9e:ea:36:d0:82:7b:
                    32:49:c9:c2:5c:90:87:93:ba:73:b1:77:68:8a:b1:
                    b8:15:72:cf:5b:7c:a3:f1:60:9e:6b:56:d5:c7:fd:
                    b5:b6:b8:40:59:de:87:c3:c3:c7:b1:37:a3:40:ab:
                    bb:21:ec:4c:27:69:ae:2e:7e:4b:96:2c:fe:a2:70:
                    b5:60:7a:69:6b:b3:d6:3d:6b:47:8a:b2:3c:92:db:
                    3a:2e:e9:1d:96:a7:43:b7:f3:61:14:0e:f1:67:0d:
                    e9:6d:22:4c:3b:7a:b0:e4:96:25:c9:57:e4:f4:b8:
                    46:b4:c6:e7:0d:3e:56:e1:60:27:64:c4:f6:2b:74:
                    e6:b2:0a:d9:7f:b8:ee:93:00:16:6b:ef:0d:c0:c0:
                    1b:70:b0:93:75:94:c3:24:cf:e7:d2:36:32:98:b4:
                    e2:b3:c2:8a:ee:62:21:a9:86:16:b8:61:0d:d4:92:
                    d4:f7:a2:25:e7:a6:13:0b:d9:ef:a7:40:4f:1e:1b:
                    55:5a:b1:98:16:91:b2:ce:16:e2:2f:49:df:f4:ed:
                    e3:ae:7f:bd:a5:84:a5:b0:f4:14:b0:7b:b7:0c:67:
                    4c:e1:77:76:53:fc:0d:c8:69:3a:71:ca:2b:91:9a:
                    df:b8:79:bf:44:77:49:ed:3f:51:83:68:a6:95:61:
                    08:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:77:73:57:6E:D8:1D:FD:DC:35:5A:87:0B:08:3E:0F:9A:7D:7A:D8
            X509v3 Authority Key Identifier:
                keyid:B4:31:80:2A:DF:82:B9:C6:C5:F0:86:A0:BC:F6:0B:AF:D3:27:C8:65

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tDGAKt-CucbF8IagvPYLr9MnyGU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/c92bd2-fba9-4794-ac9a-c911568c8c64/1/tDGAKt-CucbF8IagvPYLr9MnyGU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/98/c92bd2-fba9-4794-ac9a-c911568c8c64/1/tDGAKt-CucbF8IagvPYLr9MnyGU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:ca:0a:84:f5:06:78:fc:b3:19:4b:16:0e:0e:ea:57:e4:fd:
         a5:6d:9c:de:91:1b:de:05:b6:d2:80:68:d3:99:85:7a:99:12:
         46:77:64:f3:8c:f1:86:8b:64:ba:81:15:e3:3a:fd:7e:ec:14:
         3a:de:23:4f:c5:d0:45:6e:46:62:4b:e0:de:62:59:62:b0:20:
         bd:b8:74:2a:65:b9:b2:d0:aa:0b:29:a9:6a:d2:03:96:38:9c:
         3f:13:d8:59:19:28:e6:db:3a:17:63:91:c7:fa:99:b9:95:ea:
         83:13:de:21:02:54:e1:29:15:d8:f9:75:46:ea:b7:52:1c:ff:
         99:88:1f:dd:ce:af:aa:ea:a2:b5:a3:0f:2d:75:bb:86:0b:f0:
         b4:ad:67:fa:d5:dd:28:72:bb:15:97:79:f7:df:11:e7:73:87:
         07:f5:00:c4:ac:02:29:4e:1e:9d:a2:f4:b6:ee:ef:1e:cf:7c:
         94:00:93:1d:e1:c4:65:a1:e0:73:70:77:3f:9b:62:cc:7c:92:
         d4:b3:40:83:d8:ab:05:af:60:53:d8:cf:71:20:26:9f:fe:36:
         b4:f7:31:62:8f:70:8d:4f:03:ae:67:73:0e:28:60:3c:7c:6e:
         49:8e:04:cc:3d:32:58:93:a3:d3:2a:0e:85:89:03:f2:f6:aa:
         fc:ac:66:12
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ808XNH1PWw7dQdCCgLhWmYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI0MzE4MDJhZGY4MmI5YzZjNWYwODZhMGJjZjYwYmFmZDMy
N2M4NjUwHhcNMjYwNzA2MDEwMTA2WhcNMjYwNzA3MDEwMTA2WjAzMTEwLwYDVQQD
EygyZDc3NzM1NzZlZDgxZGZkZGMzNTVhODcwYjA4M2UwZjlhN2Q3YWQ4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwTcbKp1e7dSe6jbQgnsyScnCXJCH
k7pzsXdoirG4FXLPW3yj8WCea1bVx/21trhAWd6Hw8PHsTejQKu7IexMJ2muLn5L
liz+onC1YHppa7PWPWtHirI8kts6LukdlqdDt/NhFA7xZw3pbSJMO3qw5JYlyVfk
9LhGtMbnDT5W4WAnZMT2K3TmsgrZf7jukwAWa+8NwMAbcLCTdZTDJM/n0jYymLTi
s8KK7mIhqYYWuGEN1JLU96Il56YTC9nvp0BPHhtVWrGYFpGyzhbiL0nf9O3jrn+9
pYSlsPQUsHu3DGdM4Xd2U/wNyGk6ccorkZrfuHm/RHdJ7T9Rg2imlWEIkQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFC13c1du2B393DVahwsIPg+afXrYMB8GA1UdIwQY
MBaAFLQxgCrfgrnGxfCGoLz2C6/TJ8hlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdERHQUt0LUN1Y2JGOElhZ3ZQWUxyOU1ueUdVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OC9jOTJiZDItZmJhOS00Nzk0LWFjOWEt
YzkxMTU2OGM4YzY0LzEvdERHQUt0LUN1Y2JGOElhZ3ZQWUxyOU1ueUdVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85OC9jOTJiZDItZmJhOS00Nzk0LWFjOWEtYzkxMTU2OGM4YzY0
LzEvdERHQUt0LUN1Y2JGOElhZ3ZQWUxyOU1ueUdVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFMoKhPUG
ePyzGUsWDg7qV+T9pW2c3pEb3gW20oBo05mFepkSRndk84zxhotkuoEV4zr9fuwU
Ot4jT8XQRW5GYkvg3mJZYrAgvbh0KmW5stCqCympatIDljicPxPYWRko5ts6F2OR
x/qZuZXqgxPeIQJU4SkV2Pl1Ruq3Uhz/mYgf3c6vquqitaMPLXW7hgvwtK1n+tXd
KHK7FZd5998R53OHB/UAxKwCKU4enaL0tu7vHs98lACTHeHEZaHgc3B3P5tizHyS
1LNAg9irBa9gU9jPcSAmn/42tPcxYo9wjU8DrmdzDihgPHxuSY4EzD0yWJOj0yoO
hYkD8vaq/KxmEg==
-----END CERTIFICATE-----