Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/99/3086b8-71f3-4a8d-9451-29edfab39f49/1/vDImMeLrfqv7XttPywq4yZaCPEg.mft
File:                     vDImMeLrfqv7XttPywq4yZaCPEg.mft (raw, json)
Hash identifier:          zysDtOEEmvYmxCdi4JOSE2XwkIc9kW/OcDlUARCOfeA=
Subject key identifier:   DB:00:0F:03:37:0B:50:AA:33:46:F4:F8:51:7A:CA:B6:D3:18:3E:F8
Authority key identifier: BC:32:26:31:E2:EB:7E:AB:FB:5E:DB:4F:CB:0A:B8:C9:96:82:3C:48
Certificate issuer:       /CN=bc322631e2eb7eabfb5edb4fcb0ab8c996823c48
Certificate serial:       019F22EBB3924FB5E6412EBCA710B482B7C5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vDImMeLrfqv7XttPywq4yZaCPEg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/99/3086b8-71f3-4a8d-9451-29edfab39f49/1/vDImMeLrfqv7XttPywq4yZaCPEg.mft
Manifest number:          09F0
Signing time:             Thu 02 Jul 2026 13:01:39 +0000
Manifest this update:     Thu 02 Jul 2026 13:01:39 +0000
Manifest next update:     Fri 03 Jul 2026 13:01:39 +0000
Files and hashes:         1: vDImMeLrfqv7XttPywq4yZaCPEg.crl (hash: b3rwEhCztUklWZsG2K5ZlJQRs/RjDwWDNpYQFqWz35c=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:22:eb:b3:92:4f:b5:e6:41:2e:bc:a7:10:b4:82:b7:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bc322631e2eb7eabfb5edb4fcb0ab8c996823c48
        Validity
            Not Before: Jul  2 13:01:39 2026 GMT
            Not After : Jul  3 13:01:39 2026 GMT
        Subject: CN=db000f03370b50aa3346f4f8517acab6d3183ef8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:9b:0c:a7:fb:9c:f0:01:5a:ca:df:a6:3c:f3:
                    e2:76:d8:61:e5:5e:4d:12:b7:e3:75:42:5b:0a:90:
                    99:7f:8b:eb:a6:ae:83:3e:52:26:00:04:2d:c2:68:
                    0f:af:cd:ca:0b:a5:fd:84:93:c7:3a:d2:25:a6:7b:
                    12:7b:88:51:fe:e6:0d:41:3f:04:07:cc:ed:b9:fd:
                    5f:37:17:73:74:7a:23:a1:70:64:90:b1:e8:13:3c:
                    66:5f:29:d1:ee:94:b1:74:91:fd:94:d9:34:f5:41:
                    8e:22:ca:bc:e4:80:0b:a3:d6:4a:6a:0f:82:30:37:
                    b5:a0:b5:26:e5:00:fd:ff:78:be:1b:33:6e:3d:22:
                    b8:ac:5e:42:79:92:80:cb:90:77:d2:36:11:49:60:
                    d7:ef:dc:2b:53:07:43:8d:d6:c3:6e:b3:49:c4:4f:
                    16:48:56:b2:64:fb:a0:ed:85:2c:d9:8b:5b:d4:4c:
                    f7:5c:8a:ae:f5:ab:fd:89:ff:c8:87:9b:64:58:8a:
                    92:e0:52:2d:93:2d:8f:95:93:5b:e7:23:fd:c3:c2:
                    0d:49:70:f3:a9:00:b7:06:ec:c2:9a:a6:67:0f:8e:
                    40:fe:23:0c:e1:7c:11:cf:d6:4e:27:5e:67:f6:e1:
                    89:56:6f:58:3c:8a:5b:bd:ff:27:ce:3e:b0:d8:3b:
                    fb:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:00:0F:03:37:0B:50:AA:33:46:F4:F8:51:7A:CA:B6:D3:18:3E:F8
            X509v3 Authority Key Identifier:
                keyid:BC:32:26:31:E2:EB:7E:AB:FB:5E:DB:4F:CB:0A:B8:C9:96:82:3C:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vDImMeLrfqv7XttPywq4yZaCPEg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/3086b8-71f3-4a8d-9451-29edfab39f49/1/vDImMeLrfqv7XttPywq4yZaCPEg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/99/3086b8-71f3-4a8d-9451-29edfab39f49/1/vDImMeLrfqv7XttPywq4yZaCPEg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c2:72:6a:a3:6b:5d:13:85:dd:f2:b1:86:d1:42:59:81:a2:e6:
         11:ed:87:19:df:3f:68:d4:d0:3a:95:43:f5:84:e4:c3:b9:6d:
         30:72:c6:3b:dd:2f:02:61:dd:97:b8:bb:b3:df:c6:20:df:b3:
         62:15:5d:34:ac:27:16:d7:19:e9:ab:ae:b7:13:ca:05:97:90:
         53:18:23:c3:f3:a3:b1:b8:72:97:42:a1:df:02:fa:c2:b9:2d:
         a4:ad:d0:f5:cc:78:f3:50:76:3d:6d:8f:5f:13:bf:74:aa:f1:
         6b:c2:65:20:25:18:90:4e:af:40:9a:7a:77:52:83:74:e7:42:
         be:f2:59:a5:a6:d0:75:d5:cb:c9:b2:0f:fa:95:81:60:b4:2e:
         ce:50:c2:6b:ad:58:c2:57:e0:e1:c3:e7:37:d6:69:19:73:d2:
         03:cf:40:a3:ba:a1:0a:a2:30:29:92:af:76:cf:24:d7:e0:87:
         47:ec:8a:ed:24:c0:ba:61:11:01:52:9c:a0:77:4d:1b:02:75:
         c9:06:e7:43:e3:8d:c9:78:ed:44:b4:4c:a9:a7:1f:f7:67:02:
         18:59:1f:91:51:cf:82:c5:e0:b3:46:26:72:41:18:78:db:b9:
         aa:22:e6:72:92:5e:24:c6:24:2c:0b:28:35:b0:b6:06:e4:41:
         5b:c5:63:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----