Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9a/b4c9d5-e27f-44bf-ba42-6c3d11d40d78/1/YjqxggzkjFedpAxm2FJl8cLPy04.mft
File:                     YjqxggzkjFedpAxm2FJl8cLPy04.mft (raw, json)
Hash identifier:          wTd6WQIA+kz1eS9VUoikWszY7AiUjpUPJS1TTS0aCyA=
Subject key identifier:   89:6A:07:B0:29:AD:11:C1:C1:DA:F6:D5:D3:9A:F4:32:48:B4:98:43
Authority key identifier: 62:3A:B1:82:0C:E4:8C:57:9D:A4:0C:66:D8:52:65:F1:C2:CF:CB:4E
Certificate issuer:       /CN=623ab1820ce48c579da40c66d85265f1c2cfcb4e
Certificate serial:       019F21D9EA08EDF814DAB9FFBB004CFF75B4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YjqxggzkjFedpAxm2FJl8cLPy04.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9a/b4c9d5-e27f-44bf-ba42-6c3d11d40d78/1/YjqxggzkjFedpAxm2FJl8cLPy04.mft
Manifest number:          0A11
Signing time:             Thu 02 Jul 2026 08:02:37 +0000
Manifest this update:     Thu 02 Jul 2026 08:02:37 +0000
Manifest next update:     Fri 03 Jul 2026 08:02:37 +0000
Files and hashes:         1: YjqxggzkjFedpAxm2FJl8cLPy04.crl (hash: 0Hbid9A4EoXWME9B/kEZm/9pI/ftpG2Kh0LApdQeRzE=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:21:d9:ea:08:ed:f8:14:da:b9:ff:bb:00:4c:ff:75:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=623ab1820ce48c579da40c66d85265f1c2cfcb4e
        Validity
            Not Before: Jul  2 08:02:37 2026 GMT
            Not After : Jul  3 08:02:37 2026 GMT
        Subject: CN=896a07b029ad11c1c1daf6d5d39af43248b49843
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:07:55:4c:0c:e5:09:f4:69:7f:9c:f6:4d:3a:
                    ee:e5:b7:0f:93:98:52:09:bd:1f:50:f7:6f:e1:6e:
                    75:59:66:d5:b7:48:7a:a7:57:c1:af:c2:6a:76:35:
                    c5:1b:ba:94:56:10:8f:1b:2f:fb:44:6b:de:f7:0c:
                    e8:f1:13:3f:ce:e7:66:6c:50:43:0c:3b:42:47:65:
                    8f:10:07:54:a9:70:ea:35:12:9f:17:79:9a:99:6d:
                    57:1c:a2:ef:e9:6d:7b:e3:34:bb:3a:c9:bb:d5:04:
                    e5:4e:0d:1b:90:67:22:18:08:07:ea:72:81:11:b5:
                    48:34:12:32:b5:13:be:c1:f1:ab:c2:24:12:8b:14:
                    a7:81:ba:c9:ca:05:fe:0e:e7:d2:ae:89:4d:ba:dd:
                    79:8f:0b:ba:62:42:d5:35:1a:66:98:cf:9d:b4:4b:
                    6b:eb:5b:31:06:95:fd:08:de:2d:c9:f6:8d:99:01:
                    04:14:6f:dd:59:e8:64:2c:72:45:08:5d:bf:9e:b0:
                    9f:ac:68:d7:d2:d9:45:e1:d3:b8:09:d6:c7:0b:28:
                    93:71:35:0c:70:42:8b:fc:11:e2:f7:07:4e:02:23:
                    ad:43:96:f2:c7:b3:73:61:78:3b:7a:fb:de:88:66:
                    54:4e:56:3f:c8:b3:e8:57:e9:8c:51:4f:6f:69:70:
                    10:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:6A:07:B0:29:AD:11:C1:C1:DA:F6:D5:D3:9A:F4:32:48:B4:98:43
            X509v3 Authority Key Identifier:
                keyid:62:3A:B1:82:0C:E4:8C:57:9D:A4:0C:66:D8:52:65:F1:C2:CF:CB:4E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YjqxggzkjFedpAxm2FJl8cLPy04.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/b4c9d5-e27f-44bf-ba42-6c3d11d40d78/1/YjqxggzkjFedpAxm2FJl8cLPy04.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/b4c9d5-e27f-44bf-ba42-6c3d11d40d78/1/YjqxggzkjFedpAxm2FJl8cLPy04.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:75:20:ad:6f:2b:d8:2b:8e:50:68:95:3c:de:68:dd:17:8b:
         7a:a7:a8:59:c8:b9:0a:72:a1:54:12:1e:63:43:2b:7a:c9:41:
         91:10:cd:5b:8e:23:3a:8b:19:46:63:1b:57:f9:0e:f7:ff:86:
         86:da:2b:1e:34:fa:69:4b:ce:e7:3d:7a:e8:e3:fa:91:61:6e:
         b0:3a:75:88:5d:3c:5f:be:98:1e:37:93:8c:4e:8e:e4:0b:3b:
         f1:fa:6e:bf:63:50:5b:a3:97:62:8d:03:57:72:5b:4c:01:3e:
         2c:ee:83:eb:3a:c3:35:75:48:f8:39:b4:b6:00:da:e8:f3:c7:
         1a:4c:3e:ce:39:5a:b0:30:69:94:a7:ac:5b:9d:7f:13:cd:f0:
         c4:21:3b:0c:5e:c8:4b:0a:08:36:47:38:e7:d4:7f:84:3d:df:
         67:f9:c6:9e:4f:d2:da:cd:ff:23:22:49:ad:37:0d:3d:51:eb:
         90:e8:6f:e2:c6:8e:4a:a9:b3:0f:15:c8:73:ac:83:ff:14:90:
         6a:7c:0a:ce:d4:ff:7c:40:ee:04:84:ab:c1:8c:be:21:c8:7a:
         20:5a:2c:0b:71:52:1a:07:00:47:4b:a0:f5:93:28:af:5d:45:
         59:10:bd:a4:d6:f3:31:8c:cc:ec:b5:94:47:64:f9:da:ce:7c:
         e6:75:6b:b3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ8h2eoI7fgU2rn/uwBM/3W0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYyM2FiMTgyMGNlNDhjNTc5ZGE0MGM2NmQ4NTI2NWYxYzJj
ZmNiNGUwHhcNMjYwNzAyMDgwMjM3WhcNMjYwNzAzMDgwMjM3WjAzMTEwLwYDVQQD
Eyg4OTZhMDdiMDI5YWQxMWMxYzFkYWY2ZDVkMzlhZjQzMjQ4YjQ5ODQzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwAdVTAzlCfRpf5z2TTru5bcPk5hS
Cb0fUPdv4W51WWbVt0h6p1fBr8JqdjXFG7qUVhCPGy/7RGve9wzo8RM/zudmbFBD
DDtCR2WPEAdUqXDqNRKfF3mamW1XHKLv6W174zS7Osm71QTlTg0bkGciGAgH6nKB
EbVINBIytRO+wfGrwiQSixSngbrJygX+DufSrolNut15jwu6YkLVNRpmmM+dtEtr
61sxBpX9CN4tyfaNmQEEFG/dWehkLHJFCF2/nrCfrGjX0tlF4dO4CdbHCyiTcTUM
cEKL/BHi9wdOAiOtQ5byx7NzYXg7evveiGZUTlY/yLPoV+mMUU9vaXAQtwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIlqB7AprRHBwdr21dOa9DJItJhDMB8GA1UdIwQY
MBaAFGI6sYIM5IxXnaQMZthSZfHCz8tOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWWpxeGdnemtqRmVkcEF4bTJGSmw4Y0xQeTA0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85YS9iNGM5ZDUtZTI3Zi00NGJmLWJhNDIt
NmMzZDExZDQwZDc4LzEvWWpxeGdnemtqRmVkcEF4bTJGSmw4Y0xQeTA0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85YS9iNGM5ZDUtZTI3Zi00NGJmLWJhNDItNmMzZDExZDQwZDc4
LzEvWWpxeGdnemtqRmVkcEF4bTJGSmw4Y0xQeTA0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFXUgrW8r
2CuOUGiVPN5o3ReLeqeoWci5CnKhVBIeY0MreslBkRDNW44jOosZRmMbV/kO9/+G
htorHjT6aUvO5z166OP6kWFusDp1iF08X76YHjeTjE6O5As78fpuv2NQW6OXYo0D
V3JbTAE+LO6D6zrDNXVI+Dm0tgDa6PPHGkw+zjlasDBplKesW51/E83wxCE7DF7I
SwoINkc459R/hD3fZ/nGnk/S2s3/IyJJrTcNPVHrkOhv4saOSqmzDxXIc6yD/xSQ
anwKztT/fEDuBISrwYy+Ich6IFosC3FSGgcAR0ug9ZMor11FWRC9pNbzMYzM7LWU
R2T52s585nVrsw==
-----END CERTIFICATE-----