Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9c/b7bf94-377b-4400-8b9c-cbf164e8be01/1/zchAgr6W5gnZ3pgI-8N4Zv60xUs.mft
File:                     zchAgr6W5gnZ3pgI-8N4Zv60xUs.mft (raw, json)
Hash identifier:          YwMT9o1CsXRYqIPPQxgrCwAoO+vEXKEELtjUzoNZ5oA=
Subject key identifier:   C6:B4:15:C3:2F:23:91:E2:08:9D:8D:47:CB:0E:D2:CA:08:02:1D:13
Authority key identifier: CD:C8:40:82:BE:96:E6:09:D9:DE:98:08:FB:C3:78:66:FE:B4:C5:4B
Certificate issuer:       /CN=cdc84082be96e609d9de9808fbc37866feb4c54b
Certificate serial:       019F1C0DDD9F62C151111F6387A3FDEF559C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zchAgr6W5gnZ3pgI-8N4Zv60xUs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9c/b7bf94-377b-4400-8b9c-cbf164e8be01/1/zchAgr6W5gnZ3pgI-8N4Zv60xUs.mft
Manifest number:          1991
Signing time:             Wed 01 Jul 2026 05:01:38 +0000
Manifest this update:     Wed 01 Jul 2026 05:01:38 +0000
Manifest next update:     Thu 02 Jul 2026 05:01:38 +0000
Files and hashes:         1: zchAgr6W5gnZ3pgI-8N4Zv60xUs.crl (hash: GyX1KZL7h7uFgOXq/TZPdUGBe0utDOQ9qNxoZoJSyn4=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:1c:0d:dd:9f:62:c1:51:11:1f:63:87:a3:fd:ef:55:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cdc84082be96e609d9de9808fbc37866feb4c54b
        Validity
            Not Before: Jul  1 05:01:38 2026 GMT
            Not After : Jul  2 05:01:38 2026 GMT
        Subject: CN=c6b415c32f2391e2089d8d47cb0ed2ca08021d13
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:a6:db:b5:c0:0e:9b:99:17:40:67:43:6a:4a:
                    77:1c:a1:3e:9c:2f:21:c2:21:53:47:4e:2e:22:87:
                    7e:61:62:31:25:ad:72:b1:84:32:2d:d5:61:b7:b9:
                    87:ee:5d:f6:b4:24:cb:60:31:f1:db:23:2c:19:50:
                    d6:ee:81:fa:82:76:dc:0e:69:49:96:f3:1c:2a:ee:
                    70:8b:a5:6b:cb:a2:24:05:25:c1:aa:e4:9d:9c:a8:
                    7e:71:b1:c0:ca:e4:b5:2b:80:6a:a5:fc:95:7b:da:
                    2d:80:95:6e:27:12:59:83:95:21:8f:04:aa:23:d3:
                    72:53:e8:e2:24:b2:e0:ea:4e:80:df:76:4e:18:84:
                    d5:4f:30:93:e6:27:5b:fa:91:2f:89:78:cb:ed:a7:
                    b8:48:9d:3e:43:8e:a7:ae:b6:7b:eb:1e:8f:89:ad:
                    f0:e9:dd:18:b0:8b:f0:62:72:cf:dd:cb:08:05:58:
                    65:15:18:73:8d:0c:56:a0:60:f5:00:05:4b:01:e9:
                    f3:52:1b:3c:86:76:d6:45:59:e3:fa:1e:aa:b3:b6:
                    e6:bd:2a:6f:92:6c:e6:61:1c:1e:8b:26:4a:05:c1:
                    fd:37:4d:09:34:8a:ff:69:f9:49:70:db:6d:7c:89:
                    90:27:09:56:cc:0c:b2:16:9b:dc:f2:06:dc:a1:27:
                    bc:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:B4:15:C3:2F:23:91:E2:08:9D:8D:47:CB:0E:D2:CA:08:02:1D:13
            X509v3 Authority Key Identifier:
                keyid:CD:C8:40:82:BE:96:E6:09:D9:DE:98:08:FB:C3:78:66:FE:B4:C5:4B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zchAgr6W5gnZ3pgI-8N4Zv60xUs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/b7bf94-377b-4400-8b9c-cbf164e8be01/1/zchAgr6W5gnZ3pgI-8N4Zv60xUs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/b7bf94-377b-4400-8b9c-cbf164e8be01/1/zchAgr6W5gnZ3pgI-8N4Zv60xUs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         e1:3d:c4:72:e3:72:91:3f:04:24:53:8d:02:8e:0e:1f:06:90:
         13:3b:c6:41:f1:43:1b:b1:66:ed:3d:4d:9c:dc:43:3e:f5:9f:
         bc:54:f5:05:c7:66:55:9c:e8:7a:d8:4c:9d:fa:2c:3f:58:b1:
         bd:e3:72:7d:61:fb:0f:22:94:9c:09:47:a8:37:22:17:4c:3a:
         1f:88:f3:6e:e6:a6:4d:00:55:3b:be:b5:cb:4f:00:52:bc:36:
         00:8d:00:f3:65:49:ef:a9:56:48:53:d2:27:28:f3:a1:38:8a:
         ae:b3:4c:27:c4:4f:51:b8:31:60:37:e3:cc:cd:6f:55:4b:97:
         f1:58:3b:18:3f:3f:ed:44:c3:3f:cd:7e:ba:de:ff:18:4b:36:
         a9:0c:3a:f6:c2:27:72:b8:4f:09:b6:62:bf:3f:49:0a:70:ef:
         9a:e5:7c:2f:5b:81:37:55:dc:eb:ad:74:49:a4:b2:39:d3:ae:
         af:fc:84:cb:25:9e:7e:02:f7:4f:ff:f7:64:46:15:61:85:5c:
         57:65:81:67:4a:19:1e:2b:1f:33:bb:dc:69:3d:33:b3:bb:f9:
         51:84:e8:d4:5f:57:00:b3:bc:82:fc:09:0f:85:23:cc:36:70:
         75:5f:56:9a:14:93:05:55:9e:8c:7b:eb:1b:5a:08:bc:07:c1:
         a8:9a:e5:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----