Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9e/72255a-109f-434a-a7dd-e152ddf5ab06/1/ofM7gYxgo6zGnzmgsuDuqrttk-A.mft
File:                     ofM7gYxgo6zGnzmgsuDuqrttk-A.mft (raw, json)
Hash identifier:          z6M6yAJwniIKm22e+Hyo/4VBUkOc+lKlG1/x0XJG8Zs=
Subject key identifier:   BA:71:F4:0A:E8:EA:92:1F:E0:AA:2F:D6:A5:45:74:13:9C:B9:06:7F
Authority key identifier: A1:F3:3B:81:8C:60:A3:AC:C6:9F:39:A0:B2:E0:EE:AA:BB:6D:93:E0
Certificate issuer:       /CN=a1f33b818c60a3acc69f39a0b2e0eeaabb6d93e0
Certificate serial:       019F224799798147242C2C73CCACAC3D2DAD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ofM7gYxgo6zGnzmgsuDuqrttk-A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9e/72255a-109f-434a-a7dd-e152ddf5ab06/1/ofM7gYxgo6zGnzmgsuDuqrttk-A.mft
Manifest number:          15D3
Signing time:             Thu 02 Jul 2026 10:02:25 +0000
Manifest this update:     Thu 02 Jul 2026 10:02:25 +0000
Manifest next update:     Fri 03 Jul 2026 10:02:25 +0000
Files and hashes:         1: ofM7gYxgo6zGnzmgsuDuqrttk-A.crl (hash: +WxxoqOkktFBs3fb03eYRnndnMsiM/Wl9TcaHfgwUYE=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:22:47:99:79:81:47:24:2c:2c:73:cc:ac:ac:3d:2d:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a1f33b818c60a3acc69f39a0b2e0eeaabb6d93e0
        Validity
            Not Before: Jul  2 10:02:25 2026 GMT
            Not After : Jul  3 10:02:25 2026 GMT
        Subject: CN=ba71f40ae8ea921fe0aa2fd6a54574139cb9067f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:e4:ea:91:d7:f9:b7:1e:76:2a:9c:0d:34:89:
                    06:ff:30:30:05:51:47:1f:2f:0a:b5:3c:ed:c5:e6:
                    66:42:92:88:a6:6b:48:c8:46:be:38:77:11:cf:56:
                    66:d5:78:0a:69:ef:ab:f3:0d:49:d0:13:11:a4:aa:
                    79:8c:10:b2:6e:3c:f8:55:b8:d3:7b:4d:c4:94:39:
                    c8:22:3c:08:d2:d1:65:63:ba:d5:7c:45:df:47:82:
                    d1:5e:82:4e:13:c9:28:97:aa:67:7f:fd:e9:89:ec:
                    09:42:e9:10:05:f7:6d:48:4b:41:69:0b:4f:47:d4:
                    e4:f0:fd:e1:4a:cf:89:01:43:9a:80:b2:e6:06:9e:
                    a0:96:06:56:7b:6c:d7:47:7a:b1:80:70:7c:76:b7:
                    e2:51:6e:0b:21:c3:bc:31:a4:bb:95:c1:92:ee:87:
                    e0:ee:a4:69:ba:f1:d9:38:ad:f8:ba:f6:1d:d6:bb:
                    1a:25:7c:c7:72:d3:47:78:fe:00:32:aa:0d:ea:e2:
                    43:bf:5d:5a:85:3a:61:03:a4:3f:37:99:c2:e2:1a:
                    9f:43:12:81:bd:02:56:e7:b3:47:75:8b:17:3b:ff:
                    36:c0:8e:dc:ad:ad:62:90:48:13:80:19:f7:ae:34:
                    da:e3:bb:3b:11:22:03:18:4f:57:63:23:bd:b6:8f:
                    e1:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:71:F4:0A:E8:EA:92:1F:E0:AA:2F:D6:A5:45:74:13:9C:B9:06:7F
            X509v3 Authority Key Identifier:
                keyid:A1:F3:3B:81:8C:60:A3:AC:C6:9F:39:A0:B2:E0:EE:AA:BB:6D:93:E0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ofM7gYxgo6zGnzmgsuDuqrttk-A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/72255a-109f-434a-a7dd-e152ddf5ab06/1/ofM7gYxgo6zGnzmgsuDuqrttk-A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/72255a-109f-434a-a7dd-e152ddf5ab06/1/ofM7gYxgo6zGnzmgsuDuqrttk-A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:80:ee:90:28:da:d4:3e:ff:8d:d7:7e:43:d7:47:d6:b3:84:
         72:90:62:d4:9c:c8:e3:bc:1f:1f:99:b1:70:d1:df:97:05:11:
         5e:30:54:2a:49:d7:75:b3:22:db:11:83:38:c0:a2:e6:8a:3b:
         62:ea:7a:68:46:8d:78:37:7e:56:02:2c:a2:7b:8b:e7:4b:c9:
         9a:86:5b:02:b6:8e:5f:13:33:29:a0:08:fd:b2:f9:2f:9b:11:
         8d:66:e0:53:89:d4:52:3c:91:f7:41:f7:5a:3c:a5:34:c9:a2:
         a0:5a:8f:33:53:a7:fb:77:90:54:59:5a:2d:fc:5e:ae:03:6b:
         b7:6f:67:17:19:87:6b:c7:44:55:26:38:24:03:8e:df:28:18:
         18:67:c4:f6:c2:24:bd:88:e1:4f:b5:55:90:0c:16:d9:6d:e9:
         08:25:6d:d7:d9:4d:e3:4f:0d:56:c3:7f:49:22:fe:ad:e1:94:
         c1:72:d5:ec:3e:1c:a2:41:88:34:73:d6:16:2c:97:f9:75:41:
         c9:2f:c8:c7:59:0d:1e:ea:b0:3f:55:90:40:78:0a:39:96:30:
         88:fe:84:39:4b:71:ad:37:73:1c:85:aa:2c:fe:bf:36:69:fd:
         dd:f3:d5:01:0d:53:28:d6:e6:54:50:26:cc:d2:15:04:ee:f5:
         30:b8:8b:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----