Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9f/d61f73-ac0b-45bc-a5a4-1a8301b7e6de/1/dZBZSelj01d74HYybKC5H_MvloQ.mft
File:                     dZBZSelj01d74HYybKC5H_MvloQ.mft (raw, json)
Hash identifier:          IV54HGPhIqQGwy1/5uBlgtNdH1TMxvjL+fO0FdKNgak=
Subject key identifier:   52:95:C9:9A:51:7F:5E:C6:A2:98:8A:80:32:1A:67:12:7D:41:48:0A
Authority key identifier: 75:90:59:49:E9:63:D3:57:7B:E0:76:32:6C:A0:B9:1F:F3:2F:96:84
Certificate issuer:       /CN=75905949e963d3577be076326ca0b91ff32f9684
Certificate serial:       019F2247A4F8097E7E1275402315AE9329F9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dZBZSelj01d74HYybKC5H_MvloQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9f/d61f73-ac0b-45bc-a5a4-1a8301b7e6de/1/dZBZSelj01d74HYybKC5H_MvloQ.mft
Manifest number:          0AB2
Signing time:             Thu 02 Jul 2026 10:02:28 +0000
Manifest this update:     Thu 02 Jul 2026 10:02:28 +0000
Manifest next update:     Fri 03 Jul 2026 10:02:28 +0000
Files and hashes:         1: YY31Gx9OeO_-r0CoMnhr80yRfsg.roa (hash: jKbUUsk+kRRQP2A9rjJCw+n6agNn6MIWpqgM0oDWAoE=)
                          2: dZBZSelj01d74HYybKC5H_MvloQ.crl (hash: rrTlPePud4pwp/X9pRqbfDA5K9A52S2O8pR2BXzsNeQ=)
                          3: uCHdbczowtuleN607t3-X8nqm8I.roa (hash: yiE7OXub7Co6WZANPsf3qZwNA4zRpdg1YwhmaQglGcE=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:22:47:a4:f8:09:7e:7e:12:75:40:23:15:ae:93:29:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=75905949e963d3577be076326ca0b91ff32f9684
        Validity
            Not Before: Jul  2 10:02:28 2026 GMT
            Not After : Jul  3 10:02:28 2026 GMT
        Subject: CN=5295c99a517f5ec6a2988a80321a67127d41480a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:22:76:2a:1a:b4:fb:3a:ec:bd:8e:cf:15:92:
                    ad:1d:fa:4a:0b:4d:86:b4:a6:b2:1f:1e:5b:8f:c3:
                    de:97:ba:a0:92:51:22:28:5a:a1:2b:d5:f5:c5:03:
                    12:c1:83:fb:4f:52:d7:4c:2d:ea:d0:13:36:b4:57:
                    7f:84:2f:d8:dc:32:72:23:45:20:27:26:8a:40:a1:
                    e1:72:76:7b:38:80:93:a1:0e:f4:dd:dd:59:67:0f:
                    8b:69:e8:5c:d9:52:36:c8:68:03:60:6c:20:13:19:
                    10:bf:51:c8:70:61:cc:91:7f:81:3d:74:56:a9:99:
                    40:5f:20:f1:18:aa:0a:da:41:8a:f2:5a:f4:95:df:
                    39:3c:e2:d6:a0:00:5b:9a:40:20:72:77:29:05:52:
                    d0:80:11:1b:a3:4c:82:90:36:ed:73:cc:d0:f7:97:
                    12:9e:5b:93:1b:88:b3:be:96:dc:57:94:10:13:a1:
                    7a:51:7b:89:bc:c9:05:8c:e7:55:2b:00:10:0b:44:
                    78:d1:72:5a:47:71:b5:aa:9c:b1:9c:b1:28:47:f9:
                    56:9b:e2:ee:dc:4b:b5:06:76:7f:ea:8b:d3:46:77:
                    79:6e:50:56:09:89:a9:95:40:d1:2c:8e:63:e1:b0:
                    57:6c:4d:7b:b3:7b:11:a4:3b:1c:e9:14:90:7d:78:
                    b7:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:95:C9:9A:51:7F:5E:C6:A2:98:8A:80:32:1A:67:12:7D:41:48:0A
            X509v3 Authority Key Identifier:
                keyid:75:90:59:49:E9:63:D3:57:7B:E0:76:32:6C:A0:B9:1F:F3:2F:96:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dZBZSelj01d74HYybKC5H_MvloQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/d61f73-ac0b-45bc-a5a4-1a8301b7e6de/1/dZBZSelj01d74HYybKC5H_MvloQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/d61f73-ac0b-45bc-a5a4-1a8301b7e6de/1/dZBZSelj01d74HYybKC5H_MvloQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:18:c2:00:d6:7b:8f:bd:e9:7d:5d:d6:d2:09:90:6e:6a:d4:
         ba:a2:65:72:dd:28:f8:fd:d3:f0:1c:3c:e2:06:a7:d4:79:f0:
         c5:c2:da:c1:3e:43:1b:f1:92:2d:f2:fc:40:84:eb:f5:57:b7:
         1a:30:9b:eb:f8:60:fe:8e:88:6d:9a:8f:52:5f:3f:17:32:71:
         f4:ef:1a:89:47:32:9e:85:1e:60:ee:c2:dc:f3:11:e9:bc:b1:
         49:96:26:ec:98:70:9a:2a:02:32:72:f2:00:c4:ef:45:23:c9:
         df:3c:ba:2d:0e:cd:54:b6:f5:df:0b:41:cc:85:76:7a:fa:9b:
         9f:ce:34:8a:17:87:a2:0e:b6:d6:a7:0e:b3:fd:83:d8:24:40:
         96:7d:fc:50:e2:f9:22:e9:bb:78:62:22:36:2a:fc:8a:c2:57:
         22:22:6b:1e:82:fc:92:6a:af:a2:12:a0:09:26:be:68:76:09:
         a4:df:da:40:32:04:e7:03:d2:73:00:4c:d7:40:4e:eb:bf:72:
         e2:83:d9:a5:4f:3c:f9:1c:c4:6b:cf:76:91:b6:fe:71:2d:88:
         e2:3e:39:43:d5:a3:90:3c:f6:59:b8:23:27:6d:c1:5d:53:a9:
         87:7b:94:33:36:4c:10:b4:0b:dc:d0:ed:13:21:09:f6:78:f1:
         b0:4f:94:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----