Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a6/113f5f-be58-478c-9030-32d80d8d1615/1/0tzocORzw1QnPonF5OLtPgwGk1Y.mft
File:                     0tzocORzw1QnPonF5OLtPgwGk1Y.mft (raw, json)
Hash identifier:          hgAAZ6subFEv/rdEyk8koFC0vBZZMHNDySljxtzLs/w=
Subject key identifier:   C6:55:BD:AD:7F:9D:C3:46:52:3E:0A:E5:51:A4:F3:81:F7:71:C2:05
Authority key identifier: D2:DC:E8:70:E4:73:C3:54:27:3E:89:C5:E4:E2:ED:3E:0C:06:93:56
Certificate issuer:       /CN=d2dce870e473c354273e89c5e4e2ed3e0c069356
Certificate serial:       019F22EC3E73CC024F8A0C490D682084B95D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0tzocORzw1QnPonF5OLtPgwGk1Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a6/113f5f-be58-478c-9030-32d80d8d1615/1/0tzocORzw1QnPonF5OLtPgwGk1Y.mft
Manifest number:          0DE5
Signing time:             Thu 02 Jul 2026 13:02:15 +0000
Manifest this update:     Thu 02 Jul 2026 13:02:15 +0000
Manifest next update:     Fri 03 Jul 2026 13:02:15 +0000
Files and hashes:         1: 0tzocORzw1QnPonF5OLtPgwGk1Y.crl (hash: G2++yFC6pFDF9sPvHbPgFeLyZLvhoQ/wgaYbgkpMyls=)
                          2: ThzwdKdKn1Xy5a4JKmMojrXgu40.roa (hash: lIi2RxL8LrPV+57y38KO3DW0z4++WwpkT83uTb32e/I=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:22:ec:3e:73:cc:02:4f:8a:0c:49:0d:68:20:84:b9:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d2dce870e473c354273e89c5e4e2ed3e0c069356
        Validity
            Not Before: Jul  2 13:02:15 2026 GMT
            Not After : Jul  3 13:02:15 2026 GMT
        Subject: CN=c655bdad7f9dc346523e0ae551a4f381f771c205
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:2d:94:34:71:7b:75:99:8e:5d:2c:7e:2c:40:
                    5a:43:cc:40:80:b9:c6:c2:a3:dd:c2:bb:87:eb:2f:
                    0e:46:37:23:18:8a:fb:9e:52:e6:65:05:b4:3c:25:
                    11:bd:34:dc:85:b2:fd:ca:47:c8:78:c9:86:f8:51:
                    2b:d0:46:4a:ac:e6:3b:d5:e7:e2:e7:5f:12:01:54:
                    eb:4c:f5:79:c7:b8:87:0a:0e:ed:ed:29:a5:66:3c:
                    6b:3f:9c:75:b3:2a:a7:87:ee:3c:db:a8:cd:03:60:
                    ac:62:08:f7:8c:cb:a6:dc:2e:92:0d:d6:c4:59:a2:
                    fe:ba:c3:4b:76:fb:21:f8:9f:25:e3:7f:ea:70:47:
                    2f:d4:af:f3:93:37:2d:08:58:f2:65:50:24:a8:b7:
                    f2:e8:02:e9:20:a8:c9:f8:9d:9b:92:e8:23:0b:29:
                    9c:06:fc:9f:73:35:f7:82:f6:6b:4f:13:99:fb:0c:
                    a8:04:03:3a:cf:d2:a7:75:94:f8:7c:37:70:bd:9f:
                    1c:97:36:34:c0:f4:49:c3:00:cf:e1:a2:78:95:33:
                    75:65:18:04:01:20:c4:e6:b4:4d:85:ec:d0:68:d0:
                    98:81:8a:98:13:cd:6d:c8:20:bd:99:47:c4:4b:f0:
                    b6:34:e1:e2:19:6b:85:5e:1b:20:0b:47:b3:ad:d0:
                    0c:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:55:BD:AD:7F:9D:C3:46:52:3E:0A:E5:51:A4:F3:81:F7:71:C2:05
            X509v3 Authority Key Identifier:
                keyid:D2:DC:E8:70:E4:73:C3:54:27:3E:89:C5:E4:E2:ED:3E:0C:06:93:56

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0tzocORzw1QnPonF5OLtPgwGk1Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/113f5f-be58-478c-9030-32d80d8d1615/1/0tzocORzw1QnPonF5OLtPgwGk1Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/113f5f-be58-478c-9030-32d80d8d1615/1/0tzocORzw1QnPonF5OLtPgwGk1Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:87:c8:01:25:42:32:32:25:f2:39:8a:0e:4b:58:62:1f:15:
         b8:a0:47:2c:d9:4a:24:35:b0:fd:a8:21:46:9d:6f:22:34:9c:
         70:12:8c:a7:56:bf:42:62:5f:f5:ec:6c:5a:79:5c:66:29:94:
         91:b9:07:01:6a:ec:d3:a4:8b:62:dc:65:6d:b5:8a:e4:54:ad:
         b1:a3:41:f0:5f:dd:fb:d6:15:b8:03:66:bb:99:95:f2:ef:e6:
         3d:39:9b:a3:e4:7f:0c:f7:89:af:23:cf:7c:a0:38:90:2a:d1:
         17:5f:c5:8f:8c:f0:e6:f1:24:7f:b5:1b:32:45:1f:15:b7:27:
         cd:06:29:54:41:78:33:71:de:8d:1d:49:10:1e:fa:50:37:0e:
         e4:74:ee:0a:8f:77:76:95:70:2e:1d:30:24:e9:50:d2:f3:79:
         98:85:7a:8f:b5:bf:15:b8:d6:67:b4:17:d2:52:ea:7b:59:c8:
         12:79:2f:ed:c3:ba:66:de:7f:6b:40:86:06:8b:ca:c5:d2:cc:
         73:9f:16:35:8e:a4:9a:99:a9:c9:db:46:84:2f:9e:3d:20:9c:
         b5:7b:6a:1f:66:95:da:19:d4:de:d7:dc:af:22:a4:68:d8:99:
         d5:ff:42:1e:69:40:da:09:b2:07:94:d7:72:94:02:9a:b0:92:
         01:00:de:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----