Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/563afc-b194-41fb-a7a1-6aeae63ed8fe/1/44qr6o7im_fJFbw-8Luswn0Ozt4.mft
File:                     44qr6o7im_fJFbw-8Luswn0Ozt4.mft (raw, json)
Hash identifier:          8mFMiZsSARVj88Qjwmfq5GC7Y/tbZSb9HOEdkfD3YWY=
Subject key identifier:   CB:DB:9B:A8:D6:4E:A7:76:C8:3A:AF:3C:16:E3:C4:87:4A:D2:ED:9F
Authority key identifier: E3:8A:AB:EA:8E:E2:9B:F7:C9:15:BC:3E:F0:BB:AC:C2:7D:0E:CE:DE
Certificate issuer:       /CN=e38aabea8ee29bf7c915bc3ef0bbacc27d0ecede
Certificate serial:       019F2369DCFB682467A2A8150077FB5AC954
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/44qr6o7im_fJFbw-8Luswn0Ozt4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b2/563afc-b194-41fb-a7a1-6aeae63ed8fe/1/44qr6o7im_fJFbw-8Luswn0Ozt4.mft
Manifest number:          163A
Signing time:             Thu 02 Jul 2026 15:19:28 +0000
Manifest this update:     Thu 02 Jul 2026 15:19:28 +0000
Manifest next update:     Fri 03 Jul 2026 15:19:28 +0000
Files and hashes:         1: 44qr6o7im_fJFbw-8Luswn0Ozt4.crl (hash: yvCQPCX8FJIYK9Pa0bXDANBlGoNel2hhJNxYYtZl1fs=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:23:69:dc:fb:68:24:67:a2:a8:15:00:77:fb:5a:c9:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e38aabea8ee29bf7c915bc3ef0bbacc27d0ecede
        Validity
            Not Before: Jul  2 15:19:28 2026 GMT
            Not After : Jul  3 15:19:28 2026 GMT
        Subject: CN=cbdb9ba8d64ea776c83aaf3c16e3c4874ad2ed9f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:79:ed:b8:34:a1:63:a1:48:6a:cf:e5:18:c3:
                    6a:7d:67:f5:5c:d3:16:9a:8f:0f:a7:d1:59:20:67:
                    13:cd:62:fc:bc:c3:4c:5b:97:e6:14:07:2c:f8:50:
                    d9:c1:94:0e:81:cd:44:f6:69:c4:36:ed:d2:b7:7d:
                    8a:0a:d5:77:8d:41:5c:ed:b1:23:61:82:24:e2:37:
                    64:fc:b1:fa:bc:ff:b6:dc:db:66:f9:1a:a1:21:87:
                    e7:f6:d7:d8:e1:c8:58:e0:ec:9f:5f:c9:ed:8f:90:
                    b7:fe:59:54:5d:20:0b:e0:50:73:57:38:75:fd:9f:
                    b6:db:69:09:b5:f4:21:90:20:75:dd:8d:82:34:a7:
                    ba:52:ac:01:c4:ee:de:d0:08:cd:29:9d:e2:77:f6:
                    40:90:b4:17:44:ff:f2:98:40:79:8b:e3:a3:54:5a:
                    9b:14:90:93:2a:73:a6:6c:fe:e8:62:e9:74:30:4e:
                    2c:e1:56:57:14:cb:57:e6:71:a0:35:78:50:34:19:
                    47:8a:b2:e5:da:15:68:58:14:1a:b3:14:8b:ce:0e:
                    51:6f:dc:c9:5f:93:16:79:82:4b:a5:06:0e:c5:b8:
                    02:dc:5d:2d:3c:33:bd:3f:c3:c9:a9:13:5d:48:3d:
                    9e:3e:64:44:f9:ff:14:9a:aa:0a:89:c8:a4:ab:61:
                    4c:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:DB:9B:A8:D6:4E:A7:76:C8:3A:AF:3C:16:E3:C4:87:4A:D2:ED:9F
            X509v3 Authority Key Identifier:
                keyid:E3:8A:AB:EA:8E:E2:9B:F7:C9:15:BC:3E:F0:BB:AC:C2:7D:0E:CE:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/44qr6o7im_fJFbw-8Luswn0Ozt4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/563afc-b194-41fb-a7a1-6aeae63ed8fe/1/44qr6o7im_fJFbw-8Luswn0Ozt4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/563afc-b194-41fb-a7a1-6aeae63ed8fe/1/44qr6o7im_fJFbw-8Luswn0Ozt4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:2e:94:4d:24:f1:86:c0:42:e5:a8:9a:85:30:ea:ff:e7:24:
         fc:d5:13:c5:9d:4d:f3:fc:09:12:b6:59:3d:e3:2a:87:19:3f:
         57:79:c3:3e:9b:29:8e:7f:df:f7:75:d8:d3:68:38:8b:70:d2:
         5c:5e:0a:00:a4:48:49:37:8b:1b:7f:35:6f:37:4b:19:91:8f:
         05:d2:5f:df:5e:53:cf:08:e2:2b:67:2f:97:1d:76:5e:9b:ce:
         9c:bf:4c:45:73:7f:e4:cf:f0:91:ec:13:3f:91:94:48:da:86:
         6e:66:50:ad:59:f0:f1:ea:bf:af:46:d8:78:d1:65:f7:1d:3a:
         63:ce:71:b5:b0:36:35:fb:b5:d0:df:55:c3:3d:17:95:57:b4:
         d6:9b:b0:e0:3a:cb:b7:6f:75:3a:77:26:30:a0:c3:d7:b5:38:
         28:1c:8e:b7:5d:97:e7:39:2d:5e:19:48:da:97:1e:96:e2:58:
         d7:c1:30:71:d2:1d:cc:c0:1e:32:ed:09:fe:15:01:d7:18:18:
         ed:3c:8f:e8:6b:1d:68:0c:77:31:5e:87:18:42:6f:c9:6e:ce:
         bd:31:5f:07:d2:8b:a0:2f:63:da:ad:74:42:94:47:ae:86:41:
         e0:a3:ba:9d:9e:a2:8b:55:56:a7:5b:34:f3:20:ec:1f:5f:91:
         96:6a:df:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 22:24:26 2026 by rpki-client