Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fe/a23348-62cf-4afa-94fc-9dd8561caede/1/AApnGNU5FVwnMAQB8sRmdRPuxbE.mft
File:                     AApnGNU5FVwnMAQB8sRmdRPuxbE.mft (raw, json)
Hash identifier:          DPQWUAY9A54i0iLiF2RsMcPBdgr8IkETrXA1shGCHKo=
Subject key identifier:   EF:E5:23:6A:C5:13:B1:F4:AD:22:D7:50:F1:7E:11:6A:89:F0:9C:E4
Authority key identifier: 00:0A:67:18:D5:39:15:5C:27:30:04:01:F2:C4:66:75:13:EE:C5:B1
Certificate issuer:       /CN=000a6718d539155c27300401f2c4667513eec5b1
Certificate serial:       019F22EBB0D94A39EE863126A6576D6E40B2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AApnGNU5FVwnMAQB8sRmdRPuxbE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fe/a23348-62cf-4afa-94fc-9dd8561caede/1/AApnGNU5FVwnMAQB8sRmdRPuxbE.mft
Manifest number:          198D
Signing time:             Thu 02 Jul 2026 13:01:39 +0000
Manifest this update:     Thu 02 Jul 2026 13:01:39 +0000
Manifest next update:     Fri 03 Jul 2026 13:01:39 +0000
Files and hashes:         1: AApnGNU5FVwnMAQB8sRmdRPuxbE.crl (hash: 4KU8jTo5glITiumfNQA8J6l+lGjehNHZh0f/uit+0MM=)
                          2: C3g4bPj0WpteooCh1kAuPYqRZBg.roa (hash: 0XrpEklayrORIBGmjGj7RMMjUbxEU4fiPGHiYSn1AmY=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:22:eb:b0:d9:4a:39:ee:86:31:26:a6:57:6d:6e:40:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=000a6718d539155c27300401f2c4667513eec5b1
        Validity
            Not Before: Jul  2 13:01:39 2026 GMT
            Not After : Jul  3 13:01:39 2026 GMT
        Subject: CN=efe5236ac513b1f4ad22d750f17e116a89f09ce4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:a0:8a:ce:47:e8:ca:ad:c1:e2:55:95:0a:0a:
                    7c:7c:ca:d7:17:85:5d:34:9a:5e:01:40:e6:7c:41:
                    19:9b:d1:79:c6:a3:8f:f9:01:12:b0:62:11:51:35:
                    72:75:4e:bb:a0:cf:13:2e:29:b5:23:1c:7a:40:e7:
                    67:01:bf:18:56:a4:b4:3d:af:28:0e:82:29:34:f8:
                    35:9e:cb:d0:6c:d5:ab:58:02:9e:03:69:c4:d2:89:
                    80:c2:e3:19:d2:d8:a5:72:b9:96:5f:63:5f:8d:36:
                    d6:8d:fb:95:20:e2:40:c9:4a:46:a2:62:60:b1:5f:
                    9d:59:9f:e9:40:ce:0f:9e:4e:16:5c:7f:9e:c3:fa:
                    89:7c:90:ee:5f:f6:98:ee:b3:28:7d:27:fc:29:7d:
                    7c:73:ba:e6:ba:86:ce:d0:37:10:eb:71:77:5e:53:
                    46:a6:89:d5:0a:0d:8a:b5:70:9d:cd:41:ae:33:2e:
                    59:ce:bd:6a:48:f6:68:9d:f0:21:80:05:ae:b4:40:
                    88:df:50:b1:be:07:c6:d2:55:2a:8d:33:3e:77:40:
                    59:d0:72:b5:af:58:9f:17:43:ac:da:37:c2:fd:cc:
                    35:95:d6:ec:35:45:f4:8d:22:74:64:69:0a:b3:cc:
                    c4:bf:55:f0:96:45:ad:48:41:fe:fb:c1:21:af:67:
                    3b:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:E5:23:6A:C5:13:B1:F4:AD:22:D7:50:F1:7E:11:6A:89:F0:9C:E4
            X509v3 Authority Key Identifier:
                keyid:00:0A:67:18:D5:39:15:5C:27:30:04:01:F2:C4:66:75:13:EE:C5:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AApnGNU5FVwnMAQB8sRmdRPuxbE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/a23348-62cf-4afa-94fc-9dd8561caede/1/AApnGNU5FVwnMAQB8sRmdRPuxbE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/a23348-62cf-4afa-94fc-9dd8561caede/1/AApnGNU5FVwnMAQB8sRmdRPuxbE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:40:33:93:d5:0a:09:16:3a:f3:d2:d1:df:ba:8c:77:8a:df:
         bc:d6:0f:9e:e0:b6:15:0c:e6:75:88:3c:ad:e6:99:bf:a7:ed:
         1a:eb:03:dc:da:d3:e6:25:33:e8:41:eb:7f:78:3e:3f:53:ea:
         10:37:a6:d2:59:2d:6d:19:48:f2:37:e3:13:ee:18:f7:eb:9d:
         ab:b1:e8:3d:7a:d4:36:41:2b:aa:d0:df:cc:0a:d6:53:25:c5:
         7c:c7:4d:76:af:db:5d:06:c6:88:a0:7f:55:70:2d:f6:35:05:
         d9:13:7c:15:ab:aa:f2:59:ce:6b:e1:e8:0d:8f:ee:b7:1f:8c:
         80:93:77:7e:45:ed:08:37:ff:16:04:38:92:2f:c7:2f:63:c8:
         6e:9c:f7:15:8b:4b:43:da:65:be:4a:1e:6d:f0:82:ad:cd:c7:
         9a:6b:14:80:7d:f9:80:90:88:07:7f:81:e2:d2:d9:23:75:28:
         39:d1:01:fe:1c:08:1d:25:40:26:cd:8e:7f:02:fa:48:0b:cd:
         0b:33:3d:92:ed:c4:09:73:d1:c3:d1:65:de:1c:1a:18:ec:a3:
         c6:0a:40:c7:70:8e:51:ae:84:60:3f:28:53:3a:f5:5b:5b:02:
         97:fb:b9:1a:57:e3:5e:93:3e:52:db:2e:0a:b4:7f:4f:ff:c8:
         29:7b:7a:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----