Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/aea465-ba45-49ac-9c68-7b41fabc6f67/1/QeODxYB-mzL1dtCluO53RMrPtxc.mft
File:                     QeODxYB-mzL1dtCluO53RMrPtxc.mft (raw, json)
Hash identifier:          R3Mfp+5ZBKiz1EcafYnHN96RANkhKW3DE4gm1dmjcS8=
Subject key identifier:   76:C6:49:F6:AA:35:54:6F:03:CF:E8:ED:AD:D4:75:3D:0D:2B:62:2A
Authority key identifier: 41:E3:83:C5:80:7E:9B:32:F5:76:D0:A5:B8:EE:77:44:CA:CF:B7:17
Certificate issuer:       /CN=41e383c5807e9b32f576d0a5b8ee7744cacfb717
Certificate serial:       019B72FEB592C81D2F01595D33000DD7E453
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QeODxYB-mzL1dtCluO53RMrPtxc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/18/aea465-ba45-49ac-9c68-7b41fabc6f67/1/QeODxYB-mzL1dtCluO53RMrPtxc.mft
Manifest number:          0673
Signing time:             Wed 31 Dec 2025 06:00:53 +0000
Manifest this update:     Wed 31 Dec 2025 06:00:53 +0000
Manifest next update:     Thu 01 Jan 2026 06:00:53 +0000
Files and hashes:         1: 03enaQCGw_eqXqIAwZyG-7zrfRA.roa (hash: YhNG/6VofCuK7pQjtVrVurKsTSoyBGAKru+JjLAKpoo=)
                          2: DUyUlX3xTZHlVnLSKpECvt4NkYU.roa (hash: ZP6huwEf1pdyFLtyz+3lIcMnm1rz3bsZAcR3RQdU+KU=)
                          3: QeODxYB-mzL1dtCluO53RMrPtxc.crl (hash: IZc3jypioz4qpei0mhA5yJAdF/AQPmxUPjzSw4lxWOU=)
                          4: bB3G3EZqBAqArfU6X5zzc1opBME.roa (hash: gPeixOKastqxOj7HlHBp8UwchVAjS4fsBzFCexJl5H8=)
                          5: lKGyjDcky_IoNZN6qvlaMVTqM58.roa (hash: IiBQAy+zcf79xQNY8RIQMsijGISjsQrLjaoVvIJA9t4=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:72:fe:b5:92:c8:1d:2f:01:59:5d:33:00:0d:d7:e4:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=41e383c5807e9b32f576d0a5b8ee7744cacfb717
        Validity
            Not Before: Dec 31 06:00:53 2025 GMT
            Not After : Jan  1 06:00:53 2026 GMT
        Subject: CN=76c649f6aa35546f03cfe8edadd4753d0d2b622a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:c7:bf:60:ec:9b:1f:4b:e6:ba:7f:eb:3b:72:
                    bd:b1:97:4e:e8:37:01:f1:99:0c:e0:4a:25:5b:e0:
                    4b:79:27:a7:8d:74:53:81:5d:cc:0f:b2:1e:3e:7b:
                    85:64:ec:4f:bb:66:97:52:57:9e:19:e4:df:36:2f:
                    ff:c2:b8:5b:e9:f9:4c:98:df:7c:45:01:e4:12:78:
                    9c:28:23:ab:77:a8:c8:3a:23:ae:c0:07:98:07:3a:
                    9b:8e:84:cf:71:d5:27:f7:18:47:07:4b:7a:ef:83:
                    b7:6f:ca:9b:76:a9:3e:7a:71:37:01:8e:8f:27:28:
                    d0:b9:06:b2:80:d2:46:e3:cd:15:4f:61:83:5b:66:
                    81:e3:7f:3d:7d:07:27:da:a0:30:13:44:47:f6:5f:
                    83:39:70:52:9d:d1:cc:9c:04:46:12:68:a7:e0:e9:
                    7d:51:38:ce:af:87:f2:e7:03:19:53:fa:87:9a:3a:
                    d2:16:9e:84:15:43:2f:74:a9:0f:68:39:a4:22:c8:
                    3d:f6:0c:d4:14:ef:df:45:a1:0c:ff:31:d6:2f:6c:
                    53:ff:d1:aa:da:2d:82:59:e1:47:e7:48:85:13:dd:
                    8e:39:6e:17:b4:90:11:53:e8:92:99:9f:3c:55:56:
                    6a:6d:9e:47:6d:b8:e1:66:e7:01:4c:61:ff:94:e0:
                    82:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:C6:49:F6:AA:35:54:6F:03:CF:E8:ED:AD:D4:75:3D:0D:2B:62:2A
            X509v3 Authority Key Identifier:
                keyid:41:E3:83:C5:80:7E:9B:32:F5:76:D0:A5:B8:EE:77:44:CA:CF:B7:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QeODxYB-mzL1dtCluO53RMrPtxc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/aea465-ba45-49ac-9c68-7b41fabc6f67/1/QeODxYB-mzL1dtCluO53RMrPtxc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/18/aea465-ba45-49ac-9c68-7b41fabc6f67/1/QeODxYB-mzL1dtCluO53RMrPtxc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:1b:34:9c:b2:d7:ca:52:60:1c:6c:d2:6c:e6:35:54:54:de:
         a9:45:c4:00:3b:39:d7:32:91:41:66:29:97:22:d6:4c:9d:58:
         9d:34:68:f7:93:92:d8:b0:d9:4e:5f:79:0f:fa:74:25:fe:c6:
         ed:3e:fb:84:97:99:f1:29:94:d0:1e:b2:37:77:02:fe:aa:77:
         c9:a8:ed:84:5f:09:3f:5f:fc:8a:e7:26:e2:3a:49:b0:96:64:
         7a:da:24:2e:3c:14:63:6a:09:04:51:d0:f4:d9:af:a6:b4:ab:
         c4:64:82:58:1c:ad:e6:6f:bf:ea:7c:47:af:fe:5f:e3:78:16:
         55:c6:b0:69:a7:bd:fd:0b:1e:fd:84:b9:63:3f:ee:f2:c7:5b:
         ab:2e:a9:a8:a0:83:4b:7d:19:21:09:37:fc:fb:a7:5c:a0:9c:
         b4:68:fb:ee:57:1e:a2:56:58:78:48:93:4b:3b:11:b9:3c:b8:
         5f:0e:95:b8:85:fb:71:36:d6:19:a2:ad:1c:de:1b:8c:d4:ac:
         3f:0f:20:3d:47:44:27:2a:cc:a4:4d:c8:d5:12:2b:1e:95:bb:
         a8:bd:c0:58:91:54:6c:b4:f1:5d:66:34:f3:9d:cc:fd:63:dc:
         8e:c4:83:76:60:80:a2:94:b8:20:81:ad:cb:dd:73:82:8d:42:
         eb:62:0c:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----