Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/b24b88-22f0-49b8-b2e3-731f47820b20/1/_FfXotV2YfbDxup2NsoP8jAMFG8.mft
File:                     _FfXotV2YfbDxup2NsoP8jAMFG8.mft (raw, json)
Hash identifier:          HsoNpYsv7OymQQ3dZSMAL43y4BfAHw4rO/St4ESaitY=
Subject key identifier:   69:24:BE:3F:86:5A:CB:BD:7E:D6:D1:35:53:C7:82:43:76:8E:D2:84
Authority key identifier: FC:57:D7:A2:D5:76:61:F6:C3:C6:EA:76:36:CA:0F:F2:30:0C:14:6F
Certificate issuer:       /CN=fc57d7a2d57661f6c3c6ea7636ca0ff2300c146f
Certificate serial:       019BFCC153B47896992790F4B78717DF457D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_FfXotV2YfbDxup2NsoP8jAMFG8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/28/b24b88-22f0-49b8-b2e3-731f47820b20/1/_FfXotV2YfbDxup2NsoP8jAMFG8.mft
Manifest number:          17ED
Signing time:             Tue 27 Jan 2026 00:01:26 +0000
Manifest this update:     Tue 27 Jan 2026 00:01:26 +0000
Manifest next update:     Wed 28 Jan 2026 00:01:26 +0000
Files and hashes:         1: _FfXotV2YfbDxup2NsoP8jAMFG8.crl (hash: B+5US4CyCY56MONxMv1mOeYITQRrxhrcPkCI+x16YQA=)
                          2: _UCfNAqTvWtPLFIW9w98k-3o24g.roa (hash: ye18TkuEX2QBGoky37qRRHp+jr8Cpd3efab0xGo5RNI=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:fc:c1:53:b4:78:96:99:27:90:f4:b7:87:17:df:45:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fc57d7a2d57661f6c3c6ea7636ca0ff2300c146f
        Validity
            Not Before: Jan 27 00:01:26 2026 GMT
            Not After : Jan 28 00:01:26 2026 GMT
        Subject: CN=6924be3f865acbbd7ed6d13553c78243768ed284
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:81:dd:7e:c0:fc:df:a6:0a:cd:71:a8:96:bc:
                    79:be:13:b6:0c:ee:a1:36:fc:98:ce:d0:b2:27:de:
                    b6:39:44:2f:48:88:67:a7:c0:8f:02:b5:12:22:74:
                    2c:b7:9b:1a:b0:47:0e:3e:28:98:04:aa:14:02:78:
                    1d:30:33:c4:46:6e:6f:01:b6:09:17:88:d5:f3:0d:
                    1d:6e:a4:85:f1:b6:ab:89:f7:ea:03:1e:d9:56:00:
                    5f:c5:37:b7:42:24:05:02:e4:25:16:33:5b:1e:5b:
                    39:3e:25:e2:8e:68:b8:c4:45:b9:08:c3:e5:eb:d5:
                    5e:78:88:db:a7:db:58:0c:00:c4:31:db:06:0e:ab:
                    fc:01:58:1a:79:1b:3e:11:a0:b2:8a:4d:2d:e3:d1:
                    86:f7:28:e3:bb:ff:a4:d7:4a:a7:27:31:50:5b:de:
                    97:89:ec:fa:db:fc:80:6c:10:20:b4:50:b8:19:7c:
                    88:79:87:ba:b9:a4:0d:bc:0f:f1:d0:27:f4:d0:f5:
                    a7:6b:bb:b8:64:07:c8:03:fc:00:ae:47:22:9c:3f:
                    06:c2:ac:6a:dc:70:f6:b4:8b:f9:c8:3b:a9:5a:e3:
                    3b:49:f6:bf:83:66:14:70:a0:e6:cc:53:02:93:81:
                    04:f7:3c:ec:45:b9:ef:65:b4:ca:5b:0c:35:a8:39:
                    24:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:24:BE:3F:86:5A:CB:BD:7E:D6:D1:35:53:C7:82:43:76:8E:D2:84
            X509v3 Authority Key Identifier:
                keyid:FC:57:D7:A2:D5:76:61:F6:C3:C6:EA:76:36:CA:0F:F2:30:0C:14:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_FfXotV2YfbDxup2NsoP8jAMFG8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/b24b88-22f0-49b8-b2e3-731f47820b20/1/_FfXotV2YfbDxup2NsoP8jAMFG8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/28/b24b88-22f0-49b8-b2e3-731f47820b20/1/_FfXotV2YfbDxup2NsoP8jAMFG8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:9c:cf:7f:c0:81:3d:37:ef:51:9d:ba:99:11:bc:8d:1b:25:
         36:37:ed:04:b9:39:8c:5d:a7:66:4d:54:71:4f:0e:6a:82:56:
         82:60:ad:ad:fd:24:ed:fa:83:d5:0a:73:50:e9:36:c6:64:ba:
         4b:0f:42:20:d2:0e:4a:7c:6a:9d:c9:2a:7a:ae:c2:ee:d5:df:
         a4:51:2b:7e:e8:9a:ba:a0:57:f7:59:41:0a:67:d5:b8:a3:18:
         80:71:2f:c3:74:e8:b2:62:06:97:f7:82:72:a0:6e:9d:b7:50:
         03:56:ac:31:5f:5c:3b:95:5a:c2:f0:6d:29:b5:76:c5:d6:d4:
         10:b6:3a:7e:d6:cc:06:ac:89:79:33:e0:ff:f2:09:4d:bb:8f:
         5b:be:aa:45:bc:26:27:c4:80:da:fa:d1:a9:62:bb:cc:e8:40:
         dc:71:25:8f:72:b7:ac:a2:98:bb:35:b0:4e:78:bd:a1:9c:3c:
         5a:04:f3:c7:4a:f1:04:d9:b4:a5:73:e8:87:c4:1b:ab:6b:9b:
         01:2b:50:eb:7e:4a:f8:cf:6e:3f:07:7f:49:09:71:6e:f7:ec:
         dd:48:0e:4f:24:aa:0a:8d:9b:81:8d:9a:94:9e:40:57:ce:2a:
         1f:07:d8:88:7d:6e:53:b7:a8:e0:23:53:a3:fd:91:0a:47:94:
         e8:eb:f6:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----