Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/4d400a-f779-4704-b111-ca8d7d8fb9c1/1/1-M-kfcCCUuhUhl3Y5SjP-E7mNpw.mft
File:                     1-M-kfcCCUuhUhl3Y5SjP-E7mNpw.mft (raw, json)
Hash identifier:          oZRpTEs9NG0uBP9r1qbRHke7PDLjteDCoFCTf7mdkeo=
Subject key identifier:   53:8C:1C:B2:8D:17:09:EF:32:55:48:F9:A0:B7:29:4C:F5:18:C0:75
Authority key identifier: F8:CF:A4:7D:C0:82:52:E8:54:86:5D:D8:E5:28:CF:F8:4E:E6:36:9C
Certificate issuer:       /CN=f8cfa47dc08252e854865dd8e528cff84ee6369c
Certificate serial:       019A6EB681501FF19C1C513A726A41B75836
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-M-kfcCCUuhUhl3Y5SjP-E7mNpw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3a/4d400a-f779-4704-b111-ca8d7d8fb9c1/1/1-M-kfcCCUuhUhl3Y5SjP-E7mNpw.mft
Manifest number:          0A2F
Signing time:             Mon 10 Nov 2025 17:00:45 +0000
Manifest this update:     Mon 10 Nov 2025 17:00:45 +0000
Manifest next update:     Tue 11 Nov 2025 17:00:45 +0000
Files and hashes:         1: 1-M-kfcCCUuhUhl3Y5SjP-E7mNpw.crl (hash: oLEWv2LYVPio/B1iCSXdtJuiG1SNLJu9ALvKuHYSWXQ=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:6e:b6:81:50:1f:f1:9c:1c:51:3a:72:6a:41:b7:58:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f8cfa47dc08252e854865dd8e528cff84ee6369c
        Validity
            Not Before: Nov 10 17:00:45 2025 GMT
            Not After : Nov 11 17:00:45 2025 GMT
        Subject: CN=538c1cb28d1709ef325548f9a0b7294cf518c075
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:8b:c7:16:7b:3d:61:52:ee:e1:b8:d4:9d:12:
                    e2:41:0f:69:4c:43:0b:58:c6:2c:06:0a:24:9a:0b:
                    a8:d0:6e:e1:32:72:3e:72:76:06:99:8b:3f:17:b0:
                    88:54:b2:f2:bf:33:1b:2f:36:e3:d1:17:89:10:5b:
                    cb:d3:7b:a7:d7:32:f4:60:b3:2b:9f:40:4c:38:25:
                    df:67:34:06:9b:0d:fc:6e:03:a5:97:4b:3d:63:32:
                    de:c5:a4:27:56:6b:95:a4:fb:33:43:23:19:18:6c:
                    5f:b2:43:79:fc:c2:c6:9d:81:b3:6b:ff:da:3d:84:
                    e5:80:df:b5:90:76:a5:a6:6e:82:f8:76:fc:7f:44:
                    6f:27:aa:df:15:a5:6f:83:ec:a6:20:a4:38:85:99:
                    d8:a0:80:c5:3f:88:77:be:d1:5f:f4:e5:01:9d:dc:
                    9a:95:ae:8b:74:ff:58:5c:31:a5:82:93:39:35:e1:
                    0f:73:5c:9a:36:1a:41:d6:90:0c:10:96:6e:11:21:
                    61:4c:d9:f6:d8:85:8d:8f:7c:5c:15:0b:76:e4:33:
                    73:cc:bf:bd:39:fb:e2:f0:36:14:0e:b4:82:72:c9:
                    ed:fc:1f:70:8e:5a:13:80:9b:98:2a:cf:7f:4c:a6:
                    4d:20:ca:f1:85:c7:c6:fa:eb:77:e5:a7:e1:f9:1a:
                    06:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:8C:1C:B2:8D:17:09:EF:32:55:48:F9:A0:B7:29:4C:F5:18:C0:75
            X509v3 Authority Key Identifier:
                keyid:F8:CF:A4:7D:C0:82:52:E8:54:86:5D:D8:E5:28:CF:F8:4E:E6:36:9C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-M-kfcCCUuhUhl3Y5SjP-E7mNpw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/4d400a-f779-4704-b111-ca8d7d8fb9c1/1/1-M-kfcCCUuhUhl3Y5SjP-E7mNpw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/4d400a-f779-4704-b111-ca8d7d8fb9c1/1/1-M-kfcCCUuhUhl3Y5SjP-E7mNpw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:61:fd:d3:30:f8:e1:de:66:72:06:14:be:6c:63:d4:04:d0:
         6d:33:81:90:02:89:4d:39:02:1e:b6:d3:2b:c3:cf:9c:18:60:
         e3:32:d4:b6:6a:61:72:4b:33:b0:b6:96:ae:0e:df:42:c0:ac:
         7c:25:92:67:ab:89:2b:7f:76:1a:41:13:de:0b:e8:dd:67:7e:
         67:39:ca:e7:ad:c4:d9:a7:56:38:13:4c:e7:77:37:27:c3:a0:
         4f:da:ea:30:c0:dc:07:95:c5:7e:59:d7:dd:ae:00:5a:1f:3b:
         1f:0a:d2:6d:7b:7a:1a:18:1c:9e:36:4e:59:5c:32:dc:ba:92:
         33:1f:6a:32:a3:2d:2e:c0:8b:9f:e8:0a:e6:89:25:cd:4b:13:
         2e:0f:d9:d2:2a:35:ab:e8:b2:d8:17:65:00:d4:cd:37:83:9f:
         80:07:d3:2d:52:e1:76:04:ef:27:48:c5:aa:bc:1e:86:8e:79:
         72:64:2d:be:69:9b:33:08:be:91:7d:12:53:9d:3d:26:a7:ed:
         bd:71:7a:eb:e2:94:5b:bc:03:83:bb:2d:20:6d:d2:e3:6c:80:
         81:17:ae:b7:66:4a:5d:0d:25:e9:93:63:6f:63:44:11:b6:43:
         88:1b:2d:af:a4:a4:21:9c:aa:16:98:ad:be:bb:47:4f:ed:65:
         57:6e:c6:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----