Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/47/7fa172-8e55-4711-8c75-18f8925c6665/1/0gXOrys2rZ_lGQaehrlONtLsS94.mft
File:                     0gXOrys2rZ_lGQaehrlONtLsS94.mft (raw, json)
Hash identifier:          DUYI2I33CCfh8AbO30V8dU8RpTwoieE4361DTRj3j6k=
Subject key identifier:   A0:0D:56:A7:89:60:36:44:B2:E6:DB:E6:5D:3A:15:EF:DB:59:92:AF
Authority key identifier: D2:05:CE:AF:2B:36:AD:9F:E5:19:06:9E:86:B9:4E:36:D2:EC:4B:DE
Certificate issuer:       /CN=d205ceaf2b36ad9fe519069e86b94e36d2ec4bde
Certificate serial:       01A07B19D83E6A9F4DAE49273E385001AED1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0gXOrys2rZ_lGQaehrlONtLsS94.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/47/7fa172-8e55-4711-8c75-18f8925c6665/1/0gXOrys2rZ_lGQaehrlONtLsS94.mft
Manifest number:          0D6F
Signing time:             Mon 07 Sep 2026 09:01:26 +0000
Manifest this update:     Mon 07 Sep 2026 09:01:26 +0000
Manifest next update:     Tue 08 Sep 2026 09:01:26 +0000
Files and hashes:         1: 0gXOrys2rZ_lGQaehrlONtLsS94.crl (hash: ROqmBVCB4W5LR+1UTs9bNL5IQ6Ab+0LF2UW9LGAyO5s=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:7b:19:d8:3e:6a:9f:4d:ae:49:27:3e:38:50:01:ae:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d205ceaf2b36ad9fe519069e86b94e36d2ec4bde
        Validity
            Not Before: Sep  7 09:01:26 2026 GMT
            Not After : Sep  8 09:01:26 2026 GMT
        Subject: CN=a00d56a789603644b2e6dbe65d3a15efdb5992af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:c1:66:8d:b4:10:ce:0c:09:18:81:53:dc:db:
                    52:60:27:92:de:dc:98:ca:07:21:9b:35:85:1c:e4:
                    8a:6a:8f:38:22:10:2b:97:18:0a:c4:33:9c:30:58:
                    e2:99:0d:a7:2b:b7:17:a0:ee:cc:8d:ac:33:4d:bf:
                    69:11:a2:8b:25:e3:86:68:98:b2:43:15:ca:37:89:
                    82:9e:e1:b9:4a:b2:c9:9f:e8:14:10:af:67:14:22:
                    02:1a:5b:dd:b1:1b:67:d6:a5:79:49:fc:67:bb:35:
                    b6:7a:29:a9:27:9e:d1:87:0a:10:e7:0b:1e:f4:98:
                    d6:7d:2d:9f:e0:f9:c4:ff:c6:2c:c1:4b:69:08:14:
                    c4:1f:06:c4:c1:40:fe:09:bb:8b:d1:05:da:92:3c:
                    bd:21:0c:a7:0d:af:b5:c2:e0:ac:e6:4d:e7:94:a7:
                    00:5a:ab:b9:49:c2:c8:91:81:45:c6:03:3b:e2:b4:
                    78:6d:87:29:10:06:4c:15:89:b2:f3:30:30:fe:d3:
                    4a:f0:04:32:7c:da:59:73:eb:50:f3:26:e1:f9:c9:
                    53:85:c4:91:65:c7:dc:a3:b7:27:94:fe:38:c6:02:
                    f5:ff:c1:fb:9f:58:c0:98:7f:e0:d8:23:e4:34:05:
                    f0:03:f4:b7:d7:b1:d2:f7:92:d0:0e:40:0e:21:b3:
                    f9:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:0D:56:A7:89:60:36:44:B2:E6:DB:E6:5D:3A:15:EF:DB:59:92:AF
            X509v3 Authority Key Identifier:
                keyid:D2:05:CE:AF:2B:36:AD:9F:E5:19:06:9E:86:B9:4E:36:D2:EC:4B:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0gXOrys2rZ_lGQaehrlONtLsS94.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/7fa172-8e55-4711-8c75-18f8925c6665/1/0gXOrys2rZ_lGQaehrlONtLsS94.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/47/7fa172-8e55-4711-8c75-18f8925c6665/1/0gXOrys2rZ_lGQaehrlONtLsS94.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:0e:2a:50:3e:a0:de:0c:2b:e6:93:f0:dd:f3:08:56:ab:8c:
         57:9f:a8:0b:b6:16:07:df:5a:57:c3:81:9a:7c:12:d7:52:8e:
         1b:4d:0a:e6:89:fe:bb:38:cb:97:6c:17:e6:54:cc:b4:a0:9e:
         fe:8c:94:4c:00:bc:5e:24:f9:e8:9e:64:ec:f4:a1:5c:30:81:
         2b:60:13:18:bf:45:52:c0:12:a8:9d:a6:0b:0e:9f:a2:d6:db:
         17:af:7e:3d:04:b2:d8:3b:04:fe:b7:87:a5:ca:7b:7b:89:5d:
         15:4e:0a:a0:92:d2:e9:6b:db:ca:40:42:97:7f:23:df:32:f3:
         7d:b6:31:1a:e9:b4:45:2b:a3:a4:6d:54:fd:ac:bc:4e:62:14:
         19:79:48:28:32:3f:e4:f5:44:8a:4d:ad:c9:51:6e:a7:50:0d:
         82:ed:af:12:02:48:80:d6:15:80:09:6e:74:e7:a4:f8:59:dc:
         83:a9:40:1f:9f:7b:99:a7:39:9f:5e:8b:a0:94:ed:57:d5:c6:
         8d:54:63:88:a8:c0:2e:e7:75:0f:d6:92:1b:24:4f:32:e5:89:
         b1:f8:b8:f2:fe:f9:8c:90:fe:cd:c4:5a:1b:b0:6b:2e:f9:4f:
         ae:7d:4e:37:b6:de:bc:5c:62:70:e6:ba:41:17:30:3d:e9:61:
         52:ad:67:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----