Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b8/6d2a19-4746-478f-9936-2733f699cb62/1/A6YrMJo3hUJZChKznF9wzbDnsVA.mft
File:                     A6YrMJo3hUJZChKznF9wzbDnsVA.mft (raw, json)
Hash identifier:          /ieDJRSlRq9hvctK8fVa4ySOFM+YbQ6Uw4BLDpcEb0M=
Subject key identifier:   CD:7B:A4:EC:79:19:07:D6:5A:CA:98:F4:97:BB:FA:91:BB:BB:5F:74
Authority key identifier: 03:A6:2B:30:9A:37:85:42:59:0A:12:B3:9C:5F:70:CD:B0:E7:B1:50
Certificate issuer:       /CN=03a62b309a378542590a12b39c5f70cdb0e7b150
Certificate serial:       01A0AC3CAD88E2E80248CD4088220593C36D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/A6YrMJo3hUJZChKznF9wzbDnsVA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b8/6d2a19-4746-478f-9936-2733f699cb62/1/A6YrMJo3hUJZChKznF9wzbDnsVA.mft
Manifest number:          0784
Signing time:             Wed 16 Sep 2026 22:00:52 +0000
Manifest this update:     Wed 16 Sep 2026 22:00:52 +0000
Manifest next update:     Thu 17 Sep 2026 22:00:52 +0000
Files and hashes:         1: A6YrMJo3hUJZChKznF9wzbDnsVA.crl (hash: 3sdptGEBhyAZ9mCr41wOLk4qDo4e+l9LpGleXQPBXaU=)
                          2: _n9XrS5UkjXNT6ARRtv7DUuvjEM.roa (hash: TnwTYDlKPUNQjp/SqCH7ciXQlU62x/PX5ypSd1AHyds=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:ac:3c:ad:88:e2:e8:02:48:cd:40:88:22:05:93:c3:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=03a62b309a378542590a12b39c5f70cdb0e7b150
        Validity
            Not Before: Sep 16 22:00:52 2026 GMT
            Not After : Sep 17 22:00:52 2026 GMT
        Subject: CN=cd7ba4ec791907d65aca98f497bbfa91bbbb5f74
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:d8:11:0c:13:85:ca:fa:ff:e7:d1:02:34:89:
                    9a:6d:1b:05:85:b8:fe:41:b6:3f:d6:c3:43:ef:70:
                    10:fe:20:44:f2:56:d6:dc:17:39:18:4b:00:5b:7f:
                    63:e8:54:77:79:eb:d9:e0:97:51:13:a8:6a:8d:0f:
                    28:2e:7d:e5:90:95:f2:12:0f:47:b4:0d:a8:6a:6a:
                    e3:80:13:18:40:69:d3:d9:19:e9:92:6c:52:f0:0a:
                    b2:46:dc:5f:4e:81:70:d9:e3:ad:a4:78:05:25:2a:
                    ee:42:1b:b1:1a:8c:7f:c5:17:ed:a4:2e:95:b3:d1:
                    3c:f7:60:bf:23:ba:18:fb:9b:1f:c0:c5:48:09:89:
                    55:c6:b9:cd:e3:f6:55:0a:d2:a0:03:c7:ff:89:e4:
                    49:0d:f1:30:f9:76:a4:e8:94:88:7e:49:d8:b7:c3:
                    ee:73:db:82:8d:e6:24:68:5b:e7:be:ae:70:6f:a1:
                    e2:42:26:14:1f:a1:26:78:82:28:58:c1:72:da:43:
                    7c:e2:43:17:4f:62:a6:71:d2:e3:2f:e4:ca:f6:7e:
                    3c:73:af:24:77:22:f3:98:9e:22:04:12:1e:14:95:
                    dd:70:85:e2:32:f8:36:69:65:7c:a8:cb:63:38:c1:
                    68:34:b3:55:45:ed:d2:79:25:f7:bc:1a:ea:91:d3:
                    6d:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:7B:A4:EC:79:19:07:D6:5A:CA:98:F4:97:BB:FA:91:BB:BB:5F:74
            X509v3 Authority Key Identifier:
                keyid:03:A6:2B:30:9A:37:85:42:59:0A:12:B3:9C:5F:70:CD:B0:E7:B1:50

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A6YrMJo3hUJZChKznF9wzbDnsVA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/6d2a19-4746-478f-9936-2733f699cb62/1/A6YrMJo3hUJZChKznF9wzbDnsVA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/6d2a19-4746-478f-9936-2733f699cb62/1/A6YrMJo3hUJZChKznF9wzbDnsVA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:db:96:22:2f:cf:68:2b:fd:ca:34:07:c8:b0:05:87:05:73:
         a3:1c:2b:18:89:0e:3d:0b:25:09:32:2e:01:a4:ea:9e:95:f6:
         c4:93:8c:84:26:19:09:09:7f:75:53:4f:4d:8e:07:ea:60:5c:
         cf:b7:f4:ef:6f:ef:3c:69:84:f3:bd:5f:14:01:ed:56:91:e3:
         21:a5:a9:4f:cc:27:da:c8:48:09:a5:bc:ad:cb:98:35:53:f2:
         ac:73:c2:c7:4b:b1:99:e4:1f:50:ed:87:41:02:d0:6a:f0:55:
         6b:63:21:99:06:c1:0b:29:24:a8:2c:91:7e:54:c1:e3:3c:3a:
         17:f7:3e:1e:df:de:de:ee:a9:0e:57:3f:b1:23:e4:aa:f4:cf:
         16:df:e9:ee:b7:4f:3d:0b:be:06:93:a4:88:69:b1:06:54:55:
         99:04:21:38:7a:5c:4f:02:c5:18:12:f5:6e:82:6c:d9:3f:4e:
         05:c3:89:e7:10:cc:2a:8e:d6:c1:5b:51:c1:5d:ab:5d:f2:7c:
         84:89:a7:49:7c:cd:f1:5d:3a:51:4f:99:bc:93:13:ab:5b:e9:
         64:49:7e:c9:87:f1:5c:2c:f9:c1:1b:b8:64:ad:0d:5e:f2:0b:
         30:4e:4d:39:b1:be:72:8e:42:96:38:d5:87:84:b7:62:64:c9:
         6a:5c:88:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----