Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bd/cf8791-9980-4c79-9c28-0e16baef7113/1/0zsy4F0KhdvURQ83pz5_ofYQCvw.mft
File:                     0zsy4F0KhdvURQ83pz5_ofYQCvw.mft (raw, json)
Hash identifier:          F8S3ZwVNnzsBL3K8WnKHTdNpxxCOEuHfm7LdUDUAN/c=
Subject key identifier:   CC:35:F6:93:CB:F6:E0:AA:46:DA:50:83:26:3B:A4:64:FF:BA:82:93
Authority key identifier: D3:3B:32:E0:5D:0A:85:DB:D4:45:0F:37:A7:3E:7F:A1:F6:10:0A:FC
Certificate issuer:       /CN=d33b32e05d0a85dbd4450f37a73e7fa1f6100afc
Certificate serial:       019F2369B6AC375D3ABCC4D53FC9ADCC1B53
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0zsy4F0KhdvURQ83pz5_ofYQCvw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bd/cf8791-9980-4c79-9c28-0e16baef7113/1/0zsy4F0KhdvURQ83pz5_ofYQCvw.mft
Manifest number:          0CB0
Signing time:             Thu 02 Jul 2026 15:19:18 +0000
Manifest this update:     Thu 02 Jul 2026 15:19:18 +0000
Manifest next update:     Fri 03 Jul 2026 15:19:18 +0000
Files and hashes:         1: 0zsy4F0KhdvURQ83pz5_ofYQCvw.crl (hash: ogpXojVp0uMV8xThYwvUPPjvk/iCxWsZOILzBKKRHh8=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:23:69:b6:ac:37:5d:3a:bc:c4:d5:3f:c9:ad:cc:1b:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d33b32e05d0a85dbd4450f37a73e7fa1f6100afc
        Validity
            Not Before: Jul  2 15:19:18 2026 GMT
            Not After : Jul  3 15:19:18 2026 GMT
        Subject: CN=cc35f693cbf6e0aa46da5083263ba464ffba8293
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:7e:59:be:e2:16:26:36:de:d8:23:55:18:50:
                    ad:87:ea:e8:66:33:c9:01:73:69:ab:b3:2d:92:d2:
                    7d:d8:51:6a:9d:ae:43:ea:3b:31:09:6a:b5:87:a2:
                    97:35:d7:35:d2:ee:b2:1f:d1:42:14:20:45:4f:19:
                    72:35:5f:31:1c:16:68:9c:b0:c5:bb:4f:f8:9a:c6:
                    26:da:9e:fb:98:d5:7c:2d:6f:98:2c:a3:56:46:b2:
                    c3:72:56:54:fd:db:a5:1a:68:e2:4f:30:b4:bb:f6:
                    d7:47:c7:24:dc:82:2d:9c:f5:fc:81:ce:bc:7a:d8:
                    58:ad:49:e6:d5:dc:37:54:ab:fd:13:e2:8c:10:19:
                    e5:6e:21:2f:e5:fb:52:d7:bb:68:c8:73:a7:7b:4e:
                    4e:6e:0d:84:54:58:6d:0c:1d:9e:38:8b:d9:7f:fb:
                    af:f3:d0:57:3c:64:53:64:2e:c5:00:82:b3:f3:65:
                    96:9d:59:96:22:87:a5:7b:7f:94:7e:f2:94:30:72:
                    06:63:6f:ff:58:81:e0:db:43:44:40:a0:83:d7:13:
                    c4:31:fd:d0:38:4a:df:f4:8b:df:49:24:8f:98:d2:
                    69:6e:37:0a:a8:33:ae:90:bf:3d:5a:10:df:1e:a6:
                    ca:7a:c8:15:23:a3:6d:13:3f:98:3f:c5:e7:9c:d3:
                    5b:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:35:F6:93:CB:F6:E0:AA:46:DA:50:83:26:3B:A4:64:FF:BA:82:93
            X509v3 Authority Key Identifier:
                keyid:D3:3B:32:E0:5D:0A:85:DB:D4:45:0F:37:A7:3E:7F:A1:F6:10:0A:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0zsy4F0KhdvURQ83pz5_ofYQCvw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/cf8791-9980-4c79-9c28-0e16baef7113/1/0zsy4F0KhdvURQ83pz5_ofYQCvw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/cf8791-9980-4c79-9c28-0e16baef7113/1/0zsy4F0KhdvURQ83pz5_ofYQCvw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:03:9b:e0:9b:d4:d7:7d:23:81:0f:0e:5b:da:ff:a6:73:02:
         e5:33:bd:de:87:16:25:25:00:60:28:cc:b2:a4:c8:ea:99:19:
         2f:1e:3d:12:64:42:fa:5b:08:bd:ab:ed:60:1e:e1:19:6c:f9:
         4b:65:3a:4a:03:ca:43:46:61:48:78:17:57:9a:86:d4:da:75:
         72:8d:1a:d5:10:2b:cd:0e:78:2f:68:85:f9:f4:88:5d:d6:c6:
         36:8c:79:60:00:cb:43:0d:2a:9e:65:9e:05:66:d2:6b:1a:84:
         10:1f:db:b5:8a:ef:67:e2:fd:11:b9:05:8b:91:d1:6b:84:5d:
         0b:1f:a0:44:d3:76:fc:00:6a:51:46:4d:31:4a:1c:c3:15:c1:
         af:9c:ef:8b:f9:10:e9:07:e0:ac:04:e3:aa:93:1a:3a:1a:0c:
         a0:d7:c7:17:76:08:fd:0f:10:51:ad:68:3c:52:64:19:0b:4a:
         8e:5c:cc:bb:21:76:90:04:03:e3:f2:f4:2c:7c:2f:1a:df:25:
         ab:aa:21:eb:f4:88:70:0c:ac:68:32:f2:f8:5f:8a:83:36:15:
         1c:ae:81:44:42:f4:b9:c7:4c:cd:69:52:19:7c:f4:f8:8c:e9:
         47:54:23:dd:f5:55:02:fa:76:c6:4c:db:4a:a2:74:57:29:18:
         fe:7b:d8:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----