Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d4/e589c2-1acb-4d82-9b9a-52362b6b3334/1/BZZLbVGQL9wapoQbs9PGIqV5glo.mft
File:                     BZZLbVGQL9wapoQbs9PGIqV5glo.mft (raw, json)
Hash identifier:          DGe2tDOhdPVkKCmrscVsG8j44SdrStYwH+XBkd/8FWg=
Subject key identifier:   5A:68:5B:C9:49:3C:10:7D:83:92:22:1E:F5:A1:08:B1:42:66:09:8F
Authority key identifier: 05:96:4B:6D:51:90:2F:DC:1A:A6:84:1B:B3:D3:C6:22:A5:79:82:5A
Certificate issuer:       /CN=05964b6d51902fdc1aa6841bb3d3c622a579825a
Certificate serial:       01A0ACAA5D5D196D5DF4825595FE2DF1B7FC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BZZLbVGQL9wapoQbs9PGIqV5glo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d4/e589c2-1acb-4d82-9b9a-52362b6b3334/1/BZZLbVGQL9wapoQbs9PGIqV5glo.mft
Manifest number:          0E46
Signing time:             Thu 17 Sep 2026 00:00:41 +0000
Manifest this update:     Thu 17 Sep 2026 00:00:41 +0000
Manifest next update:     Fri 18 Sep 2026 00:00:41 +0000
Files and hashes:         1: 0d9hiHd7GjrC9ghx7ryAhchU-Rk.roa (hash: 3BaZfWWroVngFQ4kO6x8XzuuIOlK3lqNvFICnTUD0Yo=)
                          2: BZZLbVGQL9wapoQbs9PGIqV5glo.crl (hash: u28M4MU6KUSfBsnJPzsW17fQERP50VllNak9rmYA1QU=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:ac:aa:5d:5d:19:6d:5d:f4:82:55:95:fe:2d:f1:b7:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=05964b6d51902fdc1aa6841bb3d3c622a579825a
        Validity
            Not Before: Sep 17 00:00:41 2026 GMT
            Not After : Sep 18 00:00:41 2026 GMT
        Subject: CN=5a685bc9493c107d8392221ef5a108b14266098f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:95:d4:5e:10:20:90:66:0d:2b:69:b7:5f:10:
                    d2:c4:0a:b0:81:bd:8d:0b:8d:e3:d3:b5:3a:af:86:
                    e6:38:be:59:45:09:0e:4f:ff:e4:f6:c2:52:f3:09:
                    ed:d5:b7:07:34:3d:bd:73:ec:7f:1b:3b:54:ab:59:
                    3f:0b:57:a8:67:b9:6c:00:12:19:f3:97:19:ae:b5:
                    84:81:c0:c3:42:d9:69:29:ba:c0:13:13:87:31:4d:
                    e6:6e:b3:01:3e:94:bc:40:23:73:80:dc:35:64:5e:
                    20:32:8b:04:99:59:31:89:85:b5:62:d1:ec:41:da:
                    ff:ae:9b:1a:7f:70:3c:63:42:78:38:3a:0b:80:c4:
                    05:e2:97:6a:3c:db:23:aa:a9:8a:f5:c2:85:f4:51:
                    d1:13:e6:71:fc:be:64:27:c4:e0:aa:d4:33:ea:d0:
                    87:73:7f:a3:38:db:67:c1:f9:b3:a1:36:b1:6c:5a:
                    04:32:ed:19:78:c4:3d:a1:3c:b5:fa:d8:32:a4:cb:
                    86:5a:9b:8c:54:36:79:d2:d5:48:8d:99:4c:0a:4f:
                    a1:90:de:04:8a:b5:f8:6e:03:32:ba:c7:f4:10:09:
                    a5:e6:7b:d1:1b:35:a0:e4:76:46:32:81:31:72:d2:
                    3f:35:d0:34:14:7c:1c:92:01:4b:2a:68:aa:4a:14:
                    99:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:68:5B:C9:49:3C:10:7D:83:92:22:1E:F5:A1:08:B1:42:66:09:8F
            X509v3 Authority Key Identifier:
                keyid:05:96:4B:6D:51:90:2F:DC:1A:A6:84:1B:B3:D3:C6:22:A5:79:82:5A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BZZLbVGQL9wapoQbs9PGIqV5glo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/e589c2-1acb-4d82-9b9a-52362b6b3334/1/BZZLbVGQL9wapoQbs9PGIqV5glo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/e589c2-1acb-4d82-9b9a-52362b6b3334/1/BZZLbVGQL9wapoQbs9PGIqV5glo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:44:b5:58:82:28:e2:1d:cb:6f:6f:3c:18:9e:e9:67:ab:ed:
         35:97:f6:c8:c8:ee:79:c3:3d:bb:bb:58:19:4f:21:77:06:d6:
         21:8d:eb:33:16:20:46:0a:af:2d:e2:6a:ac:e9:af:ba:6b:3a:
         4c:ec:04:38:88:10:81:4d:a3:4f:45:39:f6:ce:fb:b8:40:5a:
         8d:ce:bf:9a:20:d3:2a:f9:f0:93:d8:cd:5b:a9:22:19:bc:10:
         1e:d0:39:1e:21:a3:db:f6:a9:19:cf:a0:bb:92:f0:8b:09:eb:
         00:1c:1d:3a:a8:c6:19:44:bc:37:9f:bc:3a:ae:d3:62:d8:48:
         25:4a:0f:f6:28:21:1c:3c:0a:b9:d7:06:ac:0a:11:75:b2:2c:
         0a:d6:cc:63:1e:48:53:fa:da:d7:ee:e8:bf:63:eb:ec:8c:0f:
         1e:43:13:a7:e8:41:5e:42:5e:6b:34:73:c8:b0:ea:a0:b9:df:
         ba:c6:d3:ca:ac:42:9e:94:72:c1:05:19:16:21:9e:ed:98:e2:
         3e:42:67:35:a5:a3:ce:b8:7a:30:cb:6a:bc:f9:3f:3d:ed:07:
         50:00:dc:9d:1c:3c:71:ae:75:95:23:2a:b5:0c:3f:17:c5:98:
         e3:0e:61:6c:f9:ed:37:33:1f:34:00:74:f2:e1:fa:46:7d:bb:
         61:ed:7d:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----