Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/2cc3ce-ec81-45ed-86e6-9ada2378a9a0/1/1b4HZwwsmirgJ4ExqinPPOelqqM.mft
File:                     1b4HZwwsmirgJ4ExqinPPOelqqM.mft (raw, json)
Hash identifier:          vL+vHvCB53+6MvTaWb9l+JXeLI/REzRigur3vpmDo40=
Subject key identifier:   30:45:6C:1C:7D:8A:E6:71:C5:08:72:5F:80:19:02:DF:BA:1A:70:9E
Authority key identifier: D5:BE:07:67:0C:2C:9A:2A:E0:27:81:31:AA:29:CF:3C:E7:A5:AA:A3
Certificate issuer:       /CN=d5be07670c2c9a2ae0278131aa29cf3ce7a5aaa3
Certificate serial:       019BE481F606540F11DCC08C6FA0CF67CA1D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1b4HZwwsmirgJ4ExqinPPOelqqM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f8/2cc3ce-ec81-45ed-86e6-9ada2378a9a0/1/1b4HZwwsmirgJ4ExqinPPOelqqM.mft
Manifest number:          0FE4
Signing time:             Thu 22 Jan 2026 07:01:20 +0000
Manifest this update:     Thu 22 Jan 2026 07:01:20 +0000
Manifest next update:     Fri 23 Jan 2026 07:01:20 +0000
Files and hashes:         1: 1b4HZwwsmirgJ4ExqinPPOelqqM.crl (hash: 2N4s3PGhQE3+RtnkFvraEsK9RQ9A9rm/Er87sfwrbUU=)
                          2: AxG5wFO2MDdWUvHh1PluKe0ky-I.roa (hash: cC2QzyvDJOa+oXsPrR4gS/VZ9KUiTWzfLRKmqa68gno=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:e4:81:f6:06:54:0f:11:dc:c0:8c:6f:a0:cf:67:ca:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d5be07670c2c9a2ae0278131aa29cf3ce7a5aaa3
        Validity
            Not Before: Jan 22 07:01:20 2026 GMT
            Not After : Jan 23 07:01:20 2026 GMT
        Subject: CN=30456c1c7d8ae671c508725f801902dfba1a709e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:a5:ce:93:01:1d:51:c0:19:e5:2a:ad:85:d4:
                    10:be:03:07:5f:d8:39:aa:ee:8e:6c:9a:65:a0:8b:
                    43:d1:82:b9:89:c3:91:8b:ec:f4:ef:f9:eb:09:73:
                    ed:b7:fd:9e:fe:29:d0:1d:3c:5f:b6:38:8e:cf:c2:
                    e7:72:01:f3:3d:bf:df:c8:f1:bc:77:b5:04:a0:68:
                    5e:f6:96:74:13:d9:d8:8a:b6:05:13:f7:57:33:34:
                    64:b2:ec:15:5c:3c:7c:f1:d5:97:e2:4d:2f:06:d7:
                    11:c5:10:66:f1:15:8c:30:42:b8:fe:1b:51:e5:fb:
                    f8:0d:2c:d7:f2:f8:f4:d0:95:f7:f9:79:d4:09:07:
                    34:0f:a3:88:35:3c:4f:af:c7:9e:f6:84:2c:db:0b:
                    a3:23:7e:93:f0:77:ce:50:47:ea:d0:bb:a2:29:36:
                    38:3d:c7:db:93:87:43:b8:f1:d4:32:65:d3:e7:6d:
                    8d:9f:bf:6b:85:e1:a1:7c:74:3e:cd:65:15:e3:31:
                    eb:7a:46:69:6e:06:b3:94:e1:5b:da:9a:47:cd:a6:
                    ff:9b:27:d1:3b:70:c6:a2:db:f9:c2:7d:c6:84:e4:
                    6a:fb:ae:17:e6:92:29:20:38:80:56:ae:60:83:5a:
                    8a:b1:71:1d:85:73:96:91:17:35:24:92:4c:b9:8e:
                    ae:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:45:6C:1C:7D:8A:E6:71:C5:08:72:5F:80:19:02:DF:BA:1A:70:9E
            X509v3 Authority Key Identifier:
                keyid:D5:BE:07:67:0C:2C:9A:2A:E0:27:81:31:AA:29:CF:3C:E7:A5:AA:A3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b4HZwwsmirgJ4ExqinPPOelqqM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/2cc3ce-ec81-45ed-86e6-9ada2378a9a0/1/1b4HZwwsmirgJ4ExqinPPOelqqM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/2cc3ce-ec81-45ed-86e6-9ada2378a9a0/1/1b4HZwwsmirgJ4ExqinPPOelqqM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:97:38:5d:a0:d2:3f:f0:30:93:87:31:9b:33:59:09:d3:76:
         43:5b:4e:b9:c8:0b:53:f7:d8:b9:c5:db:66:24:0d:09:41:8c:
         a1:9e:f6:b3:54:b7:03:69:85:f4:98:08:95:f6:c8:b3:28:c4:
         0c:4c:2c:c0:52:5d:78:b2:07:a6:50:b4:1d:7a:47:32:33:c3:
         b4:d8:25:2b:4d:0a:d6:e6:fe:de:74:08:b6:98:cd:71:af:52:
         7b:48:26:50:ba:c4:3e:cc:b0:06:0e:98:8b:d5:07:5c:ac:14:
         48:e9:f5:43:1e:48:da:2f:f7:3d:64:d2:c5:61:42:05:45:d7:
         bf:6b:d2:6c:43:a6:55:0e:49:85:1c:67:62:ad:d2:6b:5b:b3:
         27:c7:04:14:17:dc:62:67:46:ae:de:ff:d7:4a:af:84:ac:48:
         28:e7:b8:df:ab:f9:df:4a:73:b7:02:e1:6c:03:55:c9:a7:69:
         af:f2:ca:d2:9a:f7:58:6c:29:4f:54:05:36:33:8c:75:b5:51:
         b1:f5:e3:16:ac:07:be:e9:9b:56:05:47:8e:91:1d:67:87:fb:
         4f:63:cf:59:1b:85:58:17:82:1e:94:fa:d3:01:10:a1:d3:98:
         11:50:90:6a:55:c9:ed:b3:54:81:45:b0:a6:2e:dc:da:64:ab:
         a8:91:26:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----