Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/03/5bf826-921e-44f5-af33-676b428925ab/1/1CWQAxL_O9pNL4lvZN9lZG_ZwlE.mft
File:                     1CWQAxL_O9pNL4lvZN9lZG_ZwlE.mft (raw, json)
Hash identifier:          wLLIkjX2TWx2pS0WntQzof4ze0cEGvMoTqzdMlt1ros=
Subject key identifier:   57:9C:4A:36:72:C5:4B:DD:99:1B:4F:22:FE:E3:C0:17:4B:D9:C0:0E
Authority key identifier: D4:25:90:03:12:FF:3B:DA:4D:2F:89:6F:64:DF:65:64:6F:D9:C2:51
Certificate issuer:       /CN=d425900312ff3bda4d2f896f64df65646fd9c251
Certificate serial:       01A11B2BED973343DD283BC50481B4A3055F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1CWQAxL_O9pNL4lvZN9lZG_ZwlE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/03/5bf826-921e-44f5-af33-676b428925ab/1/1CWQAxL_O9pNL4lvZN9lZG_ZwlE.mft
Manifest number:          1A92
Signing time:             Thu 08 Oct 2026 11:00:25 +0000
Manifest this update:     Thu 08 Oct 2026 11:00:25 +0000
Manifest next update:     Fri 09 Oct 2026 11:00:25 +0000
Files and hashes:         1: 1CWQAxL_O9pNL4lvZN9lZG_ZwlE.crl (hash: wRMoVQrycu9RpDbe5hLjJQTnYmY/05lvree7UZpWJR4=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:1b:2b:ed:97:33:43:dd:28:3b:c5:04:81:b4:a3:05:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d425900312ff3bda4d2f896f64df65646fd9c251
        Validity
            Not Before: Oct  8 11:00:25 2026 GMT
            Not After : Oct  9 11:00:25 2026 GMT
        Subject: CN=579c4a3672c54bdd991b4f22fee3c0174bd9c00e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:ca:47:4a:73:6f:2f:80:b6:5b:2e:34:0d:16:
                    82:cb:73:43:b6:f2:5c:20:c5:2b:c9:ba:cd:e2:3c:
                    2a:ec:c0:1e:3b:f7:5b:82:3e:ed:a7:d1:94:70:e9:
                    ce:cd:a0:a3:0b:ca:4b:5e:67:e5:5b:07:fe:14:55:
                    a8:93:05:ce:77:f7:4a:5f:74:4e:68:ae:c7:aa:88:
                    3c:40:16:f4:a7:27:6c:d0:e9:45:02:b1:54:8f:a6:
                    9f:fa:d4:98:74:64:73:12:b4:ba:a2:63:9e:b1:56:
                    45:41:74:19:f7:2d:db:a4:ee:5e:32:a8:70:a2:d8:
                    71:eb:07:8c:1b:87:b2:56:2f:ee:cb:5b:f8:5e:7b:
                    a8:a0:c9:f2:25:b0:c1:75:17:c4:c9:57:ee:9a:fc:
                    1f:59:76:9c:1e:13:da:dc:0a:09:e4:87:b1:d0:66:
                    48:07:b6:e7:99:25:af:02:1c:34:cc:b3:44:b6:88:
                    89:97:21:8f:d1:b1:b6:57:6e:f1:ac:45:97:9f:24:
                    67:33:9c:78:fb:07:58:8c:f8:6e:4f:a4:47:5e:61:
                    c6:61:e5:ff:82:2b:38:11:35:b4:8d:dd:53:e5:5e:
                    aa:25:ca:5b:da:f4:e0:97:eb:15:cc:4a:17:b6:4b:
                    c1:5f:01:08:58:43:0c:21:4c:41:4e:2e:a1:56:1f:
                    71:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:9C:4A:36:72:C5:4B:DD:99:1B:4F:22:FE:E3:C0:17:4B:D9:C0:0E
            X509v3 Authority Key Identifier:
                keyid:D4:25:90:03:12:FF:3B:DA:4D:2F:89:6F:64:DF:65:64:6F:D9:C2:51

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1CWQAxL_O9pNL4lvZN9lZG_ZwlE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/5bf826-921e-44f5-af33-676b428925ab/1/1CWQAxL_O9pNL4lvZN9lZG_ZwlE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/03/5bf826-921e-44f5-af33-676b428925ab/1/1CWQAxL_O9pNL4lvZN9lZG_ZwlE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:d9:55:a5:16:75:e3:aa:ea:21:fe:b8:b1:ef:86:78:cb:0e:
         49:59:04:31:0e:bf:b9:90:75:3e:d2:49:5d:ef:2b:0b:d5:21:
         2d:f7:ff:d3:20:41:f4:a4:2b:af:9d:d7:e0:85:b8:a0:ce:81:
         d7:39:6e:66:b6:9b:e7:87:39:4b:4c:be:fc:a4:a1:fd:82:cb:
         c7:d7:b3:d5:ad:dc:2a:c7:6e:6a:c9:36:d8:df:f7:28:15:d7:
         e7:fe:75:f6:d9:e3:88:a9:d2:82:4d:91:a8:6b:72:8a:8b:45:
         53:f7:2a:28:39:5a:3c:1b:5a:23:e3:67:a9:ee:f4:04:28:d5:
         67:9e:ac:00:3f:53:ce:ce:3e:1e:ce:02:c9:f0:8c:f6:04:a3:
         b2:99:be:3e:07:31:2a:02:5b:18:85:69:dd:80:f3:82:46:7d:
         3d:f7:00:34:5e:d4:4e:90:7b:54:34:dd:9f:d7:ea:7e:ff:57:
         99:4d:f7:08:83:dd:93:3c:8e:e7:49:22:b1:ea:57:b7:7f:25:
         ba:63:f2:38:eb:9b:60:fa:1a:77:86:b4:5e:6b:ec:6d:18:98:
         5d:98:75:9a:c3:79:cf:27:0d:d6:60:e2:96:fa:a8:09:02:90:
         0c:62:66:f3:1d:58:6c:3f:25:88:4e:ef:74:86:f6:c8:91:d3:
         0f:17:b3:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----