Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/09/cd9b89-7568-47b1-8e51-e592c7d35ff2/1/qmVRVhfXd7VhHdDgs9ACU-oymgc.mft
File:                     qmVRVhfXd7VhHdDgs9ACU-oymgc.mft (raw, json)
Hash identifier:          CfgsXxI3ZXaO+/0Nd9hy9Ik7eudty+BE/zqV1n5h4Ro=
Subject key identifier:   23:FB:55:07:92:B6:8C:D3:F2:D3:9C:23:6E:B7:35:CC:54:85:C4:0B
Authority key identifier: AA:65:51:56:17:D7:77:B5:61:1D:D0:E0:B3:D0:02:53:EA:32:9A:07
Certificate issuer:       /CN=aa65515617d777b5611dd0e0b3d00253ea329a07
Certificate serial:       019DC3DF1F8B7C63AF921E667A3A50DDBF2B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qmVRVhfXd7VhHdDgs9ACU-oymgc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/09/cd9b89-7568-47b1-8e51-e592c7d35ff2/1/qmVRVhfXd7VhHdDgs9ACU-oymgc.mft
Manifest number:          018F
Signing time:             Sat 25 Apr 2026 09:01:12 +0000
Manifest this update:     Sat 25 Apr 2026 09:01:12 +0000
Manifest next update:     Sun 26 Apr 2026 09:01:12 +0000
Files and hashes:         1: qmVRVhfXd7VhHdDgs9ACU-oymgc.crl (hash: 43gu+a6+VA+aLpCpD8/4qiizSTcIyQAPpkueywZXNcI=)
                          2: w9_9phOVfcIB0arXvZjOg3oe-Gk.asa (hash: rpPL3WEh5ip5RqGHVPKSVlccVtUT14qZLk2GgYWP78M=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:c3:df:1f:8b:7c:63:af:92:1e:66:7a:3a:50:dd:bf:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aa65515617d777b5611dd0e0b3d00253ea329a07
        Validity
            Not Before: Apr 25 09:01:12 2026 GMT
            Not After : Apr 26 09:01:12 2026 GMT
        Subject: CN=23fb550792b68cd3f2d39c236eb735cc5485c40b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:c4:9e:ca:da:58:28:53:fc:25:aa:44:89:2d:
                    6f:37:42:af:b8:07:7a:86:36:a5:19:11:f5:8c:97:
                    7a:a7:e7:48:fa:23:63:1f:10:3c:f9:dd:15:51:a0:
                    f5:26:7e:5f:26:9a:20:ef:7e:95:c1:b2:a4:3a:5a:
                    cd:5a:66:d9:d2:5b:69:e6:ca:74:e1:5d:19:dd:4b:
                    cf:6c:1f:b0:b3:16:77:cb:d9:30:a3:97:16:eb:28:
                    e4:14:43:da:31:0f:95:c7:9b:45:cf:8d:44:19:ec:
                    26:9e:78:63:1d:70:d3:f8:10:0c:93:3e:84:23:00:
                    79:2e:07:c0:7c:b4:ae:ec:1d:9e:19:f6:0d:f3:e7:
                    f9:a8:0e:d4:2b:30:94:34:ac:e5:be:2b:03:c9:89:
                    96:8a:4e:b6:83:12:c6:72:16:dd:ae:7e:ce:0f:ef:
                    8d:c5:a2:9e:06:ef:26:ff:cb:da:5a:70:ce:71:9b:
                    45:e6:5f:03:18:00:a5:0d:76:4c:32:a4:3c:b1:32:
                    7d:17:a2:cd:41:9f:3e:ea:b6:5e:a7:03:a4:42:b7:
                    3e:27:bc:78:66:77:02:ce:ac:07:59:38:0a:f7:4a:
                    1b:95:32:f1:34:16:5b:86:ca:90:81:ad:5a:a4:cc:
                    65:de:c5:2a:d6:85:b6:66:52:b3:58:73:79:ca:57:
                    27:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:FB:55:07:92:B6:8C:D3:F2:D3:9C:23:6E:B7:35:CC:54:85:C4:0B
            X509v3 Authority Key Identifier:
                keyid:AA:65:51:56:17:D7:77:B5:61:1D:D0:E0:B3:D0:02:53:EA:32:9A:07

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qmVRVhfXd7VhHdDgs9ACU-oymgc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/cd9b89-7568-47b1-8e51-e592c7d35ff2/1/qmVRVhfXd7VhHdDgs9ACU-oymgc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/09/cd9b89-7568-47b1-8e51-e592c7d35ff2/1/qmVRVhfXd7VhHdDgs9ACU-oymgc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:63:56:73:48:96:0d:41:75:17:3b:c9:98:77:e0:c5:43:34:
         38:df:f6:d1:cf:cd:96:30:09:f8:f2:84:fe:39:f9:5f:ce:6e:
         c7:a3:07:07:16:72:01:07:d8:b5:71:a8:28:b1:d7:96:68:35:
         f6:de:13:5a:d7:0d:7a:6e:77:51:4e:a0:f8:92:95:8d:b1:d2:
         73:4e:cf:b6:28:da:09:7d:67:d1:ea:39:c4:d4:41:d1:1f:d5:
         92:8e:aa:44:89:86:aa:88:c4:ac:4b:8f:ab:28:72:f7:56:e2:
         ac:fc:7d:c8:dc:2a:10:dc:0f:65:c5:04:fb:6b:85:19:62:bd:
         14:b7:0e:b8:ac:9c:2f:66:d0:31:c7:0e:ff:0f:77:f9:38:12:
         5d:fe:b0:ad:30:d3:f9:d7:cc:27:64:f7:6a:35:04:07:cc:4d:
         f4:03:93:43:07:3b:50:10:38:b1:60:5e:00:61:46:8d:45:af:
         25:d8:58:28:ae:99:10:c9:c4:bd:6c:7d:c2:14:31:d4:ee:32:
         d4:40:a9:1c:1a:3e:5d:3f:a3:3b:c3:52:7e:a8:3f:23:76:08:
         3d:3b:6f:d5:b4:6e:7f:80:94:68:24:44:26:44:cf:84:ad:fd:
         4d:6a:bd:6c:24:e9:1d:56:45:87:c2:73:9e:c1:c2:af:2c:3b:
         28:81:f2:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----