Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/2f7894-756d-4cbf-977c-3c5ae761cab0/1/DLeircbcrxd7k6M2y47OzFrzAlg.mft
File:                     DLeircbcrxd7k6M2y47OzFrzAlg.mft (raw, json)
Hash identifier:          1wdCOl9H/yND8eX6GcDWsKinLTR7N3yqC3GYOpil9+s=
Subject key identifier:   28:25:43:E3:AD:5A:78:FC:41:CE:4F:B0:9D:13:A5:27:27:F8:B0:A6
Authority key identifier: 0C:B7:A2:AD:C6:DC:AF:17:7B:93:A3:36:CB:8E:CE:CC:5A:F3:02:58
Certificate issuer:       /CN=0cb7a2adc6dcaf177b93a336cb8ececc5af30258
Certificate serial:       019B4EBB8303C92A20C9D89D0CCEE7CA4F33
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DLeircbcrxd7k6M2y47OzFrzAlg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6b/2f7894-756d-4cbf-977c-3c5ae761cab0/1/DLeircbcrxd7k6M2y47OzFrzAlg.mft
Manifest number:          0A38
Signing time:             Wed 24 Dec 2025 05:01:10 +0000
Manifest this update:     Wed 24 Dec 2025 05:01:10 +0000
Manifest next update:     Thu 25 Dec 2025 05:01:10 +0000
Files and hashes:         1: DLeircbcrxd7k6M2y47OzFrzAlg.crl (hash: s+L35P+DQo0dQIuPvm3V3QHM99u0SrS9ilt1b53LqEU=)
                          2: DXgX_cMOKWmvyb5MDCu-yzGISYQ.roa (hash: fFfPzCo7zqTjJgcKhX4SxPHlq4HGUqWFQ0c7O8IZwwY=)
                          3: OVOzZ2g8zifvqCY8wDqOXjL1AOc.roa (hash: ei5vXf6WAl7FEI5d5Hm8KKAZYtO3URaho5E46M2Vof8=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:4e:bb:83:03:c9:2a:20:c9:d8:9d:0c:ce:e7:ca:4f:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0cb7a2adc6dcaf177b93a336cb8ececc5af30258
        Validity
            Not Before: Dec 24 05:01:10 2025 GMT
            Not After : Dec 25 05:01:10 2025 GMT
        Subject: CN=282543e3ad5a78fc41ce4fb09d13a52727f8b0a6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:82:c6:0b:4d:f1:8a:3d:d6:e5:f4:a6:48:ae:
                    47:4f:ef:b1:f2:ba:dc:fc:e9:08:ad:45:cf:ef:7c:
                    19:5b:d0:50:0f:a5:7c:d0:39:d9:b0:3b:99:df:5e:
                    9f:60:27:d2:f5:90:6d:3e:e1:ea:e3:af:b3:eb:9e:
                    47:20:09:fc:08:aa:9f:cf:c5:09:5a:13:ce:d9:66:
                    9f:58:1c:88:c2:a3:eb:04:fd:b4:26:3f:31:a0:47:
                    c6:7e:16:5f:79:09:f8:85:22:7b:f4:9f:4f:dd:e1:
                    93:4e:49:5d:cc:e6:0a:a8:39:5d:39:75:ad:0b:38:
                    d7:6b:fb:fc:a1:3f:fb:43:9d:a3:48:0a:21:b0:d1:
                    cc:bf:42:c3:e2:f3:c6:c6:32:31:93:25:91:ea:39:
                    c8:c9:84:8f:ef:40:78:14:bf:53:aa:ea:59:f9:81:
                    87:05:18:11:74:83:4a:f0:52:5a:5a:f4:ea:2f:6a:
                    73:a5:35:fb:ce:93:be:6e:f5:4d:3a:fd:d0:f7:76:
                    a8:af:3e:e7:88:8f:05:4b:29:83:ce:3e:e4:ee:d5:
                    d4:57:f2:5b:36:78:b2:79:72:d7:37:4c:4c:c9:ab:
                    a4:e2:2b:18:91:ca:af:c6:c0:a8:3e:32:40:af:23:
                    da:fc:fc:54:cf:64:23:bf:9d:0e:fa:58:07:b8:b8:
                    db:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:25:43:E3:AD:5A:78:FC:41:CE:4F:B0:9D:13:A5:27:27:F8:B0:A6
            X509v3 Authority Key Identifier:
                keyid:0C:B7:A2:AD:C6:DC:AF:17:7B:93:A3:36:CB:8E:CE:CC:5A:F3:02:58

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DLeircbcrxd7k6M2y47OzFrzAlg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/2f7894-756d-4cbf-977c-3c5ae761cab0/1/DLeircbcrxd7k6M2y47OzFrzAlg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/2f7894-756d-4cbf-977c-3c5ae761cab0/1/DLeircbcrxd7k6M2y47OzFrzAlg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8e:44:63:63:91:0d:85:0b:09:71:b7:7e:c8:b8:c9:40:44:ff:
         85:48:be:71:cb:93:f4:97:c5:9d:e6:56:92:6c:3a:88:a2:93:
         1e:53:3a:59:93:7b:4c:2c:51:e8:75:1e:03:8c:00:8c:6e:e8:
         97:9c:93:fa:db:f1:51:c1:63:74:f8:48:28:01:48:22:d8:0f:
         97:8c:34:b1:0d:e0:d4:96:4f:92:77:8f:ee:30:40:ca:a2:dc:
         e2:a8:35:af:fe:ed:5d:5e:85:e9:6b:e6:9f:e6:ea:54:11:45:
         66:91:95:28:02:bd:48:aa:03:ae:cf:f6:c9:76:a0:64:4a:79:
         df:df:ad:69:ee:8f:dc:da:47:44:1c:1e:f1:9b:56:ca:5d:ad:
         a6:14:f5:d0:84:de:32:51:73:9c:d7:0e:67:82:db:23:2a:4e:
         27:53:d3:20:40:f6:6b:93:0a:44:09:da:cd:c7:1d:8d:ee:a4:
         5e:92:66:39:f8:92:f5:84:13:11:61:03:ea:ad:9b:2a:5c:29:
         eb:c1:77:1b:78:48:8d:9c:a0:2c:76:a4:ab:68:70:72:6d:0b:
         a9:9f:0f:19:77:08:46:e6:e2:06:0a:b1:06:b5:ce:24:ff:b2:
         15:43:d6:d9:4e:76:83:6b:7a:53:82:cc:08:01:83:1d:f9:90:
         ca:75:16:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----