Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/72/847c9d-201c-477a-ba96-328f66996ec1/1/TShV3jcUZy5-qwceFh0RoDDT048.mft
File:                     TShV3jcUZy5-qwceFh0RoDDT048.mft (raw, json)
Hash identifier:          m4qKLZ3n39CMZSt0JhsUF6JyggTFQwFrqiwYEwXX/gY=
Subject key identifier:   A1:42:67:70:DA:E6:FC:44:62:8F:D4:DD:FA:E2:85:B7:99:BF:7A:38
Authority key identifier: 4D:28:55:DE:37:14:67:2E:7E:AB:07:1E:16:1D:11:A0:30:D3:D3:8F
Certificate issuer:       /CN=4d2855de3714672e7eab071e161d11a030d3d38f
Certificate serial:       019D943CA3D77235D99D163702981FB4C3CC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TShV3jcUZy5-qwceFh0RoDDT048.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/72/847c9d-201c-477a-ba96-328f66996ec1/1/TShV3jcUZy5-qwceFh0RoDDT048.mft
Manifest number:          0578
Signing time:             Thu 16 Apr 2026 03:01:35 +0000
Manifest this update:     Thu 16 Apr 2026 03:01:35 +0000
Manifest next update:     Fri 17 Apr 2026 03:01:35 +0000
Files and hashes:         1: TShV3jcUZy5-qwceFh0RoDDT048.crl (hash: odgYPyNqrKga8LZoh6IYpK1ZPE/Rck+RkFaxEFEhFqs=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:94:3c:a3:d7:72:35:d9:9d:16:37:02:98:1f:b4:c3:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4d2855de3714672e7eab071e161d11a030d3d38f
        Validity
            Not Before: Apr 16 03:01:35 2026 GMT
            Not After : Apr 17 03:01:35 2026 GMT
        Subject: CN=a1426770dae6fc44628fd4ddfae285b799bf7a38
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:1a:39:0b:35:c0:80:8f:0d:b1:55:38:3f:18:
                    3e:1a:37:0d:db:00:a1:64:78:2c:91:99:21:b1:7b:
                    de:09:18:37:f7:37:a3:a2:0a:f1:c7:da:ad:5e:a6:
                    80:f3:9d:54:14:df:13:29:e9:c5:c0:e2:1b:c6:df:
                    d0:dc:23:ca:35:9f:c6:1d:cf:3a:a0:65:29:06:54:
                    f5:06:00:bc:2f:6e:7e:7c:42:97:79:23:51:f9:cf:
                    17:dc:5f:6d:e4:b7:d3:a7:34:95:eb:ff:9e:40:20:
                    07:c8:31:7f:61:ea:b9:90:b4:3c:08:29:af:6b:28:
                    ed:5d:3c:ca:87:c2:00:c3:3d:e1:e0:d8:f0:48:22:
                    28:bf:a4:ea:81:62:67:6a:40:f4:75:ae:e8:4c:be:
                    57:8c:95:53:a6:7d:9b:51:17:c3:7b:23:bb:7d:75:
                    24:18:fc:e9:ee:b6:d6:13:96:7e:4c:4b:aa:6c:04:
                    ac:a7:06:5d:79:d5:34:ad:ed:3b:92:55:b9:61:23:
                    bc:8c:3a:d5:99:f8:e9:09:20:ff:2d:59:5e:3f:85:
                    73:38:88:0c:fb:cf:e9:65:e6:b8:50:9c:fa:25:e6:
                    2d:31:0a:fa:e0:c0:ae:13:8e:5d:ae:e0:b4:ce:63:
                    11:9b:61:03:d1:e8:cc:97:eb:04:fc:da:31:19:e8:
                    2e:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:42:67:70:DA:E6:FC:44:62:8F:D4:DD:FA:E2:85:B7:99:BF:7A:38
            X509v3 Authority Key Identifier:
                keyid:4D:28:55:DE:37:14:67:2E:7E:AB:07:1E:16:1D:11:A0:30:D3:D3:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TShV3jcUZy5-qwceFh0RoDDT048.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/847c9d-201c-477a-ba96-328f66996ec1/1/TShV3jcUZy5-qwceFh0RoDDT048.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/72/847c9d-201c-477a-ba96-328f66996ec1/1/TShV3jcUZy5-qwceFh0RoDDT048.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:54:56:19:0d:60:d5:6f:21:ce:42:75:c5:81:be:30:a9:49:
         d0:d5:5a:4b:c4:4a:56:1c:63:d7:41:75:2f:2a:1d:5f:97:0f:
         3c:7a:78:25:2e:f5:d1:cf:93:57:69:df:71:b9:4e:5e:de:c9:
         bf:51:eb:a4:16:57:dc:1f:44:c9:79:e7:8d:18:bb:1a:93:9a:
         56:02:f2:ff:42:ae:c5:6f:3a:24:a1:fc:f7:30:89:74:86:66:
         2d:30:ea:79:bc:06:12:f0:3f:10:51:79:be:6d:bc:8f:bd:c4:
         ba:53:9e:f6:e5:a2:70:d9:10:e7:8a:25:73:b1:dc:0e:71:a0:
         bd:2d:64:c6:4a:10:54:56:7f:a2:af:31:2c:90:be:ab:da:31:
         37:d1:db:4e:ca:a7:b1:23:d4:30:a0:8a:17:ab:25:62:66:a4:
         1f:76:30:8a:11:9b:37:87:58:a3:47:6a:f1:3d:8e:a2:6c:1d:
         e1:3f:8a:0c:63:44:d4:dd:b3:2c:c4:7d:6d:96:32:4c:17:da:
         a9:ef:ab:87:a2:b6:31:89:41:09:1d:ab:f8:e1:5a:cb:02:54:
         2b:da:3d:de:9b:74:88:2c:99:dd:2c:b3:22:f3:29:ed:28:7f:
         9f:fb:bc:2a:7b:54:2e:c5:a3:6f:50:73:0b:e4:19:06:a0:bc:
         ce:eb:cb:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----