Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/c072ae-15d7-42a8-bfc2-bc93ca679e1f/1/IVJmQ1YX-g8f0oN-yAxtg7C51gg.mft
File:                     IVJmQ1YX-g8f0oN-yAxtg7C51gg.mft (raw, json)
Hash identifier:          jOmUdAv20cTyzoEbaLoJnlI4dmMRYJMiM6vbiFCiLeA=
Subject key identifier:   9F:01:FD:94:28:CC:19:43:30:E0:58:6C:C2:A3:5B:A2:2E:94:E1:95
Authority key identifier: 21:52:66:43:56:17:FA:0F:1F:D2:83:7E:C8:0C:6D:83:B0:B9:D6:08
Certificate issuer:       /CN=215266435617fa0f1fd2837ec80c6d83b0b9d608
Certificate serial:       019B071064F6A17664EAD663A193A2B81A6A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IVJmQ1YX-g8f0oN-yAxtg7C51gg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/75/c072ae-15d7-42a8-bfc2-bc93ca679e1f/1/IVJmQ1YX-g8f0oN-yAxtg7C51gg.mft
Manifest number:          17A2
Signing time:             Wed 10 Dec 2025 07:01:13 +0000
Manifest this update:     Wed 10 Dec 2025 07:01:13 +0000
Manifest next update:     Thu 11 Dec 2025 07:01:13 +0000
Files and hashes:         1: 6w9YYZofXuAgxjk7hq0MFU5TxUA.roa (hash: psQbqp3Dv/axG/Fm+AyyjZW7+7TGZniv6yrpPXuxg9E=)
                          2: IVJmQ1YX-g8f0oN-yAxtg7C51gg.crl (hash: c2VQA63tTqs0NS/IiL3UEk4Q38dcGzQmx4ZkDkc2XQM=)
                          3: NWZ6X9b-5hxEfJ9QrTP9jZ_zmYY.roa (hash: 8br5HNMvqSMJ3h3ONJIZMwSXpIgb/ZWSf4M8Oa8bT9o=)
                          4: YlS0qhcvfxmHK3i2Atu8iHlQyy8.roa (hash: JJTAqpTGe2vNlEv4BQ7ae6jf0gv/R7qn+RigFBVB2r8=)
                          5: jMxhOzBSeMP0LtXLXP7EcBhoAB8.roa (hash: 0uCBihxg/sVC+EOc4ZTIYJf8x4v2kocHLJVgzm9lM24=)
                          6: oHh9HVxtMu6mNRpoXoeU65t9c7Y.roa (hash: G+2g4aHJLaIaMhKuUJAYSptAUkZNd7lrZ4J05sdateo=)
                          7: q_DU4LpYW5iMWWvp18KMkPW4jyE.roa (hash: dS1YtoKx6Fr5PPMvDkPqkspr86D+De4f+k+4trrsOTk=)
                          8: xv12OPtaTpKWrICjs27-0WrsmIg.roa (hash: X8XG/cdIF+kjQf+VKvmL60lRdGE9r9sJ1I4ddr9jEgE=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:07:10:64:f6:a1:76:64:ea:d6:63:a1:93:a2:b8:1a:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=215266435617fa0f1fd2837ec80c6d83b0b9d608
        Validity
            Not Before: Dec 10 07:01:13 2025 GMT
            Not After : Dec 11 07:01:13 2025 GMT
        Subject: CN=9f01fd9428cc194330e0586cc2a35ba22e94e195
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:19:3f:3c:be:b8:83:d9:e8:9b:9e:79:53:c7:
                    8e:2a:66:5c:94:3e:c4:97:8e:8e:18:f6:f9:68:b4:
                    83:16:1e:85:c8:60:da:c7:05:3e:4e:27:17:97:38:
                    1f:35:a1:a4:cf:70:cc:a6:47:78:26:38:98:8f:b4:
                    2e:c6:ae:b6:6c:ed:aa:df:22:d5:64:0b:31:f1:ec:
                    eb:e5:9b:bc:0f:58:4f:12:ef:c4:ea:78:c8:10:72:
                    bd:e6:41:0d:dd:69:cc:8d:4f:db:af:46:a0:7b:9c:
                    b7:e4:cb:2e:5f:7a:a9:a4:38:2a:b8:78:0a:aa:7e:
                    58:fe:97:1f:70:ff:de:b8:57:90:c8:0e:c5:b3:b7:
                    93:0a:47:58:e0:bc:b4:90:2f:7b:c6:56:1b:45:6a:
                    58:30:2a:7a:fc:ac:c8:9a:8e:44:c7:d6:ff:b9:ff:
                    77:20:75:8b:2b:9a:36:85:b1:d4:f3:b8:81:6c:a8:
                    15:43:c0:d9:b4:06:da:60:94:30:da:c9:96:cc:bb:
                    be:48:88:9e:af:a2:74:d2:3b:eb:a0:76:9c:67:c8:
                    a2:13:d1:51:af:5f:ed:f4:22:01:40:89:40:66:35:
                    e8:23:ed:95:b2:b0:62:83:67:c5:e2:74:10:18:9d:
                    a6:05:8e:01:59:95:27:c4:65:ed:36:a9:d6:2a:3e:
                    df:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:01:FD:94:28:CC:19:43:30:E0:58:6C:C2:A3:5B:A2:2E:94:E1:95
            X509v3 Authority Key Identifier:
                keyid:21:52:66:43:56:17:FA:0F:1F:D2:83:7E:C8:0C:6D:83:B0:B9:D6:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IVJmQ1YX-g8f0oN-yAxtg7C51gg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/c072ae-15d7-42a8-bfc2-bc93ca679e1f/1/IVJmQ1YX-g8f0oN-yAxtg7C51gg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/75/c072ae-15d7-42a8-bfc2-bc93ca679e1f/1/IVJmQ1YX-g8f0oN-yAxtg7C51gg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:09:1d:0a:d2:5e:3e:99:38:07:b1:7d:99:58:d6:0c:61:07:
         50:91:5d:38:fd:99:3e:67:42:53:c4:dd:f5:1f:d9:63:39:56:
         73:c2:a7:c3:12:d3:5a:3e:93:b8:71:01:42:17:1f:d6:2d:85:
         68:c7:72:ee:d5:0d:bb:93:a2:21:63:e9:6e:39:7d:20:39:a9:
         c5:7f:6b:a4:68:54:a7:2f:8b:71:09:51:b8:09:61:b4:d3:fc:
         03:3f:60:4d:77:8e:a2:13:a9:17:c0:f3:02:1d:f2:e8:48:61:
         bb:1d:ec:67:1b:5e:52:be:c0:ea:eb:cf:df:ca:c5:3b:0a:de:
         36:bb:1b:3f:ef:27:44:ce:53:63:e6:c1:1c:b2:2d:ea:b1:70:
         ce:c5:ff:23:bf:1e:91:fa:6a:5f:a8:4e:25:02:81:b7:c6:20:
         e5:62:bc:cf:f7:cd:8e:a0:ac:76:11:eb:b7:41:a6:b7:b9:6f:
         ff:c2:7c:08:aa:2e:14:3a:87:d0:20:16:92:66:1f:63:e5:fe:
         98:cc:30:78:25:1f:05:e2:ce:e0:1b:75:36:9f:06:8b:6d:83:
         4a:b2:40:4b:a6:de:93:6b:73:30:f8:0e:85:b6:b4:ff:44:03:
         40:00:8c:7b:df:42:14:4c:78:2b:87:6b:81:26:b2:50:b0:23:
         5e:85:b0:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----