Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/77/99dcca-963a-4003-bfaf-a1169a289c54/1/Ghrl5JpEq93CKwrb2utkE28l1Gc.mft
File:                     Ghrl5JpEq93CKwrb2utkE28l1Gc.mft (raw, json)
Hash identifier:          2SEM/2xdFXEWMLNlg4A95nPTo53fYwC6AuXcFYbO5wk=
Subject key identifier:   48:6C:6C:F8:8C:AF:32:BA:6A:54:0D:86:7B:FE:EE:C9:F6:5F:2D:64
Authority key identifier: 1A:1A:E5:E4:9A:44:AB:DD:C2:2B:0A:DB:DA:EB:64:13:6F:25:D4:67
Certificate issuer:       /CN=1a1ae5e49a44abddc22b0adbdaeb64136f25d467
Certificate serial:       019F227DB23C81B9560EABD76AEFC5A09A0C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ghrl5JpEq93CKwrb2utkE28l1Gc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/77/99dcca-963a-4003-bfaf-a1169a289c54/1/Ghrl5JpEq93CKwrb2utkE28l1Gc.mft
Manifest number:          12C7
Signing time:             Thu 02 Jul 2026 11:01:30 +0000
Manifest this update:     Thu 02 Jul 2026 11:01:30 +0000
Manifest next update:     Fri 03 Jul 2026 11:01:30 +0000
Files and hashes:         1: Ghrl5JpEq93CKwrb2utkE28l1Gc.crl (hash: MNDSuYeWWtOwJAncQRQRjrBsqnZZnhiJz6XzdRwmzT8=)
                          2: _H4CUuz3Tvl-T1zwCAZAvhXJbiM.roa (hash: xsJ3awajiTbn083/zKjj3KHpA/9WdA0RqzmcuoYihQA=)
                          3: kz2Yp1K6YIxekPASAxXKtmwq5Nc.roa (hash: wGYvhz3IuQwWNkOw50DFvXGGrTTnqTHVgvd/Ec1JbTs=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:22:7d:b2:3c:81:b9:56:0e:ab:d7:6a:ef:c5:a0:9a:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1a1ae5e49a44abddc22b0adbdaeb64136f25d467
        Validity
            Not Before: Jul  2 11:01:30 2026 GMT
            Not After : Jul  3 11:01:30 2026 GMT
        Subject: CN=486c6cf88caf32ba6a540d867bfeeec9f65f2d64
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:79:87:0f:9a:d8:c1:0f:4a:8c:07:54:16:4c:
                    81:ac:7d:17:b9:fe:48:6b:fc:73:ac:6d:a5:b6:5e:
                    d5:bf:54:dc:97:78:0b:9c:b2:df:d0:be:b7:b0:b4:
                    2c:47:b3:53:15:0e:ea:e3:19:52:61:67:5a:06:55:
                    0b:ef:50:a9:b5:07:50:94:94:49:bc:51:8c:d1:00:
                    b0:ce:51:b3:77:cf:00:b8:5a:d2:c8:51:49:13:99:
                    5d:f5:07:0a:ff:7b:dd:a2:f2:a8:07:da:c1:40:98:
                    59:cc:18:b2:e6:76:60:8c:a2:70:eb:fa:d0:31:48:
                    a9:c2:2b:05:81:fe:13:7c:b7:c8:ba:0d:0a:de:ad:
                    6e:4d:fe:e8:1d:57:3f:de:ca:a2:92:4c:d3:fc:52:
                    5e:03:bf:05:ae:12:e2:2c:b1:11:49:73:7e:d2:2e:
                    0a:91:18:e8:46:cc:5c:d5:7f:23:18:21:2a:33:8d:
                    06:ac:48:e9:db:74:5e:ec:b1:34:c2:e0:80:f3:05:
                    91:cf:e4:34:aa:b1:89:a2:da:83:ce:9b:56:64:4a:
                    76:28:c0:bc:c6:8e:31:86:c5:98:ae:b9:b5:b5:d7:
                    c6:8c:74:0b:1a:0e:1d:2f:72:01:aa:5b:fa:da:3c:
                    95:03:f7:ef:bd:58:b6:b3:08:3d:f0:95:c1:c0:e1:
                    7c:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:6C:6C:F8:8C:AF:32:BA:6A:54:0D:86:7B:FE:EE:C9:F6:5F:2D:64
            X509v3 Authority Key Identifier:
                keyid:1A:1A:E5:E4:9A:44:AB:DD:C2:2B:0A:DB:DA:EB:64:13:6F:25:D4:67

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ghrl5JpEq93CKwrb2utkE28l1Gc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/99dcca-963a-4003-bfaf-a1169a289c54/1/Ghrl5JpEq93CKwrb2utkE28l1Gc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/77/99dcca-963a-4003-bfaf-a1169a289c54/1/Ghrl5JpEq93CKwrb2utkE28l1Gc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:c4:c3:a7:e9:2d:0f:d8:6d:01:e2:94:00:79:fa:1f:58:11:
         7a:95:53:96:ca:e0:1e:91:91:50:f1:3c:e5:ec:03:a1:12:ba:
         e8:a2:de:0b:71:36:83:8f:6d:b6:1b:66:0a:4f:0b:f2:55:2d:
         c5:c7:90:15:17:15:c9:af:51:42:2b:9a:1d:0e:57:63:eb:81:
         a9:72:e1:b0:7d:2f:81:60:54:fb:89:e5:3a:e8:e6:9a:9b:de:
         95:6f:b7:57:6f:0f:0b:3d:31:67:bd:7e:10:81:d9:49:7b:5c:
         98:a2:b0:a0:27:62:1a:12:bc:2c:22:eb:58:f6:43:2d:e0:40:
         23:a5:df:1d:10:98:d5:38:db:7d:4e:c3:f0:36:8b:51:6a:dc:
         33:3a:8b:dc:47:ac:db:2e:19:c3:6f:91:e0:80:de:71:6c:e3:
         1e:0f:4b:1b:15:e4:82:63:09:ec:9b:e3:79:a1:64:64:a5:1f:
         91:53:1c:a7:f3:49:ee:25:b8:39:97:3e:17:7c:ac:7d:6b:60:
         3b:93:0c:45:1c:dc:82:94:fd:05:07:1d:df:77:0e:cc:e8:f9:
         d8:f3:da:f7:c6:31:06:ea:d1:65:32:96:6d:57:05:2e:12:1a:
         df:0e:24:b3:ea:3c:23:d9:14:44:b3:ea:bf:1b:06:19:80:3e:
         c8:48:45:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----