Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/7c1727-9eaf-49c9-aafc-f99453a95a99/1/O1_Gm3xu6GmTDOC4OR7l2ExTSUo.mft
File:                     O1_Gm3xu6GmTDOC4OR7l2ExTSUo.mft (raw, json)
Hash identifier:          kVbmaIZTxl1iYFmXOoHuuKZRRNbuU4EeIEMD8ef50i0=
Subject key identifier:   80:35:87:04:40:6D:54:B5:E1:B2:3A:A4:95:12:AA:2A:51:D2:62:E3
Authority key identifier: 3B:5F:C6:9B:7C:6E:E8:69:93:0C:E0:B8:39:1E:E5:D8:4C:53:49:4A
Certificate issuer:       /CN=3b5fc69b7c6ee869930ce0b8391ee5d84c53494a
Certificate serial:       019D3CE6F774AB5EA413B35CD3177C9E75D3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/O1_Gm3xu6GmTDOC4OR7l2ExTSUo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/78/7c1727-9eaf-49c9-aafc-f99453a95a99/1/O1_Gm3xu6GmTDOC4OR7l2ExTSUo.mft
Manifest number:          0643
Signing time:             Mon 30 Mar 2026 04:01:02 +0000
Manifest this update:     Mon 30 Mar 2026 04:01:02 +0000
Manifest next update:     Tue 31 Mar 2026 04:01:02 +0000
Files and hashes:         1: FNXyXh4u9cQeDiTojAZDbFOJ9gQ.roa (hash: vdj4wBHSjblmAlNCcBX+3EsBObFP0noHb9x3mmO5lZM=)
                          2: O1_Gm3xu6GmTDOC4OR7l2ExTSUo.crl (hash: tAtwX6cVVdVOJNz1rCHdVohhU0AYF+5d2WKojspANy8=)
                          3: SFjSKjgK7K-f57WPswPIRMcf7no.roa (hash: GVCqmDFqdp6iu7oXTwzlvXJdDa6NYO1O4EIga3sM9XM=)
                          4: _Ztkitj_cASVHW2RAI2sAldy7Vo.roa (hash: hW5RHVfn1YCqYqZcPChcTmTjzUnojtrXBaP46yWsbeg=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:3c:e6:f7:74:ab:5e:a4:13:b3:5c:d3:17:7c:9e:75:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3b5fc69b7c6ee869930ce0b8391ee5d84c53494a
        Validity
            Not Before: Mar 30 04:01:02 2026 GMT
            Not After : Mar 31 04:01:02 2026 GMT
        Subject: CN=80358704406d54b5e1b23aa49512aa2a51d262e3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:94:37:59:f7:4e:cc:60:9c:b2:ec:9e:d0:68:
                    cf:4a:e7:fa:3c:22:9b:0f:36:38:2b:71:4d:52:37:
                    4c:3b:e8:93:e1:01:45:d3:91:ff:3d:76:aa:4d:d4:
                    2d:75:e4:a2:ee:b0:9e:58:88:d3:55:b4:0d:f3:fa:
                    db:e7:f3:d9:e9:89:00:43:c4:8f:01:6a:91:55:0e:
                    b1:25:14:93:ee:4a:d0:0d:d4:35:6e:cb:18:2d:a9:
                    15:2f:30:cc:58:57:84:c3:f7:ca:1b:e0:30:f1:3d:
                    6d:75:43:b5:e0:9a:5c:81:83:b6:62:5c:fa:be:11:
                    d6:2e:f0:29:83:59:66:af:8e:4f:4e:45:f4:c5:c9:
                    ae:77:fd:e8:c3:82:9a:7c:9d:b3:09:01:b9:17:e0:
                    d7:56:c6:8b:1b:4b:54:54:c2:9d:39:52:69:f5:3d:
                    2f:50:30:dd:77:ef:e1:16:88:16:6e:7a:41:66:d7:
                    6e:67:e1:61:42:9d:80:47:bd:bb:03:c6:b8:20:32:
                    9c:2c:cd:00:12:54:f3:f4:67:99:5b:13:d1:9e:d2:
                    bc:d1:79:45:f6:99:0d:9c:32:19:06:95:7c:84:af:
                    ea:c8:c9:d2:b4:6c:e5:e4:a4:c6:55:0f:13:d7:66:
                    ae:42:3f:44:53:03:a7:4d:b4:09:52:03:b9:e3:df:
                    66:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:35:87:04:40:6D:54:B5:E1:B2:3A:A4:95:12:AA:2A:51:D2:62:E3
            X509v3 Authority Key Identifier:
                keyid:3B:5F:C6:9B:7C:6E:E8:69:93:0C:E0:B8:39:1E:E5:D8:4C:53:49:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O1_Gm3xu6GmTDOC4OR7l2ExTSUo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/7c1727-9eaf-49c9-aafc-f99453a95a99/1/O1_Gm3xu6GmTDOC4OR7l2ExTSUo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/78/7c1727-9eaf-49c9-aafc-f99453a95a99/1/O1_Gm3xu6GmTDOC4OR7l2ExTSUo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:96:4e:80:f2:b7:d7:aa:ca:59:d5:1a:47:b5:65:45:8a:b4:
         2a:98:70:94:60:fd:70:ae:c0:cf:52:ce:1e:00:7c:27:31:63:
         86:ff:e3:ad:93:b9:06:c3:fb:ad:2c:5f:4e:37:ed:da:92:35:
         70:7f:b4:13:23:4e:ff:9c:33:71:fa:31:38:92:fd:24:37:ed:
         aa:54:e8:a3:2b:58:23:5e:7c:f7:da:f8:be:5d:bf:19:b8:53:
         19:a2:af:e9:c0:18:0a:8d:72:7d:dc:22:e0:7f:ac:09:2c:7e:
         bf:c0:d7:ef:58:68:cf:cb:b7:b1:17:9a:6e:07:bb:e4:59:5a:
         a0:83:9f:b0:75:42:ac:80:1a:1f:b8:3c:ef:fc:5f:dd:2d:2b:
         8f:ef:8a:1e:04:7a:22:06:a6:a4:c5:97:bf:84:df:55:a7:73:
         83:5e:a4:aa:4d:68:e8:10:9d:e5:0b:f1:eb:f9:59:3e:01:75:
         7d:d5:27:ef:08:68:51:38:26:d5:b4:46:08:06:80:2e:92:08:
         a5:e9:77:99:1d:a9:64:38:ef:45:ec:40:bc:80:c0:12:a3:b8:
         4e:1c:85:93:46:a8:45:00:47:23:91:04:32:b7:44:fe:ce:67:
         38:fc:ea:4c:79:7f:2d:e0:c6:99:92:89:a2:df:e7:df:00:b5:
         cc:76:36:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----