Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7d/4bba7c-a81f-40e1-8814-65daad632957/1/lCWIuR2pzKgbSeYDqYjiseq93Jg.mft
File:                     lCWIuR2pzKgbSeYDqYjiseq93Jg.mft (raw, json)
Hash identifier:          cbi+LPmx5o80bds73C7kqRGlPK20U5bvqmNWq+3K+jQ=
Subject key identifier:   06:F5:45:B5:05:CA:30:AA:CB:DE:D1:CE:4B:1C:DF:7E:54:C0:BC:5B
Authority key identifier: 94:25:88:B9:1D:A9:CC:A8:1B:49:E6:03:A9:88:E2:B1:EA:BD:DC:98
Certificate issuer:       /CN=942588b91da9cca81b49e603a988e2b1eabddc98
Certificate serial:       019B6843F5F820AA40138FB6F23109E9A032
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lCWIuR2pzKgbSeYDqYjiseq93Jg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7d/4bba7c-a81f-40e1-8814-65daad632957/1/lCWIuR2pzKgbSeYDqYjiseq93Jg.mft
Manifest number:          17E5
Signing time:             Mon 29 Dec 2025 04:00:42 +0000
Manifest this update:     Mon 29 Dec 2025 04:00:42 +0000
Manifest next update:     Tue 30 Dec 2025 04:00:42 +0000
Files and hashes:         1: lCWIuR2pzKgbSeYDqYjiseq93Jg.crl (hash: jj87pL2cGAglNfS9AcdPoc2Rs3oSOMzzdTbcZVXhZGw=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:68:43:f5:f8:20:aa:40:13:8f:b6:f2:31:09:e9:a0:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=942588b91da9cca81b49e603a988e2b1eabddc98
        Validity
            Not Before: Dec 29 04:00:42 2025 GMT
            Not After : Dec 30 04:00:42 2025 GMT
        Subject: CN=06f545b505ca30aacbded1ce4b1cdf7e54c0bc5b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:a0:82:25:c8:da:f2:05:cc:bf:69:1f:e1:14:
                    02:24:09:90:b5:19:8c:78:e0:a7:d6:cd:13:94:bb:
                    8a:14:3b:78:07:31:f2:ab:c7:7c:3e:ab:9f:7f:87:
                    9a:e7:17:9d:fe:cf:f7:bd:7d:ed:b8:a1:04:b8:a6:
                    b5:0e:97:fd:e3:80:b8:42:c3:08:a0:17:06:60:0b:
                    84:9e:54:47:bc:18:98:af:2c:9b:ca:b7:22:9b:4e:
                    0b:2c:7e:a1:95:d8:5e:35:49:cd:b4:4c:15:a7:82:
                    24:72:0f:73:c0:88:2d:f4:f4:eb:04:c5:28:d1:d9:
                    c4:8f:b5:07:bf:29:8e:5a:6d:89:64:b8:9c:3f:f8:
                    b8:98:b9:10:ca:9c:85:2c:37:a5:c5:e5:75:56:91:
                    0b:20:84:9c:74:f1:ed:97:4d:6b:66:ab:5e:e6:f2:
                    58:68:ef:9b:63:ec:1d:d0:56:ec:d9:de:f5:83:97:
                    d3:67:ee:4e:54:88:f1:2f:ec:9b:29:92:f7:15:d4:
                    d8:5c:49:bf:a9:c3:a3:a6:41:6a:da:76:41:cb:7a:
                    1d:c3:bf:40:a7:2d:07:da:92:0e:e3:31:f0:ec:b4:
                    76:68:2d:61:fe:34:e5:6f:ff:92:20:bd:f0:3b:8d:
                    57:90:67:aa:33:0c:28:68:99:de:78:85:ab:d7:72:
                    99:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:F5:45:B5:05:CA:30:AA:CB:DE:D1:CE:4B:1C:DF:7E:54:C0:BC:5B
            X509v3 Authority Key Identifier:
                keyid:94:25:88:B9:1D:A9:CC:A8:1B:49:E6:03:A9:88:E2:B1:EA:BD:DC:98

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lCWIuR2pzKgbSeYDqYjiseq93Jg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/4bba7c-a81f-40e1-8814-65daad632957/1/lCWIuR2pzKgbSeYDqYjiseq93Jg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/4bba7c-a81f-40e1-8814-65daad632957/1/lCWIuR2pzKgbSeYDqYjiseq93Jg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:1c:be:dc:d1:d0:65:71:1e:fe:bf:33:e7:7f:68:a9:c2:6a:
         e9:8d:ef:bd:bf:99:3b:6d:d0:8b:e2:95:a5:8c:d2:ba:06:b4:
         26:e6:80:91:af:ac:f1:5c:45:a7:36:13:fd:62:d6:ce:20:99:
         14:54:49:60:0b:02:04:76:88:63:cb:62:34:a8:6f:3d:c2:27:
         62:ad:8c:1a:85:15:41:1f:f8:cc:cf:51:75:e1:8c:4d:ca:96:
         f1:0f:8a:2c:2b:d8:4b:52:be:94:96:57:ed:64:98:89:80:18:
         1a:5f:d2:0a:f7:c0:68:f2:74:01:66:ea:6a:bd:4b:23:36:bd:
         ed:ad:fa:2c:a7:96:67:3d:a3:be:bb:ad:19:b3:0c:bf:f2:11:
         e0:bd:16:bb:ed:77:f6:cc:b2:f2:34:ec:b5:d1:06:74:c7:72:
         10:1f:4e:6e:64:64:ae:ef:9b:05:63:42:d4:36:71:2c:98:2f:
         11:76:92:a7:13:86:d1:8c:88:df:20:8e:8b:aa:4e:28:6b:5a:
         96:fe:15:5a:e6:da:89:1f:65:d8:3e:f4:61:2b:ea:94:27:e2:
         02:6b:09:c0:08:cf:af:39:6f:d6:7f:13:d7:03:ea:d4:02:c8:
         2f:a4:3a:cd:00:19:64:0f:75:48:ee:99:f1:5b:87:b3:05:e0:
         93:b6:6d:a2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZtoQ/X4IKpAE4+28jEJ6aAyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk0MjU4OGI5MWRhOWNjYTgxYjQ5ZTYwM2E5ODhlMmIxZWFi
ZGRjOTgwHhcNMjUxMjI5MDQwMDQyWhcNMjUxMjMwMDQwMDQyWjAzMTEwLwYDVQQD
EygwNmY1NDViNTA1Y2EzMGFhY2JkZWQxY2U0YjFjZGY3ZTU0YzBiYzViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs6CCJcja8gXMv2kf4RQCJAmQtRmM
eOCn1s0TlLuKFDt4BzHyq8d8Pquff4ea5xed/s/3vX3tuKEEuKa1Dpf944C4QsMI
oBcGYAuEnlRHvBiYryybyrcim04LLH6hldheNUnNtEwVp4Ikcg9zwIgt9PTrBMUo
0dnEj7UHvymOWm2JZLicP/i4mLkQypyFLDelxeV1VpELIIScdPHtl01rZqte5vJY
aO+bY+wd0Fbs2d71g5fTZ+5OVIjxL+ybKZL3FdTYXEm/qcOjpkFq2nZBy3odw79A
py0H2pIO4zHw7LR2aC1h/jTlb/+SIL3wO41XkGeqMwwoaJneeIWr13KZ+QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAb1RbUFyjCqy97Rzksc335UwLxbMB8GA1UdIwQY
MBaAFJQliLkdqcyoG0nmA6mI4rHqvdyYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbENXSXVSMnB6S2diU2VZRHFZamlzZXE5M0pnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZC80YmJhN2MtYTgxZi00MGUxLTg4MTQt
NjVkYWFkNjMyOTU3LzEvbENXSXVSMnB6S2diU2VZRHFZamlzZXE5M0pnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83ZC80YmJhN2MtYTgxZi00MGUxLTg4MTQtNjVkYWFkNjMyOTU3
LzEvbENXSXVSMnB6S2diU2VZRHFZamlzZXE5M0pnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGBy+3NHQ
ZXEe/r8z539oqcJq6Y3vvb+ZO23Qi+KVpYzSuga0JuaAka+s8VxFpzYT/WLWziCZ
FFRJYAsCBHaIY8tiNKhvPcInYq2MGoUVQR/4zM9RdeGMTcqW8Q+KLCvYS1K+lJZX
7WSYiYAYGl/SCvfAaPJ0AWbqar1LIza97a36LKeWZz2jvrutGbMMv/IR4L0Wu+13
9syy8jTstdEGdMdyEB9ObmRkru+bBWNC1DZxLJgvEXaSpxOG0YyI3yCOi6pOKGta
lv4VWubaiR9l2D70YSvqlCfiAmsJwAjPrzlv1n8T1wPq1ALIL6Q6zQAZZA91SO6Z
8VuHswXgk7Ztog==
-----END CERTIFICATE-----