Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/e47b7d-360a-4a41-b76b-367a411f9ec6/1/_gdsTrghmCibE_9ShZOQfTIU1kg.mft
File:                     _gdsTrghmCibE_9ShZOQfTIU1kg.mft (raw, json)
Hash identifier:          +AyHs/BllhGjyUI/KikxBIKiwMZ6dlug5zbueIJ/on4=
Subject key identifier:   90:23:84:EA:1C:6C:05:92:68:AA:62:31:8B:07:F8:61:B0:5F:15:FD
Authority key identifier: FE:07:6C:4E:B8:21:98:28:9B:13:FF:52:85:93:90:7D:32:14:D6:48
Certificate issuer:       /CN=fe076c4eb82198289b13ff528593907d3214d648
Certificate serial:       019B6F217ADF072C4EF8B28ED18FB76BA546
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_gdsTrghmCibE_9ShZOQfTIU1kg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7f/e47b7d-360a-4a41-b76b-367a411f9ec6/1/_gdsTrghmCibE_9ShZOQfTIU1kg.mft
Manifest number:          0AF0
Signing time:             Tue 30 Dec 2025 12:00:23 +0000
Manifest this update:     Tue 30 Dec 2025 12:00:23 +0000
Manifest next update:     Wed 31 Dec 2025 12:00:23 +0000
Files and hashes:         1: VfeIgjz0AxDDzTkQTX5oI6SFRHA.roa (hash: DxNlqxJB1dj664CEq4HV8OObj2p+8QssDiaq98KmVj4=)
                          2: _gdsTrghmCibE_9ShZOQfTIU1kg.crl (hash: H3hYZkdotqBECpGaKkENH8pTB6BX4IG0CbFEbytlX6U=)
                          3: kf6StMkwG23V9ls9smnXkUH-c_U.roa (hash: 2gWZsR5gKC4c6paVczIP5ldxDt0ZMc2sEfNeECKiQpI=)
                          4: wGVnySr1Vxwk8Vwf3WbMSOnEqgM.roa (hash: tr4A1R5NSOzAzWj0Fv3RGP+WkvEKb92Ld8vYKBm40Bg=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:6f:21:7a:df:07:2c:4e:f8:b2:8e:d1:8f:b7:6b:a5:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fe076c4eb82198289b13ff528593907d3214d648
        Validity
            Not Before: Dec 30 12:00:23 2025 GMT
            Not After : Dec 31 12:00:23 2025 GMT
        Subject: CN=902384ea1c6c059268aa62318b07f861b05f15fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:c3:f5:99:26:01:03:14:01:e6:d5:86:fd:c7:
                    43:4d:7c:7a:cc:53:bb:d9:bc:1c:ee:9a:6c:3d:6f:
                    c3:f2:d0:ef:25:f9:02:f9:f6:97:53:e1:97:d9:b8:
                    76:c6:2b:8a:31:18:28:63:da:7e:3f:8e:2a:17:d8:
                    1f:4e:d6:66:59:f1:de:13:93:9c:75:94:28:0f:0b:
                    be:ed:38:6a:2b:51:55:8f:53:89:51:6d:5a:85:5c:
                    5f:85:29:d1:40:f3:21:96:f7:94:22:af:3c:f5:40:
                    bb:94:1b:d0:9e:c0:4f:b1:ff:fa:cf:aa:13:9a:d8:
                    75:25:a9:15:41:c8:50:a4:1d:fa:c5:9e:28:fe:2a:
                    89:6f:69:9f:4f:99:0c:73:e9:fb:d9:cc:5b:8d:06:
                    e5:29:49:7a:12:65:25:b7:14:17:e6:96:07:04:a1:
                    c5:60:f1:ff:8c:ac:50:ed:d0:9d:b8:d1:20:da:3a:
                    72:15:3c:e2:51:e0:be:16:40:a9:c8:be:cb:72:7c:
                    a4:1e:1d:28:13:3f:76:e4:fb:ee:d8:1c:d9:fb:03:
                    e4:9a:29:30:7d:32:82:24:f2:f7:d8:5f:dd:75:56:
                    59:2c:2d:7e:de:1c:b4:39:05:2d:47:f2:3e:ce:71:
                    9e:30:30:29:b5:6e:c8:24:44:d4:d0:aa:b0:3e:cc:
                    0d:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:23:84:EA:1C:6C:05:92:68:AA:62:31:8B:07:F8:61:B0:5F:15:FD
            X509v3 Authority Key Identifier:
                keyid:FE:07:6C:4E:B8:21:98:28:9B:13:FF:52:85:93:90:7D:32:14:D6:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_gdsTrghmCibE_9ShZOQfTIU1kg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/e47b7d-360a-4a41-b76b-367a411f9ec6/1/_gdsTrghmCibE_9ShZOQfTIU1kg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/e47b7d-360a-4a41-b76b-367a411f9ec6/1/_gdsTrghmCibE_9ShZOQfTIU1kg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:f0:8b:d2:b1:38:46:1e:30:a9:ab:aa:85:7c:09:52:cb:88:
         93:6c:0d:cc:e4:a6:9c:54:d8:87:6f:b3:bd:17:00:f2:51:c1:
         39:b9:15:33:64:68:8b:2f:17:ff:91:5c:eb:cc:17:7d:ad:e6:
         17:50:20:d0:fd:56:dc:8a:a6:f5:ae:70:96:76:b4:50:ee:1d:
         b6:f3:c8:94:36:50:c5:7d:de:9b:53:45:21:f7:69:9e:17:25:
         b3:fe:9f:c2:c3:1b:b3:61:d5:2b:2d:a2:fc:fa:af:cc:95:16:
         89:50:56:78:b7:98:ff:c6:52:cc:69:18:de:c1:69:dd:af:41:
         96:6c:7d:2b:30:15:c8:34:e0:13:3b:dd:da:8c:b5:3c:b6:7f:
         3e:18:b7:ce:61:6a:c2:52:d9:04:38:15:43:96:ce:a0:a5:1d:
         1b:aa:3e:db:b0:7d:74:1c:3f:ca:21:98:7c:6e:dd:e3:52:74:
         b6:b2:29:81:6e:a8:5f:ad:c1:b8:bd:e9:a5:de:20:19:54:7d:
         99:02:04:e9:bd:5c:b3:cf:29:70:be:5c:be:6c:7d:6c:d4:4e:
         1f:58:71:df:d3:43:cc:1c:fb:e4:66:67:90:a3:1e:7e:79:fd:
         cf:46:67:6c:b9:ee:f1:01:62:3c:b1:cb:f0:48:76:e5:67:7f:
         a1:77:96:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----