Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/85/5719cc-e83e-433d-80d5-ff26a9883314/1/zTzXxNyVyz4NTocD7wFAT-CnB4A.mft
File:                     zTzXxNyVyz4NTocD7wFAT-CnB4A.mft (raw, json)
Hash identifier:          a/wo2KSpl9Et58VABp8bxknIswxMSe8QeUi2nhLSjpM=
Subject key identifier:   77:B9:23:E3:58:AD:F2:1E:C7:29:08:95:46:F6:BA:F1:C6:E9:E5:B2
Authority key identifier: CD:3C:D7:C4:DC:95:CB:3E:0D:4E:87:03:EF:01:40:4F:E0:A7:07:80
Certificate issuer:       /CN=cd3cd7c4dc95cb3e0d4e8703ef01404fe0a70780
Certificate serial:       019B34C4AE7B0D2FAB8E7D47954D3175D517
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zTzXxNyVyz4NTocD7wFAT-CnB4A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/85/5719cc-e83e-433d-80d5-ff26a9883314/1/zTzXxNyVyz4NTocD7wFAT-CnB4A.mft
Manifest number:          073C
Signing time:             Fri 19 Dec 2025 04:01:03 +0000
Manifest this update:     Fri 19 Dec 2025 04:01:03 +0000
Manifest next update:     Sat 20 Dec 2025 04:01:03 +0000
Files and hashes:         1: kXpu7lVaQ9ZKyQqNGsFeLghZlmk.roa (hash: 5AG9No2Gmu6sX+Z3CUtVryFAua3rZfXlsvQoqxyaRko=)
                          2: zTzXxNyVyz4NTocD7wFAT-CnB4A.crl (hash: 7k7VNnMFYl++c52LvbJFkx277/eBSyc8uA5h+V+wYis=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:34:c4:ae:7b:0d:2f:ab:8e:7d:47:95:4d:31:75:d5:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cd3cd7c4dc95cb3e0d4e8703ef01404fe0a70780
        Validity
            Not Before: Dec 19 04:01:03 2025 GMT
            Not After : Dec 20 04:01:03 2025 GMT
        Subject: CN=77b923e358adf21ec729089546f6baf1c6e9e5b2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:a7:3b:7a:c3:76:57:ca:6d:32:d2:b5:bb:a5:
                    99:16:89:b5:44:09:64:be:a5:00:e0:77:78:35:e1:
                    0d:76:1c:c9:ff:53:33:02:60:94:a3:d8:47:3b:ee:
                    1b:62:bd:4c:f0:c0:01:26:2d:06:a0:3b:94:09:f4:
                    13:27:3b:48:f8:de:97:1c:30:d8:dd:60:94:a4:66:
                    04:de:2f:d2:d2:b6:97:d1:ff:ff:a5:d8:d2:8b:14:
                    a7:61:fe:f8:4e:6b:55:84:f8:7c:74:06:20:ba:63:
                    57:bc:7f:00:cc:c9:0f:e9:43:bd:99:9b:94:5c:a0:
                    5b:82:c6:7e:de:39:5f:d3:6c:42:ee:4d:bf:74:5f:
                    a8:5b:a6:7e:55:c6:96:d3:8f:e1:91:36:23:4e:e3:
                    6f:70:e1:59:d3:31:e0:1b:bc:bf:95:56:5c:13:42:
                    09:db:6d:4e:e0:f4:65:f6:53:8d:c6:20:b8:db:de:
                    75:fa:8d:bb:c0:b2:f1:dc:b7:7c:b5:89:26:29:6b:
                    77:4b:d3:17:bb:b0:03:1e:d7:6d:a5:60:2b:e3:c1:
                    7b:a2:91:94:42:02:33:a5:00:e4:08:38:2f:8c:34:
                    e7:62:52:e8:2c:d3:27:85:65:ab:cc:ee:65:44:21:
                    e9:08:e0:ce:e8:94:a4:ac:d3:4b:e2:86:a3:f3:03:
                    c6:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:B9:23:E3:58:AD:F2:1E:C7:29:08:95:46:F6:BA:F1:C6:E9:E5:B2
            X509v3 Authority Key Identifier:
                keyid:CD:3C:D7:C4:DC:95:CB:3E:0D:4E:87:03:EF:01:40:4F:E0:A7:07:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zTzXxNyVyz4NTocD7wFAT-CnB4A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/5719cc-e83e-433d-80d5-ff26a9883314/1/zTzXxNyVyz4NTocD7wFAT-CnB4A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/85/5719cc-e83e-433d-80d5-ff26a9883314/1/zTzXxNyVyz4NTocD7wFAT-CnB4A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:71:ce:81:ef:24:8f:80:28:f9:bc:1e:7b:12:d2:48:a9:de:
         d3:73:18:56:19:72:e2:6b:27:5d:6d:e3:60:04:03:d0:9c:f2:
         a4:44:49:ef:58:f0:41:a8:35:ea:db:f7:7c:37:9c:a1:dc:70:
         c5:b2:3e:c0:54:f9:00:7c:10:e5:a2:09:ef:76:a9:63:99:e2:
         bc:c7:55:9d:57:ab:1c:1b:3a:f7:e5:e2:7f:90:6e:17:aa:fd:
         ca:b7:86:f8:63:b0:6f:d1:b1:92:c6:44:58:f7:78:94:c3:22:
         57:46:84:ba:92:ec:01:db:ea:c6:fa:f7:15:a1:ae:af:f8:c1:
         5c:ee:e9:2a:51:00:5e:d5:2d:f1:28:15:f9:1c:4b:a2:7f:94:
         25:76:09:fb:75:2c:62:4a:cd:e9:d4:fc:a9:11:17:48:63:42:
         62:96:f3:15:d1:26:af:f3:1b:1a:f0:2d:f3:62:08:b0:ff:67:
         5b:9c:de:62:c3:69:d4:4c:3e:4e:7a:32:6a:56:3f:9f:a6:81:
         f1:20:d9:2f:0f:da:d3:5c:7a:37:6b:fb:d5:d6:d0:a7:52:dd:
         cc:52:ab:bf:5f:e1:7f:de:3a:7c:37:b0:05:be:44:dc:af:46:
         85:54:8b:1a:6d:80:1d:3d:17:4c:04:e4:86:22:93:b4:bd:43:
         bd:32:e9:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----