Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/86/267b51-9adb-4038-b24c-926240aa5f05/1/fZ9lKePCbtCMlfdP5j17Lush9XE.mft
File:                     fZ9lKePCbtCMlfdP5j17Lush9XE.mft (raw, json)
Hash identifier:          74jya3AALremU+72AilQMKSfX5Ki1BVsUTALzjurMfM=
Subject key identifier:   F4:EB:0C:FD:7A:F2:03:C4:43:53:53:34:97:E9:F3:35:B1:89:A8:39
Authority key identifier: 7D:9F:65:29:E3:C2:6E:D0:8C:95:F7:4F:E6:3D:7B:2E:EB:21:F5:71
Certificate issuer:       /CN=7d9f6529e3c26ed08c95f74fe63d7b2eeb21f571
Certificate serial:       019E393F6E16415CAABCC309C3B7D8F66B6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fZ9lKePCbtCMlfdP5j17Lush9XE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/86/267b51-9adb-4038-b24c-926240aa5f05/1/fZ9lKePCbtCMlfdP5j17Lush9XE.mft
Manifest number:          05A7
Signing time:             Mon 18 May 2026 04:01:58 +0000
Manifest this update:     Mon 18 May 2026 04:01:58 +0000
Manifest next update:     Tue 19 May 2026 04:01:58 +0000
Files and hashes:         1: fZ9lKePCbtCMlfdP5j17Lush9XE.crl (hash: zxnUPJHRHScl27biUEa93UBTYErZ21rXkTMGnwg7WEc=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:39:3f:6e:16:41:5c:aa:bc:c3:09:c3:b7:d8:f6:6b:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7d9f6529e3c26ed08c95f74fe63d7b2eeb21f571
        Validity
            Not Before: May 18 04:01:58 2026 GMT
            Not After : May 19 04:01:58 2026 GMT
        Subject: CN=f4eb0cfd7af203c44353533497e9f335b189a839
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:18:fa:a0:e5:12:1a:56:cf:cd:1f:31:3c:86:
                    05:72:8d:a8:eb:96:01:a6:70:6e:5d:86:d6:32:c0:
                    92:05:02:8f:0b:38:19:94:39:e2:04:17:5d:43:00:
                    82:e6:24:73:be:4b:c5:16:2b:d1:e8:7e:f1:40:8d:
                    e5:11:7e:3a:1e:85:39:a3:9c:60:67:d5:82:ad:c2:
                    74:bc:3e:20:ea:4e:61:87:0d:da:cd:af:bf:5d:ac:
                    e3:97:2f:31:9f:07:ca:61:de:da:02:7c:ff:2e:10:
                    f5:75:b1:e1:89:a8:c6:7a:72:b8:53:e9:e2:69:18:
                    85:f1:12:d7:0c:65:31:15:66:be:e0:1c:8f:a8:05:
                    d8:8e:b1:c2:4e:d6:34:b2:14:aa:2c:62:5c:62:8c:
                    39:37:e2:74:d9:6b:02:cb:c0:73:d6:b3:ea:c9:99:
                    8a:70:d0:f9:10:2b:8d:55:20:09:07:0b:0a:36:6c:
                    26:0c:0f:86:9f:ba:8c:e4:10:af:7d:9e:db:78:18:
                    21:c1:60:42:ce:95:12:b4:b3:cb:34:31:fb:3a:ee:
                    1a:8d:a7:f7:f0:fd:55:c2:f8:a7:ab:28:4a:d8:ce:
                    aa:64:3a:e7:24:3a:6b:d9:06:bf:da:ca:8e:0f:93:
                    62:40:ad:d2:f1:d2:e0:84:06:9c:7f:24:b4:97:a4:
                    c9:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:EB:0C:FD:7A:F2:03:C4:43:53:53:34:97:E9:F3:35:B1:89:A8:39
            X509v3 Authority Key Identifier:
                keyid:7D:9F:65:29:E3:C2:6E:D0:8C:95:F7:4F:E6:3D:7B:2E:EB:21:F5:71

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fZ9lKePCbtCMlfdP5j17Lush9XE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/267b51-9adb-4038-b24c-926240aa5f05/1/fZ9lKePCbtCMlfdP5j17Lush9XE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/86/267b51-9adb-4038-b24c-926240aa5f05/1/fZ9lKePCbtCMlfdP5j17Lush9XE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:0a:0b:91:65:6b:b4:d8:bb:5c:a8:bc:38:e1:57:3a:6c:2a:
         fb:5c:df:0e:b6:27:3d:11:23:ea:fd:ec:ee:56:8d:88:96:b6:
         00:60:34:55:03:c5:e6:9c:3d:36:26:e2:f3:10:d3:86:cf:d4:
         e2:21:31:e1:8d:ba:01:59:08:f3:78:a4:1f:ba:91:0f:da:9f:
         91:25:f6:5b:bd:16:7b:23:47:11:39:50:69:51:36:b5:96:58:
         c5:92:7e:4d:2b:d9:33:13:11:7f:9d:14:6c:8f:57:46:38:42:
         44:a3:d6:d7:30:96:8e:ac:d0:16:bd:8e:78:df:db:82:fb:0a:
         2a:79:7a:43:82:88:13:56:dd:19:5e:ec:11:ef:22:44:b2:ee:
         64:e6:21:22:8d:21:06:f9:39:7b:05:9a:20:d4:c2:c1:96:6b:
         30:ab:73:5f:be:4f:48:48:20:9f:a0:ac:af:3d:19:28:49:12:
         7e:77:19:6f:ec:85:64:04:bb:94:43:f3:4b:c1:e0:32:30:4f:
         2b:68:eb:af:f3:7e:86:e8:6c:8a:e3:66:33:04:04:1c:67:2f:
         a4:99:bc:88:49:c9:8d:e3:3e:98:b8:34:00:9b:c2:e1:4f:11:
         14:01:95:50:ef:59:62:6d:3c:9b:6d:7b:b5:9b:6d:78:56:06:
         db:a9:ab:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----