Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/26b47b-f2ce-4f2b-9d33-45579e418ff7/1/0lYiRXob4zoBJYhmoGfgRH39iWQ.mft
File:                     0lYiRXob4zoBJYhmoGfgRH39iWQ.mft (raw, json)
Hash identifier:          4iwG2RloIs/XU4vsOFNFkiPGSRL05w0TjyZJOKWSlog=
Subject key identifier:   B9:1E:9C:1C:B2:A6:B4:5D:0E:3B:10:09:1A:6D:22:89:0E:82:69:48
Authority key identifier: D2:56:22:45:7A:1B:E3:3A:01:25:88:66:A0:67:E0:44:7D:FD:89:64
Certificate issuer:       /CN=d25622457a1be33a01258866a067e0447dfd8964
Certificate serial:       019B49950CED96005E9BA41E680E0FA6E89B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0lYiRXob4zoBJYhmoGfgRH39iWQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9d/26b47b-f2ce-4f2b-9d33-45579e418ff7/1/0lYiRXob4zoBJYhmoGfgRH39iWQ.mft
Manifest number:          0A5F
Signing time:             Tue 23 Dec 2025 05:01:03 +0000
Manifest this update:     Tue 23 Dec 2025 05:01:03 +0000
Manifest next update:     Wed 24 Dec 2025 05:01:03 +0000
Files and hashes:         1: 0lYiRXob4zoBJYhmoGfgRH39iWQ.crl (hash: Lj8hjSZmaQIrZxMQ+Vmx02nGFcmR65Dwd4mqBcid3Oo=)
                          2: POa1_1lG2fZrcfZRxbGnmzL6mIU.roa (hash: hZbXwNqNEsVBnStQz74wqfWaYd+uX0JeS3LWv9uiIFs=)
                          3: Y8x1Dc8lYBa9pr_hu1HUt6VfoiQ.roa (hash: tNZ2tMN+vQdGUpJ50iWyGDf4dzENZz5DtzgcHTVz9wQ=)
                          4: jD2KOK7nnCfoxA95zCDnHjpO1vk.roa (hash: XBEOGZS/vh8Wv0MRTNCLARz58IIyQNAWCRBGP3lCnBs=)
                          5: k1JgfKb3srL6aXDXnzvzd4pJb2w.roa (hash: +LhNHAlBDK0qBIHLLIuzyw+Dk5hZ7SHq+3e02Y/fFBg=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:49:95:0c:ed:96:00:5e:9b:a4:1e:68:0e:0f:a6:e8:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d25622457a1be33a01258866a067e0447dfd8964
        Validity
            Not Before: Dec 23 05:01:03 2025 GMT
            Not After : Dec 24 05:01:03 2025 GMT
        Subject: CN=b91e9c1cb2a6b45d0e3b10091a6d22890e826948
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:1a:13:bd:09:3f:a0:04:ef:a9:4a:51:0b:ea:
                    a0:d2:9c:0f:cf:15:cb:2a:c0:0a:d5:00:b7:94:99:
                    e7:0d:1c:92:50:b7:41:dc:26:1c:55:a9:a2:12:37:
                    2f:90:a9:fd:f7:fc:44:81:85:08:5c:9e:54:8b:f4:
                    dd:80:0d:bc:ab:28:5f:fa:7c:7e:70:1b:cc:d6:48:
                    33:5d:68:30:e5:0f:f5:03:f9:66:fb:ce:19:71:5a:
                    af:21:46:98:bf:0f:4f:c6:5e:21:07:66:b7:c9:9f:
                    c1:9f:de:bc:53:6d:c7:71:6d:f3:f6:88:96:53:2e:
                    fc:9c:4a:70:8e:42:26:7d:2c:73:1e:1f:99:db:cd:
                    dd:c1:32:20:ae:a6:40:4a:02:16:cb:d4:f4:e7:b7:
                    e5:0b:69:3a:5b:72:b0:82:7e:b5:79:a7:a1:bf:e4:
                    cf:be:b2:d1:a3:a9:3a:ae:2f:6e:b7:40:ae:2f:f6:
                    06:12:d1:7f:5a:7a:77:2c:8a:82:a6:19:c7:bc:32:
                    dc:cc:b7:dc:b3:5e:c7:3d:dd:2e:07:3b:49:b3:6e:
                    57:6d:68:c9:4e:60:8c:d8:bb:3e:6a:bb:36:4c:05:
                    b2:8d:84:4d:63:ab:5e:29:75:5d:f0:fa:32:e7:a5:
                    3b:5b:a7:b7:ec:d8:5a:d9:3a:13:e2:11:10:2b:71:
                    e7:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:1E:9C:1C:B2:A6:B4:5D:0E:3B:10:09:1A:6D:22:89:0E:82:69:48
            X509v3 Authority Key Identifier:
                keyid:D2:56:22:45:7A:1B:E3:3A:01:25:88:66:A0:67:E0:44:7D:FD:89:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0lYiRXob4zoBJYhmoGfgRH39iWQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/26b47b-f2ce-4f2b-9d33-45579e418ff7/1/0lYiRXob4zoBJYhmoGfgRH39iWQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/26b47b-f2ce-4f2b-9d33-45579e418ff7/1/0lYiRXob4zoBJYhmoGfgRH39iWQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:c6:21:22:93:35:7a:35:5a:c1:41:8b:16:b4:6c:5c:8b:6c:
         f9:6d:22:85:6f:55:a1:28:b6:df:4c:44:5f:06:e4:5d:19:48:
         7b:25:7a:13:a8:0f:4b:86:cc:d5:ec:30:d9:f8:9a:d6:b2:01:
         6c:24:f1:b7:fa:b0:be:f6:23:f7:dd:d0:5b:71:60:5c:e4:e0:
         f2:4d:90:19:cc:c7:d1:09:c6:fc:15:12:d2:02:a4:ba:99:10:
         e0:a1:ce:79:78:5f:db:f3:24:8f:43:6c:0e:8e:29:c4:8d:53:
         7d:ea:92:1b:92:0c:ed:52:8e:2a:e0:1f:a0:9f:02:6d:5b:31:
         d7:fe:c6:eb:c8:4d:8b:61:9d:56:60:20:c6:3d:48:49:b6:e9:
         f1:28:5e:a5:07:22:84:37:97:5a:e0:49:6e:3e:e0:61:f2:64:
         d3:5e:74:5c:dd:56:c1:d0:5d:d7:d9:d3:c9:fd:2e:84:03:3a:
         84:b9:73:cc:72:50:0a:87:29:0f:6d:31:10:a1:d6:14:fc:f0:
         59:25:83:ae:8a:d3:33:d1:30:e7:93:5e:c9:62:92:42:6e:c6:
         a8:98:0b:df:ee:34:ce:eb:e3:fe:c2:40:f0:a2:99:17:e8:8b:
         ef:1e:95:0c:2a:5a:76:ab:9d:bc:99:12:b4:b0:ec:c0:9d:40:
         df:3b:c0:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----