Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9d/2b693b-28fd-43bd-ba25-50d38b373913/1/wqmG2jXxcQTosRZSb4BjFXoW25c.mft
File:                     wqmG2jXxcQTosRZSb4BjFXoW25c.mft (raw, json)
Hash identifier:          tbBqsBqXBmM36f4QFDr/YpobXhaACSiyW5UiXuRv3nA=
Subject key identifier:   51:4E:A4:A5:71:E1:25:62:FE:6D:3D:A5:05:F6:9E:A7:DF:F8:CB:E0
Authority key identifier: C2:A9:86:DA:35:F1:71:04:E8:B1:16:52:6F:80:63:15:7A:16:DB:97
Certificate issuer:       /CN=c2a986da35f17104e8b116526f8063157a16db97
Certificate serial:       019BDA34EDC1D9A496B78589A542E4BCDE5F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wqmG2jXxcQTosRZSb4BjFXoW25c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9d/2b693b-28fd-43bd-ba25-50d38b373913/1/wqmG2jXxcQTosRZSb4BjFXoW25c.mft
Manifest number:          1272
Signing time:             Tue 20 Jan 2026 07:01:00 +0000
Manifest this update:     Tue 20 Jan 2026 07:01:00 +0000
Manifest next update:     Wed 21 Jan 2026 07:01:00 +0000
Files and hashes:         1: wqmG2jXxcQTosRZSb4BjFXoW25c.crl (hash: AEYoSZSwtmVShVYJO37m3IWtxSyuz592JyWlzbJyF3w=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:da:34:ed:c1:d9:a4:96:b7:85:89:a5:42:e4:bc:de:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2a986da35f17104e8b116526f8063157a16db97
        Validity
            Not Before: Jan 20 07:01:00 2026 GMT
            Not After : Jan 21 07:01:00 2026 GMT
        Subject: CN=514ea4a571e12562fe6d3da505f69ea7dff8cbe0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:5f:e6:bf:31:50:69:2c:91:93:80:49:57:f1:
                    df:19:08:b2:ef:61:c6:7c:56:18:30:94:c5:9b:8c:
                    03:19:ce:bf:d8:38:a3:d7:4f:b2:c3:cd:ef:69:72:
                    69:88:67:a5:95:07:65:fc:d5:ab:5e:67:51:ee:f8:
                    27:ed:ad:e0:77:34:60:af:38:a1:a2:3a:4f:95:b3:
                    58:1b:a0:9f:ed:6d:82:d4:2e:39:ef:47:49:be:71:
                    c3:ed:6d:ec:06:44:01:54:a1:46:10:d3:ad:ed:9a:
                    cb:dd:58:84:50:e8:20:22:f6:cf:39:7f:f2:30:c6:
                    c0:b2:6c:67:21:6d:61:3a:ae:57:53:5a:11:61:db:
                    32:1c:ad:16:fb:05:53:a2:42:4c:9b:3c:91:cf:f5:
                    98:2e:27:20:7f:ae:18:e1:79:29:ad:02:2e:ca:06:
                    b6:3f:e1:23:0b:8d:57:a9:08:e2:68:ef:db:b5:f0:
                    39:0b:ab:2e:c6:1a:5e:c9:2d:92:29:54:f1:e4:81:
                    ce:80:e9:b4:c4:a8:8f:a0:84:8b:d8:cb:66:a4:f4:
                    4a:12:21:87:57:ea:7f:3a:7f:29:1f:c8:3c:08:60:
                    2f:a2:d3:f1:31:a7:2b:49:8a:4a:d0:10:27:01:b6:
                    a5:24:12:ed:18:8f:a8:df:93:4f:e4:6d:95:9b:7c:
                    e2:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:4E:A4:A5:71:E1:25:62:FE:6D:3D:A5:05:F6:9E:A7:DF:F8:CB:E0
            X509v3 Authority Key Identifier:
                keyid:C2:A9:86:DA:35:F1:71:04:E8:B1:16:52:6F:80:63:15:7A:16:DB:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wqmG2jXxcQTosRZSb4BjFXoW25c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/2b693b-28fd-43bd-ba25-50d38b373913/1/wqmG2jXxcQTosRZSb4BjFXoW25c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/2b693b-28fd-43bd-ba25-50d38b373913/1/wqmG2jXxcQTosRZSb4BjFXoW25c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:55:31:ce:22:34:55:c6:f3:e1:69:8c:3d:1c:64:3f:40:38:
         f4:a5:cc:00:d1:b9:d6:6c:e5:15:f6:c6:97:22:ed:34:ea:fe:
         c0:00:3f:d3:ab:61:91:56:52:3c:6d:09:e0:44:16:09:7e:bc:
         a6:64:0d:27:f2:72:16:50:af:cf:43:1f:02:51:70:27:b1:88:
         62:a7:c0:b4:03:65:55:2f:10:e8:c1:11:9f:ae:8b:95:cf:69:
         73:be:12:fd:82:a2:3b:d9:2e:ca:ad:10:71:66:67:13:cf:cf:
         cc:cf:64:cf:36:4f:b3:8b:71:b4:de:56:a1:29:57:98:94:2b:
         1d:92:ac:44:59:ef:ee:42:21:5f:67:70:bc:fe:27:7e:10:db:
         a0:64:4f:03:74:59:3a:ff:e6:df:e8:c8:cf:5d:26:4a:6b:2c:
         58:fa:7e:5f:44:8c:69:ea:11:f6:40:dd:5d:65:1e:6a:1b:15:
         31:dc:0b:93:c5:22:45:1a:83:40:37:d3:64:d7:56:db:29:92:
         e0:1b:3d:18:5b:71:94:5e:e2:fe:71:6a:0c:e7:63:97:77:b2:
         82:58:3d:47:ab:93:12:ce:61:a4:44:e1:69:b6:23:a0:17:47:
         f6:1b:05:9d:00:98:84:40:d2:c9:59:86:2e:b4:c2:13:b5:ef:
         16:f2:59:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----