Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/02/73d197-33c0-42e8-a291-05d9c1cd7425/1/3hSkKeZlirtwo3ksFy1-1i64-iY.mft
File:                     3hSkKeZlirtwo3ksFy1-1i64-iY.mft (raw, json)
Hash identifier:          Gv9RJrlPZQz+RdSOG/6fRz9ERIcQooCGQCHKgM5rbFQ=
Subject key identifier:   84:13:12:B9:18:26:97:80:79:37:D9:60:92:63:60:69:CA:99:84:53
Authority key identifier: DE:14:A4:29:E6:65:8A:BB:70:A3:79:2C:17:2D:7E:D6:2E:B8:FA:26
Certificate issuer:       /CN=de14a429e6658abb70a3792c172d7ed62eb8fa26
Certificate serial:       01A0CBC7F3374B4BF3AABA3EDAC7B086F982
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3hSkKeZlirtwo3ksFy1-1i64-iY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/02/73d197-33c0-42e8-a291-05d9c1cd7425/1/3hSkKeZlirtwo3ksFy1-1i64-iY.mft
Manifest number:          1450
Signing time:             Wed 23 Sep 2026 01:01:13 +0000
Manifest this update:     Wed 23 Sep 2026 01:01:13 +0000
Manifest next update:     Thu 24 Sep 2026 01:01:13 +0000
Files and hashes:         1: 3hSkKeZlirtwo3ksFy1-1i64-iY.crl (hash: 31Qlq1uispiDT9vbZSWu2twxPZrkCfsJ8TBZitXHe+s=)
                          2: 5NCPJAHZuuvT_Y3OLL7H8HuHVKg.roa (hash: Bkja5xY8wPIuCivflgBr5uP8e0j+G2X5xzd/ng/E16A=)
                          3: NVJf-5Gx0foqJa85FP-HPGtN5wk.roa (hash: s/IHZ+Grwn0n0cxFSQF8OC1Yd8wC2AZzIQiJGNSSJB8=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:cb:c7:f3:37:4b:4b:f3:aa:ba:3e:da:c7:b0:86:f9:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=de14a429e6658abb70a3792c172d7ed62eb8fa26
        Validity
            Not Before: Sep 23 01:01:13 2026 GMT
            Not After : Sep 24 01:01:13 2026 GMT
        Subject: CN=841312b9182697807937d96092636069ca998453
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:73:7c:94:a8:3b:cd:88:af:a7:ea:f0:84:fa:
                    5c:d6:2e:84:42:e5:72:2a:e2:5f:bd:a5:c7:68:96:
                    01:2f:60:f3:97:e6:67:0e:7f:9c:57:07:2d:fb:85:
                    d6:cb:dd:58:52:aa:d4:8d:fc:e1:35:14:2f:cc:93:
                    e8:28:5b:76:bf:59:d9:88:bb:ba:09:20:67:45:2d:
                    de:d0:c3:a3:da:80:9e:10:75:e1:86:7f:5e:5d:96:
                    4e:5b:70:d7:06:3a:d3:66:8a:36:ab:b0:15:39:7a:
                    3e:b9:84:1c:ab:15:e1:20:c6:4a:34:a5:3f:31:18:
                    c6:16:e8:fd:9e:91:bd:13:c3:37:74:cf:e2:4a:f0:
                    34:9b:a3:04:99:c0:6a:08:a1:8d:67:0c:b6:da:99:
                    01:6c:fa:dc:a8:cc:09:04:87:fd:91:ee:a9:72:dc:
                    d8:bc:7d:9e:ad:b2:c9:8b:ca:2d:92:f7:df:75:a4:
                    5e:ac:24:8d:4f:a3:57:30:ed:a6:29:57:ec:57:46:
                    db:3c:b6:c9:b6:42:5d:b9:14:3b:33:46:03:f6:61:
                    2a:16:c9:94:f4:35:73:2d:28:9e:59:dc:c0:aa:42:
                    34:a6:1c:e6:5b:07:39:9d:e7:b8:d0:24:0e:72:1c:
                    ac:0a:8f:dc:4a:be:e8:c5:14:7e:99:90:97:90:f9:
                    60:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:13:12:B9:18:26:97:80:79:37:D9:60:92:63:60:69:CA:99:84:53
            X509v3 Authority Key Identifier:
                keyid:DE:14:A4:29:E6:65:8A:BB:70:A3:79:2C:17:2D:7E:D6:2E:B8:FA:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3hSkKeZlirtwo3ksFy1-1i64-iY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/73d197-33c0-42e8-a291-05d9c1cd7425/1/3hSkKeZlirtwo3ksFy1-1i64-iY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/02/73d197-33c0-42e8-a291-05d9c1cd7425/1/3hSkKeZlirtwo3ksFy1-1i64-iY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a5:9c:40:1d:85:3c:51:b9:aa:3a:a2:33:13:9e:70:68:6f:c8:
         2f:6e:e9:5f:a0:08:e4:ad:8e:a7:48:89:ca:fb:b2:c6:58:b5:
         c9:d6:14:b6:44:0f:cb:15:ca:e7:4d:71:8f:e5:ec:54:44:1d:
         f0:9c:5e:64:5c:57:5b:6c:87:77:17:dd:34:ea:23:12:b5:af:
         25:ea:12:20:3d:f6:01:ae:30:53:f9:52:94:4c:14:32:0f:82:
         50:d9:8d:4e:21:73:f2:82:89:35:ee:d6:b6:2d:63:40:89:22:
         76:82:63:34:28:d3:ea:1c:dc:8d:da:95:c1:f1:18:3c:62:ce:
         43:01:4f:c3:95:96:fe:03:39:a3:2b:04:e2:47:af:dd:b4:2f:
         a0:fb:90:13:f8:1a:91:9b:7c:c0:58:53:58:f9:fd:71:2b:aa:
         1a:ec:29:d3:60:86:4d:7b:f3:c1:e0:e5:19:93:62:69:2e:66:
         91:c5:4c:45:4c:77:20:8c:5f:43:ad:6d:03:18:69:65:69:aa:
         61:57:3e:a5:93:e0:6d:9b:d6:22:cd:ff:83:85:4c:90:fe:15:
         cc:c5:2e:fe:97:e4:15:1b:d8:86:cb:20:fc:bc:dd:9e:23:9e:
         c1:1d:9f:f6:68:ac:42:5a:7d:bd:ad:e4:24:89:4d:f0:29:67:
         1b:03:5b:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----