Manifest

$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/5/642DD3E1A122CEA10AEF0AC9BBC8285DD0A7C7B5.mft
File:                     642DD3E1A122CEA10AEF0AC9BBC8285DD0A7C7B5.mft (raw, json)
Hash identifier:          ghA+c7u5ZCQWHk1sN6kXqQ4C2Ls3ZFIS3TQ7mCfgQ9Q=
Subject key identifier:   8B:9D:20:4F:E1:A6:0B:63:97:F9:BA:4B:FE:E4:E2:88:F0:47:06:E7
Authority key identifier: 64:2D:D3:E1:A1:22:CE:A1:0A:EF:0A:C9:BB:C8:28:5D:D0:A7:C7:B5
Certificate issuer:       /CN=642DD3E1A122CEA10AEF0AC9BBC8285DD0A7C7B5
Certificate serial:       20EF36F0C1D73B1E471875ED9BDEFEC2FEAF8A27
Authority info access:    rsync://rpki.sub.apnic.net/repository/A9150E4D0000/0/642DD3E1A122CEA10AEF0AC9BBC8285DD0A7C7B5.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/5/642DD3E1A122CEA10AEF0AC9BBC8285DD0A7C7B5.mft
Manifest number:          82
Signing time:             Wed 30 Sep 2026 22:50:08 +0000
Manifest this update:     Wed 30 Sep 2026 22:45:08 +0000
Manifest next update:     Fri 02 Oct 2026 01:04:08 +0000
Files and hashes:         1: 642DD3E1A122CEA10AEF0AC9BBC8285DD0A7C7B5.crl (hash: 8VIO8iX42DhE6OOSinMyEmrCuvCjsXhLb3kjfuFFyPI=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:ef:36:f0:c1:d7:3b:1e:47:18:75:ed:9b:de:fe:c2:fe:af:8a:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=642DD3E1A122CEA10AEF0AC9BBC8285DD0A7C7B5
        Validity
            Not Before: Sep 30 22:45:08 2026 GMT
            Not After : Oct  2 01:04:08 2026 GMT
        Subject: CN=8B9D204FE1A60B6397F9BA4BFEE4E288F04706E7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:b8:3b:c1:42:73:bd:4c:92:f4:fa:73:36:f6:
                    13:a7:84:1b:d9:b3:48:2e:b0:96:14:da:23:57:21:
                    8a:d6:d4:6f:5e:d2:70:95:b7:c3:27:78:6e:35:c0:
                    1d:3d:ad:0b:1d:f1:5f:fe:af:b3:49:9a:ee:6b:1c:
                    69:62:c2:f0:7e:60:25:24:a3:5e:c4:ef:50:0a:96:
                    b6:59:5a:b8:de:ad:a7:d4:d9:7a:44:0a:85:63:0f:
                    46:bc:57:ea:0d:af:4e:69:b8:2e:9d:c1:ab:91:04:
                    bc:c2:12:3f:44:3a:84:0d:77:ab:00:6e:75:86:b6:
                    d2:87:77:21:5b:5b:fa:25:3a:60:33:1d:42:6a:15:
                    d8:58:cc:38:c6:21:9f:bc:bf:ee:4a:79:d4:37:fd:
                    d3:a9:47:39:87:07:a8:da:ad:90:67:ec:9c:a4:a8:
                    46:16:26:9a:db:d4:73:41:ef:e2:71:76:6c:3f:20:
                    88:d7:0c:6b:e8:1f:9a:fe:e6:3c:28:f9:ae:5f:0a:
                    13:d3:06:de:04:37:86:ff:22:9f:ec:93:f8:e0:fe:
                    98:26:4a:90:ad:9d:36:fc:83:2e:74:94:28:24:a3:
                    11:29:f0:ad:5e:f9:54:cd:c6:6c:c1:4a:b5:bb:8d:
                    91:e1:1e:36:ff:6c:56:eb:41:de:d6:70:3d:27:92:
                    d3:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:9D:20:4F:E1:A6:0B:63:97:F9:BA:4B:FE:E4:E2:88:F0:47:06:E7
            X509v3 Authority Key Identifier:
                keyid:64:2D:D3:E1:A1:22:CE:A1:0A:EF:0A:C9:BB:C8:28:5D:D0:A7:C7:B5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/5/642DD3E1A122CEA10AEF0AC9BBC8285DD0A7C7B5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.sub.apnic.net/repository/A9150E4D0000/0/642DD3E1A122CEA10AEF0AC9BBC8285DD0A7C7B5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/5/642DD3E1A122CEA10AEF0AC9BBC8285DD0A7C7B5.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:1d:4b:bb:25:18:0f:27:33:d7:28:fa:e3:8c:b1:36:23:f0:
         0a:ff:65:66:84:98:4d:14:ae:65:fb:b6:28:3c:d5:03:b8:c5:
         f5:00:08:34:d7:6f:ca:a4:42:7e:f2:e3:fe:d9:40:a1:ce:21:
         a5:36:ca:d4:8c:a2:55:27:da:2d:7e:70:4e:8a:93:17:be:a1:
         0e:20:5a:f0:a7:d0:14:64:2f:43:ba:08:71:5b:6d:48:e6:76:
         83:53:b0:01:ac:d5:27:81:e8:2b:f8:6b:fa:ae:6b:92:c4:d6:
         3b:95:08:ef:6b:82:44:d0:64:b4:b8:8f:5a:d6:78:95:51:4c:
         3b:1f:b8:e2:a3:d3:5a:79:5d:17:44:2e:2a:a8:29:e2:dc:82:
         3d:9a:b4:30:d6:63:2e:21:e4:fa:cd:b5:cc:fb:99:fb:6f:ef:
         4b:78:79:60:ad:84:2d:ab:c1:07:a0:75:e1:93:14:47:ba:91:
         09:07:1e:f3:4d:f6:45:71:83:ec:2a:36:3d:d2:4e:ba:e2:6b:
         d9:58:c8:f3:0c:da:85:55:6a:c4:c8:80:42:ac:ea:16:ab:62:
         47:06:ee:1e:bc:ab:1a:dc:80:10:42:ad:45:b2:a9:20:41:0c:
         e6:b7:fc:93:0b:eb:cc:0e:9d:99:73:25:2e:de:3f:44:57:e4:
         d0:a2:2a:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----