Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/04/496773-5018-48dc-a240-f60d6f7182a1/1/iCGjmu2dpO46tmOdJEUI-h6NIPY.mft
File:                     iCGjmu2dpO46tmOdJEUI-h6NIPY.mft (raw, json)
Hash identifier:          dPk50Sy31NT6X1dYNDD+UMMcPlXrhotZb0YjWn76gFM=
Subject key identifier:   98:F0:C7:0D:05:47:7D:11:A8:4D:62:AB:D7:32:18:C4:44:E0:C5:8C
Authority key identifier: 88:21:A3:9A:ED:9D:A4:EE:3A:B6:63:9D:24:45:08:FA:1E:8D:20:F6
Certificate issuer:       /CN=8821a39aed9da4ee3ab6639d244508fa1e8d20f6
Certificate serial:       019F227D9DA2BE06FA948DE5E2C85EA4F636
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/iCGjmu2dpO46tmOdJEUI-h6NIPY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/04/496773-5018-48dc-a240-f60d6f7182a1/1/iCGjmu2dpO46tmOdJEUI-h6NIPY.mft
Manifest number:          16B0
Signing time:             Thu 02 Jul 2026 11:01:25 +0000
Manifest this update:     Thu 02 Jul 2026 11:01:25 +0000
Manifest next update:     Fri 03 Jul 2026 11:01:25 +0000
Files and hashes:         1: DoG1nIvAyF6Ofk7B7oBXD9fCbWY.roa (hash: 9biYSv6POYCwfleLHgkM4hjjkLE1P6h07qcPCt2vZ8Q=)
                          2: Ku186Y-Tu0woDCZbFinpqq7ZdFE.roa (hash: v4Tz8TXIdty6/ZjbJ1ivX2W0EU7wX33Cwf/C7mVCK74=)
                          3: _yFrTYVVOzem6SAvOPOzP_wE_MM.roa (hash: 5prdT05UIi7fhKfl8B0EiaHRzoodJuHLB7r7onONbos=)
                          4: iCGjmu2dpO46tmOdJEUI-h6NIPY.crl (hash: UFbB6+zUrSVEOz6w/01wPfJaPIA3rXkoOO205IDjQKI=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:22:7d:9d:a2:be:06:fa:94:8d:e5:e2:c8:5e:a4:f6:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8821a39aed9da4ee3ab6639d244508fa1e8d20f6
        Validity
            Not Before: Jul  2 11:01:25 2026 GMT
            Not After : Jul  3 11:01:25 2026 GMT
        Subject: CN=98f0c70d05477d11a84d62abd73218c444e0c58c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:ae:9e:bb:03:7d:6a:b5:53:ea:58:87:d6:ee:
                    90:90:ac:f7:2f:51:cd:d0:d4:b0:d1:86:0d:ee:a0:
                    c6:cc:e9:fe:15:f2:8e:10:aa:cb:a5:69:80:4b:8e:
                    1c:02:08:a6:a6:c6:d6:39:04:4a:18:39:aa:03:1f:
                    0b:6b:c4:93:bf:55:af:4f:c7:be:66:8f:aa:08:c4:
                    e9:17:50:84:40:c4:e5:39:6e:d5:22:3a:a7:03:ab:
                    0c:57:a3:42:49:e3:58:30:88:f1:37:19:f8:8e:2f:
                    20:ba:0b:8d:78:8c:6b:4b:1e:7e:3e:f6:0a:12:25:
                    d6:98:2c:f8:6c:b4:75:29:77:1c:59:64:a4:a8:8d:
                    88:d2:e7:67:a6:22:d3:3a:91:c9:68:ff:7f:b0:5e:
                    e5:0c:06:d1:b6:49:67:52:a8:f9:7d:c3:de:b5:27:
                    15:c6:84:ca:1d:0a:d1:7d:37:c2:7c:54:3f:c5:db:
                    07:7b:2c:5d:5a:8e:78:68:9f:6b:5a:48:70:f3:f9:
                    89:6c:85:6a:ba:ca:4b:92:29:41:d5:37:94:56:5e:
                    44:ac:e4:b0:3e:71:9d:a0:f8:84:bc:eb:48:04:48:
                    88:ac:8e:90:d6:6f:8b:7d:20:df:83:3f:0d:d6:0f:
                    b0:2e:85:35:39:e0:95:80:17:d8:1f:e5:99:3a:e2:
                    5e:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:F0:C7:0D:05:47:7D:11:A8:4D:62:AB:D7:32:18:C4:44:E0:C5:8C
            X509v3 Authority Key Identifier:
                keyid:88:21:A3:9A:ED:9D:A4:EE:3A:B6:63:9D:24:45:08:FA:1E:8D:20:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iCGjmu2dpO46tmOdJEUI-h6NIPY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/496773-5018-48dc-a240-f60d6f7182a1/1/iCGjmu2dpO46tmOdJEUI-h6NIPY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/04/496773-5018-48dc-a240-f60d6f7182a1/1/iCGjmu2dpO46tmOdJEUI-h6NIPY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:0a:84:cc:09:0c:df:d2:7f:6f:af:63:e5:8d:04:2e:ae:ad:
         62:2d:ec:44:b3:dd:72:5e:75:b2:df:0d:e4:32:ed:76:c1:34:
         5f:67:eb:57:59:f1:44:a5:02:e9:1b:bd:10:81:80:9b:77:71:
         d3:12:c5:a5:9e:17:e3:25:2a:95:6f:48:20:f5:d0:eb:48:79:
         1d:48:3f:7f:ae:fe:f7:fb:5c:05:4d:59:bc:6d:87:35:4e:27:
         98:27:2d:76:28:66:17:e3:85:14:cb:6e:9e:36:15:61:b2:35:
         62:da:7c:14:6e:32:42:3a:fd:c7:14:ea:43:67:44:1a:07:b8:
         03:48:08:56:87:53:98:e5:74:d7:31:54:33:5b:cf:9c:f1:e3:
         81:8f:5b:28:7b:82:02:de:90:de:69:ac:15:b9:f8:5e:38:79:
         b6:f9:f4:7d:4a:14:55:0b:88:d6:40:b7:60:0a:10:ee:21:90:
         69:56:b8:9e:88:79:a5:e5:ea:a6:6f:d8:8c:b9:ff:02:e2:6e:
         d0:56:a6:15:10:5c:21:66:d9:76:8b:c7:16:b0:46:c2:90:52:
         d3:98:8e:df:2b:5f:84:6d:9b:be:50:11:3d:f6:10:66:b1:44:
         83:47:d6:38:eb:59:da:fd:36:9a:b1:52:41:bc:91:dc:e7:7f:
         19:97:1b:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----