Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/77/2f5f22-7439-4208-8b39-7d11fcf17123/1/sHATRrrVXff13IGLu7z7t9sQcKs.mft
File:                     sHATRrrVXff13IGLu7z7t9sQcKs.mft (raw, json)
Hash identifier:          gM04tdTcMc0OjXzBab5Vpi4cGwQcMY6QXmlT9Ryyaq8=
Subject key identifier:   24:C4:70:44:08:56:CD:F1:2A:A2:48:40:2E:68:08:5E:E0:E8:9E:9E
Authority key identifier: B0:70:13:46:BA:D5:5D:F7:F5:DC:81:8B:BB:BC:FB:B7:DB:10:70:AB
Certificate issuer:       /CN=b0701346bad55df7f5dc818bbbbcfbb7db1070ab
Certificate serial:       019F22468C881DFAC8774FB410A472F34FAB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sHATRrrVXff13IGLu7z7t9sQcKs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/77/2f5f22-7439-4208-8b39-7d11fcf17123/1/sHATRrrVXff13IGLu7z7t9sQcKs.mft
Manifest number:          0B64
Signing time:             Thu 02 Jul 2026 10:01:16 +0000
Manifest this update:     Thu 02 Jul 2026 10:01:16 +0000
Manifest next update:     Fri 03 Jul 2026 10:01:16 +0000
Files and hashes:         1: WnIgFqDUtt5MOFYPPxGh5mG_FSA.roa (hash: x54UNNX5k2mt5behlKnqsueUS0vpAx/Jev9aIjgXAdg=)
                          2: sHATRrrVXff13IGLu7z7t9sQcKs.crl (hash: /srWjhKtmEFE/GlBZrMIKYJhHOk+FtQe1pAeCt8X7a8=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:22:46:8c:88:1d:fa:c8:77:4f:b4:10:a4:72:f3:4f:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b0701346bad55df7f5dc818bbbbcfbb7db1070ab
        Validity
            Not Before: Jul  2 10:01:16 2026 GMT
            Not After : Jul  3 10:01:16 2026 GMT
        Subject: CN=24c470440856cdf12aa248402e68085ee0e89e9e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:2f:78:7c:ff:63:b8:ba:fa:f0:66:26:9d:20:
                    00:1e:4c:e0:06:71:f3:b0:94:84:c7:2c:9c:b4:79:
                    02:10:56:f5:6b:e1:79:c2:fa:cf:64:14:d2:68:d4:
                    f5:7f:54:fe:cc:ae:b9:88:ce:43:ee:6c:fb:d7:a0:
                    68:7b:59:05:35:ad:d5:84:88:17:cd:43:84:6a:0a:
                    f9:27:c6:c3:f6:3a:5c:fa:b8:3c:d1:89:d4:47:83:
                    23:ac:a0:5a:96:b8:c6:8f:04:a2:3e:44:fc:61:58:
                    26:18:d4:f4:e3:50:ab:87:d6:64:6a:1d:2c:54:a4:
                    6f:0e:f1:8f:57:be:55:f7:e1:90:35:8d:c7:f0:37:
                    09:74:25:71:6e:69:cf:7a:46:fd:3a:5f:b2:ed:01:
                    66:58:46:22:0d:e4:f0:4d:c1:bc:9f:78:b3:a4:27:
                    e3:af:44:25:0f:36:41:49:ec:57:41:6d:73:6d:7c:
                    37:4d:1c:23:22:58:77:67:55:a0:40:cb:53:b6:1e:
                    71:a9:db:85:2d:60:35:28:cf:3b:4c:12:b1:c5:90:
                    9d:07:ae:bc:0f:ce:84:fc:be:e2:c9:7c:75:b7:e4:
                    cc:fa:85:3a:9c:a1:b1:fd:58:69:b2:f4:20:18:e7:
                    64:e0:ac:59:42:05:a8:fa:d1:5b:41:00:cd:07:d4:
                    a4:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:C4:70:44:08:56:CD:F1:2A:A2:48:40:2E:68:08:5E:E0:E8:9E:9E
            X509v3 Authority Key Identifier:
                keyid:B0:70:13:46:BA:D5:5D:F7:F5:DC:81:8B:BB:BC:FB:B7:DB:10:70:AB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sHATRrrVXff13IGLu7z7t9sQcKs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/2f5f22-7439-4208-8b39-7d11fcf17123/1/sHATRrrVXff13IGLu7z7t9sQcKs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/77/2f5f22-7439-4208-8b39-7d11fcf17123/1/sHATRrrVXff13IGLu7z7t9sQcKs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:67:ed:99:d3:29:6e:ae:57:b8:60:6a:21:b7:55:70:59:2a:
         f3:c3:d4:6d:6e:0f:13:b0:5b:d9:c5:e8:8a:74:2c:ef:23:a5:
         ff:df:2f:d6:31:a7:56:2c:09:a2:8d:80:05:95:c2:c5:50:50:
         72:e7:9c:c6:b8:9b:c2:2b:c1:33:d0:0e:c9:39:15:2a:18:b6:
         d1:23:ba:1a:ac:4b:ce:c9:b1:58:af:fd:f6:59:ee:a1:ff:45:
         ce:3a:35:8a:75:1c:13:62:1b:60:25:99:7a:30:3e:34:14:11:
         f2:7e:c5:8d:9d:b1:08:92:dc:46:ae:cc:d1:34:4d:97:c2:10:
         4d:6d:05:69:4c:2e:a5:4a:a2:60:d8:e3:1c:8c:12:96:9c:00:
         3d:e6:f9:85:12:a8:1a:6a:32:2c:9d:df:b1:16:6b:d6:59:87:
         81:a6:f0:c9:f8:c8:76:15:79:29:fd:68:40:4d:6c:de:ec:50:
         60:ed:db:66:39:dc:68:5d:38:58:d1:9e:a0:53:71:b1:30:d2:
         00:06:b7:20:7f:41:46:ca:a1:14:08:08:69:13:a5:8a:2a:25:
         2a:fa:75:14:2d:61:94:da:99:6d:e3:b2:82:24:9b:1e:af:bb:
         51:1b:6e:d8:b4:3a:f0:63:f4:ab:de:0f:66:a3:f7:2b:76:bc:
         ad:44:13:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----