Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8d/08d44c-f102-4b70-8db0-72abeefeda4a/1/cIAppnQXfv2ZJSJ1CUYYwMnPvR0.mft
File:                     cIAppnQXfv2ZJSJ1CUYYwMnPvR0.mft (raw, json)
Hash identifier:          ybeUK2KQyfcY88h6K6Q7WK7l3P+RoMyHsxsWlf0NohY=
Subject key identifier:   B6:3F:AE:AE:29:B1:6B:4B:4A:63:EE:46:E2:1F:8F:34:96:98:47:4F
Authority key identifier: 70:80:29:A6:74:17:7E:FD:99:25:22:75:09:46:18:C0:C9:CF:BD:1D
Certificate issuer:       /CN=708029a674177efd99252275094618c0c9cfbd1d
Certificate serial:       019D747B8D8E1F6577718A7EDDD6627C77FF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cIAppnQXfv2ZJSJ1CUYYwMnPvR0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8d/08d44c-f102-4b70-8db0-72abeefeda4a/1/cIAppnQXfv2ZJSJ1CUYYwMnPvR0.mft
Manifest number:          087C
Signing time:             Thu 09 Apr 2026 23:02:27 +0000
Manifest this update:     Thu 09 Apr 2026 23:02:27 +0000
Manifest next update:     Fri 10 Apr 2026 23:02:27 +0000
Files and hashes:         1: I4b58F6pDV1d4K644zAI0CbjBYU.roa (hash: l4P0GIlVnAsTRvDl5mxBDD7sk53ErKxnQAHWWSx1FHs=)
                          2: cIAppnQXfv2ZJSJ1CUYYwMnPvR0.crl (hash: jL9ijY3V0SDv6rIcO0pEet3uH5rfjVlDU55zl0nyhZc=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:74:7b:8d:8e:1f:65:77:71:8a:7e:dd:d6:62:7c:77:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=708029a674177efd99252275094618c0c9cfbd1d
        Validity
            Not Before: Apr  9 23:02:27 2026 GMT
            Not After : Apr 10 23:02:27 2026 GMT
        Subject: CN=b63faeae29b16b4b4a63ee46e21f8f349698474f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:be:73:07:26:a6:04:63:af:c6:66:30:a7:18:
                    69:3d:ee:45:ba:f0:c1:ad:b4:6b:2a:e6:a4:65:9e:
                    dc:d4:e6:dd:60:fc:28:9d:23:00:40:44:78:46:c2:
                    df:27:d3:d9:4e:51:ec:c2:ec:f6:ad:3f:3d:9b:4a:
                    0b:2b:75:7d:1a:e0:02:72:01:70:90:8d:03:d0:e2:
                    75:6b:65:8d:bb:e7:89:bd:76:c9:20:e8:d2:d6:4a:
                    14:b4:9a:28:02:44:a8:3e:7c:ae:63:64:16:bb:21:
                    34:60:6f:3f:fc:ae:f7:2a:d7:6e:03:b2:5a:c3:b1:
                    f5:ef:65:bd:ce:06:c9:0d:d0:6a:63:cc:92:a0:8c:
                    1b:ba:af:dc:14:0b:b0:5c:ce:9c:b5:b0:f8:65:79:
                    d1:cf:9f:dd:03:3c:c6:39:89:91:a4:cd:f3:e6:36:
                    5b:cf:1e:63:28:7e:fa:8b:4f:b0:01:38:b3:ea:1a:
                    19:98:43:16:35:53:44:15:c8:41:5a:50:0a:55:00:
                    b4:99:32:7a:81:f5:f5:5a:56:28:dc:e1:c0:1a:95:
                    7a:e8:14:09:b3:c6:af:85:38:11:ac:f0:26:18:d5:
                    aa:e1:1f:8a:6a:2c:e0:d3:e0:78:ba:b0:d4:7e:61:
                    07:c9:52:eb:c8:0d:fe:bf:8a:d2:c8:a5:6c:a4:40:
                    87:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:3F:AE:AE:29:B1:6B:4B:4A:63:EE:46:E2:1F:8F:34:96:98:47:4F
            X509v3 Authority Key Identifier:
                keyid:70:80:29:A6:74:17:7E:FD:99:25:22:75:09:46:18:C0:C9:CF:BD:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cIAppnQXfv2ZJSJ1CUYYwMnPvR0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/08d44c-f102-4b70-8db0-72abeefeda4a/1/cIAppnQXfv2ZJSJ1CUYYwMnPvR0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/08d44c-f102-4b70-8db0-72abeefeda4a/1/cIAppnQXfv2ZJSJ1CUYYwMnPvR0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:f8:d0:52:9d:4e:e0:2f:05:f6:2f:16:3f:e5:d8:a5:23:a7:
         ff:28:a6:cc:6f:bf:67:77:b6:09:25:f0:d7:01:04:19:c6:67:
         db:63:dc:dc:70:53:39:d4:44:96:d1:71:2c:53:85:91:73:27:
         d1:b1:b9:6e:72:84:e6:86:d7:39:a5:ac:7b:b3:6e:e0:d4:5e:
         61:a8:d2:0b:b4:10:66:d0:91:2a:33:eb:46:be:35:21:00:0c:
         cc:12:f3:25:fc:e9:c9:9e:75:b1:af:25:79:4c:c7:83:66:02:
         16:23:7e:9d:c3:5c:98:0c:a3:a5:e6:c1:5b:d4:59:42:ca:a4:
         f1:d6:bb:f8:32:1b:70:f4:b8:8c:f0:bd:05:21:35:3f:55:1d:
         19:9f:04:0d:ce:04:9c:13:cc:20:25:94:f4:5f:48:7a:a7:73:
         7f:68:77:7b:81:b1:66:70:f9:1f:81:1b:88:49:4b:b2:c0:50:
         06:79:bb:52:21:2d:cc:d8:f5:95:9a:fb:b0:d6:5e:6d:bb:a0:
         9f:67:f8:23:59:11:52:08:57:b6:16:0c:7f:9a:b2:21:52:37:
         54:9d:27:7c:7b:47:a9:76:fc:5b:77:d6:3a:8f:0d:91:04:22:
         28:4e:f4:8d:56:7a:61:da:30:fe:0c:3f:4f:97:39:88:5b:17:
         40:39:98:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----