Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/92/7e2b0a-a8ed-47b7-9d74-ab975f7d3533/1/oAbKBpZb7mgcNTG0JrWZpAHhpaQ.mft
File:                     oAbKBpZb7mgcNTG0JrWZpAHhpaQ.mft (raw, json)
Hash identifier:          knkfJ9bWdsdLu55PoITzQu3KqB3TWcSdKlhFvn4unLE=
Subject key identifier:   BE:81:D3:9F:5A:9C:BC:29:B3:6F:6F:A2:3A:1B:BE:94:0B:40:26:B2
Authority key identifier: A0:06:CA:06:96:5B:EE:68:1C:35:31:B4:26:B5:99:A4:01:E1:A5:A4
Certificate issuer:       /CN=a006ca06965bee681c3531b426b599a401e1a5a4
Certificate serial:       019F22EB14DA5BCB15C9B6949B4216066B25
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/oAbKBpZb7mgcNTG0JrWZpAHhpaQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/92/7e2b0a-a8ed-47b7-9d74-ab975f7d3533/1/oAbKBpZb7mgcNTG0JrWZpAHhpaQ.mft
Manifest number:          0A97
Signing time:             Thu 02 Jul 2026 13:00:59 +0000
Manifest this update:     Thu 02 Jul 2026 13:00:59 +0000
Manifest next update:     Fri 03 Jul 2026 13:00:59 +0000
Files and hashes:         1: gHMMMWkWSCRAZd1J-595ETu4GXM.roa (hash: 6RcYJsi4dqgKujLAkFe++oNBxFNAvLOZbGFMikg7LtU=)
                          2: oAbKBpZb7mgcNTG0JrWZpAHhpaQ.crl (hash: yjZcttlnsUW3jtls+TVjDQLsLraTOQDNZLwL83PwfKY=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:22:eb:14:da:5b:cb:15:c9:b6:94:9b:42:16:06:6b:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a006ca06965bee681c3531b426b599a401e1a5a4
        Validity
            Not Before: Jul  2 13:00:59 2026 GMT
            Not After : Jul  3 13:00:59 2026 GMT
        Subject: CN=be81d39f5a9cbc29b36f6fa23a1bbe940b4026b2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:a0:31:16:bc:ac:e8:3c:8c:9b:f9:ad:60:5b:
                    9e:9a:83:1a:61:ea:b2:fe:32:50:8f:d5:fe:3e:20:
                    38:11:7e:ab:e8:15:e1:b2:19:d9:e7:cb:88:04:19:
                    73:31:1a:a1:26:0b:2b:fa:d9:f6:e8:3e:73:cd:eb:
                    97:fe:ca:7d:97:47:8e:78:0c:2a:dd:78:8b:8d:55:
                    6c:e6:75:db:6f:b6:48:3d:be:a3:a7:9f:dc:16:0d:
                    fa:db:bf:0c:cb:6e:ae:06:08:28:25:ca:ad:e3:33:
                    16:08:a4:c7:13:7b:f8:d3:c5:ca:84:d6:e8:fe:c8:
                    96:fd:04:57:62:da:54:72:08:a5:4d:3c:61:83:22:
                    36:06:77:96:4d:14:9d:61:91:c9:82:06:25:52:c8:
                    a5:ab:68:67:08:ce:1f:0c:03:f3:de:4c:62:70:1c:
                    4d:1d:9f:ef:2c:ac:a6:f8:e7:23:3a:de:47:d4:71:
                    9d:7b:ba:0f:97:fb:df:1e:3a:57:84:76:82:22:8d:
                    6f:fd:a0:35:49:4b:62:7f:da:92:61:73:ee:2c:f4:
                    3b:fe:3f:e7:9a:5d:33:59:e0:52:6c:07:53:8e:b2:
                    7b:7f:04:d9:d6:39:c1:e6:60:a8:56:13:53:70:69:
                    32:c1:b2:d7:36:cc:fb:fb:db:c9:c3:85:ba:97:cc:
                    a5:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:81:D3:9F:5A:9C:BC:29:B3:6F:6F:A2:3A:1B:BE:94:0B:40:26:B2
            X509v3 Authority Key Identifier:
                keyid:A0:06:CA:06:96:5B:EE:68:1C:35:31:B4:26:B5:99:A4:01:E1:A5:A4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oAbKBpZb7mgcNTG0JrWZpAHhpaQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/7e2b0a-a8ed-47b7-9d74-ab975f7d3533/1/oAbKBpZb7mgcNTG0JrWZpAHhpaQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/92/7e2b0a-a8ed-47b7-9d74-ab975f7d3533/1/oAbKBpZb7mgcNTG0JrWZpAHhpaQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:60:7a:c4:d1:af:6c:d7:a8:49:05:83:31:29:bc:3f:43:53:
         db:f4:50:5d:80:f3:25:56:a3:dc:1b:f2:ae:fd:ac:b1:af:44:
         ec:df:9b:ec:1b:0a:86:85:2b:02:1c:a4:64:be:3a:63:a0:08:
         40:0d:8f:56:93:ea:26:fe:2f:07:ee:00:f6:ff:02:5b:c5:1a:
         80:bd:a8:fa:70:e1:50:e4:a5:bb:02:d5:de:a3:f1:00:86:6a:
         04:24:d9:73:43:87:64:bd:da:63:b2:f6:0a:9d:b8:26:bd:72:
         3a:3a:cb:f4:a9:ad:75:9f:8b:8e:a1:b2:ed:cb:09:50:4d:4c:
         cb:b9:2a:f9:da:b3:38:1c:50:70:47:83:3a:c5:b1:e1:cc:f9:
         fa:3c:b5:bd:7f:dd:33:9d:08:b0:88:a0:c2:1f:df:e6:d3:b3:
         77:17:7e:ee:bd:5d:fc:7f:9a:b7:2f:a0:ce:f7:21:dc:8e:b1:
         ab:f9:8d:ad:9d:b2:ac:87:9a:fa:de:7c:e6:f0:f6:8c:7c:af:
         5c:6b:81:65:c3:e0:bd:27:cf:32:27:81:3a:41:e0:2f:89:be:
         22:3b:ac:3f:96:b8:44:40:7a:ef:65:8c:0d:8a:8a:48:36:40:
         ef:b1:42:b1:f1:8c:e9:4d:39:02:17:a9:58:26:74:49:fd:05:
         19:bf:9f:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----