Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/93/581183-7a83-4cab-bd8b-3b068db41140/1/hzbpsdAUdK8sPk-MIPRh0TaAGUk.mft
File:                     hzbpsdAUdK8sPk-MIPRh0TaAGUk.mft (raw, json)
Hash identifier:          hfjaZDQPbSPp5hf+zmOKM0OqwMBFzuZqUIjm3qfAU0s=
Subject key identifier:   37:50:42:39:BA:E0:25:A7:3F:DD:88:52:CB:73:3E:32:BB:0A:26:67
Authority key identifier: 87:36:E9:B1:D0:14:74:AF:2C:3E:4F:8C:20:F4:61:D1:36:80:19:49
Certificate issuer:       /CN=8736e9b1d01474af2c3e4f8c20f461d136801949
Certificate serial:       019F2247AC71C985095DBA55767165413425
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hzbpsdAUdK8sPk-MIPRh0TaAGUk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/93/581183-7a83-4cab-bd8b-3b068db41140/1/hzbpsdAUdK8sPk-MIPRh0TaAGUk.mft
Manifest number:          073C
Signing time:             Thu 02 Jul 2026 10:02:30 +0000
Manifest this update:     Thu 02 Jul 2026 10:02:30 +0000
Manifest next update:     Fri 03 Jul 2026 10:02:30 +0000
Files and hashes:         1: dwuC-Oont7VoWE0EeLLcfQ4EL44.roa (hash: +0Vnu02NvEFbgGKFBmW6kguLObTD4n6atdlC8I4zK9M=)
                          2: hzbpsdAUdK8sPk-MIPRh0TaAGUk.crl (hash: YVdQWdRWzruI61fsGPLz2fZ9xQHsIONP61qAwfEYyAc=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:22:47:ac:71:c9:85:09:5d:ba:55:76:71:65:41:34:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8736e9b1d01474af2c3e4f8c20f461d136801949
        Validity
            Not Before: Jul  2 10:02:30 2026 GMT
            Not After : Jul  3 10:02:30 2026 GMT
        Subject: CN=37504239bae025a73fdd8852cb733e32bb0a2667
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:25:5a:07:f4:4b:b4:63:32:ca:bd:a1:4f:c0:
                    ed:63:db:a2:cc:d1:d4:10:9e:ac:f5:96:89:c8:cc:
                    b8:b7:be:a9:e3:2a:e3:85:97:b2:54:33:5c:14:c3:
                    ed:9f:b3:ca:c3:22:ad:e3:ce:32:f9:78:23:49:cb:
                    54:5c:cd:ea:70:a6:58:34:42:00:24:68:7d:d2:a7:
                    f4:de:07:6d:2d:75:b5:1a:87:66:90:01:1a:94:78:
                    4d:c7:be:b5:8c:84:00:b5:94:98:39:c7:91:ae:58:
                    51:1a:3a:2f:ad:04:50:1a:f3:55:40:00:6e:75:dc:
                    43:2c:a4:58:40:a9:15:fb:ce:90:40:3a:1f:71:d3:
                    6c:1a:e4:16:e7:d2:32:4b:7f:29:6f:9b:1c:7d:ee:
                    f9:d6:4c:ac:2b:f0:31:ca:1a:eb:e5:de:c4:09:62:
                    d5:80:82:ac:8e:85:60:ed:d9:e5:e1:a9:73:dd:74:
                    75:0a:9c:79:aa:77:da:ee:dd:4e:0e:ef:83:b8:5a:
                    24:54:38:1a:d9:ac:9d:f2:d8:58:82:f6:c2:b3:8f:
                    92:a0:e1:1b:ca:9f:9b:81:2b:33:17:0b:ad:da:8b:
                    21:29:17:80:39:a1:35:f4:41:d3:be:83:f6:09:b7:
                    b7:ff:91:c5:11:ed:cf:74:44:84:d7:c2:61:3c:7d:
                    2a:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:50:42:39:BA:E0:25:A7:3F:DD:88:52:CB:73:3E:32:BB:0A:26:67
            X509v3 Authority Key Identifier:
                keyid:87:36:E9:B1:D0:14:74:AF:2C:3E:4F:8C:20:F4:61:D1:36:80:19:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hzbpsdAUdK8sPk-MIPRh0TaAGUk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/581183-7a83-4cab-bd8b-3b068db41140/1/hzbpsdAUdK8sPk-MIPRh0TaAGUk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/93/581183-7a83-4cab-bd8b-3b068db41140/1/hzbpsdAUdK8sPk-MIPRh0TaAGUk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:1f:b1:8e:31:ff:2b:16:3a:d4:a8:d5:7a:d7:0c:5e:04:1c:
         db:f5:cb:d0:18:7d:d2:2e:c8:30:4d:a9:b3:36:ae:2c:e8:7a:
         b3:6f:5e:8e:94:f1:a4:1d:9c:68:86:20:a9:fb:60:7f:57:a9:
         8a:82:ca:db:8c:8b:5a:8e:1e:63:b0:83:ae:02:81:64:aa:ab:
         38:66:69:b9:c7:38:77:b3:d9:33:bc:44:5f:80:22:6b:f2:14:
         95:dc:86:da:1c:58:41:2a:95:3e:17:b9:5c:a7:25:96:0d:b5:
         7e:2b:16:b7:36:7b:52:23:0a:8c:e6:50:94:a5:41:73:34:00:
         06:c5:83:45:45:0d:6c:70:29:28:4f:7f:ea:51:ef:05:61:72:
         cc:7a:94:e0:dd:16:76:16:fc:6a:42:5a:5f:5f:eb:79:c2:22:
         0d:08:55:87:82:ed:e3:c4:fe:bf:41:18:17:39:4d:4a:eb:e2:
         9e:a2:d2:22:7e:a3:10:77:3e:9c:0c:bb:ef:4e:8a:ea:56:e8:
         c3:e2:76:c9:b9:3d:48:66:1e:aa:8a:e1:54:ef:2a:bc:c7:a5:
         0e:51:17:8e:94:f4:45:61:80:73:39:d9:86:79:e6:72:4e:20:
         a6:6f:42:65:32:ea:e4:e8:e3:ac:81:22:03:b1:4b:72:84:0b:
         ac:03:32:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----