Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a7/908e91-27a6-414a-82e8-5e523ba8c9d7/1/8PPwSfPyhFHj4b9ouXT_28jEFMc.mft
File:                     8PPwSfPyhFHj4b9ouXT_28jEFMc.mft (raw, json)
Hash identifier:          m3YKKHEoGuNZHUp7epVLBx4R3W4W8lx7JvSBUmsxO+E=
Subject key identifier:   04:61:24:15:61:AA:B2:40:FD:94:32:9C:8C:86:D8:96:E5:F2:C5:1E
Authority key identifier: F0:F3:F0:49:F3:F2:84:51:E3:E1:BF:68:B9:74:FF:DB:C8:C4:14:C7
Certificate issuer:       /CN=f0f3f049f3f28451e3e1bf68b974ffdbc8c414c7
Certificate serial:       019F216B82BB25D3FE6EEA40220816A34A29
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8PPwSfPyhFHj4b9ouXT_28jEFMc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a7/908e91-27a6-414a-82e8-5e523ba8c9d7/1/8PPwSfPyhFHj4b9ouXT_28jEFMc.mft
Manifest number:          150E
Signing time:             Thu 02 Jul 2026 06:02:01 +0000
Manifest this update:     Thu 02 Jul 2026 06:02:01 +0000
Manifest next update:     Fri 03 Jul 2026 06:02:01 +0000
Files and hashes:         1: 8PPwSfPyhFHj4b9ouXT_28jEFMc.crl (hash: JhGAfvaggX4SA4wjdW9DANgH26Po5NNNLFCv5ilq5Jo=)
                          2: bPDQL4TDwBKyo0KglJ1jUDcS2mA.roa (hash: gTJOIMiebmbjMQAf62eTV7rVcUuFKkthtF5Z6hyFDNI=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:21:6b:82:bb:25:d3:fe:6e:ea:40:22:08:16:a3:4a:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f0f3f049f3f28451e3e1bf68b974ffdbc8c414c7
        Validity
            Not Before: Jul  2 06:02:01 2026 GMT
            Not After : Jul  3 06:02:01 2026 GMT
        Subject: CN=0461241561aab240fd94329c8c86d896e5f2c51e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:fd:16:df:fc:6e:76:69:71:bd:5b:c3:e3:82:
                    33:45:57:01:25:f7:a0:00:fc:50:c4:1f:6b:13:5f:
                    26:cb:72:1a:94:49:6e:2d:15:44:8e:f5:cd:5d:74:
                    00:45:bd:56:e8:4e:7d:b8:0e:a7:a9:80:94:ce:1c:
                    c4:0c:57:9e:bc:06:0c:ae:d3:bb:ca:21:e1:1c:e4:
                    5e:ae:df:fa:67:20:aa:6f:4d:18:ab:b1:c9:49:5c:
                    3b:4e:09:a6:19:86:06:b8:49:ee:57:79:29:ab:cb:
                    d7:8b:21:31:31:3e:62:d1:fa:1e:c2:08:63:f5:27:
                    f0:90:ef:e8:1d:4b:f3:40:8f:f3:75:27:63:ec:34:
                    ed:57:b7:3a:9b:81:70:5b:e8:29:4a:12:d4:bb:75:
                    7b:58:bb:a3:37:db:a4:53:27:38:f7:7d:d4:cf:b3:
                    12:b2:d8:99:ef:2d:e2:15:45:86:36:dd:e7:58:5c:
                    f5:e2:b9:82:c3:4e:3d:c3:69:6b:12:23:44:f0:a6:
                    60:e2:bc:37:78:26:2b:43:92:7d:e6:0d:3f:cf:ce:
                    5e:48:4d:dc:45:66:2e:47:05:57:d0:2e:57:d2:bc:
                    f2:a4:f9:17:dd:2d:b8:22:6b:18:d0:ba:6d:73:92:
                    c2:7c:9b:49:e1:f4:3a:52:6b:29:d9:ec:a0:5c:da:
                    78:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:61:24:15:61:AA:B2:40:FD:94:32:9C:8C:86:D8:96:E5:F2:C5:1E
            X509v3 Authority Key Identifier:
                keyid:F0:F3:F0:49:F3:F2:84:51:E3:E1:BF:68:B9:74:FF:DB:C8:C4:14:C7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8PPwSfPyhFHj4b9ouXT_28jEFMc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/908e91-27a6-414a-82e8-5e523ba8c9d7/1/8PPwSfPyhFHj4b9ouXT_28jEFMc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/908e91-27a6-414a-82e8-5e523ba8c9d7/1/8PPwSfPyhFHj4b9ouXT_28jEFMc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         55:1f:56:ba:cc:ea:2a:60:d7:3f:8d:4f:f0:b9:59:06:8e:98:
         1c:bd:37:b0:e7:c1:5f:e4:0d:26:46:d1:c8:04:54:37:e8:44:
         71:f7:1d:00:2b:25:0d:da:37:1d:63:7b:f3:a6:91:60:19:c5:
         d3:04:9e:95:e9:0d:ad:dc:b9:de:65:14:c3:8f:60:49:23:5f:
         a1:aa:50:45:78:5e:cd:33:1a:05:14:4f:2b:a5:c3:a4:0e:37:
         78:32:6c:c2:ce:49:69:ea:fc:f6:27:df:da:ae:27:c7:d3:f9:
         b2:62:ea:fe:d8:e8:70:e3:e7:a6:00:7e:89:96:ee:b6:87:08:
         fc:45:79:53:f2:74:9b:f4:5e:eb:64:83:9c:18:24:1c:2c:d3:
         d4:d3:bc:da:15:08:80:70:56:44:38:2f:c8:df:74:ee:93:6f:
         b1:bd:d7:9f:f5:f1:b0:6c:18:89:67:2e:30:5d:21:44:5d:1e:
         1a:7a:91:14:4e:c1:49:13:ad:23:2f:91:27:ab:87:1c:6d:c6:
         de:43:aa:69:72:14:42:1d:1c:32:f0:c4:13:5f:7c:d0:5e:0f:
         83:99:b9:7f:7e:97:3e:1d:93:47:23:e1:ae:7a:bc:4a:50:0b:
         1f:24:3b:6e:42:4f:42:f6:2b:88:71:72:24:24:36:d2:a7:86:
         98:52:ad:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----