Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/8f35e8-ac2e-4e15-a0b4-b2ec6117ce9e/1/dGMyObqiEDEGpiYN39fni4CUNVw.mft
File:                     dGMyObqiEDEGpiYN39fni4CUNVw.mft (raw, json)
Hash identifier:          xhuaYnz5aHjcCihCXn6ylSwrwdlllFoEBd4tHzWVMqg=
Subject key identifier:   69:66:03:B0:FB:C2:98:98:BF:45:56:D5:E6:D4:D3:B9:92:EE:62:36
Authority key identifier: 74:63:32:39:BA:A2:10:31:06:A6:26:0D:DF:D7:E7:8B:80:94:35:5C
Certificate issuer:       /CN=74633239baa2103106a6260ddfd7e78b8094355c
Certificate serial:       019B4F28F4AC4AB068E836544607114F5029
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dGMyObqiEDEGpiYN39fni4CUNVw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f6/8f35e8-ac2e-4e15-a0b4-b2ec6117ce9e/1/dGMyObqiEDEGpiYN39fni4CUNVw.mft
Manifest number:          0E66
Signing time:             Wed 24 Dec 2025 07:00:42 +0000
Manifest this update:     Wed 24 Dec 2025 07:00:42 +0000
Manifest next update:     Thu 25 Dec 2025 07:00:42 +0000
Files and hashes:         1: GndNIt9G7qZhnR5IIBXP3kbyL_4.roa (hash: SBp7dhTz+pfIJxl9syItY+Kj164I5JLZ7F2dz4iFPso=)
                          2: dGMyObqiEDEGpiYN39fni4CUNVw.crl (hash: NIFjCq4/FP6tzCro0guIvN/+/AiXRvcuz/Cds+K3cLY=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:4f:28:f4:ac:4a:b0:68:e8:36:54:46:07:11:4f:50:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74633239baa2103106a6260ddfd7e78b8094355c
        Validity
            Not Before: Dec 24 07:00:42 2025 GMT
            Not After : Dec 25 07:00:42 2025 GMT
        Subject: CN=696603b0fbc29898bf4556d5e6d4d3b992ee6236
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:93:21:b6:73:a7:48:9f:b4:aa:05:36:43:44:
                    5f:ec:d4:ce:5d:35:f9:63:e3:a9:cd:9c:e0:75:f7:
                    fe:d5:9d:2c:2d:90:9c:c1:d8:90:06:6d:7c:60:af:
                    43:e6:22:d4:88:11:bc:0a:0a:59:8f:32:e5:bf:cf:
                    36:e8:b3:55:32:72:24:e7:12:12:82:92:61:4c:26:
                    b9:0a:2a:fd:d0:7c:c2:dd:43:89:4b:cc:2b:45:25:
                    d1:a9:c7:da:6c:50:8e:d1:ba:6d:cf:fe:38:49:90:
                    8d:1e:38:17:07:df:40:0d:a7:6c:2d:39:5e:bc:14:
                    02:03:b2:41:b9:64:c0:71:01:8a:8a:2c:19:81:7c:
                    99:c3:dc:67:0d:4b:e0:7f:f8:8a:7d:32:ff:20:29:
                    17:5e:86:d2:3c:0f:e1:11:5a:3d:47:a7:b8:2e:ff:
                    2b:de:f1:ae:f6:83:b9:5a:ae:35:86:7f:ed:c1:70:
                    21:0d:9d:41:8c:21:a3:c3:94:ee:5f:79:f8:51:36:
                    a0:b9:32:e7:e4:cc:38:ca:b2:c3:6b:4f:e6:c7:f4:
                    62:13:89:6b:47:35:64:f7:89:b9:8d:84:d7:0f:78:
                    f2:61:51:12:75:9e:d4:82:fa:8a:4c:9d:cf:62:e8:
                    18:81:f7:06:64:d5:b2:50:99:3d:a6:59:d1:98:c7:
                    ed:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:66:03:B0:FB:C2:98:98:BF:45:56:D5:E6:D4:D3:B9:92:EE:62:36
            X509v3 Authority Key Identifier:
                keyid:74:63:32:39:BA:A2:10:31:06:A6:26:0D:DF:D7:E7:8B:80:94:35:5C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dGMyObqiEDEGpiYN39fni4CUNVw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8f35e8-ac2e-4e15-a0b4-b2ec6117ce9e/1/dGMyObqiEDEGpiYN39fni4CUNVw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8f35e8-ac2e-4e15-a0b4-b2ec6117ce9e/1/dGMyObqiEDEGpiYN39fni4CUNVw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:11:b8:bf:67:bc:c5:f8:eb:81:b2:f1:5c:22:d1:fc:6a:5f:
         aa:c9:44:50:57:4b:59:02:37:aa:10:6a:93:e4:07:0c:2c:66:
         e7:96:05:e0:14:2e:a5:8c:ca:f3:38:c4:41:20:05:da:15:6f:
         43:d4:de:1f:91:12:1d:e7:d0:03:99:e5:d1:7d:77:01:01:0e:
         ec:3e:6e:6a:70:6b:49:da:0d:95:d6:f1:cb:81:cc:6d:07:2e:
         72:f1:c3:8e:7e:dc:a2:e2:9d:e0:2b:70:65:54:c2:46:e2:78:
         b0:7b:81:24:ca:c9:11:b5:e6:86:52:1e:be:3e:5e:8d:b4:b2:
         44:b5:cc:b3:1f:b9:19:1d:34:43:43:58:d9:c9:8e:39:a6:01:
         59:d1:53:1a:49:5c:01:7c:2f:35:ae:23:9d:03:dc:e4:58:00:
         76:71:9e:b8:2b:89:c1:e7:1c:0f:03:50:fa:c7:3b:fe:b5:e3:
         84:b7:32:01:be:15:70:14:f1:bd:19:65:1c:74:25:9c:5b:97:
         d3:2b:9d:0c:97:24:b9:06:b5:57:2b:79:1c:49:2b:3a:8f:1c:
         32:a4:f7:4e:5c:7a:a1:d6:f5:11:53:2d:f8:46:88:c1:39:36:
         a2:09:fa:ea:63:f1:72:de:4b:87:65:df:7e:e0:a2:85:03:a4:
         86:38:8d:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----