Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/c6a6ba-ae05-4524-84d1-222ceb6c344c/1/rUyDCxEmFIOmK2aWpMNyDorYig0.mft
File:                     rUyDCxEmFIOmK2aWpMNyDorYig0.mft (raw, json)
Hash identifier:          4CUNkGNi+mrA/utFTxu4hWqumeIJiPesNGj5uGt7g4U=
Subject key identifier:   9D:D5:D2:EC:8E:4A:C9:56:FA:55:70:AC:D7:03:06:12:A6:C6:E2:CD
Authority key identifier: AD:4C:83:0B:11:26:14:83:A6:2B:66:96:A4:C3:72:0E:8A:D8:8A:0D
Certificate issuer:       /CN=ad4c830b11261483a62b6696a4c3720e8ad88a0d
Certificate serial:       0194BCA9E36E70324729E08B31AB83CFAED0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rUyDCxEmFIOmK2aWpMNyDorYig0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/00/c6a6ba-ae05-4524-84d1-222ceb6c344c/1/rUyDCxEmFIOmK2aWpMNyDorYig0.mft
Manifest number:          12F4
Signing time:             Fri 31 Jan 2025 14:00:37 +0000
Manifest this update:     Fri 31 Jan 2025 14:00:37 +0000
Manifest next update:     Sat 01 Feb 2025 14:00:37 +0000
Files and hashes:         1: HKEHenn7EguAMxlu8X0PMavfllI.roa (hash: Q1kxs4HiA00x+L/BlCzsp0V9iVJn16kS+H5yLVpADws=)
                          2: aW7CIH9THP_A_IUSjPSDQj4OB_s.roa (hash: 3CR9jYGSAUnr8tm9+NOJlM2eXyEyWaUsyQOyrnBdR0Q=)
                          3: cZNThB_jk2noBG8YtvmrQUXM7A8.roa (hash: iXfGM6dzzfNtT7f4YAxIq0/HoZkuUS3xKDy4j4hKu1k=)
                          4: jSOy5FaXl1S-Obr1YdaCignR9a8.roa (hash: yYEGAEpJB4t7L5q86t/lqbzz/tPx+TQT6wXoohYrOVI=)
                          5: rUyDCxEmFIOmK2aWpMNyDorYig0.crl (hash: I8kXeqtbrWhEGhribE0n+tIk+l+vc94WJI5k7S041Bs=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:a9:e3:6e:70:32:47:29:e0:8b:31:ab:83:cf:ae:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ad4c830b11261483a62b6696a4c3720e8ad88a0d
        Validity
            Not Before: Jan 31 14:00:37 2025 GMT
            Not After : Feb  1 14:00:37 2025 GMT
        Subject: CN=9dd5d2ec8e4ac956fa5570acd7030612a6c6e2cd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:1b:dc:4c:95:21:69:d9:b3:0f:69:fb:99:13:
                    78:63:9f:50:ab:40:21:f3:04:a2:b5:38:38:1b:84:
                    a9:05:db:64:df:7e:cd:2f:e0:6e:1b:f4:ea:01:44:
                    da:e8:b5:98:23:b8:fd:fa:4d:9b:5f:17:96:4f:0e:
                    57:70:af:45:ca:f9:30:0a:88:54:d7:18:d9:c1:b0:
                    49:0e:f1:80:3a:f9:3e:0e:f7:59:6c:35:c9:72:b5:
                    58:c8:c6:91:a0:96:58:29:bd:91:65:67:5a:fe:b4:
                    5c:08:05:03:5b:70:d3:e1:5e:7e:d4:5e:ff:2c:9d:
                    cf:2e:fb:c0:a0:37:ac:ff:df:a5:44:ae:b9:8b:6e:
                    ad:4a:dd:d7:71:02:b3:92:f0:4e:58:3c:e7:9d:f1:
                    66:ed:30:87:6d:ad:61:d3:52:46:1c:f4:b9:3f:6b:
                    d0:e6:93:54:38:a6:91:32:e3:8a:af:df:83:ac:8e:
                    af:ae:27:da:1a:8f:f9:56:30:b3:b1:64:69:a1:42:
                    06:15:fd:30:c9:36:58:3c:6a:0c:83:99:60:54:ef:
                    bb:99:58:78:ac:69:e9:bd:69:cf:2e:ba:da:8a:80:
                    ad:c5:e4:44:97:93:b0:8e:75:3c:48:0d:51:f0:41:
                    dc:83:33:41:4a:73:75:3d:45:29:3f:4e:29:9c:eb:
                    96:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:D5:D2:EC:8E:4A:C9:56:FA:55:70:AC:D7:03:06:12:A6:C6:E2:CD
            X509v3 Authority Key Identifier:
                keyid:AD:4C:83:0B:11:26:14:83:A6:2B:66:96:A4:C3:72:0E:8A:D8:8A:0D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rUyDCxEmFIOmK2aWpMNyDorYig0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/c6a6ba-ae05-4524-84d1-222ceb6c344c/1/rUyDCxEmFIOmK2aWpMNyDorYig0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/00/c6a6ba-ae05-4524-84d1-222ceb6c344c/1/rUyDCxEmFIOmK2aWpMNyDorYig0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:65:ec:47:c7:0e:eb:8f:e9:8b:af:f7:44:fe:0c:a7:ad:37:
         c1:bf:5e:67:11:4d:e3:1f:c4:89:3a:09:77:6f:88:a5:5a:a8:
         37:d1:6c:3c:95:b1:fc:b7:3d:88:a4:55:aa:92:92:ec:1e:82:
         78:84:d5:5d:50:0d:a9:9b:bd:09:d7:d0:e4:6d:96:e7:19:43:
         c1:fc:28:17:c9:aa:23:07:19:c0:60:fe:6f:07:06:59:a0:e3:
         90:07:94:77:df:e7:99:6e:73:58:db:c1:b7:b2:8b:e9:7a:b2:
         aa:b9:08:1b:87:62:a4:6c:2c:aa:c6:04:0a:53:1c:58:5e:f3:
         45:43:c8:40:06:5e:db:c0:c7:8c:58:b9:2e:a2:0e:d5:af:c1:
         b5:d3:6d:0e:98:23:38:80:18:72:07:09:39:2a:7d:d2:0b:db:
         f8:1f:f5:80:68:b4:ed:2e:27:34:ef:b8:9f:bd:5a:7d:28:23:
         95:ae:bc:93:57:fa:2f:a1:60:61:e6:dd:a9:04:cb:d1:b6:4d:
         6b:58:11:73:70:f5:fc:14:04:27:2e:44:29:ae:0c:d9:7a:9d:
         8b:a8:9e:cf:aa:9d:2f:8b:e2:88:87:eb:53:91:0f:8b:f7:e5:
         42:75:1a:4e:4b:0c:36:e1:ea:b0:89:0c:df:43:60:fc:ca:58:
         fa:bd:4d:4e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8qeNucDJHKeCLMauDz67QMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFkNGM4MzBiMTEyNjE0ODNhNjJiNjY5NmE0YzM3MjBlOGFk
ODhhMGQwHhcNMjUwMTMxMTQwMDM3WhcNMjUwMjAxMTQwMDM3WjAzMTEwLwYDVQQD
Eyg5ZGQ1ZDJlYzhlNGFjOTU2ZmE1NTcwYWNkNzAzMDYxMmE2YzZlMmNkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtBvcTJUhadmzD2n7mRN4Y59Qq0Ah
8wSitTg4G4SpBdtk337NL+BuG/TqAUTa6LWYI7j9+k2bXxeWTw5XcK9FyvkwCohU
1xjZwbBJDvGAOvk+DvdZbDXJcrVYyMaRoJZYKb2RZWda/rRcCAUDW3DT4V5+1F7/
LJ3PLvvAoDes/9+lRK65i26tSt3XcQKzkvBOWDznnfFm7TCHba1h01JGHPS5P2vQ
5pNUOKaRMuOKr9+DrI6vrifaGo/5VjCzsWRpoUIGFf0wyTZYPGoMg5lgVO+7mVh4
rGnpvWnPLrraioCtxeREl5OwjnU8SA1R8EHcgzNBSnN1PUUpP04pnOuWmQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ3V0uyOSslW+lVwrNcDBhKmxuLNMB8GA1UdIwQY
MBaAFK1MgwsRJhSDpitmlqTDcg6K2IoNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvclV5REN4RW1GSU9tSzJhV3BNTnlEb3JZaWcwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC9jNmE2YmEtYWUwNS00NTI0LTg0ZDEt
MjIyY2ViNmMzNDRjLzEvclV5REN4RW1GSU9tSzJhV3BNTnlEb3JZaWcwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMC9jNmE2YmEtYWUwNS00NTI0LTg0ZDEtMjIyY2ViNmMzNDRj
LzEvclV5REN4RW1GSU9tSzJhV3BNTnlEb3JZaWcwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQGXsR8cO
64/pi6/3RP4Mp603wb9eZxFN4x/EiToJd2+IpVqoN9FsPJWx/Lc9iKRVqpKS7B6C
eITVXVANqZu9CdfQ5G2W5xlDwfwoF8mqIwcZwGD+bwcGWaDjkAeUd9/nmW5zWNvB
t7KL6XqyqrkIG4dipGwsqsYEClMcWF7zRUPIQAZe28DHjFi5LqIO1a/BtdNtDpgj
OIAYcgcJOSp90gvb+B/1gGi07S4nNO+4n71afSgjla68k1f6L6FgYebdqQTL0bZN
a1gRc3D1/BQEJy5EKa4M2Xqdi6iez6qdL4viiIfrU5EPi/flQnUaTksMNuHqsIkM
30Ng/MpY+r1NTg==
-----END CERTIFICATE-----