Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/c0bb52-70de-4af0-a9fb-900034f00d9e/1/eu8Gnn4-1b9w9oLOQMWBD_Pl43g.mft
File:                     eu8Gnn4-1b9w9oLOQMWBD_Pl43g.mft (raw, json)
Hash identifier:          s6hVnlAVlmQO4fg+zP21LkvH56AzT3AqVhCjUmNK7Gs=
Subject key identifier:   BD:06:97:ED:0E:AC:39:0D:A6:83:26:6C:94:34:00:72:C5:24:01:03
Authority key identifier: 7A:EF:06:9E:7E:3E:D5:BF:70:F6:82:CE:40:C5:81:0F:F3:E5:E3:78
Certificate issuer:       /CN=7aef069e7e3ed5bf70f682ce40c5810ff3e5e378
Certificate serial:       0194BCE0B78FD5761AAB52C802888AAAF6DB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eu8Gnn4-1b9w9oLOQMWBD_Pl43g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/02/c0bb52-70de-4af0-a9fb-900034f00d9e/1/eu8Gnn4-1b9w9oLOQMWBD_Pl43g.mft
Manifest number:          0944
Signing time:             Fri 31 Jan 2025 15:00:31 +0000
Manifest this update:     Fri 31 Jan 2025 15:00:31 +0000
Manifest next update:     Sat 01 Feb 2025 15:00:31 +0000
Files and hashes:         1: GBm_VAZMm95tvGvpR8c8CkKdzyw.roa (hash: /MkVaXn8Lh0U59FVf0qSK7VZuxTGbFM8GznUiwatBTk=)
                          2: R7KosinOXjF2rG3vtu7p8AIu4xQ.roa (hash: O2+0nwWvmmZlJHCPQl2XQCYQ7eCOvA/497czNNwGoCI=)
                          3: bZEqWQ4d1wH8hJyV04MAPEO0Ygo.roa (hash: om8LxQrZJkACoqW8VxCdwbEW0cMygwUVSRnGureg1Lk=)
                          4: eu8Gnn4-1b9w9oLOQMWBD_Pl43g.crl (hash: fX2bjWbAH5VDNF5/cmrp8UXPTc7purVjxsRh0GI6BSk=)
                          5: gkwT-d__QKowAY5Ocf64cDl7M4s.roa (hash: S0K8yM8s7Jfw7i+k1P/jE9FZq22d/v6q6SXDGil9ri0=)
                          6: obdeRPKbOYg0TdkTFUjVSUL8oXE.roa (hash: BP4BJLn84w/b9EROSrMEziDmPyaTFQ9fBu6r5N57qNc=)
                          7: p_PcjKLs5WrMiyv4jJVIiC78mps.roa (hash: Wu2AIvH1jcbjy6EzqUwoJNbeG7lBj3dtIoXcWjMsOto=)
                          8: xv9HfwhggDXbUMv-czQzhIKTeZ8.roa (hash: 8zbraxRvCOHngoKaCuyrD6Tzu9xckameA/akAOr4XQk=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:e0:b7:8f:d5:76:1a:ab:52:c8:02:88:8a:aa:f6:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7aef069e7e3ed5bf70f682ce40c5810ff3e5e378
        Validity
            Not Before: Jan 31 15:00:31 2025 GMT
            Not After : Feb  1 15:00:31 2025 GMT
        Subject: CN=bd0697ed0eac390da683266c94340072c5240103
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:31:b0:13:2c:44:cb:8d:ec:d2:0c:25:70:9b:
                    f3:8e:ce:fa:42:fe:3a:8c:ab:0c:12:06:a3:76:6b:
                    58:62:29:21:69:9f:57:e8:1c:09:e4:91:99:e3:c7:
                    21:d3:02:12:e3:92:e9:0a:39:6b:e3:aa:f0:df:95:
                    7c:1d:a4:3c:03:7c:9f:03:dd:48:63:02:0a:5a:1f:
                    1a:0f:01:f2:6b:66:77:79:d7:5c:26:36:e5:f6:48:
                    d3:11:29:10:21:b4:e6:7f:f4:46:32:fc:f7:2f:cf:
                    b1:3e:23:b4:f2:c5:0d:5f:fb:ea:e2:5d:fd:5f:0e:
                    3e:3b:b5:26:c5:45:79:1f:f6:01:17:e7:bf:8f:89:
                    71:37:7d:b6:08:a5:52:d0:7a:5f:93:82:38:6a:bb:
                    2f:cd:2d:c0:c9:67:db:90:e5:2e:05:cf:5c:d8:fa:
                    af:ea:3c:94:08:04:b3:f2:59:55:25:78:e6:d9:20:
                    b2:e2:1a:b9:f6:c9:07:1c:d8:04:0d:c8:da:fb:0c:
                    ba:df:fc:a3:a9:72:63:d4:74:0a:13:eb:ae:3c:d5:
                    dd:96:40:7d:25:75:68:01:b7:ad:c9:dd:85:e7:47:
                    72:7d:1b:f6:62:14:c5:a5:eb:46:e0:3a:32:65:7f:
                    53:b8:da:42:85:40:b9:b2:f3:23:f5:d9:6f:a9:de:
                    07:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:06:97:ED:0E:AC:39:0D:A6:83:26:6C:94:34:00:72:C5:24:01:03
            X509v3 Authority Key Identifier:
                keyid:7A:EF:06:9E:7E:3E:D5:BF:70:F6:82:CE:40:C5:81:0F:F3:E5:E3:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eu8Gnn4-1b9w9oLOQMWBD_Pl43g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/c0bb52-70de-4af0-a9fb-900034f00d9e/1/eu8Gnn4-1b9w9oLOQMWBD_Pl43g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/02/c0bb52-70de-4af0-a9fb-900034f00d9e/1/eu8Gnn4-1b9w9oLOQMWBD_Pl43g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         88:72:2a:ec:46:4f:80:ee:13:f9:02:1f:29:9b:01:28:95:f7:
         9d:fe:c8:9e:c9:2e:31:af:db:87:df:d4:42:24:79:02:c7:69:
         2e:99:26:c9:00:aa:a4:48:db:98:5f:6a:b2:82:d3:18:f0:8f:
         37:6e:7b:9d:07:92:06:c7:fd:e7:07:cf:d7:b3:2d:d7:48:ca:
         56:3c:2d:a1:24:93:32:3e:1a:45:95:c9:aa:14:0d:d4:ad:c8:
         a4:e7:79:7e:65:3d:e5:d1:9e:c0:d6:ff:02:e1:8c:e5:c1:52:
         ec:9a:69:7c:19:32:40:87:1d:51:ab:59:da:f3:84:b5:3a:70:
         2e:20:39:e6:e0:e8:0e:6d:ce:d6:2a:02:e6:4a:02:c1:c0:e4:
         38:99:24:0d:18:b0:ab:de:6e:dc:4c:2a:f4:29:03:2b:0d:b8:
         ae:91:6b:fb:51:24:f9:5b:80:50:71:c2:7c:1a:fb:10:5b:d5:
         a8:ed:8a:70:e0:9a:d5:b2:9b:a0:34:1f:73:3c:da:3e:f2:b1:
         8d:b5:7d:65:2a:34:db:6a:40:dc:3c:ad:8c:c5:7e:fb:79:fd:
         37:ab:98:bc:62:52:27:15:41:9f:22:1c:f9:1c:cc:34:46:61:
         d5:01:26:a8:20:e3:76:7d:31:33:0e:90:a3:de:e1:39:89:5e:
         21:00:39:63
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS84LeP1XYaq1LIAoiKqvbbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdhZWYwNjllN2UzZWQ1YmY3MGY2ODJjZTQwYzU4MTBmZjNl
NWUzNzgwHhcNMjUwMTMxMTUwMDMxWhcNMjUwMjAxMTUwMDMxWjAzMTEwLwYDVQQD
EyhiZDA2OTdlZDBlYWMzOTBkYTY4MzI2NmM5NDM0MDA3MmM1MjQwMTAzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlTGwEyxEy43s0gwlcJvzjs76Qv46
jKsMEgajdmtYYikhaZ9X6BwJ5JGZ48ch0wIS45LpCjlr46rw35V8HaQ8A3yfA91I
YwIKWh8aDwHya2Z3eddcJjbl9kjTESkQIbTmf/RGMvz3L8+xPiO08sUNX/vq4l39
Xw4+O7UmxUV5H/YBF+e/j4lxN322CKVS0Hpfk4I4arsvzS3AyWfbkOUuBc9c2Pqv
6jyUCASz8llVJXjm2SCy4hq59skHHNgEDcja+wy63/yjqXJj1HQKE+uuPNXdlkB9
JXVoAbetyd2F50dyfRv2YhTFpetG4DoyZX9TuNpChUC5svMj9dlvqd4HkQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL0Gl+0OrDkNpoMmbJQ0AHLFJAEDMB8GA1UdIwQY
MBaAFHrvBp5+PtW/cPaCzkDFgQ/z5eN4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZXU4R25uNC0xYjl3OW9MT1FNV0JEX1BsNDNnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi9jMGJiNTItNzBkZS00YWYwLWE5ZmIt
OTAwMDM0ZjAwZDllLzEvZXU4R25uNC0xYjl3OW9MT1FNV0JEX1BsNDNnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMi9jMGJiNTItNzBkZS00YWYwLWE5ZmItOTAwMDM0ZjAwZDll
LzEvZXU4R25uNC0xYjl3OW9MT1FNV0JEX1BsNDNnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiHIq7EZP
gO4T+QIfKZsBKJX3nf7InskuMa/bh9/UQiR5AsdpLpkmyQCqpEjbmF9qsoLTGPCP
N257nQeSBsf95wfP17Mt10jKVjwtoSSTMj4aRZXJqhQN1K3IpOd5fmU95dGewNb/
AuGM5cFS7JppfBkyQIcdUatZ2vOEtTpwLiA55uDoDm3O1ioC5koCwcDkOJkkDRiw
q95u3Ewq9CkDKw24rpFr+1Ek+VuAUHHCfBr7EFvVqO2KcOCa1bKboDQfczzaPvKx
jbV9ZSo022pA3DytjMV++3n9N6uYvGJSJxVBnyIc+RzMNEZh1QEmqCDjdn0xMw6Q
o97hOYleIQA5Yw==
-----END CERTIFICATE-----