Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/e51856-e52e-4b24-8c99-c240bfc9cbc1/1/YWFHDTm-S6LdXfj6R7FjlieOZwo.mft
File:                     YWFHDTm-S6LdXfj6R7FjlieOZwo.mft (raw, json)
Hash identifier:          ysd47x9McK0TvQfpOFUPwjXQxoPXb/4mCsEekXdFBTE=
Subject key identifier:   77:7D:AA:8C:6F:D5:59:62:2E:72:08:36:F1:BD:BC:E6:C0:9F:96:D4
Authority key identifier: 61:61:47:0D:39:BE:4B:A2:DD:5D:F8:FA:47:B1:63:96:27:8E:67:0A
Certificate issuer:       /CN=6161470d39be4ba2dd5df8fa47b16396278e670a
Certificate serial:       0194BD1762D0B60D5358D301EBA24BC0BBC4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YWFHDTm-S6LdXfj6R7FjlieOZwo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/06/e51856-e52e-4b24-8c99-c240bfc9cbc1/1/YWFHDTm-S6LdXfj6R7FjlieOZwo.mft
Manifest number:          0FDB
Signing time:             Fri 31 Jan 2025 16:00:13 +0000
Manifest this update:     Fri 31 Jan 2025 16:00:13 +0000
Manifest next update:     Sat 01 Feb 2025 16:00:13 +0000
Files and hashes:         1: AbbCpXYiPra6RxhQTvg6tXGKv2M.roa (hash: FNfTwP/KDnV+ro4Bwjh1vRofBv3ZvkWsRE+40NBNKuk=)
                          2: FGboOzE5w8Avx6zvXiGJurlcXzU.roa (hash: ME54k9XxSNDAp5P0H67LsrOuZ6Ebe7/DSYtgtZypMoY=)
                          3: W1GVGEMQmJZkj465u10DUFmM0KI.roa (hash: SvcIJss6manfJOWH/uw6Tbf8OZqbPtgZ1EqIPOzfeqk=)
                          4: Wbf3TpGPW6_mWaG66XxtMUTmb5k.roa (hash: Kx6Oc/JjYSTEsN+RCZ0T24iZupA82iqVacFfzuICYqY=)
                          5: YWFHDTm-S6LdXfj6R7FjlieOZwo.crl (hash: DQHbQUS2+p3hOl59hQY16zIl91s4cIkvxaFz4lRMYZE=)
                          6: hqDxB-Ir5z3Y_G6a9rOSto5ZH88.roa (hash: 2802mZRHrPPS6iUejTLOubgUc+cQnwe3PYotooKVAJk=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bd:17:62:d0:b6:0d:53:58:d3:01:eb:a2:4b:c0:bb:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6161470d39be4ba2dd5df8fa47b16396278e670a
        Validity
            Not Before: Jan 31 16:00:13 2025 GMT
            Not After : Feb  1 16:00:13 2025 GMT
        Subject: CN=777daa8c6fd559622e720836f1bdbce6c09f96d4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:69:c0:4e:63:52:93:89:26:c7:fe:e5:3f:8c:
                    10:cb:eb:85:d5:89:14:66:8e:2b:c3:a8:bc:f3:97:
                    45:ac:c3:2d:59:e6:50:1c:44:03:fe:f4:d1:2a:b8:
                    75:a9:1f:2f:48:55:61:2e:4b:01:99:71:d0:0e:2b:
                    bd:72:57:28:2e:fa:52:59:82:e3:53:3d:c2:29:b1:
                    c0:12:fc:94:32:e4:bc:fa:8f:64:d1:ab:77:f2:52:
                    12:5a:80:13:7c:3d:b2:c6:1e:75:5e:f0:af:68:96:
                    05:17:cf:dd:41:2e:1f:4a:8e:96:7a:0f:bb:93:61:
                    85:0d:66:60:17:34:5c:73:21:27:8b:a0:07:6d:c6:
                    5f:8c:9b:e6:51:d7:c2:62:59:80:8a:f4:6d:a2:a5:
                    e6:3e:11:0f:64:4a:97:05:de:45:d5:59:c8:bb:c6:
                    0e:8a:ef:a8:c7:cd:bb:e5:89:25:45:d3:a6:6c:18:
                    12:83:0e:fe:35:2d:bc:13:8c:16:1d:f2:ea:ef:06:
                    34:2d:b7:47:e8:b2:3d:03:4c:b1:4d:6e:bc:63:34:
                    40:80:02:2d:3b:e9:7d:ac:af:31:19:eb:b4:58:b3:
                    ff:c9:07:ba:b6:91:9a:18:41:a2:3d:73:d5:e2:27:
                    b0:d4:41:91:7f:4f:73:a0:71:58:26:d5:62:12:a1:
                    ea:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:7D:AA:8C:6F:D5:59:62:2E:72:08:36:F1:BD:BC:E6:C0:9F:96:D4
            X509v3 Authority Key Identifier:
                keyid:61:61:47:0D:39:BE:4B:A2:DD:5D:F8:FA:47:B1:63:96:27:8E:67:0A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YWFHDTm-S6LdXfj6R7FjlieOZwo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/e51856-e52e-4b24-8c99-c240bfc9cbc1/1/YWFHDTm-S6LdXfj6R7FjlieOZwo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/06/e51856-e52e-4b24-8c99-c240bfc9cbc1/1/YWFHDTm-S6LdXfj6R7FjlieOZwo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         dd:34:a6:c4:ad:41:15:e8:47:ee:c3:7c:8b:9b:69:7b:fb:60:
         c5:d8:29:9d:87:dd:62:ac:14:8b:9a:86:c0:14:08:28:bf:ec:
         ca:5f:ea:1c:ff:4e:f7:f2:b2:55:d4:18:b6:ae:e1:7c:6e:ce:
         00:89:bf:88:f4:19:64:2d:2d:7e:a5:99:c4:15:c9:5b:13:19:
         d3:65:bf:0a:51:f1:a5:89:b6:63:d7:45:9d:97:41:f9:81:a6:
         fa:de:29:1f:50:0e:54:67:b6:38:c0:71:84:32:35:e2:46:de:
         e8:29:9d:3f:22:85:b5:20:00:c6:eb:9c:24:2e:85:a3:8c:85:
         a3:4b:79:4b:9c:c5:93:27:2f:fe:8b:8d:3c:68:47:99:9f:d4:
         b3:bc:eb:d1:c0:8a:ef:f2:4c:89:be:4e:44:d0:9b:c8:da:b4:
         42:cc:75:b9:e1:78:95:ab:fd:b6:5a:d9:54:f9:b7:24:18:bb:
         69:b4:b5:bf:07:63:a0:43:82:e9:d1:f9:c7:44:05:1b:38:f1:
         04:34:99:64:4f:f3:cf:f5:a3:c8:8f:96:55:6e:47:6d:e1:6b:
         b2:cc:fd:a2:7c:2a:d5:f2:69:f3:0a:b2:02:43:9f:2b:7b:7f:
         25:77:c4:8b:51:2d:52:3b:78:c0:bc:2d:30:a5:1b:7e:37:ef:
         32:d1:b4:f5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9F2LQtg1TWNMB66JLwLvEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYxNjE0NzBkMzliZTRiYTJkZDVkZjhmYTQ3YjE2Mzk2Mjc4
ZTY3MGEwHhcNMjUwMTMxMTYwMDEzWhcNMjUwMjAxMTYwMDEzWjAzMTEwLwYDVQQD
Eyg3NzdkYWE4YzZmZDU1OTYyMmU3MjA4MzZmMWJkYmNlNmMwOWY5NmQ0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArmnATmNSk4kmx/7lP4wQy+uF1YkU
Zo4rw6i885dFrMMtWeZQHEQD/vTRKrh1qR8vSFVhLksBmXHQDiu9clcoLvpSWYLj
Uz3CKbHAEvyUMuS8+o9k0at38lISWoATfD2yxh51XvCvaJYFF8/dQS4fSo6Weg+7
k2GFDWZgFzRccyEni6AHbcZfjJvmUdfCYlmAivRtoqXmPhEPZEqXBd5F1VnIu8YO
iu+ox8275YklRdOmbBgSgw7+NS28E4wWHfLq7wY0LbdH6LI9A0yxTW68YzRAgAIt
O+l9rK8xGeu0WLP/yQe6tpGaGEGiPXPV4iew1EGRf09zoHFYJtViEqHqRQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHd9qoxv1VliLnIINvG9vObAn5bUMB8GA1UdIwQY
MBaAFGFhRw05vkui3V34+kexY5YnjmcKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWVdGSERUbS1TNkxkWGZqNlI3RmpsaWVPWndvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNi9lNTE4NTYtZTUyZS00YjI0LThjOTkt
YzI0MGJmYzljYmMxLzEvWVdGSERUbS1TNkxkWGZqNlI3RmpsaWVPWndvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNi9lNTE4NTYtZTUyZS00YjI0LThjOTktYzI0MGJmYzljYmMx
LzEvWVdGSERUbS1TNkxkWGZqNlI3RmpsaWVPWndvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA3TSmxK1B
FehH7sN8i5tpe/tgxdgpnYfdYqwUi5qGwBQIKL/syl/qHP9O9/KyVdQYtq7hfG7O
AIm/iPQZZC0tfqWZxBXJWxMZ02W/ClHxpYm2Y9dFnZdB+YGm+t4pH1AOVGe2OMBx
hDI14kbe6CmdPyKFtSAAxuucJC6Fo4yFo0t5S5zFkycv/ouNPGhHmZ/Us7zr0cCK
7/JMib5ORNCbyNq0Qsx1ueF4lav9tlrZVPm3JBi7abS1vwdjoEOC6dH5x0QFGzjx
BDSZZE/zz/WjyI+WVW5HbeFrssz9onwq1fJp8wqyAkOfK3t/JXfEi1EtUjt4wLwt
MKUbfjfvMtG09Q==
-----END CERTIFICATE-----