Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/1f3712-cf2c-486e-95b3-fcc336eed8d7/1/ssC9r63qeNzjEvhi3fQrG9TE9kU.mft
File:                     ssC9r63qeNzjEvhi3fQrG9TE9kU.mft (raw, json)
Hash identifier:          tg/WfVe7QgHqtgnjjIEE1EvzvQR2iBIkiP4zwNvslGw=
Subject key identifier:   2B:F2:EC:1F:E1:5B:F0:FD:2A:8A:D3:5B:08:B2:70:CB:2B:D5:D9:7F
Authority key identifier: B2:C0:BD:AF:AD:EA:78:DC:E3:12:F8:62:DD:F4:2B:1B:D4:C4:F6:45
Certificate issuer:       /CN=b2c0bdafadea78dce312f862ddf42b1bd4c4f645
Certificate serial:       0194BC3BDB65F67E07AF0EE4D66F5D7804F1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ssC9r63qeNzjEvhi3fQrG9TE9kU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/08/1f3712-cf2c-486e-95b3-fcc336eed8d7/1/ssC9r63qeNzjEvhi3fQrG9TE9kU.mft
Manifest number:          0D96
Signing time:             Fri 31 Jan 2025 12:00:26 +0000
Manifest this update:     Fri 31 Jan 2025 12:00:26 +0000
Manifest next update:     Sat 01 Feb 2025 12:00:26 +0000
Files and hashes:         1: BUh_rx5BwPP9WJuIUh0RZwxkJpE.roa (hash: IYv+BLJy9Aefvb0ixLXovLJ47AdO9dCCGn7Z42eNgho=)
                          2: S17iBhkERDhZ8BQHX4CBUU31c6Y.roa (hash: KN0zRr09424pw0sdcVfcRSqozH46+PiFTvb656E5OJY=)
                          3: Yv-tOf_tITvZrh8RooAtxp7TK0o.roa (hash: 9Wq1a/wEw3a8Ph1i4BUMD94Q3lQzmejrav8oStD8sBc=)
                          4: ZlCnHi66TR2nKxqrLkFiA9RkNkM.roa (hash: qhU5xO91nkS+pSrqCSMtrI5jpe0dur9jR7IHIGUVNR4=)
                          5: hI46h1AVRwpuweR_qkjPXkw0O2k.roa (hash: iVTQ7975a1sIHisxSW/MFIVcaf8MKzOpFRhCojtRDhg=)
                          6: ssC9r63qeNzjEvhi3fQrG9TE9kU.crl (hash: Dzar/LcDMpp1ZgMGhVgMahLpB2W2IKD3T+ZVGnlEEbo=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:3b:db:65:f6:7e:07:af:0e:e4:d6:6f:5d:78:04:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2c0bdafadea78dce312f862ddf42b1bd4c4f645
        Validity
            Not Before: Jan 31 12:00:26 2025 GMT
            Not After : Feb  1 12:00:26 2025 GMT
        Subject: CN=2bf2ec1fe15bf0fd2a8ad35b08b270cb2bd5d97f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:46:a5:65:00:c7:b8:cc:48:f3:4e:a3:75:3d:
                    2b:b4:e2:2c:ae:7a:b0:67:5f:1b:35:e0:53:a2:28:
                    d1:0f:18:86:5a:e6:86:89:62:20:47:2c:22:c6:05:
                    72:01:1c:4a:f5:bf:a6:28:d8:40:f7:7a:85:35:47:
                    c8:91:5d:82:15:c7:71:80:26:e0:3c:31:99:44:ca:
                    4f:34:d7:19:f5:7c:e6:53:c3:1b:75:db:d3:6b:55:
                    2c:22:ec:e9:d4:cf:6d:34:bb:de:c9:66:42:58:5e:
                    3f:1e:a6:cf:7c:fc:76:3c:00:a0:59:76:72:82:01:
                    5e:7c:10:b9:bd:a6:97:5f:ce:e3:4b:8d:f1:ba:e6:
                    54:10:e3:dc:7e:f4:2c:ce:2c:47:5a:d5:21:8a:73:
                    85:22:98:27:13:de:c2:c4:75:df:dc:f9:b9:e7:27:
                    24:d2:b7:07:a8:26:cd:7f:d9:23:f7:c2:fb:56:3b:
                    84:e0:1e:95:e9:d5:ef:10:12:61:cb:82:90:4b:37:
                    e7:7a:de:ab:65:01:72:5e:e4:83:72:d4:f1:26:26:
                    a0:4f:af:44:20:8b:c1:b0:46:d0:b2:3c:62:6e:2f:
                    38:66:33:f9:29:4b:72:c9:66:93:2b:39:55:32:ea:
                    84:a4:a9:24:6a:1d:e5:25:15:80:86:38:4e:a2:6d:
                    06:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:F2:EC:1F:E1:5B:F0:FD:2A:8A:D3:5B:08:B2:70:CB:2B:D5:D9:7F
            X509v3 Authority Key Identifier:
                keyid:B2:C0:BD:AF:AD:EA:78:DC:E3:12:F8:62:DD:F4:2B:1B:D4:C4:F6:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ssC9r63qeNzjEvhi3fQrG9TE9kU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/1f3712-cf2c-486e-95b3-fcc336eed8d7/1/ssC9r63qeNzjEvhi3fQrG9TE9kU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/08/1f3712-cf2c-486e-95b3-fcc336eed8d7/1/ssC9r63qeNzjEvhi3fQrG9TE9kU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ab:4e:af:14:d1:ca:71:d4:86:3f:dd:cf:66:6a:0a:ff:20:b7:
         57:5e:8b:a0:99:04:a1:34:2e:df:9d:2e:8e:dc:a1:b0:48:1b:
         35:8f:eb:99:5b:54:0d:41:c2:d5:90:81:64:94:b3:9b:59:70:
         77:08:c4:36:c2:03:55:f9:ff:36:21:3d:e3:ab:3f:f5:1f:25:
         0e:c2:b3:28:1b:39:c3:3b:c0:7b:a5:66:5d:c4:9c:b2:ec:43:
         6a:4e:33:97:ff:25:48:a8:93:81:6f:27:a5:c2:5f:00:b3:bf:
         2a:7f:1a:42:47:c1:33:c3:3c:a7:17:bd:ff:b0:1b:a9:68:7e:
         89:92:66:d0:e1:0f:95:7e:d0:62:82:34:20:aa:d5:04:fe:6e:
         0a:b8:01:3c:39:c9:4c:4e:08:cc:6b:3e:97:15:fe:0f:62:64:
         14:97:a4:79:65:02:99:13:c7:c5:fe:87:71:6e:a0:eb:1d:e2:
         63:8d:2e:c8:05:10:d2:21:2a:ca:d6:d3:83:66:bf:7e:c5:ed:
         9e:3b:b6:94:f8:c5:ff:0e:39:b3:4e:fd:78:c2:05:b2:7b:c2:
         5f:c3:80:03:2c:b2:07:36:a7:dc:c1:23:df:98:03:f8:b8:fd:
         bd:51:d4:02:0e:af:0a:4b:81:d6:d8:e2:2b:a1:f4:ab:07:3c:
         a7:51:d9:46
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8O9tl9n4Hrw7k1m9deATxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIyYzBiZGFmYWRlYTc4ZGNlMzEyZjg2MmRkZjQyYjFiZDRj
NGY2NDUwHhcNMjUwMTMxMTIwMDI2WhcNMjUwMjAxMTIwMDI2WjAzMTEwLwYDVQQD
EygyYmYyZWMxZmUxNWJmMGZkMmE4YWQzNWIwOGIyNzBjYjJiZDVkOTdmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp0alZQDHuMxI806jdT0rtOIsrnqw
Z18bNeBToijRDxiGWuaGiWIgRywixgVyARxK9b+mKNhA93qFNUfIkV2CFcdxgCbg
PDGZRMpPNNcZ9XzmU8MbddvTa1UsIuzp1M9tNLveyWZCWF4/HqbPfPx2PACgWXZy
ggFefBC5vaaXX87jS43xuuZUEOPcfvQszixHWtUhinOFIpgnE97CxHXf3Pm55yck
0rcHqCbNf9kj98L7VjuE4B6V6dXvEBJhy4KQSzfnet6rZQFyXuSDctTxJiagT69E
IIvBsEbQsjxibi84ZjP5KUtyyWaTKzlVMuqEpKkkah3lJRWAhjhOom0GswIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCvy7B/hW/D9KorTWwiycMsr1dl/MB8GA1UdIwQY
MBaAFLLAva+t6njc4xL4Yt30KxvUxPZFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc3NDOXI2M3FlTnpqRXZoaTNmUXJHOVRFOWtVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC8xZjM3MTItY2YyYy00ODZlLTk1YjMt
ZmNjMzM2ZWVkOGQ3LzEvc3NDOXI2M3FlTnpqRXZoaTNmUXJHOVRFOWtVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOC8xZjM3MTItY2YyYy00ODZlLTk1YjMtZmNjMzM2ZWVkOGQ3
LzEvc3NDOXI2M3FlTnpqRXZoaTNmUXJHOVRFOWtVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAq06vFNHK
cdSGP93PZmoK/yC3V16LoJkEoTQu350ujtyhsEgbNY/rmVtUDUHC1ZCBZJSzm1lw
dwjENsIDVfn/NiE946s/9R8lDsKzKBs5wzvAe6VmXcScsuxDak4zl/8lSKiTgW8n
pcJfALO/Kn8aQkfBM8M8pxe9/7AbqWh+iZJm0OEPlX7QYoI0IKrVBP5uCrgBPDnJ
TE4IzGs+lxX+D2JkFJekeWUCmRPHxf6HcW6g6x3iY40uyAUQ0iEqytbTg2a/fsXt
nju2lPjF/w45s079eMIFsnvCX8OAAyyyBzan3MEj35gD+Lj9vVHUAg6vCkuB1tji
K6H0qwc8p1HZRg==
-----END CERTIFICATE-----