Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/b4d9d7-6703-4b06-b3ee-07510381420a/1/9lHcmHXjXsWAxXH9BBb01fXUFYo.mft
File:                     9lHcmHXjXsWAxXH9BBb01fXUFYo.mft (raw, json)
Hash identifier:          879FstxE36+YzPDjXCKW3vfMQTkgyTbVDgDNgOnGogI=
Subject key identifier:   64:D3:15:95:D7:53:FD:23:E4:17:5A:D5:64:B5:26:A4:90:2C:79:BD
Authority key identifier: F6:51:DC:98:75:E3:5E:C5:80:C5:71:FD:04:16:F4:D5:F5:D4:15:8A
Certificate issuer:       /CN=f651dc9875e35ec580c571fd0416f4d5f5d4158a
Certificate serial:       0194BBCDF3EFB78F79DCF970D06C063EC094
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9lHcmHXjXsWAxXH9BBb01fXUFYo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0e/b4d9d7-6703-4b06-b3ee-07510381420a/1/9lHcmHXjXsWAxXH9BBb01fXUFYo.mft
Manifest number:          121D
Signing time:             Fri 31 Jan 2025 10:00:24 +0000
Manifest this update:     Fri 31 Jan 2025 10:00:24 +0000
Manifest next update:     Sat 01 Feb 2025 10:00:24 +0000
Files and hashes:         1: 9lHcmHXjXsWAxXH9BBb01fXUFYo.crl (hash: N+giUjwILK14b82mK3jh8ALPUZdlCmT4ryn4eR5o8io=)
                          2: BiMv8HqHvhESPjdfNiZspDWMcck.roa (hash: VDtYCMJvov6A+4AQvfrZcV5PKPedCXfg7qI6T/gVIIY=)
                          3: Hzds528Tcf94jO1Zeb2KN2vDYd0.roa (hash: rE5fdWY1nAX/lcPA1uobJyvYvLRyY7jbxJyC3np6MSc=)
                          4: Ss5v8qqCfPgnwpyM50tDxRLgrEE.roa (hash: hD0+G5MXyDM1luyb7ODeIqLQR1bD/LfiGebJK14aPaI=)
                          5: id6tq9B8Miy7wJM6L5HxddzH87k.roa (hash: oCe30Ut+jcQoEpHEArIn6mGQ5oeRKOfvgjQV4Jelj2s=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bb:cd:f3:ef:b7:8f:79:dc:f9:70:d0:6c:06:3e:c0:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f651dc9875e35ec580c571fd0416f4d5f5d4158a
        Validity
            Not Before: Jan 31 10:00:24 2025 GMT
            Not After : Feb  1 10:00:24 2025 GMT
        Subject: CN=64d31595d753fd23e4175ad564b526a4902c79bd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:51:e2:b5:f7:da:9f:54:f2:c2:bb:6f:72:eb:
                    0c:ad:e0:5f:9e:76:59:b4:2f:3d:62:da:26:10:89:
                    64:fb:f9:b6:bf:21:e5:4c:24:04:a4:de:4a:ff:e8:
                    b3:ea:7e:1c:7e:72:77:b3:5a:11:e3:b5:e0:8c:24:
                    6e:5c:66:19:ac:48:7b:7f:ff:16:3f:f8:77:db:9d:
                    22:84:41:82:e4:ba:54:1e:ad:70:45:51:f9:c9:20:
                    4a:22:71:79:76:7d:83:95:ac:37:3f:f1:e6:7b:48:
                    c5:b3:7c:f5:38:2b:f5:e6:eb:6c:3f:35:df:ab:e8:
                    4a:12:7b:a0:49:d0:8f:25:68:3f:9a:46:e0:31:5f:
                    6b:6e:53:5d:e2:0e:ef:1d:7c:fa:ba:a1:9a:e3:ab:
                    0a:e9:8f:12:09:04:d1:1b:58:bf:a6:db:69:1f:37:
                    ac:41:5e:79:77:41:42:86:3f:ac:1d:d4:67:61:9c:
                    80:ef:d9:89:7a:d1:8d:2f:de:27:d1:a8:98:b0:48:
                    a9:53:cb:c8:21:29:93:71:46:0e:0a:09:cb:d1:af:
                    ac:1c:7c:cf:78:68:82:6c:c9:cd:50:bb:e3:5d:7d:
                    90:f7:56:c2:9a:09:3d:ab:f1:a5:65:b4:29:c7:9e:
                    0c:0c:46:8a:2b:e2:2c:c6:33:cf:02:8e:12:cb:99:
                    a8:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:D3:15:95:D7:53:FD:23:E4:17:5A:D5:64:B5:26:A4:90:2C:79:BD
            X509v3 Authority Key Identifier:
                keyid:F6:51:DC:98:75:E3:5E:C5:80:C5:71:FD:04:16:F4:D5:F5:D4:15:8A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9lHcmHXjXsWAxXH9BBb01fXUFYo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/b4d9d7-6703-4b06-b3ee-07510381420a/1/9lHcmHXjXsWAxXH9BBb01fXUFYo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/b4d9d7-6703-4b06-b3ee-07510381420a/1/9lHcmHXjXsWAxXH9BBb01fXUFYo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:36:e0:c8:74:dc:fe:60:d6:26:c5:b1:44:27:0a:6e:8b:8a:
         38:d5:31:37:1c:25:4a:25:b5:78:d0:8a:40:31:7a:24:11:47:
         a6:9b:78:3c:7a:93:16:03:26:66:7a:0e:f2:75:ef:ad:83:fd:
         7e:8e:ad:1a:0f:09:2f:39:76:ab:6c:f6:01:a5:1d:13:fe:9e:
         12:5f:36:ea:51:5e:e4:d0:2f:79:91:4c:78:3c:b7:47:10:56:
         60:d3:e3:41:af:ee:7c:17:1c:33:8d:5a:04:e4:62:8f:e0:19:
         21:87:b4:fc:db:f6:63:cc:f4:61:f8:22:2f:17:f2:36:18:7e:
         49:aa:87:65:3f:be:65:62:d1:65:97:06:3b:27:29:78:da:23:
         bb:3f:6a:c7:b9:b7:58:ea:ac:c0:58:74:3a:15:ed:a1:f9:70:
         2f:4f:ff:a1:fe:b0:41:4e:9a:08:fd:dd:e8:c4:29:f6:79:5d:
         b4:64:bc:6a:d5:3d:13:7f:3e:91:73:81:14:79:dd:f1:47:c1:
         8d:2d:75:b3:79:b4:db:75:87:74:05:69:0c:d6:41:6c:43:c7:
         e2:c7:8d:0d:9a:4b:b1:65:77:74:f5:74:a0:e9:51:d7:8f:eb:
         9e:9a:fb:ea:6a:bd:db:56:94:a6:93:53:39:3d:9c:81:e0:78:
         19:6e:1f:7d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS7zfPvt4953Plw0GwGPsCUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY2NTFkYzk4NzVlMzVlYzU4MGM1NzFmZDA0MTZmNGQ1ZjVk
NDE1OGEwHhcNMjUwMTMxMTAwMDI0WhcNMjUwMjAxMTAwMDI0WjAzMTEwLwYDVQQD
Eyg2NGQzMTU5NWQ3NTNmZDIzZTQxNzVhZDU2NGI1MjZhNDkwMmM3OWJkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAslHitffan1TywrtvcusMreBfnnZZ
tC89YtomEIlk+/m2vyHlTCQEpN5K/+iz6n4cfnJ3s1oR47XgjCRuXGYZrEh7f/8W
P/h3250ihEGC5LpUHq1wRVH5ySBKInF5dn2Dlaw3P/Hme0jFs3z1OCv15utsPzXf
q+hKEnugSdCPJWg/mkbgMV9rblNd4g7vHXz6uqGa46sK6Y8SCQTRG1i/pttpHzes
QV55d0FChj+sHdRnYZyA79mJetGNL94n0aiYsEipU8vIISmTcUYOCgnL0a+sHHzP
eGiCbMnNULvjXX2Q91bCmgk9q/GlZbQpx54MDEaKK+IsxjPPAo4Sy5mogwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGTTFZXXU/0j5Bda1WS1JqSQLHm9MB8GA1UdIwQY
MBaAFPZR3Jh1417FgMVx/QQW9NX11BWKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOWxIY21IWGpYc1dBeFhIOUJCYjAxZlhVRllvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS9iNGQ5ZDctNjcwMy00YjA2LWIzZWUt
MDc1MTAzODE0MjBhLzEvOWxIY21IWGpYc1dBeFhIOUJCYjAxZlhVRllvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZS9iNGQ5ZDctNjcwMy00YjA2LWIzZWUtMDc1MTAzODE0MjBh
LzEvOWxIY21IWGpYc1dBeFhIOUJCYjAxZlhVRllvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEDbgyHTc
/mDWJsWxRCcKbouKONUxNxwlSiW1eNCKQDF6JBFHppt4PHqTFgMmZnoO8nXvrYP9
fo6tGg8JLzl2q2z2AaUdE/6eEl826lFe5NAveZFMeDy3RxBWYNPjQa/ufBccM41a
BORij+AZIYe0/Nv2Y8z0YfgiLxfyNhh+SaqHZT++ZWLRZZcGOycpeNojuz9qx7m3
WOqswFh0OhXtoflwL0//of6wQU6aCP3d6MQp9nldtGS8atU9E38+kXOBFHnd8UfB
jS11s3m023WHdAVpDNZBbEPH4seNDZpLsWV3dPV0oOlR14/rnpr76mq921aUppNT
OT2cgeB4GW4ffQ==
-----END CERTIFICATE-----