Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/baef57-c484-4523-b14e-88ebbf99780b/1/DpHeF0N6ACX9Ht4Q9xDxejCAs6s.mft
File:                     DpHeF0N6ACX9Ht4Q9xDxejCAs6s.mft (raw, json)
Hash identifier:          nTGF5+IQf1I/RfublIUK9a7qeSxZOioXedmym0N4lSk=
Subject key identifier:   E1:FE:66:91:ED:57:46:09:B5:BA:BB:7E:26:1C:28:5A:2E:5B:C9:A6
Authority key identifier: 0E:91:DE:17:43:7A:00:25:FD:1E:DE:10:F7:10:F1:7A:30:80:B3:AB
Certificate issuer:       /CN=0e91de17437a0025fd1ede10f710f17a3080b3ab
Certificate serial:       0194BC72CE3929D394606B1A7B292E822EE3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DpHeF0N6ACX9Ht4Q9xDxejCAs6s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/15/baef57-c484-4523-b14e-88ebbf99780b/1/DpHeF0N6ACX9Ht4Q9xDxejCAs6s.mft
Manifest number:          1118
Signing time:             Fri 31 Jan 2025 13:00:27 +0000
Manifest this update:     Fri 31 Jan 2025 13:00:27 +0000
Manifest next update:     Sat 01 Feb 2025 13:00:27 +0000
Files and hashes:         1: DpHeF0N6ACX9Ht4Q9xDxejCAs6s.crl (hash: jTv8nYEJoEl7WWpA2UYQVh0uPhzCzAYHZxzJ4OAOhOk=)
                          2: JO9p7ll9zISZm_xFhXLEAHl9qVY.roa (hash: 0DU1k9iGKTCSkZjHepyU1MLXd84qinXMdi3Y0J9F55E=)
                          3: Nkr_GlprDZw9lnWd52PmBmd7vrQ.roa (hash: 9YHLm9DxE2hQJ58if++TORCN8vsnbZqNWmb+Zklfpt4=)
                          4: YG7S_BKbYfU6SUjYOo1Qwa6UIis.roa (hash: Jrnsr/C5NjCKGrVhAZ6DhSLYahtukJ6T9Dv6tWtZGv4=)
                          5: ZXngKU01a_kjXn9mpqf40kcafVA.roa (hash: 8RfkCh0AjrRQHRpm6NpNuh0rqzoYMIsu54leaUMRXA4=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:72:ce:39:29:d3:94:60:6b:1a:7b:29:2e:82:2e:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0e91de17437a0025fd1ede10f710f17a3080b3ab
        Validity
            Not Before: Jan 31 13:00:27 2025 GMT
            Not After : Feb  1 13:00:27 2025 GMT
        Subject: CN=e1fe6691ed574609b5babb7e261c285a2e5bc9a6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:a5:53:7b:60:0c:81:69:97:57:b6:3c:18:ca:
                    d8:31:13:70:8f:02:83:6c:78:36:b2:3a:85:05:84:
                    88:90:a2:cf:0b:03:9a:af:f0:ea:18:a4:6c:f1:b7:
                    0f:81:1f:ca:e2:4f:c4:c9:e5:f9:80:b9:7d:d4:a7:
                    1d:38:47:51:b0:ba:8d:37:01:c4:97:42:4d:8a:9b:
                    a1:f6:92:08:fd:2a:2c:73:38:12:34:6f:96:86:d0:
                    bf:b0:10:2f:63:ce:15:73:c3:03:c2:f3:5a:d6:77:
                    34:bb:a2:5f:22:3f:ac:74:1a:f3:0c:ca:1e:44:ad:
                    89:84:ff:6b:9e:a1:4f:96:6f:f6:bb:f9:aa:b8:7f:
                    6c:8a:51:76:57:3f:ed:64:ec:44:12:ed:68:7f:4b:
                    f6:fa:f5:52:9f:31:8a:ec:0d:a2:71:72:c8:4d:02:
                    45:56:a4:22:a0:7e:99:9f:dd:e7:aa:9a:05:7d:bc:
                    de:18:13:70:b3:f0:f3:3d:c2:e1:6b:ec:73:00:3b:
                    17:95:32:6f:bc:62:d9:3f:4b:63:98:9b:9b:f5:ea:
                    ea:e8:75:ca:53:41:95:c5:96:b2:6e:a3:5d:01:85:
                    e5:16:01:d1:1b:a1:1e:f7:65:fc:0c:ce:08:05:f4:
                    20:70:35:e0:e1:bc:4d:00:32:28:47:60:0c:de:6b:
                    fc:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:FE:66:91:ED:57:46:09:B5:BA:BB:7E:26:1C:28:5A:2E:5B:C9:A6
            X509v3 Authority Key Identifier:
                keyid:0E:91:DE:17:43:7A:00:25:FD:1E:DE:10:F7:10:F1:7A:30:80:B3:AB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DpHeF0N6ACX9Ht4Q9xDxejCAs6s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/baef57-c484-4523-b14e-88ebbf99780b/1/DpHeF0N6ACX9Ht4Q9xDxejCAs6s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/15/baef57-c484-4523-b14e-88ebbf99780b/1/DpHeF0N6ACX9Ht4Q9xDxejCAs6s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:57:d2:2b:16:8e:e9:cb:f5:df:ee:8e:c7:34:50:43:9e:ec:
         a6:31:ba:68:e6:af:24:d7:67:a1:ce:6b:d5:ee:71:d0:c4:2d:
         f9:ba:cf:ba:cd:9d:5f:a7:ec:4e:cb:e3:ce:63:6b:7b:8f:b5:
         1f:b6:31:4c:ad:f7:10:38:70:ec:27:42:2f:c7:5d:6a:d6:1d:
         77:56:67:dc:78:a5:8e:6e:fd:1b:85:72:49:19:5b:49:05:d0:
         14:80:99:c3:de:a6:46:74:9b:7c:38:a2:60:27:d5:f8:90:9d:
         9c:8b:e2:87:02:e9:21:85:65:e9:0b:6e:b3:8d:a5:3f:ff:2b:
         84:0b:b7:4f:29:9b:92:e2:e0:45:6a:40:bd:4c:3f:5c:47:01:
         8c:2b:48:86:45:43:0f:42:c4:64:e2:97:23:12:28:e6:00:9d:
         06:83:5e:09:f2:c8:14:f4:7d:38:ad:dd:31:6b:fe:4b:40:b3:
         8d:56:a6:09:e9:8d:cf:ac:ea:8c:4a:47:5d:4c:f1:2b:d0:63:
         fc:02:cd:61:18:f9:4b:b8:80:51:e6:ce:bb:0e:70:a5:12:6f:
         28:8a:06:4d:63:25:80:05:e7:55:0a:8c:c1:8a:79:2c:d2:b0:
         d9:bd:41:f5:14:14:54:51:4f:e5:c8:9a:c9:8b:01:74:60:61:
         52:68:b2:cb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8cs45KdOUYGsaeykugi7jMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBlOTFkZTE3NDM3YTAwMjVmZDFlZGUxMGY3MTBmMTdhMzA4
MGIzYWIwHhcNMjUwMTMxMTMwMDI3WhcNMjUwMjAxMTMwMDI3WjAzMTEwLwYDVQQD
EyhlMWZlNjY5MWVkNTc0NjA5YjViYWJiN2UyNjFjMjg1YTJlNWJjOWE2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy6VTe2AMgWmXV7Y8GMrYMRNwjwKD
bHg2sjqFBYSIkKLPCwOar/DqGKRs8bcPgR/K4k/EyeX5gLl91KcdOEdRsLqNNwHE
l0JNipuh9pII/SosczgSNG+WhtC/sBAvY84Vc8MDwvNa1nc0u6JfIj+sdBrzDMoe
RK2JhP9rnqFPlm/2u/mquH9silF2Vz/tZOxEEu1of0v2+vVSnzGK7A2icXLITQJF
VqQioH6Zn93nqpoFfbzeGBNws/DzPcLha+xzADsXlTJvvGLZP0tjmJub9erq6HXK
U0GVxZaybqNdAYXlFgHRG6Ee92X8DM4IBfQgcDXg4bxNADIoR2AM3mv8jQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOH+ZpHtV0YJtbq7fiYcKFouW8mmMB8GA1UdIwQY
MBaAFA6R3hdDegAl/R7eEPcQ8XowgLOrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRHBIZUYwTjZBQ1g5SHQ0UTl4RHhlakNBczZzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS9iYWVmNTctYzQ4NC00NTIzLWIxNGUt
ODhlYmJmOTk3ODBiLzEvRHBIZUYwTjZBQ1g5SHQ0UTl4RHhlakNBczZzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNS9iYWVmNTctYzQ4NC00NTIzLWIxNGUtODhlYmJmOTk3ODBi
LzEvRHBIZUYwTjZBQ1g5SHQ0UTl4RHhlakNBczZzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAlfSKxaO
6cv13+6OxzRQQ57spjG6aOavJNdnoc5r1e5x0MQt+brPus2dX6fsTsvjzmNre4+1
H7YxTK33EDhw7CdCL8ddatYdd1Zn3Hiljm79G4VySRlbSQXQFICZw96mRnSbfDii
YCfV+JCdnIvihwLpIYVl6Qtus42lP/8rhAu3TymbkuLgRWpAvUw/XEcBjCtIhkVD
D0LEZOKXIxIo5gCdBoNeCfLIFPR9OK3dMWv+S0CzjVamCemNz6zqjEpHXUzxK9Bj
/ALNYRj5S7iAUebOuw5wpRJvKIoGTWMlgAXnVQqMwYp5LNKw2b1B9RQUVFFP5cia
yYsBdGBhUmiyyw==
-----END CERTIFICATE-----