Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/421529-73e2-4916-8bd2-2c201d30ae05/1/0Xv0--qJT0Pus9sbIW5Xdm4Bq4E.mft
File:                     0Xv0--qJT0Pus9sbIW5Xdm4Bq4E.mft (raw, json)
Hash identifier:          tYOFwRy6A1rKqxFrne3wNzMntkUUnPHtjIjf8JXOMQU=
Subject key identifier:   F6:95:F2:32:C2:7D:76:D2:CF:31:BB:79:1C:EB:88:B4:20:2D:D9:87
Authority key identifier: D1:7B:F4:FB:EA:89:4F:43:EE:B3:DB:1B:21:6E:57:76:6E:01:AB:81
Certificate issuer:       /CN=d17bf4fbea894f43eeb3db1b216e57766e01ab81
Certificate serial:       0194BD858D753232EF58414B6A58AD4370FA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0Xv0--qJT0Pus9sbIW5Xdm4Bq4E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1c/421529-73e2-4916-8bd2-2c201d30ae05/1/0Xv0--qJT0Pus9sbIW5Xdm4Bq4E.mft
Manifest number:          0E01
Signing time:             Fri 31 Jan 2025 18:00:33 +0000
Manifest this update:     Fri 31 Jan 2025 18:00:33 +0000
Manifest next update:     Sat 01 Feb 2025 18:00:33 +0000
Files and hashes:         1: 0Xv0--qJT0Pus9sbIW5Xdm4Bq4E.crl (hash: kCeiXoSm47ybgMpxKkRL5T0QL+wtumafacR+ZmBHw48=)
                          2: MMUTpzHJDvP8m90rkKx4rRT5Pvs.roa (hash: 0qwECbWF3VMGBC2LqqWsoaxdyHvDL7eVoZEYdOt0I84=)
                          3: NibkP4WwhFNgZ640yvtXLfFiJrg.roa (hash: a/esbL59f+nmLVH7R2fnAmETOkLcHJ2GIe7zJ0dWkJ0=)
                          4: rUM43ISndw5pYAQLWf2KHIAwsfw.roa (hash: KeqCps5BUoZfWz/djUGV6w2EVQtKO+PPXxPc78g2vTo=)
                          5: xi9oGHAZGsjdKybpmWD7Ku8W0ZM.roa (hash: 5sRqk+0ypVIu7UFoyuyrbtTdv9EciH6vt3GDL2ydd68=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bd:85:8d:75:32:32:ef:58:41:4b:6a:58:ad:43:70:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d17bf4fbea894f43eeb3db1b216e57766e01ab81
        Validity
            Not Before: Jan 31 18:00:33 2025 GMT
            Not After : Feb  1 18:00:33 2025 GMT
        Subject: CN=f695f232c27d76d2cf31bb791ceb88b4202dd987
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:95:1b:9f:cd:f2:fb:e7:a3:1f:a9:32:79:20:
                    df:fb:c2:89:d2:4a:4b:1b:4e:6b:99:00:76:82:32:
                    71:eb:bf:3a:d5:90:1e:9a:62:f2:7a:9d:29:8e:15:
                    5c:31:39:4d:8d:6c:4e:43:42:3e:27:3d:8d:14:b9:
                    76:95:8a:ca:ca:ee:40:78:9c:a5:a9:7b:e3:ae:5d:
                    bc:12:2b:14:41:89:fb:35:b2:03:e6:00:77:d7:0e:
                    81:0b:32:aa:e0:a4:be:87:bc:15:4d:ef:3c:ec:51:
                    8b:f9:ed:e1:ff:e9:8d:55:c4:e8:9b:92:0e:53:ec:
                    57:04:b9:6e:2f:92:61:00:d1:c5:f9:23:bb:ff:09:
                    89:19:bb:2a:ac:48:eb:c5:d3:26:cc:51:bb:74:70:
                    0d:b7:25:60:ed:8f:ec:fe:8d:f7:d9:af:09:52:ca:
                    4a:64:37:37:b1:67:97:d3:b3:14:43:8a:15:b9:c1:
                    b8:eb:a7:3e:64:17:ba:18:3c:21:ec:5f:6e:d5:0f:
                    8a:a6:51:26:6a:19:de:c1:97:08:cf:21:18:10:ce:
                    b3:1d:f3:c3:c4:9d:1c:ef:f9:0c:c6:7e:65:ac:14:
                    a8:f5:ec:04:7e:f6:2e:99:92:a8:ac:0f:96:ad:dd:
                    2d:4f:60:0c:8c:f6:78:fb:72:26:07:d3:9f:15:91:
                    aa:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:95:F2:32:C2:7D:76:D2:CF:31:BB:79:1C:EB:88:B4:20:2D:D9:87
            X509v3 Authority Key Identifier:
                keyid:D1:7B:F4:FB:EA:89:4F:43:EE:B3:DB:1B:21:6E:57:76:6E:01:AB:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Xv0--qJT0Pus9sbIW5Xdm4Bq4E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/421529-73e2-4916-8bd2-2c201d30ae05/1/0Xv0--qJT0Pus9sbIW5Xdm4Bq4E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/421529-73e2-4916-8bd2-2c201d30ae05/1/0Xv0--qJT0Pus9sbIW5Xdm4Bq4E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:81:09:59:9e:9d:64:41:01:56:7f:cd:83:80:a3:bc:7c:4c:
         a8:7a:99:3d:47:39:ce:d2:a9:86:ce:8b:fc:dc:01:07:5a:59:
         e1:e3:b5:69:96:ec:70:0f:5a:87:bb:09:dc:22:fc:52:78:c4:
         9d:32:8d:98:e4:8e:76:2a:0b:b3:c5:bb:74:29:06:2e:4a:23:
         04:b4:da:a0:6d:68:e7:4c:28:d9:87:e4:f7:d2:15:64:46:74:
         ca:d1:47:56:4f:ed:6e:02:7c:9a:5a:ae:41:33:17:74:c0:ec:
         f8:55:d3:12:2d:4c:d6:64:b5:ef:21:8a:08:f3:45:a9:92:ea:
         f8:80:93:cf:39:d3:74:39:ed:a7:6d:93:32:1c:20:40:3d:e6:
         4e:e8:69:e4:2c:41:7b:14:e1:d8:1f:b1:e5:1a:d8:8d:f7:ea:
         a6:56:9e:12:78:c6:40:2e:85:2c:6a:63:80:d6:aa:8f:b1:2d:
         f9:26:34:c7:d9:e1:ea:f3:cd:96:e1:97:96:23:e5:e0:13:0a:
         58:dc:ae:fa:b1:f2:79:31:9a:27:1c:17:95:88:cd:07:41:c8:
         b8:71:4c:6a:64:12:ab:0a:87:4a:21:d1:06:c9:d3:e7:84:ca:
         c6:d4:13:bb:fe:8a:ea:1c:84:f4:c3:8f:4e:3f:50:12:b9:b6:
         74:9a:4c:18
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9hY11MjLvWEFLalitQ3D6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQxN2JmNGZiZWE4OTRmNDNlZWIzZGIxYjIxNmU1Nzc2NmUw
MWFiODEwHhcNMjUwMTMxMTgwMDMzWhcNMjUwMjAxMTgwMDMzWjAzMTEwLwYDVQQD
EyhmNjk1ZjIzMmMyN2Q3NmQyY2YzMWJiNzkxY2ViODhiNDIwMmRkOTg3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuJUbn83y++ejH6kyeSDf+8KJ0kpL
G05rmQB2gjJx67861ZAemmLyep0pjhVcMTlNjWxOQ0I+Jz2NFLl2lYrKyu5AeJyl
qXvjrl28EisUQYn7NbID5gB31w6BCzKq4KS+h7wVTe887FGL+e3h/+mNVcTom5IO
U+xXBLluL5JhANHF+SO7/wmJGbsqrEjrxdMmzFG7dHANtyVg7Y/s/o332a8JUspK
ZDc3sWeX07MUQ4oVucG466c+ZBe6GDwh7F9u1Q+KplEmahnewZcIzyEYEM6zHfPD
xJ0c7/kMxn5lrBSo9ewEfvYumZKorA+Wrd0tT2AMjPZ4+3ImB9OfFZGq4wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPaV8jLCfXbSzzG7eRzriLQgLdmHMB8GA1UdIwQY
MBaAFNF79PvqiU9D7rPbGyFuV3ZuAauBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMFh2MC0tcUpUMFB1czlzYklXNVhkbTRCcTRFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy80MjE1MjktNzNlMi00OTE2LThiZDIt
MmMyMDFkMzBhZTA1LzEvMFh2MC0tcUpUMFB1czlzYklXNVhkbTRCcTRFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYy80MjE1MjktNzNlMi00OTE2LThiZDItMmMyMDFkMzBhZTA1
LzEvMFh2MC0tcUpUMFB1czlzYklXNVhkbTRCcTRFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXYEJWZ6d
ZEEBVn/Ng4CjvHxMqHqZPUc5ztKphs6L/NwBB1pZ4eO1aZbscA9ah7sJ3CL8UnjE
nTKNmOSOdioLs8W7dCkGLkojBLTaoG1o50wo2Yfk99IVZEZ0ytFHVk/tbgJ8mlqu
QTMXdMDs+FXTEi1M1mS17yGKCPNFqZLq+ICTzznTdDntp22TMhwgQD3mTuhp5CxB
exTh2B+x5RrYjffqplaeEnjGQC6FLGpjgNaqj7Et+SY0x9nh6vPNluGXliPl4BMK
WNyu+rHyeTGaJxwXlYjNB0HIuHFMamQSqwqHSiHRBsnT54TKxtQTu/6K6hyE9MOP
Tj9QErm2dJpMGA==
-----END CERTIFICATE-----