Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/fd8457-810f-4f7e-9e58-56cc39db6ed6/1/xZvR6MWPZBvZRDBfEcVO_l86DOI.mft
File:                     xZvR6MWPZBvZRDBfEcVO_l86DOI.mft (raw, json)
Hash identifier:          1oWlTQ6G4ZkBotthQcDUbxJkvLQiDNRZ4GApm586FR8=
Subject key identifier:   5B:F5:96:89:30:D0:95:8D:7B:98:E5:71:EC:63:4B:91:43:F2:E4:4D
Authority key identifier: C5:9B:D1:E8:C5:8F:64:1B:D9:44:30:5F:11:C5:4E:FE:5F:3A:0C:E2
Certificate issuer:       /CN=c59bd1e8c58f641bd944305f11c54efe5f3a0ce2
Certificate serial:       0194BD85BFACE629E22F0E4FBFC0DB35E030
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xZvR6MWPZBvZRDBfEcVO_l86DOI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2f/fd8457-810f-4f7e-9e58-56cc39db6ed6/1/xZvR6MWPZBvZRDBfEcVO_l86DOI.mft
Manifest number:          1445
Signing time:             Fri 31 Jan 2025 18:00:46 +0000
Manifest this update:     Fri 31 Jan 2025 18:00:46 +0000
Manifest next update:     Sat 01 Feb 2025 18:00:46 +0000
Files and hashes:         1: AGkNk2ZYDTGltyEXWoEVhtwt9oY.roa (hash: dlqvyvQ8Rvf4T+DKyr3OY+YZh3rtTCxaYzwHy40bMgA=)
                          2: BG-IwhP94ukLbxm2X3VxR4W5Nbc.roa (hash: 8rlyAUIx0xWV/NVKgvLdoyGMltHPy6j1FAqFmhNaiKg=)
                          3: H0yf0Oo2kc1vuXQI2C2XHgJR1UA.roa (hash: +TduWsFWrzOECmrsJ1U+XZI1HDNWMV9mx9iurejnLIs=)
                          4: NGphx2qhBW9gE8CfDHfoJNe6mG0.roa (hash: ECnwkjX75lQ4kRJVM7O1TZuPUXkcSD/08JlEytcC2F8=)
                          5: l6NuhpIFjug9aR50hHY9zndshII.roa (hash: hvqFGCQClSUIMBrBN8lIb1eSZFaogGVgQNbsBPhOLY4=)
                          6: x8oJQTfAeK1iKs6V2WIBXaP_KkA.roa (hash: QbXY2Tb77ubW4cEqf4OT4R8lgNbOTeEn0+JYFvUx4Qs=)
                          7: xZvR6MWPZBvZRDBfEcVO_l86DOI.crl (hash: vO1inXvc6fDFri3YlvdptDwxMmsazzmF//K47TCn0rA=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bd:85:bf:ac:e6:29:e2:2f:0e:4f:bf:c0:db:35:e0:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c59bd1e8c58f641bd944305f11c54efe5f3a0ce2
        Validity
            Not Before: Jan 31 18:00:46 2025 GMT
            Not After : Feb  1 18:00:46 2025 GMT
        Subject: CN=5bf5968930d0958d7b98e571ec634b9143f2e44d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:b3:39:ea:76:67:09:90:6c:7d:0a:13:b7:99:
                    c4:63:11:6f:ba:22:d2:ea:b7:9a:4c:f2:0b:b3:9b:
                    7f:ee:db:79:34:33:4d:b3:2e:08:00:ab:fb:80:ae:
                    02:cf:c3:7c:eb:e8:91:c5:89:66:91:d2:58:27:cf:
                    14:cc:a0:2b:7a:76:b5:2c:95:5d:c0:12:34:5c:e6:
                    6d:ac:68:ea:c8:9e:21:e0:46:b3:45:b1:5e:26:44:
                    f7:7b:9c:bf:50:cd:2c:4c:74:6d:20:d1:06:4a:e6:
                    fd:5b:45:fa:8d:5f:5f:d2:52:7f:3a:d1:b6:0e:35:
                    45:cb:f0:54:e4:10:b5:dc:57:e4:4a:6c:8a:75:83:
                    2f:36:23:96:ab:9d:d1:99:f3:dd:e7:31:b0:2f:8b:
                    39:24:1f:0a:05:ea:e3:9d:e5:8c:5d:82:c6:dd:8b:
                    ca:d0:75:0c:ec:7f:9c:99:dc:3c:d2:ee:10:5a:da:
                    a3:8f:92:84:6f:25:e4:41:85:db:45:f0:80:73:94:
                    b0:ef:91:c2:2b:9d:08:8a:7f:9f:60:2f:e9:68:48:
                    37:29:b8:92:73:af:69:c7:4e:e9:6b:e8:cd:21:9c:
                    fe:fd:29:c1:6f:8b:51:fc:21:8e:10:43:13:e7:05:
                    a8:b7:17:d8:0f:79:a1:c3:33:74:b8:61:e4:b1:9a:
                    a0:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:F5:96:89:30:D0:95:8D:7B:98:E5:71:EC:63:4B:91:43:F2:E4:4D
            X509v3 Authority Key Identifier:
                keyid:C5:9B:D1:E8:C5:8F:64:1B:D9:44:30:5F:11:C5:4E:FE:5F:3A:0C:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xZvR6MWPZBvZRDBfEcVO_l86DOI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/fd8457-810f-4f7e-9e58-56cc39db6ed6/1/xZvR6MWPZBvZRDBfEcVO_l86DOI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/fd8457-810f-4f7e-9e58-56cc39db6ed6/1/xZvR6MWPZBvZRDBfEcVO_l86DOI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:6a:cf:55:5b:e9:c7:0f:2f:fd:20:bb:17:eb:69:dc:bc:f5:
         23:2a:0e:e5:dc:ef:b4:43:70:bb:17:f6:8c:9b:0a:1d:0f:bc:
         d4:7d:23:50:96:56:fb:11:1a:21:3f:13:2c:81:a7:b4:f3:aa:
         0b:9b:1e:51:8a:5e:b8:23:5d:00:8a:ca:5d:8a:47:24:a0:29:
         72:c6:a3:c4:a8:64:31:3a:9b:25:00:5f:0f:d5:28:a6:42:85:
         3a:7d:de:8f:7a:76:c0:e3:a9:19:62:34:13:b3:dd:5a:da:69:
         0c:b8:fc:f8:ca:3a:c0:79:d2:4d:63:75:79:26:dc:6a:98:7b:
         72:a1:0b:24:78:cd:43:21:9b:d9:7a:b4:71:23:fa:4f:9e:16:
         73:ac:eb:cc:ae:bc:98:0b:c9:44:a6:9e:5d:af:9c:8a:e3:32:
         28:b0:1c:d4:bb:8c:88:83:41:6b:50:69:d1:3f:16:f4:e8:ff:
         3a:66:06:ae:ba:34:c6:fa:a7:be:11:52:4c:55:50:43:ec:5e:
         e8:5d:f6:6c:0a:07:4d:10:3f:75:ee:fb:b1:57:92:e7:da:26:
         bd:1d:37:95:36:4c:7e:e2:db:76:4a:10:7e:c7:a6:22:8f:68:
         e2:aa:60:4a:b0:85:64:49:23:ef:e1:ba:48:af:88:a0:5c:d1:
         eb:92:d3:e0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9hb+s5iniLw5Pv8DbNeAwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM1OWJkMWU4YzU4ZjY0MWJkOTQ0MzA1ZjExYzU0ZWZlNWYz
YTBjZTIwHhcNMjUwMTMxMTgwMDQ2WhcNMjUwMjAxMTgwMDQ2WjAzMTEwLwYDVQQD
Eyg1YmY1OTY4OTMwZDA5NThkN2I5OGU1NzFlYzYzNGI5MTQzZjJlNDRkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxLM56nZnCZBsfQoTt5nEYxFvuiLS
6reaTPILs5t/7tt5NDNNsy4IAKv7gK4Cz8N86+iRxYlmkdJYJ88UzKArena1LJVd
wBI0XOZtrGjqyJ4h4EazRbFeJkT3e5y/UM0sTHRtINEGSub9W0X6jV9f0lJ/OtG2
DjVFy/BU5BC13FfkSmyKdYMvNiOWq53RmfPd5zGwL4s5JB8KBerjneWMXYLG3YvK
0HUM7H+cmdw80u4QWtqjj5KEbyXkQYXbRfCAc5Sw75HCK50Iin+fYC/paEg3KbiS
c69px07pa+jNIZz+/SnBb4tR/CGOEEMT5wWotxfYD3mhwzN0uGHksZqgkwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFv1lokw0JWNe5jlcexjS5FD8uRNMB8GA1UdIwQY
MBaAFMWb0ejFj2Qb2UQwXxHFTv5fOgziMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveFp2UjZNV1BaQnZaUkRCZkVjVk9fbDg2RE9JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZi9mZDg0NTctODEwZi00ZjdlLTllNTgt
NTZjYzM5ZGI2ZWQ2LzEveFp2UjZNV1BaQnZaUkRCZkVjVk9fbDg2RE9JLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZi9mZDg0NTctODEwZi00ZjdlLTllNTgtNTZjYzM5ZGI2ZWQ2
LzEveFp2UjZNV1BaQnZaUkRCZkVjVk9fbDg2RE9JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZ2rPVVvp
xw8v/SC7F+tp3Lz1IyoO5dzvtENwuxf2jJsKHQ+81H0jUJZW+xEaIT8TLIGntPOq
C5seUYpeuCNdAIrKXYpHJKApcsajxKhkMTqbJQBfD9UopkKFOn3ej3p2wOOpGWI0
E7PdWtppDLj8+Mo6wHnSTWN1eSbcaph7cqELJHjNQyGb2Xq0cSP6T54Wc6zrzK68
mAvJRKaeXa+ciuMyKLAc1LuMiINBa1Bp0T8W9Oj/OmYGrro0xvqnvhFSTFVQQ+xe
6F32bAoHTRA/de77sVeS59omvR03lTZMfuLbdkoQfsemIo9o4qpgSrCFZEkj7+G6
SK+IoFzR65LT4A==
-----END CERTIFICATE-----