Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/0762da-d66f-4dcb-9c7f-802bb51a1bed/1/psCc_RV4gUqM0dgdyGyJD9X6hmE.mft
File:                     psCc_RV4gUqM0dgdyGyJD9X6hmE.mft (raw, json)
Hash identifier:          RrTVxo4aYw0BTLlXxTWFldN/JUukv955PyR8KozCAsY=
Subject key identifier:   E7:A1:F8:D3:83:C3:5A:1A:C5:54:C1:0D:64:F3:ED:53:3A:D8:A3:8B
Authority key identifier: A6:C0:9C:FD:15:78:81:4A:8C:D1:D8:1D:C8:6C:89:0F:D5:FA:86:61
Certificate issuer:       /CN=a6c09cfd1578814a8cd1d81dc86c890fd5fa8661
Certificate serial:       0194BBCE8F268DCE347711E1E465FB7BAAE8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/psCc_RV4gUqM0dgdyGyJD9X6hmE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/31/0762da-d66f-4dcb-9c7f-802bb51a1bed/1/psCc_RV4gUqM0dgdyGyJD9X6hmE.mft
Manifest number:          06FA
Signing time:             Fri 31 Jan 2025 10:01:03 +0000
Manifest this update:     Fri 31 Jan 2025 10:01:03 +0000
Manifest next update:     Sat 01 Feb 2025 10:01:03 +0000
Files and hashes:         1: J51Teqgyy09b34rJcbgHerVOFGM.roa (hash: 19Bs3eSbGuxEB+iBQ+LwKa7Q22A3bTnu5AsBWmIZSJI=)
                          2: KztidovtFambRhPB8SLIQ-owEj0.roa (hash: ZiHrVtnB/KsSPCOwGxJB+E/s7C1HhkISdfaXBN1P1j0=)
                          3: psCc_RV4gUqM0dgdyGyJD9X6hmE.crl (hash: kY0MV1cSzEnjztBQ5w7pFZZE6CrOG2K+VxZ/8EoC+ok=)
                          4: ujwp3pPR2D4C4IO8ortot5AhJsc.roa (hash: R/fpdE4SxTbnBF5zzZcf50YDXjlGaepj3n25cTayKNw=)
                          5: xygFAL-STuAoqvE59YVLwhBYgo0.roa (hash: KtX/KGqrHBsCj3UpDiERhcoHHsNFXropXHkJycWU6YM=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bb:ce:8f:26:8d:ce:34:77:11:e1:e4:65:fb:7b:aa:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a6c09cfd1578814a8cd1d81dc86c890fd5fa8661
        Validity
            Not Before: Jan 31 10:01:03 2025 GMT
            Not After : Feb  1 10:01:03 2025 GMT
        Subject: CN=e7a1f8d383c35a1ac554c10d64f3ed533ad8a38b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:7c:c0:7b:dc:09:bd:51:1a:a5:9f:59:49:01:
                    01:d6:63:4e:4c:0c:2a:90:46:41:f0:2b:d0:6f:e2:
                    3a:21:78:d9:8b:5e:d3:e1:62:f0:2a:55:01:9d:68:
                    fa:78:9b:7b:fe:fb:93:a8:a9:6f:5d:da:b3:d0:9c:
                    a6:e2:b7:cd:ea:04:ab:de:56:31:4a:38:b2:96:89:
                    dc:49:78:be:64:45:01:94:80:6a:21:93:0a:ce:82:
                    b0:d6:9c:60:af:8b:f3:9c:85:65:f5:e9:d5:61:27:
                    69:6b:46:81:f5:e5:cc:ac:d1:b1:59:c9:38:84:b6:
                    7d:b7:6e:4b:f8:18:bf:4f:89:7d:c4:55:5d:1d:4a:
                    97:45:48:8b:bd:65:fe:39:ff:b8:2b:88:3e:a7:6d:
                    0d:7c:03:0d:71:a2:3f:d3:c8:b8:1d:11:2a:a8:b9:
                    0f:81:ee:23:aa:93:1c:d4:7b:f2:71:82:f6:ac:30:
                    22:c7:ed:6c:a2:93:34:04:41:63:87:7e:3e:10:9e:
                    6c:38:84:07:6c:55:ac:bc:99:99:44:b7:85:18:bc:
                    26:51:f8:bf:aa:56:e6:47:68:7d:00:36:ce:19:4f:
                    31:f9:77:0d:fa:da:ff:70:01:4c:65:ee:02:79:28:
                    d6:93:53:45:c4:cb:26:7c:26:e1:47:be:5d:0e:43:
                    f6:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:A1:F8:D3:83:C3:5A:1A:C5:54:C1:0D:64:F3:ED:53:3A:D8:A3:8B
            X509v3 Authority Key Identifier:
                keyid:A6:C0:9C:FD:15:78:81:4A:8C:D1:D8:1D:C8:6C:89:0F:D5:FA:86:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/psCc_RV4gUqM0dgdyGyJD9X6hmE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/0762da-d66f-4dcb-9c7f-802bb51a1bed/1/psCc_RV4gUqM0dgdyGyJD9X6hmE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/31/0762da-d66f-4dcb-9c7f-802bb51a1bed/1/psCc_RV4gUqM0dgdyGyJD9X6hmE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:a5:3c:59:90:94:7f:1e:3d:5d:3f:30:37:68:68:30:a4:11:
         f8:16:81:e9:68:a7:ef:98:b4:42:6e:f5:1f:04:e4:80:05:c9:
         05:e5:3f:6d:f7:57:f1:ac:6d:9c:92:d5:26:39:53:2b:34:b5:
         1b:28:17:de:b8:e7:05:68:fb:99:05:5c:39:63:eb:06:ea:fb:
         fd:c1:8f:fe:d0:55:fa:c1:e2:15:3d:da:75:42:75:66:63:10:
         82:31:5a:b8:2d:b3:e9:d5:2b:f5:38:82:3c:8a:68:38:bc:c6:
         93:17:86:1e:b1:88:05:ee:d5:b4:f0:e6:09:d8:7e:62:b8:b1:
         9a:f5:8b:63:50:e2:e6:f6:f4:1f:db:1e:5e:17:5f:6a:24:0f:
         fe:6c:43:a7:de:a6:0b:69:a6:6a:28:51:1f:cd:0c:40:4b:63:
         a5:d0:73:1e:e9:b9:c9:51:1d:d6:08:4d:fa:b7:48:a8:90:17:
         3e:96:23:4e:d0:9a:fd:56:eb:17:bd:f6:c8:2f:25:f9:16:f8:
         d1:6f:2b:74:34:75:bd:f0:4e:b0:d2:4f:0f:ae:fa:ea:70:ad:
         29:7a:20:fa:22:17:54:41:bc:d1:24:99:3e:48:ee:29:f0:31:
         91:69:f0:84:cc:e1:97:02:9f:93:3e:d9:64:56:f1:89:88:ae:
         2b:ac:9d:cb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS7zo8mjc40dxHh5GX7e6roMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE2YzA5Y2ZkMTU3ODgxNGE4Y2QxZDgxZGM4NmM4OTBmZDVm
YTg2NjEwHhcNMjUwMTMxMTAwMTAzWhcNMjUwMjAxMTAwMTAzWjAzMTEwLwYDVQQD
EyhlN2ExZjhkMzgzYzM1YTFhYzU1NGMxMGQ2NGYzZWQ1MzNhZDhhMzhiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqXzAe9wJvVEapZ9ZSQEB1mNOTAwq
kEZB8CvQb+I6IXjZi17T4WLwKlUBnWj6eJt7/vuTqKlvXdqz0Jym4rfN6gSr3lYx
SjiyloncSXi+ZEUBlIBqIZMKzoKw1pxgr4vznIVl9enVYSdpa0aB9eXMrNGxWck4
hLZ9t25L+Bi/T4l9xFVdHUqXRUiLvWX+Of+4K4g+p20NfAMNcaI/08i4HREqqLkP
ge4jqpMc1HvycYL2rDAix+1sopM0BEFjh34+EJ5sOIQHbFWsvJmZRLeFGLwmUfi/
qlbmR2h9ADbOGU8x+XcN+tr/cAFMZe4CeSjWk1NFxMsmfCbhR75dDkP2sQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOeh+NODw1oaxVTBDWTz7VM62KOLMB8GA1UdIwQY
MBaAFKbAnP0VeIFKjNHYHchsiQ/V+oZhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcHNDY19SVjRnVXFNMGRnZHlHeUpEOVg2aG1FLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMS8wNzYyZGEtZDY2Zi00ZGNiLTljN2Yt
ODAyYmI1MWExYmVkLzEvcHNDY19SVjRnVXFNMGRnZHlHeUpEOVg2aG1FLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMS8wNzYyZGEtZDY2Zi00ZGNiLTljN2YtODAyYmI1MWExYmVk
LzEvcHNDY19SVjRnVXFNMGRnZHlHeUpEOVg2aG1FLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPqU8WZCU
fx49XT8wN2hoMKQR+BaB6Win75i0Qm71HwTkgAXJBeU/bfdX8axtnJLVJjlTKzS1
GygX3rjnBWj7mQVcOWPrBur7/cGP/tBV+sHiFT3adUJ1ZmMQgjFauC2z6dUr9TiC
PIpoOLzGkxeGHrGIBe7VtPDmCdh+YrixmvWLY1Di5vb0H9seXhdfaiQP/mxDp96m
C2mmaihRH80MQEtjpdBzHum5yVEd1ghN+rdIqJAXPpYjTtCa/VbrF732yC8l+Rb4
0W8rdDR1vfBOsNJPD6766nCtKXog+iIXVEG80SSZPkjuKfAxkWnwhMzhlwKfkz7Z
ZFbxiYiuK6ydyw==
-----END CERTIFICATE-----