Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.mft
File:                     O0duEuiYflswLNwkvdnbP-g8hEk.mft (raw, json)
Hash identifier:          5lZ9da7Jss1JY2pL/3hv7HOQpBheJDQR35WtPqY/oBQ=
Subject key identifier:   01:E4:29:2A:0C:E0:35:05:26:0E:5F:EC:29:54:11:3B:A9:0B:96:42
Authority key identifier: 3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49
Certificate issuer:       /CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449
Certificate serial:       0194BC3CB100B118DCA87F34F9332C419432
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.mft
Manifest number:          15F4
Signing time:             Fri 31 Jan 2025 12:01:21 +0000
Manifest this update:     Fri 31 Jan 2025 12:01:21 +0000
Manifest next update:     Sat 01 Feb 2025 12:01:21 +0000
Files and hashes:         1: 4vgCB29E8qksUTRT80hibqkfyyc.roa (hash: jmfyWEEY9JnvGnTw4OogSC5Brt6r5w8K86EHD/wwf9A=)
                          2: 526untxz-mzv2dHnFDXL_1ptt60.roa (hash: eTZ7gYAJgAUW5KmvOus9/SXIOPMjtfVvCRByFZ9gVg0=)
                          3: 7AXFe4yxIHvF0jtzsP_F-wLpTyo.roa (hash: fz447Zdcr7iuvJ9YqYhhlssvYnd7PF5Z4bBFuoyFksI=)
                          4: 96h7PqU8raoKkxrkdEKN21rTOvU.roa (hash: Smu8Li8SvlYxiY+6Q94KxgYym/fqEAtk6ZPMppADRjM=)
                          5: C-8-iMMsxJ6tnwl9OBqOWIwbNsU.roa (hash: pdyDDn72ivSi04YeLJDn/Rf+owjmwql5RY6I2jPWQjI=)
                          6: Cz5IOaLfZShikRrc5qEp3L0_dDE.roa (hash: yJQIMc4u5I3PxM3zxWJYXZyrXzNKlBnDlO54oa7k+I4=)
                          7: D0L0LFndzzXtixPyXy6YiMbyR7Q.roa (hash: le65wEoYAgLiuW7LHDLfiJaMqsJkMNtdkgbBI9+aSho=)
                          8: DXkQJWoXXxUWl_6wOwUCNK2iqzE.roa (hash: Et9FWADnNl04HSdSo6iAdV5+gKD6jObcWqGDBUveUoM=)
                          9: DxgEUmzhCfbLGW1VYUfMpFa37nw.roa (hash: aTiJxBWDUefv6IrHKfkDtn+24ct4bHV07inB3EBckiI=)
                          10: GXy-YScDdlVSOjaigEKgJ51XCY8.roa (hash: Y3LR/iT+9EdXx7rq4pgAup8VPeSq/ZLbP9lE7Caoknc=)
                          11: H7yrNUT75yVv09M5UBmNbZIqcoA.roa (hash: CZfSBGRpxyxAFQpjENd+v0cJ93DJ7YkMpWAIc48uiNM=)
                          12: IWwsiS-aJdot4eBshq8oe0oy5GY.roa (hash: qosKjF6lbWWzBy51nWgFpyBeu/cGBM7SjKVMCbf+nJM=)
                          13: KfRroo9-BNURF9yUWR1WlHgU1ig.roa (hash: d0EUN/5YCOmmW4SmyztOjubnx+pkCFBWNsBncoAozSc=)
                          14: NBdPQa-wvhCcNUR62UijOKmqLb4.roa (hash: FBuWOoWqS3kDovQ4RTLJifcKo3Lt+KtJgveTvXA1/PY=)
                          15: O0duEuiYflswLNwkvdnbP-g8hEk.crl (hash: 0JunJy9GkJNgrcSnmJYh/uaxfH6cnJl3C6N00rtXGD4=)
                          16: OHtdamk3K8NdLEh-keiR2rSuuSg.roa (hash: qIQbXlJhQUZZHP5a7YOGBONxaoVnF9gndUOU4O5iAEE=)
                          17: ONvCFUby9FQsaJnAxo4Axtdte3w.roa (hash: Ifw+sRLVQyRVbH8IoOOspPffjTFu/L5Tp5Iujz6vsEg=)
                          18: PqyNHcmLJdPWxXV1ritb4BmJxi4.roa (hash: 3vlH477/W9mn8TAvOvuTdFa84/v39cjh6RY9RiJ8GGQ=)
                          19: RPtIr4SyxST2FhDUlfIaVDvDv30.roa (hash: GtTmqq9ciOzu0ubmXjSZndWCRadfRgXNWiYJpFrJC5s=)
                          20: UfHhhtI05mBJabZ-hLmNIxHX8ug.roa (hash: E4kcCskG284NOpULkH3nCUBGoPB5JKBTg+hvJO3hTjc=)
                          21: W4gGQid-BJ2ydE-GfarPQD0BXHk.roa (hash: AIulnkFQm6EME0MTgDdsXVMYUQiBqZHjvvdiEh/TZmw=)
                          22: Xf3YKxRqkeL7M00W8PeVBpyDwo4.roa (hash: l1kq88C+6MsbDoI9xmNG80iyS2+gmcx5dOr77F5QPn4=)
                          23: Y2m9dQZRR5IryF_5Zz3iwenilus.roa (hash: Jz9GiZ+cQjwgpfumcixZsPRulTmHrskYTNVB0A9hwMs=)
                          24: bIscYSktyuSdXA8uuitNFV9EUno.roa (hash: w2B+jU39CkMFN16wFNwH+8WwrfFPrjamkhdn7et9g8s=)
                          25: ilG6y2Wso3mOgxG85ra3iR2e8Ck.roa (hash: INQh1RPZ3Hg+l39PdTi0B9Y2GnJwgu1gLpokQWLUkWY=)
                          26: jbZYE4DgNw-VE9vD3aUU0sOMZBo.roa (hash: xYas/ZOn3Bz6fch4pO0zLVYI0uCgN1comuyV0H04g6w=)
                          27: lRiWjK4xEGSZ7hhdPgk-iqq1mwI.roa (hash: JgHkOVWJLhXz09JsY8CuxiPcEyyxQ/VY17v428GySkE=)
                          28: nei3AaGClDiyy_EfGYw9mDGViqc.roa (hash: qXKOsUvJTZ9r5zNLO+LyECtFcWGid4ruKizdlfVXjdw=)
                          29: tSXk9SP7bnHtLbCdTNqCKvrEh4o.roa (hash: PISfRJqobhXLq8L0SyhKnyS2B+p5WkGpjK6hTX0gWWI=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:3c:b1:00:b1:18:dc:a8:7f:34:f9:33:2c:41:94:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449
        Validity
            Not Before: Jan 31 12:01:21 2025 GMT
            Not After : Feb  1 12:01:21 2025 GMT
        Subject: CN=01e4292a0ce03505260e5fec2954113ba90b9642
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:5e:59:38:0b:aa:5b:ef:dc:b0:20:83:f3:29:
                    3b:61:42:85:ce:61:90:d2:14:04:ec:15:9a:f6:71:
                    e0:d4:46:f0:47:aa:47:c4:88:52:b7:3d:12:01:f9:
                    91:7b:c7:0e:5e:e4:b2:bf:a7:82:6e:ef:b0:0d:08:
                    05:aa:e5:d0:24:37:db:55:46:94:a9:cf:e0:9d:72:
                    ea:3b:e5:ee:f9:13:5a:d3:3e:e1:e3:19:fd:20:ed:
                    15:1c:26:b2:1d:4f:0c:46:24:45:d7:7f:61:60:c5:
                    c9:b7:bf:61:68:98:2e:5d:d9:91:92:83:06:d0:94:
                    d1:5d:6f:97:16:da:ff:a5:a6:90:84:38:3c:a2:1f:
                    09:fc:df:5f:35:b7:44:4d:d8:b0:a1:1e:d0:40:7a:
                    7e:6f:d7:0d:47:0b:29:79:7a:92:1e:f8:99:8a:86:
                    44:a3:32:1b:87:5d:0a:9d:b5:c6:af:12:10:d4:30:
                    2e:1a:2c:0f:ae:8f:07:43:b3:24:9a:fd:4d:3f:46:
                    4b:08:ba:95:2c:05:80:da:ff:d0:dc:bb:a4:80:da:
                    39:d6:a9:0f:05:7f:1d:97:00:22:b6:dc:3b:67:3f:
                    f9:8e:7b:9d:f9:65:f5:37:db:b1:55:50:9f:64:b2:
                    e4:8d:1b:76:ba:e3:54:40:b9:62:0c:d2:51:7b:62:
                    11:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:E4:29:2A:0C:E0:35:05:26:0E:5F:EC:29:54:11:3B:A9:0B:96:42
            X509v3 Authority Key Identifier:
                keyid:3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:23:c0:09:63:19:30:86:bd:ae:1c:ca:8a:c5:85:86:0d:da:
         b9:0c:be:7a:3f:30:b0:27:9d:18:e0:d2:90:47:e6:8f:d7:5d:
         52:31:28:ae:02:98:19:92:0b:25:c9:1b:38:5e:fc:95:48:c7:
         b6:79:a4:11:f5:af:69:3f:3e:d7:a3:79:3f:e9:93:1d:b2:de:
         3d:cb:b3:46:28:0b:ee:6e:98:6a:38:21:df:09:06:ab:20:b4:
         25:93:98:9a:d5:33:4e:3c:07:03:f5:d9:14:50:dd:53:11:c9:
         82:14:67:c9:8b:58:eb:d3:a0:2c:1b:6b:b1:ce:5a:01:85:00:
         56:1a:3f:13:4a:af:ab:a7:58:e1:98:06:bc:9a:1e:1c:20:b0:
         fb:86:50:25:e2:f5:6e:20:ba:98:79:7e:e8:d6:68:ed:1e:ca:
         d4:55:c5:bb:d9:61:e0:92:23:e2:e6:47:e8:83:a4:7c:02:25:
         7a:d9:e1:53:ca:a9:b2:3a:4e:26:2a:78:53:e2:a3:f3:3d:a6:
         09:ce:0a:03:39:05:cc:a4:57:cd:21:08:c1:37:8b:b0:34:b2:
         24:fc:2a:52:42:87:e1:0d:15:8f:35:b1:29:cf:fc:ef:14:92:
         15:99:b7:0b:8a:08:63:bb:57:76:ba:f6:63:73:dd:e1:f7:0c:
         d9:3b:09:ae
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8PLEAsRjcqH80+TMsQZQyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNiNDc2ZTEyZTg5ODdlNWIzMDJjZGMyNGJkZDlkYjNmZTgz
Yzg0NDkwHhcNMjUwMTMxMTIwMTIxWhcNMjUwMjAxMTIwMTIxWjAzMTEwLwYDVQQD
EygwMWU0MjkyYTBjZTAzNTA1MjYwZTVmZWMyOTU0MTEzYmE5MGI5NjQyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtl5ZOAuqW+/csCCD8yk7YUKFzmGQ
0hQE7BWa9nHg1EbwR6pHxIhStz0SAfmRe8cOXuSyv6eCbu+wDQgFquXQJDfbVUaU
qc/gnXLqO+Xu+RNa0z7h4xn9IO0VHCayHU8MRiRF139hYMXJt79haJguXdmRkoMG
0JTRXW+XFtr/paaQhDg8oh8J/N9fNbdETdiwoR7QQHp+b9cNRwspeXqSHviZioZE
ozIbh10KnbXGrxIQ1DAuGiwPro8HQ7Mkmv1NP0ZLCLqVLAWA2v/Q3LukgNo51qkP
BX8dlwAittw7Zz/5jnud+WX1N9uxVVCfZLLkjRt2uuNUQLliDNJRe2IRYwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAHkKSoM4DUFJg5f7ClUETupC5ZCMB8GA1UdIwQY
MBaAFDtHbhLomH5bMCzcJL3Z2z/oPIRJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTzBkdUV1aVlmbHN3TE53a3ZkbmJQLWc4aEVrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC9kOTBjNmYtNjU3Ni00NmI5LTgzMTMt
NmNiZmYzYzRkYTAxLzEvTzBkdUV1aVlmbHN3TE53a3ZkbmJQLWc4aEVrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNC9kOTBjNmYtNjU3Ni00NmI5LTgzMTMtNmNiZmYzYzRkYTAx
LzEvTzBkdUV1aVlmbHN3TE53a3ZkbmJQLWc4aEVrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATCPACWMZ
MIa9rhzKisWFhg3auQy+ej8wsCedGODSkEfmj9ddUjEorgKYGZILJckbOF78lUjH
tnmkEfWvaT8+16N5P+mTHbLePcuzRigL7m6Yajgh3wkGqyC0JZOYmtUzTjwHA/XZ
FFDdUxHJghRnyYtY69OgLBtrsc5aAYUAVho/E0qvq6dY4ZgGvJoeHCCw+4ZQJeL1
biC6mHl+6NZo7R7K1FXFu9lh4JIj4uZH6IOkfAIletnhU8qpsjpOJip4U+Kj8z2m
Cc4KAzkFzKRXzSEIwTeLsDSyJPwqUkKH4Q0VjzWxKc/87xSSFZm3C4oIY7tXdrr2
Y3Pd4fcM2TsJrg==
-----END CERTIFICATE-----