Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/2b2878-5b79-40f7-b4b5-356c4d7bb452/1/9sPgJ9LRwtNtfJVIZyJsg7ZetW8.mft
File:                     9sPgJ9LRwtNtfJVIZyJsg7ZetW8.mft (raw, json)
Hash identifier:          CcoH3YBpCxYKSryp5wmkHXRvxH5Bisao2v4Vf+8AaPM=
Subject key identifier:   80:78:58:4B:1C:91:19:DD:73:25:E2:B8:2D:23:D8:E1:F9:77:03:EA
Authority key identifier: F6:C3:E0:27:D2:D1:C2:D3:6D:7C:95:48:67:22:6C:83:B6:5E:B5:6F
Certificate issuer:       /CN=f6c3e027d2d1c2d36d7c954867226c83b65eb56f
Certificate serial:       0194BC04A467DF0906DAFD3297673B91FD38
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9sPgJ9LRwtNtfJVIZyJsg7ZetW8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3f/2b2878-5b79-40f7-b4b5-356c4d7bb452/1/9sPgJ9LRwtNtfJVIZyJsg7ZetW8.mft
Manifest number:          0C3F
Signing time:             Fri 31 Jan 2025 11:00:08 +0000
Manifest this update:     Fri 31 Jan 2025 11:00:08 +0000
Manifest next update:     Sat 01 Feb 2025 11:00:08 +0000
Files and hashes:         1: 1-FnvQqT9mIqxipsRqFjYsNQSlBM.roa (hash: +uFY0K06aPvv+IH1erLogXQwEEO2k+DY8eNZLIXFHV4=)
                          2: 9sPgJ9LRwtNtfJVIZyJsg7ZetW8.crl (hash: tX3XVC2pUThmL1AO3mZQcyXpy8XMkdH7YnvrPURny2o=)
                          3: EpH20P4xP3V2g4vErHJO-EvTAVU.roa (hash: jeooPDRiBjDAUPoIXhITPTt2zTmHZ7KLWf5fCQG5sIo=)
                          4: SI90qQvScrNKS-02paw66Vtte1g.roa (hash: CoRUrg+WB47FS25HKQ2HVa4e+itGukiRC6ZwlYviHec=)
                          5: mvmUvaM2JRysTq3IiKyyysU6GY8.roa (hash: dMiGawP2eEnw55fXqAakbpr7IIQ2Da7zAMRfk+xhjuE=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:04:a4:67:df:09:06:da:fd:32:97:67:3b:91:fd:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f6c3e027d2d1c2d36d7c954867226c83b65eb56f
        Validity
            Not Before: Jan 31 11:00:08 2025 GMT
            Not After : Feb  1 11:00:08 2025 GMT
        Subject: CN=8078584b1c9119dd7325e2b82d23d8e1f97703ea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:4d:6f:6f:1f:be:c6:62:d3:6f:a1:b5:06:85:
                    79:d7:26:6d:20:4f:29:2e:38:b3:69:28:66:77:a6:
                    d1:d1:15:c0:d8:71:2e:e6:c1:a5:ad:d6:c0:2b:f4:
                    9d:e8:b9:49:d3:ef:66:82:71:11:11:3c:46:c5:61:
                    55:b9:0c:72:df:98:79:b9:65:f7:5f:0e:15:81:82:
                    d3:ac:5c:ff:77:09:13:c3:8c:21:77:7a:2b:09:f9:
                    f4:a6:42:62:1a:6a:85:70:b1:6f:6b:69:0d:dd:15:
                    42:e8:51:c0:6a:e0:86:8c:e0:4a:23:d9:bd:ae:88:
                    d7:46:df:b2:d3:33:5b:62:23:56:78:de:76:fc:39:
                    f2:b0:c8:af:3d:cc:d5:58:35:cf:71:39:13:e2:bf:
                    70:4a:1d:78:b0:4c:88:43:6b:17:a1:73:e8:a9:1c:
                    dd:f7:14:fc:be:45:8c:5b:37:28:94:6e:b3:2e:4a:
                    89:2f:f3:02:6d:c6:dd:99:47:53:1e:68:94:ed:04:
                    d5:48:5c:51:45:3c:20:c3:1e:55:9a:39:91:da:37:
                    e2:22:c2:36:28:85:6f:84:38:dc:c2:e4:a6:01:68:
                    d9:59:61:a7:e8:b2:d4:52:c1:85:0e:fe:95:28:b8:
                    7f:55:47:b2:9b:01:50:4e:a9:b2:04:7e:eb:d4:b6:
                    a8:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:78:58:4B:1C:91:19:DD:73:25:E2:B8:2D:23:D8:E1:F9:77:03:EA
            X509v3 Authority Key Identifier:
                keyid:F6:C3:E0:27:D2:D1:C2:D3:6D:7C:95:48:67:22:6C:83:B6:5E:B5:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9sPgJ9LRwtNtfJVIZyJsg7ZetW8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/2b2878-5b79-40f7-b4b5-356c4d7bb452/1/9sPgJ9LRwtNtfJVIZyJsg7ZetW8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/2b2878-5b79-40f7-b4b5-356c4d7bb452/1/9sPgJ9LRwtNtfJVIZyJsg7ZetW8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c4:b6:8c:a7:c4:58:b5:6c:01:54:19:3f:9e:dc:4e:c1:e7:60:
         f7:e0:fe:cf:e1:8d:ed:fe:a7:37:e5:e1:6c:bc:e1:f1:4c:9e:
         46:41:45:8b:a7:6c:0a:d4:72:a2:ab:76:2d:98:ce:32:09:61:
         51:50:6f:85:44:82:30:70:b3:e9:fe:a5:f6:1b:0a:0b:eb:69:
         ec:28:d9:df:35:bc:07:e6:da:54:8d:e0:f4:28:bb:45:8c:90:
         bd:9d:33:c5:f6:44:51:9f:45:bc:61:4e:94:a7:c5:d7:06:78:
         53:c6:b3:88:4d:a5:62:d7:34:d3:73:38:06:23:40:60:ca:33:
         90:57:df:fd:77:de:4a:71:05:86:7b:67:dc:e3:3e:47:d0:f5:
         40:11:55:3c:69:99:42:3b:c5:8e:07:a2:e5:2b:2a:f1:23:74:
         29:71:b7:6b:71:4e:d8:d0:7e:b8:04:f2:ea:0f:c3:a9:4b:bc:
         cf:50:3e:41:a6:c5:a5:38:d9:b3:9d:74:ae:09:86:9d:3b:1b:
         c7:c0:4d:ed:fc:e6:3d:ad:f9:2f:cf:3d:e6:d9:21:d4:6a:77:
         eb:21:bf:7b:ad:48:e2:88:5b:94:4f:90:76:d0:27:f7:01:8a:
         27:61:05:bb:b6:35:83:ec:af:ea:b0:2d:fa:87:c1:8a:cd:40:
         47:cd:18:cf
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8BKRn3wkG2v0yl2c7kf04MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY2YzNlMDI3ZDJkMWMyZDM2ZDdjOTU0ODY3MjI2YzgzYjY1
ZWI1NmYwHhcNMjUwMTMxMTEwMDA4WhcNMjUwMjAxMTEwMDA4WjAzMTEwLwYDVQQD
Eyg4MDc4NTg0YjFjOTExOWRkNzMyNWUyYjgyZDIzZDhlMWY5NzcwM2VhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmk1vbx++xmLTb6G1BoV51yZtIE8p
LjizaShmd6bR0RXA2HEu5sGlrdbAK/Sd6LlJ0+9mgnERETxGxWFVuQxy35h5uWX3
Xw4VgYLTrFz/dwkTw4whd3orCfn0pkJiGmqFcLFva2kN3RVC6FHAauCGjOBKI9m9
rojXRt+y0zNbYiNWeN52/DnysMivPczVWDXPcTkT4r9wSh14sEyIQ2sXoXPoqRzd
9xT8vkWMWzcolG6zLkqJL/MCbcbdmUdTHmiU7QTVSFxRRTwgwx5VmjmR2jfiIsI2
KIVvhDjcwuSmAWjZWWGn6LLUUsGFDv6VKLh/VUeymwFQTqmyBH7r1LaoOQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIB4WEsckRndcyXiuC0j2OH5dwPqMB8GA1UdIwQY
MBaAFPbD4CfS0cLTbXyVSGcibIO2XrVvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOXNQZ0o5TFJ3dE50ZkpWSVp5SnNnN1pldFc4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZi8yYjI4NzgtNWI3OS00MGY3LWI0YjUt
MzU2YzRkN2JiNDUyLzEvOXNQZ0o5TFJ3dE50ZkpWSVp5SnNnN1pldFc4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZi8yYjI4NzgtNWI3OS00MGY3LWI0YjUtMzU2YzRkN2JiNDUy
LzEvOXNQZ0o5TFJ3dE50ZkpWSVp5SnNnN1pldFc4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAxLaMp8RY
tWwBVBk/ntxOwedg9+D+z+GN7f6nN+XhbLzh8UyeRkFFi6dsCtRyoqt2LZjOMglh
UVBvhUSCMHCz6f6l9hsKC+tp7CjZ3zW8B+baVI3g9Ci7RYyQvZ0zxfZEUZ9FvGFO
lKfF1wZ4U8aziE2lYtc003M4BiNAYMozkFff/XfeSnEFhntn3OM+R9D1QBFVPGmZ
QjvFjgei5Ssq8SN0KXG3a3FO2NB+uATy6g/DqUu8z1A+QabFpTjZs510rgmGnTsb
x8BN7fzmPa35L8895tkh1Gp36yG/e61I4ohblE+QdtAn9wGKJ2EFu7Y1g+yv6rAt
+ofBis1AR80Yzw==
-----END CERTIFICATE-----