Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/f35406-d8c4-4f5c-92ac-256da95d1345/1/kTgbyWneatw9HdwOuJve6s6YBc0.mft
File:                     kTgbyWneatw9HdwOuJve6s6YBc0.mft (raw, json)
Hash identifier:          ryoBueYR4jzuVYaTrGwls8p2gnW46NVf+zgadr9Pg+g=
Subject key identifier:   65:5E:11:19:02:51:C6:F9:F4:16:0A:01:A1:9B:2D:77:1A:7E:C5:B9
Authority key identifier: 91:38:1B:C9:69:DE:6A:DC:3D:1D:DC:0E:B8:9B:DE:EA:CE:98:05:CD
Certificate issuer:       /CN=91381bc969de6adc3d1ddc0eb89bdeeace9805cd
Certificate serial:       0194BC3BD4E5740F4495B12F2CC711D3C286
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kTgbyWneatw9HdwOuJve6s6YBc0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/40/f35406-d8c4-4f5c-92ac-256da95d1345/1/kTgbyWneatw9HdwOuJve6s6YBc0.mft
Manifest number:          081E
Signing time:             Fri 31 Jan 2025 12:00:25 +0000
Manifest this update:     Fri 31 Jan 2025 12:00:25 +0000
Manifest next update:     Sat 01 Feb 2025 12:00:25 +0000
Files and hashes:         1: REM4mLJG7EnsBgBtsv162D0wKhg.roa (hash: lvlcTJIeXHpqeTqGfZTwiMwS8+bWAY5YDqELcR5epC0=)
                          2: Tkqht9ZvM7aeuWPx5RB29sIJQsY.roa (hash: GjW60rpkATBwTZcA2wdYPAVMSlJOCTBR0jsl1OrgYgE=)
                          3: XddNSlbeSdL2BDOBSBtXKwmbrLQ.roa (hash: YTwv2DMMu/UpDiaZkqxeVtYaDul2+Oka8KEh6z36NkA=)
                          4: b10-uyzSDsE84X1NxkfqXsdCqjM.roa (hash: 656/1JM/Gtv27/XvapYOtDJ81ebQFKIEF9n9ARvTwoo=)
                          5: bXzPu6L2HXchD9ZujQmLXPM_bDM.roa (hash: KqR406WMI/nRws1aNrGcGP+z2vKLl1H8bxnYaFt2+LA=)
                          6: kTgbyWneatw9HdwOuJve6s6YBc0.crl (hash: mDBSOK+htioEX5+6JkEogYyqJRQX8MwN3xar9Kz3VMI=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:3b:d4:e5:74:0f:44:95:b1:2f:2c:c7:11:d3:c2:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91381bc969de6adc3d1ddc0eb89bdeeace9805cd
        Validity
            Not Before: Jan 31 12:00:25 2025 GMT
            Not After : Feb  1 12:00:25 2025 GMT
        Subject: CN=655e11190251c6f9f4160a01a19b2d771a7ec5b9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:ab:d8:08:30:6a:ba:2a:55:8b:59:05:99:cd:
                    83:ac:26:2b:b0:e9:df:1f:57:e9:32:14:0b:ed:3b:
                    4d:57:80:2c:9f:7c:69:99:35:10:d1:5a:80:2a:20:
                    b1:98:ea:75:8e:3a:a1:2e:f4:07:27:f6:38:4d:70:
                    5f:04:0c:1a:f5:3b:af:a9:f3:55:75:9c:0f:79:a1:
                    87:d2:02:04:bb:69:cd:20:8c:23:8c:98:71:33:e8:
                    27:38:53:bc:22:7f:10:bb:7e:07:66:b6:fe:ce:c2:
                    6e:55:65:84:92:fd:08:2f:58:95:61:8a:fc:bb:e9:
                    35:a4:d7:1e:ec:1d:8b:13:1e:6b:a4:e5:21:17:fe:
                    ac:ca:5f:e7:f5:61:fb:69:0b:88:ee:a2:a7:a2:34:
                    67:e5:47:ec:70:da:78:6c:5c:f3:06:92:a0:2a:1d:
                    a3:3e:98:fd:ea:b4:70:7d:72:c0:c2:e6:30:77:4c:
                    d7:74:eb:c3:8c:8b:02:ad:f2:b2:e5:c5:0b:c0:03:
                    1a:ee:bc:b6:cd:b5:d3:69:5c:cc:d6:9a:0a:53:e3:
                    d9:67:18:f3:b2:d5:b1:cc:2d:db:c8:84:fe:e6:4d:
                    45:3f:25:f1:51:69:47:bf:cd:b4:f7:2a:bf:9d:30:
                    28:13:f6:24:84:32:7f:1a:59:86:21:b8:a2:8a:c2:
                    65:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:5E:11:19:02:51:C6:F9:F4:16:0A:01:A1:9B:2D:77:1A:7E:C5:B9
            X509v3 Authority Key Identifier:
                keyid:91:38:1B:C9:69:DE:6A:DC:3D:1D:DC:0E:B8:9B:DE:EA:CE:98:05:CD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kTgbyWneatw9HdwOuJve6s6YBc0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/f35406-d8c4-4f5c-92ac-256da95d1345/1/kTgbyWneatw9HdwOuJve6s6YBc0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/40/f35406-d8c4-4f5c-92ac-256da95d1345/1/kTgbyWneatw9HdwOuJve6s6YBc0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:93:88:cc:2c:70:20:58:92:78:7e:f0:e4:94:cd:53:10:7b:
         cb:1a:e3:11:44:8f:b8:58:4b:e2:67:1f:92:02:32:3b:f8:e0:
         c1:15:96:58:09:dc:44:c5:5a:eb:d5:97:b3:9c:89:ad:d4:47:
         e9:15:26:7e:e8:04:43:29:f4:ed:1f:51:de:10:fd:a1:2c:e8:
         59:2d:c8:a3:a0:f1:89:2f:dc:21:f5:23:34:2b:fd:a8:6b:f7:
         15:83:81:51:b2:fe:79:27:95:20:a2:a0:dc:4d:4c:e3:12:21:
         3d:63:0d:0a:19:d7:ca:d4:d8:a6:ac:22:55:ca:4c:45:ce:53:
         79:92:9a:db:32:37:ae:78:c5:ca:2c:c9:68:be:a1:02:f9:87:
         1d:52:42:38:55:82:bb:f1:c0:3b:22:47:7f:84:2b:b6:c8:81:
         12:96:d2:d8:73:53:bb:cd:9e:15:38:1b:77:51:4f:af:2c:0b:
         98:46:b6:c8:0b:82:97:6a:44:64:9f:23:26:46:27:21:96:d5:
         24:40:12:f3:1c:93:12:e1:97:7c:c3:f5:02:9f:8e:a6:95:b9:
         a1:c3:4b:0f:c9:d0:a6:ba:f3:4f:79:b6:bb:2d:b3:4f:40:24:
         e9:e1:ba:8b:dc:87:7f:98:31:c5:b6:f9:42:e9:20:a4:80:3d:
         23:2e:8a:26
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8O9TldA9ElbEvLMcR08KGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkxMzgxYmM5NjlkZTZhZGMzZDFkZGMwZWI4OWJkZWVhY2U5
ODA1Y2QwHhcNMjUwMTMxMTIwMDI1WhcNMjUwMjAxMTIwMDI1WjAzMTEwLwYDVQQD
Eyg2NTVlMTExOTAyNTFjNmY5ZjQxNjBhMDFhMTliMmQ3NzFhN2VjNWI5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3KvYCDBquipVi1kFmc2DrCYrsOnf
H1fpMhQL7TtNV4Asn3xpmTUQ0VqAKiCxmOp1jjqhLvQHJ/Y4TXBfBAwa9TuvqfNV
dZwPeaGH0gIEu2nNIIwjjJhxM+gnOFO8In8Qu34HZrb+zsJuVWWEkv0IL1iVYYr8
u+k1pNce7B2LEx5rpOUhF/6syl/n9WH7aQuI7qKnojRn5UfscNp4bFzzBpKgKh2j
Ppj96rRwfXLAwuYwd0zXdOvDjIsCrfKy5cULwAMa7ry2zbXTaVzM1poKU+PZZxjz
stWxzC3byIT+5k1FPyXxUWlHv8209yq/nTAoE/YkhDJ/GlmGIbiiisJl6wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGVeERkCUcb59BYKAaGbLXcafsW5MB8GA1UdIwQY
MBaAFJE4G8lp3mrcPR3cDrib3urOmAXNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva1RnYnlXbmVhdHc5SGR3T3VKdmU2czZZQmMwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC9mMzU0MDYtZDhjNC00ZjVjLTkyYWMt
MjU2ZGE5NWQxMzQ1LzEva1RnYnlXbmVhdHc5SGR3T3VKdmU2czZZQmMwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MC9mMzU0MDYtZDhjNC00ZjVjLTkyYWMtMjU2ZGE5NWQxMzQ1
LzEva1RnYnlXbmVhdHc5SGR3T3VKdmU2czZZQmMwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiZOIzCxw
IFiSeH7w5JTNUxB7yxrjEUSPuFhL4mcfkgIyO/jgwRWWWAncRMVa69WXs5yJrdRH
6RUmfugEQyn07R9R3hD9oSzoWS3Io6DxiS/cIfUjNCv9qGv3FYOBUbL+eSeVIKKg
3E1M4xIhPWMNChnXytTYpqwiVcpMRc5TeZKa2zI3rnjFyizJaL6hAvmHHVJCOFWC
u/HAOyJHf4QrtsiBEpbS2HNTu82eFTgbd1FPrywLmEa2yAuCl2pEZJ8jJkYnIZbV
JEAS8xyTEuGXfMP1Ap+OppW5ocNLD8nQprrzT3m2uy2zT0Ak6eG6i9yHf5gxxbb5
QukgpIA9Iy6KJg==
-----END CERTIFICATE-----