Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/081bd4-1210-4021-a864-b50cf5f2aa22/1/g8ED1lpU1q8e-6asPmNyICivK7E.mft
File:                     g8ED1lpU1q8e-6asPmNyICivK7E.mft (raw, json)
Hash identifier:          vC27Z3f7jrOJrj0WdR9XAv1RaLa28UMC+93TXpyuuUA=
Subject key identifier:   62:5C:69:93:4F:A1:C4:DD:74:63:C1:6D:EB:5E:71:7C:80:76:4E:C7
Authority key identifier: 83:C1:03:D6:5A:54:D6:AF:1E:FB:A6:AC:3E:63:72:20:28:AF:2B:B1
Certificate issuer:       /CN=83c103d65a54d6af1efba6ac3e63722028af2bb1
Certificate serial:       0194BD17A700C48BAA03DF29595964B91EC3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/g8ED1lpU1q8e-6asPmNyICivK7E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/46/081bd4-1210-4021-a864-b50cf5f2aa22/1/g8ED1lpU1q8e-6asPmNyICivK7E.mft
Manifest number:          0B7A
Signing time:             Fri 31 Jan 2025 16:00:31 +0000
Manifest this update:     Fri 31 Jan 2025 16:00:31 +0000
Manifest next update:     Sat 01 Feb 2025 16:00:31 +0000
Files and hashes:         1: 1Di0Xz_MpkFSCrXwieDlABcYUOY.roa (hash: e9+8w6PzwdqZ5DMc28fcl3/6JCrUHirDY/ShA9oFLww=)
                          2: Fb4Aih2t-3x0svMSkoJF-OT975k.roa (hash: 4CpcD3G4jnvkJ9iB2UM4J3ZMTh++G55QBNDvUCamA1Y=)
                          3: NXwDVZABd3p4a0yMyLVaEUu993w.roa (hash: lhUXJxfjstspXt3/27XnZ9HzN1ZpRrwcEX2KjNAybVU=)
                          4: _zmyvqhTt2oFbDnddAPtCQEEyok.roa (hash: DAvzMAds1rhf279ET0ww79hQJtAHmid5htmCA8lZZdI=)
                          5: g8ED1lpU1q8e-6asPmNyICivK7E.crl (hash: 5D3M7qx8/VB54rkzhpKWz/1ADV7F/qMlgGg77oyFCrI=)
                          6: m4nA49Lv7EMjkCcxgMafzldImD4.roa (hash: evH9NZtYuDtPls9Lqu7Vupfo95DdUFuCaTKXVG/rgrY=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bd:17:a7:00:c4:8b:aa:03:df:29:59:59:64:b9:1e:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=83c103d65a54d6af1efba6ac3e63722028af2bb1
        Validity
            Not Before: Jan 31 16:00:31 2025 GMT
            Not After : Feb  1 16:00:31 2025 GMT
        Subject: CN=625c69934fa1c4dd7463c16deb5e717c80764ec7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:40:e3:32:4b:ce:ea:b0:23:68:2e:9e:7c:a9:
                    5b:1e:36:36:bb:34:56:6d:9b:fa:47:7a:4d:da:3a:
                    3b:e1:a7:e8:f1:0b:50:aa:c4:bc:96:36:ba:02:75:
                    23:b7:22:ae:1f:54:1d:d4:db:86:58:33:92:35:4e:
                    be:15:88:f2:a8:11:7b:72:cd:84:6e:81:2f:1b:24:
                    1d:4c:ef:bf:f1:d1:e4:55:1f:1c:2a:55:9d:25:86:
                    d8:ae:52:b9:86:a3:74:4f:24:d4:ec:ad:b7:c0:f0:
                    d8:eb:42:87:3a:13:8b:88:1b:e3:b8:49:02:06:53:
                    e4:18:98:77:3d:09:c2:eb:5d:57:b1:4b:6a:28:40:
                    bc:3b:34:b2:31:5a:17:3b:ce:cc:e5:31:4f:c4:49:
                    da:94:57:a2:6e:e1:96:ec:6b:d1:b8:a9:58:b3:ff:
                    50:3d:6d:60:ec:03:78:a5:bf:51:94:3c:6c:ef:12:
                    b2:87:1a:bb:93:e4:36:2e:2f:b3:9d:37:7d:d8:67:
                    dd:38:b8:ef:b7:54:3b:bd:6f:24:6e:19:3a:9a:9a:
                    c0:00:2c:97:be:61:33:c1:8d:e0:f7:db:e1:9f:29:
                    c4:70:34:a6:89:dc:f7:c2:99:5b:d7:ac:5a:5d:e3:
                    bb:ab:9d:f5:15:74:49:03:f2:3c:19:4f:69:50:ec:
                    f5:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:5C:69:93:4F:A1:C4:DD:74:63:C1:6D:EB:5E:71:7C:80:76:4E:C7
            X509v3 Authority Key Identifier:
                keyid:83:C1:03:D6:5A:54:D6:AF:1E:FB:A6:AC:3E:63:72:20:28:AF:2B:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g8ED1lpU1q8e-6asPmNyICivK7E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/081bd4-1210-4021-a864-b50cf5f2aa22/1/g8ED1lpU1q8e-6asPmNyICivK7E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/46/081bd4-1210-4021-a864-b50cf5f2aa22/1/g8ED1lpU1q8e-6asPmNyICivK7E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a4:e5:88:50:9e:c1:91:d6:96:54:05:3e:1d:85:3d:ba:2d:01:
         4f:7c:6b:b3:2c:c8:2e:88:a7:33:de:42:4e:8e:cd:8c:b9:27:
         9e:02:24:21:f9:bb:19:aa:bc:7f:ba:5b:48:81:07:d4:b0:07:
         26:b2:a7:90:63:81:c9:00:23:4d:05:f3:1e:f9:ba:db:e1:75:
         0b:c1:ae:1f:a3:ec:d2:b5:17:c9:6d:f8:3d:32:f2:3f:d6:69:
         3e:8d:e3:4a:0d:48:30:bf:40:67:3c:9b:77:c9:37:09:e6:2e:
         ff:95:99:19:97:ee:ee:ef:19:29:2a:ba:1e:74:70:c8:18:ed:
         c5:f8:85:46:7a:c8:7c:20:72:c7:b9:da:bf:06:a5:cd:19:65:
         6b:eb:0f:c8:da:4e:bf:96:7c:39:f9:eb:18:4e:db:26:a0:27:
         67:e7:1c:85:00:fe:4b:4d:4b:98:ac:2d:02:7f:e4:db:79:e4:
         2d:7d:b5:03:b1:01:54:58:a5:6d:f1:c9:c5:a2:97:0e:96:02:
         9d:8d:05:50:62:ab:35:2b:da:07:8c:16:61:0e:77:ab:e8:e2:
         cc:1a:b0:60:6a:1d:d0:ba:e8:9f:6f:76:44:9a:09:bb:c9:73:
         c3:35:99:a8:bf:f6:9e:6c:30:25:95:35:e7:05:9e:4f:2a:93:
         41:9b:87:cf
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9F6cAxIuqA98pWVlkuR7DMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgzYzEwM2Q2NWE1NGQ2YWYxZWZiYTZhYzNlNjM3MjIwMjhh
ZjJiYjEwHhcNMjUwMTMxMTYwMDMxWhcNMjUwMjAxMTYwMDMxWjAzMTEwLwYDVQQD
Eyg2MjVjNjk5MzRmYTFjNGRkNzQ2M2MxNmRlYjVlNzE3YzgwNzY0ZWM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArkDjMkvO6rAjaC6efKlbHjY2uzRW
bZv6R3pN2jo74afo8QtQqsS8lja6AnUjtyKuH1Qd1NuGWDOSNU6+FYjyqBF7cs2E
boEvGyQdTO+/8dHkVR8cKlWdJYbYrlK5hqN0TyTU7K23wPDY60KHOhOLiBvjuEkC
BlPkGJh3PQnC611XsUtqKEC8OzSyMVoXO87M5TFPxEnalFeibuGW7GvRuKlYs/9Q
PW1g7AN4pb9RlDxs7xKyhxq7k+Q2Li+znTd92GfdOLjvt1Q7vW8kbhk6mprAACyX
vmEzwY3g99vhnynEcDSmidz3wplb16xaXeO7q531FXRJA/I8GU9pUOz1awIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGJcaZNPocTddGPBbetecXyAdk7HMB8GA1UdIwQY
MBaAFIPBA9ZaVNavHvumrD5jciAoryuxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZzhFRDFscFUxcThlLTZhc1BtTnlJQ2l2SzdFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ni8wODFiZDQtMTIxMC00MDIxLWE4NjQt
YjUwY2Y1ZjJhYTIyLzEvZzhFRDFscFUxcThlLTZhc1BtTnlJQ2l2SzdFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ni8wODFiZDQtMTIxMC00MDIxLWE4NjQtYjUwY2Y1ZjJhYTIy
LzEvZzhFRDFscFUxcThlLTZhc1BtTnlJQ2l2SzdFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApOWIUJ7B
kdaWVAU+HYU9ui0BT3xrsyzILoinM95CTo7NjLknngIkIfm7Gaq8f7pbSIEH1LAH
JrKnkGOByQAjTQXzHvm62+F1C8GuH6Ps0rUXyW34PTLyP9ZpPo3jSg1IML9AZzyb
d8k3CeYu/5WZGZfu7u8ZKSq6HnRwyBjtxfiFRnrIfCByx7navwalzRlla+sPyNpO
v5Z8OfnrGE7bJqAnZ+cchQD+S01LmKwtAn/k23nkLX21A7EBVFilbfHJxaKXDpYC
nY0FUGKrNSvaB4wWYQ53q+jizBqwYGod0Lron292RJoJu8lzwzWZqL/2nmwwJZU1
5wWeTyqTQZuHzw==
-----END CERTIFICATE-----