Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/f19d06-c7fa-40e5-b813-7fe3951a735b/1/DgsNy2rQyoFtK9IE4T8erxEEJ0w.mft
File:                     DgsNy2rQyoFtK9IE4T8erxEEJ0w.mft (raw, json)
Hash identifier:          2Y4a67zKCoQAN+Uu/0qCu7XpQdP043awlQhEU3hzhIw=
Subject key identifier:   EB:41:F7:27:9B:75:F5:BB:A2:FE:E3:47:F2:21:33:09:1C:DE:14:4B
Authority key identifier: 0E:0B:0D:CB:6A:D0:CA:81:6D:2B:D2:04:E1:3F:1E:AF:11:04:27:4C
Certificate issuer:       /CN=0e0b0dcb6ad0ca816d2bd204e13f1eaf1104274c
Certificate serial:       0194BD85A78F4DD4F8F2E8468E11DD26BF75
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DgsNy2rQyoFtK9IE4T8erxEEJ0w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/f19d06-c7fa-40e5-b813-7fe3951a735b/1/DgsNy2rQyoFtK9IE4T8erxEEJ0w.mft
Manifest number:          142D
Signing time:             Fri 31 Jan 2025 18:00:40 +0000
Manifest this update:     Fri 31 Jan 2025 18:00:40 +0000
Manifest next update:     Sat 01 Feb 2025 18:00:40 +0000
Files and hashes:         1: DgsNy2rQyoFtK9IE4T8erxEEJ0w.crl (hash: eWktn1X3PKdlMDNQVRQQfHnjkDQtLQ0kUaAMR/QYLLY=)
                          2: KX71aYDc7COcBvGYMtW_I8jVEro.roa (hash: m4mYzz0InD89bmwaO+N//OYVwFvsqF8sbCWbylUSfpU=)
                          3: VLH2ggfYLmRlUNQmOTDaXEZemRU.roa (hash: r81ADMKeWWOVhBZY/dzL8YFhvpB6T7KTTWyAmAeGrA4=)
                          4: Z31e2uZ4ZUo0ifh9SmP5d6rs9YA.roa (hash: 99LlYSdIOpp68PEiIS1MO6ONGzvLDbJLydlaJmSyBos=)
                          5: dpvfrInTYFYCDpSNy4nBJ7fMOBk.roa (hash: MFcK6MCir3IwgLRCLZLFYaFpQhejKg3ixDBCQgs5rTk=)
                          6: iY-7T8h9t9V2urHTmIgGwZIOHVQ.roa (hash: irtz9XTfXBHEHapv6cSGMQPMme8obAG5vt6M1vHm4qQ=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bd:85:a7:8f:4d:d4:f8:f2:e8:46:8e:11:dd:26:bf:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0e0b0dcb6ad0ca816d2bd204e13f1eaf1104274c
        Validity
            Not Before: Jan 31 18:00:40 2025 GMT
            Not After : Feb  1 18:00:40 2025 GMT
        Subject: CN=eb41f7279b75f5bba2fee347f22133091cde144b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:a1:48:5d:2d:e7:36:bd:08:8d:0c:95:9a:46:
                    22:28:37:31:64:39:7f:9c:d1:73:ca:64:d2:31:e3:
                    74:f1:f1:91:11:06:c0:16:c4:1b:57:75:45:1e:7a:
                    cb:05:f7:c3:62:11:c6:97:d0:26:35:40:b2:9f:88:
                    9c:95:65:fd:63:9a:c5:25:48:71:26:03:a0:d6:0d:
                    95:40:65:e1:c3:18:47:36:4d:59:21:b8:23:4c:80:
                    a8:a7:a2:81:da:4c:8a:e2:2c:03:40:d2:24:2a:7d:
                    67:ea:42:de:4a:35:18:f3:16:22:e7:cf:c1:79:c8:
                    c3:f6:4d:a2:e1:fd:41:47:24:21:5a:bb:58:f2:ef:
                    e1:84:28:36:3f:ee:fc:a6:98:86:ee:bc:ff:a2:68:
                    bd:e7:93:80:6e:ea:31:1d:ba:c4:f8:38:c8:64:f7:
                    37:06:7e:10:91:80:0e:7b:0c:e3:e0:f2:83:32:e0:
                    8e:98:00:da:7c:2f:83:52:12:ed:6a:6b:d3:8d:a6:
                    86:c1:ab:3d:42:2e:33:8b:dc:17:c4:d7:11:34:e8:
                    1a:a3:f7:f9:1c:39:4e:25:f3:cd:a6:34:04:ca:21:
                    d8:a6:94:7e:cb:ef:b1:81:76:b2:08:44:76:16:c8:
                    cb:c7:22:5a:71:5b:4b:4f:c0:a3:f1:6a:c7:8e:ed:
                    27:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:41:F7:27:9B:75:F5:BB:A2:FE:E3:47:F2:21:33:09:1C:DE:14:4B
            X509v3 Authority Key Identifier:
                keyid:0E:0B:0D:CB:6A:D0:CA:81:6D:2B:D2:04:E1:3F:1E:AF:11:04:27:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DgsNy2rQyoFtK9IE4T8erxEEJ0w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/f19d06-c7fa-40e5-b813-7fe3951a735b/1/DgsNy2rQyoFtK9IE4T8erxEEJ0w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/f19d06-c7fa-40e5-b813-7fe3951a735b/1/DgsNy2rQyoFtK9IE4T8erxEEJ0w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:aa:3b:39:c7:75:2a:1e:c8:52:a5:40:78:b7:54:74:ef:be:
         55:7c:16:5a:eb:0c:7d:fb:2f:da:be:f5:2a:28:13:11:1f:db:
         69:a8:03:11:cf:01:0b:7a:39:41:3f:10:6f:d7:3a:77:b8:bd:
         0d:ba:be:97:fa:81:16:c4:89:39:28:ca:bd:0e:bf:08:fe:1d:
         64:ee:94:52:f5:aa:2e:96:d3:7c:07:da:8e:e1:4f:1d:31:8d:
         e5:f0:c2:7c:c5:93:40:aa:05:62:7a:87:bd:07:92:51:38:0c:
         08:98:0b:00:96:ca:e4:7c:4c:e6:21:cb:ef:20:42:4a:2d:3e:
         84:bf:41:c8:4f:c4:0c:45:af:5c:3f:8d:c6:a0:ea:24:22:a4:
         ec:8c:8b:cf:2e:45:80:a3:38:1e:40:20:af:04:f0:a9:64:4d:
         20:41:d4:63:fc:05:c1:61:73:97:42:2a:17:52:a7:c8:fa:08:
         db:15:44:db:00:8d:72:77:a7:a1:83:f9:e6:64:18:82:33:c7:
         2f:3b:ea:b5:0d:df:08:d4:ea:33:38:5f:c7:59:e4:4d:c7:58:
         63:60:b4:44:be:51:84:8e:23:8a:e6:50:ad:1a:37:1b:dd:07:
         75:51:74:b1:d5:ba:e3:7e:9a:ba:b0:92:b4:46:9b:7f:ae:ce:
         3d:9f:d4:cb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9haePTdT48uhGjhHdJr91MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBlMGIwZGNiNmFkMGNhODE2ZDJiZDIwNGUxM2YxZWFmMTEw
NDI3NGMwHhcNMjUwMTMxMTgwMDQwWhcNMjUwMjAxMTgwMDQwWjAzMTEwLwYDVQQD
EyhlYjQxZjcyNzliNzVmNWJiYTJmZWUzNDdmMjIxMzMwOTFjZGUxNDRiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiqFIXS3nNr0IjQyVmkYiKDcxZDl/
nNFzymTSMeN08fGREQbAFsQbV3VFHnrLBffDYhHGl9AmNUCyn4iclWX9Y5rFJUhx
JgOg1g2VQGXhwxhHNk1ZIbgjTICop6KB2kyK4iwDQNIkKn1n6kLeSjUY8xYi58/B
ecjD9k2i4f1BRyQhWrtY8u/hhCg2P+78ppiG7rz/omi955OAbuoxHbrE+DjIZPc3
Bn4QkYAOewzj4PKDMuCOmADafC+DUhLtamvTjaaGwas9Qi4zi9wXxNcRNOgao/f5
HDlOJfPNpjQEyiHYppR+y++xgXayCER2FsjLxyJacVtLT8Cj8WrHju0n3wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOtB9yebdfW7ov7jR/IhMwkc3hRLMB8GA1UdIwQY
MBaAFA4LDctq0MqBbSvSBOE/Hq8RBCdMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRGdzTnkyclF5b0Z0SzlJRTRUOGVyeEVFSjB3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS9mMTlkMDYtYzdmYS00MGU1LWI4MTMt
N2ZlMzk1MWE3MzViLzEvRGdzTnkyclF5b0Z0SzlJRTRUOGVyeEVFSjB3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80YS9mMTlkMDYtYzdmYS00MGU1LWI4MTMtN2ZlMzk1MWE3MzVi
LzEvRGdzTnkyclF5b0Z0SzlJRTRUOGVyeEVFSjB3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMqo7Ocd1
Kh7IUqVAeLdUdO++VXwWWusMffsv2r71KigTER/baagDEc8BC3o5QT8Qb9c6d7i9
Dbq+l/qBFsSJOSjKvQ6/CP4dZO6UUvWqLpbTfAfajuFPHTGN5fDCfMWTQKoFYnqH
vQeSUTgMCJgLAJbK5HxM5iHL7yBCSi0+hL9ByE/EDEWvXD+NxqDqJCKk7IyLzy5F
gKM4HkAgrwTwqWRNIEHUY/wFwWFzl0IqF1KnyPoI2xVE2wCNcnenoYP55mQYgjPH
LzvqtQ3fCNTqMzhfx1nkTcdYY2C0RL5RhI4jiuZQrRo3G90HdVF0sdW6436aurCS
tEabf67OPZ/Uyw==
-----END CERTIFICATE-----