Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/98abe5-bd01-464f-96ab-40b6d67fcd94/1/L2pDTEtdI5xObkG35YXI1Y-Jlas.mft
File:                     L2pDTEtdI5xObkG35YXI1Y-Jlas.mft (raw, json)
Hash identifier:          +uCV7aekzDbxBAsDS/Qc07cvjUAzAvbopf7/f/ZzmSk=
Subject key identifier:   A5:2A:42:05:DA:FA:5E:3F:F3:F2:EF:79:B1:FA:4D:BA:B9:79:EC:DD
Authority key identifier: 2F:6A:43:4C:4B:5D:23:9C:4E:6E:41:B7:E5:85:C8:D5:8F:89:95:AB
Certificate issuer:       /CN=2f6a434c4b5d239c4e6e41b7e585c8d58f8995ab
Certificate serial:       0194BBCE0052BCA423E1CB9C3ECA39902D6E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/L2pDTEtdI5xObkG35YXI1Y-Jlas.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/55/98abe5-bd01-464f-96ab-40b6d67fcd94/1/L2pDTEtdI5xObkG35YXI1Y-Jlas.mft
Manifest number:          11DA
Signing time:             Fri 31 Jan 2025 10:00:27 +0000
Manifest this update:     Fri 31 Jan 2025 10:00:27 +0000
Manifest next update:     Sat 01 Feb 2025 10:00:27 +0000
Files and hashes:         1: 4Daq3sRA17ZdprqbzGRyjmXgl1E.roa (hash: VSeTV1A+yIJMWw7g87Rk+9SxMblNEgNbsAxn9i/toOI=)
                          2: L2pDTEtdI5xObkG35YXI1Y-Jlas.crl (hash: uNbmiH+fyU1wnOvpPFuAsK94LLI7TD7et6QQyWe2DU8=)
                          3: Tnm-XD0emOaH1m81W2sp6JLYBVo.roa (hash: QJeivdmydWWR8gPnHPsG/B1RgaoBvgYawb4rY8u4Fzk=)
                          4: puxQYZc-bCSrSQ9uTbWytBh-eug.roa (hash: GCBmXahO4pMrxN7DjJxkuPfStuAZ5NPuhQw85mRhQ5g=)
                          5: qdxw7ICFkhNmOD2y920CquCl8Zs.roa (hash: 0IGxrItYdslNNm2Z4pvBdqn/xC9v6YAG/wAr3FTvC0g=)
                          6: wqBm7rPN_QCGYMr0G_aOxp5hD2w.roa (hash: luljtEiBvQ077ULzFpsCWlvJ3NF6749HEShaCtOITcM=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bb:ce:00:52:bc:a4:23:e1:cb:9c:3e:ca:39:90:2d:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2f6a434c4b5d239c4e6e41b7e585c8d58f8995ab
        Validity
            Not Before: Jan 31 10:00:27 2025 GMT
            Not After : Feb  1 10:00:27 2025 GMT
        Subject: CN=a52a4205dafa5e3ff3f2ef79b1fa4dbab979ecdd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:1a:b5:9f:f0:e3:42:9f:c1:d8:e4:b8:55:4a:
                    e8:63:8c:30:32:24:f9:0a:0c:f0:68:25:e2:c1:0c:
                    ae:6b:49:b5:b7:8c:8c:6f:06:59:0c:f1:f1:88:df:
                    6b:68:20:eb:96:92:d5:bc:b2:76:74:9b:39:13:05:
                    6f:ba:26:50:3c:22:37:9d:1c:f9:8b:7e:1a:98:d2:
                    91:7e:61:8a:ea:23:a7:be:3e:40:0c:4f:51:00:45:
                    b1:5b:ea:47:29:2f:b0:d3:fa:ec:b5:d2:22:7f:b1:
                    21:eb:bb:5f:2e:a8:f0:7d:86:1e:9e:21:84:b6:62:
                    ae:ca:85:a4:34:3d:8d:56:48:7c:21:dd:aa:d8:9d:
                    1e:8c:3e:a3:e0:9c:7c:a7:8c:74:30:6c:6c:3f:92:
                    63:ed:4f:c9:b1:24:6c:db:10:ff:09:5b:30:1e:d0:
                    f3:71:c2:ae:d9:38:e1:d2:ac:b0:c1:72:ce:e6:c5:
                    85:68:18:df:8c:9a:7f:29:cd:fa:e0:38:df:ec:08:
                    57:9b:a1:ca:e8:82:8d:2d:dd:0d:67:b7:fd:8a:ff:
                    e5:08:9e:2b:60:34:cf:53:bf:6a:b3:6a:34:f4:9f:
                    c1:6c:68:c2:db:4e:57:2b:6b:ed:42:79:af:b9:db:
                    45:9a:d1:c7:87:ad:79:67:09:19:5c:dc:36:bb:f1:
                    3b:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:2A:42:05:DA:FA:5E:3F:F3:F2:EF:79:B1:FA:4D:BA:B9:79:EC:DD
            X509v3 Authority Key Identifier:
                keyid:2F:6A:43:4C:4B:5D:23:9C:4E:6E:41:B7:E5:85:C8:D5:8F:89:95:AB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L2pDTEtdI5xObkG35YXI1Y-Jlas.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/98abe5-bd01-464f-96ab-40b6d67fcd94/1/L2pDTEtdI5xObkG35YXI1Y-Jlas.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/55/98abe5-bd01-464f-96ab-40b6d67fcd94/1/L2pDTEtdI5xObkG35YXI1Y-Jlas.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:5b:6d:b1:fa:4d:cd:2f:81:41:53:48:29:3a:5d:c5:43:5a:
         e3:a0:d6:5a:94:0a:c6:99:0e:0d:e4:fe:48:59:1b:46:c2:2a:
         0e:42:87:a7:7f:88:95:f4:84:ea:f7:e7:2a:d0:20:34:c5:cf:
         eb:35:11:10:6a:05:38:4d:cc:a8:37:c3:f6:12:b4:0a:1f:99:
         92:d7:eb:e5:e2:0a:db:8d:11:bc:4d:cd:7c:40:11:69:8b:6e:
         24:56:1b:c4:5a:77:ea:6a:b1:be:95:d7:a5:7e:14:ba:d6:9b:
         d8:15:f4:c8:1c:22:43:cb:3a:c5:e1:41:0e:91:1a:24:4e:19:
         e9:c4:65:01:c4:4a:e1:7d:54:d1:ed:fc:ec:ca:64:d2:a9:9f:
         a2:b3:54:c6:c6:23:a7:bb:31:e5:88:04:0a:2e:ad:55:6f:70:
         60:c1:af:a0:27:4e:95:8d:67:bc:cb:78:05:ad:6d:8d:eb:80:
         58:69:82:d3:f2:b8:5b:b8:d5:cc:17:1d:04:06:00:3b:97:14:
         5d:ff:8b:d9:92:2a:0a:52:7c:ef:8a:f9:83:88:30:e9:0c:b3:
         28:35:d5:f9:aa:7c:98:03:f7:5e:33:6e:5d:a0:95:82:84:de:
         f7:98:37:9d:02:89:85:45:f4:32:45:b2:d9:53:56:dd:b0:e3:
         b3:9c:4c:c1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS7zgBSvKQj4cucPso5kC1uMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJmNmE0MzRjNGI1ZDIzOWM0ZTZlNDFiN2U1ODVjOGQ1OGY4
OTk1YWIwHhcNMjUwMTMxMTAwMDI3WhcNMjUwMjAxMTAwMDI3WjAzMTEwLwYDVQQD
EyhhNTJhNDIwNWRhZmE1ZTNmZjNmMmVmNzliMWZhNGRiYWI5NzllY2RkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4Rq1n/DjQp/B2OS4VUroY4wwMiT5
CgzwaCXiwQyua0m1t4yMbwZZDPHxiN9raCDrlpLVvLJ2dJs5EwVvuiZQPCI3nRz5
i34amNKRfmGK6iOnvj5ADE9RAEWxW+pHKS+w0/rstdIif7Eh67tfLqjwfYYeniGE
tmKuyoWkND2NVkh8Id2q2J0ejD6j4Jx8p4x0MGxsP5Jj7U/JsSRs2xD/CVswHtDz
ccKu2Tjh0qywwXLO5sWFaBjfjJp/Kc364Djf7AhXm6HK6IKNLd0NZ7f9iv/lCJ4r
YDTPU79qs2o09J/BbGjC205XK2vtQnmvudtFmtHHh615ZwkZXNw2u/E7ZQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKUqQgXa+l4/8/LvebH6Tbq5eezdMB8GA1UdIwQY
MBaAFC9qQ0xLXSOcTm5Bt+WFyNWPiZWrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTDJwRFRFdGRJNXhPYmtHMzVZWEkxWS1KbGFzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS85OGFiZTUtYmQwMS00NjRmLTk2YWIt
NDBiNmQ2N2ZjZDk0LzEvTDJwRFRFdGRJNXhPYmtHMzVZWEkxWS1KbGFzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NS85OGFiZTUtYmQwMS00NjRmLTk2YWItNDBiNmQ2N2ZjZDk0
LzEvTDJwRFRFdGRJNXhPYmtHMzVZWEkxWS1KbGFzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZ1ttsfpN
zS+BQVNIKTpdxUNa46DWWpQKxpkODeT+SFkbRsIqDkKHp3+IlfSE6vfnKtAgNMXP
6zUREGoFOE3MqDfD9hK0Ch+Zktfr5eIK240RvE3NfEARaYtuJFYbxFp36mqxvpXX
pX4Uutab2BX0yBwiQ8s6xeFBDpEaJE4Z6cRlAcRK4X1U0e387Mpk0qmforNUxsYj
p7sx5YgECi6tVW9wYMGvoCdOlY1nvMt4Ba1tjeuAWGmC0/K4W7jVzBcdBAYAO5cU
Xf+L2ZIqClJ874r5g4gw6QyzKDXV+ap8mAP3XjNuXaCVgoTe95g3nQKJhUX0MkWy
2VNW3bDjs5xMwQ==
-----END CERTIFICATE-----