Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/943d5d-560c-4314-af82-8b8a01bd7414/1/H8SSerGUrhI3_eLTvvaQOIk_DcU.mft
File:                     H8SSerGUrhI3_eLTvvaQOIk_DcU.mft (raw, json)
Hash identifier:          oEXDYgeSAC1BfO2QVVFTMoftZgSYIwmSkeCPfVW6up4=
Subject key identifier:   89:0B:A1:62:59:62:57:8E:BC:F8:A3:4E:26:BC:D5:C1:91:59:9C:15
Authority key identifier: 1F:C4:92:7A:B1:94:AE:12:37:FD:E2:D3:BE:F6:90:38:89:3F:0D:C5
Certificate issuer:       /CN=1fc4927ab194ae1237fde2d3bef69038893f0dc5
Certificate serial:       0194BCA9E4262106325ECCB278C0F8ABD902
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/H8SSerGUrhI3_eLTvvaQOIk_DcU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/59/943d5d-560c-4314-af82-8b8a01bd7414/1/H8SSerGUrhI3_eLTvvaQOIk_DcU.mft
Manifest number:          0EB3
Signing time:             Fri 31 Jan 2025 14:00:38 +0000
Manifest this update:     Fri 31 Jan 2025 14:00:38 +0000
Manifest next update:     Sat 01 Feb 2025 14:00:38 +0000
Files and hashes:         1: 9N4nOv3tg3sEbPyzZf0it1Hq25E.roa (hash: IJnSS5a9u+7nIpL38LijT/DvQkKhhTmKcLRcnn9ZFq4=)
                          2: H8SSerGUrhI3_eLTvvaQOIk_DcU.crl (hash: oC91fHQoBVsD/w6EjnI2bd8KvPNYpZ/HTOhy1en135w=)
                          3: HFw-x8czfBceHHrxWFsisFaU53k.roa (hash: cYh9OngZxsihRjHnYd3zU3o4mbQkOgFi9+M2bbApN3k=)
                          4: X8AY7TE63_MLYw5qzgUDNFtz5p0.roa (hash: X2a5upeXUq+OfzrT3NEfhOg+ntOWBbajp/Ueexg9I2s=)
                          5: lZMuhPvtZ2azCXBKPog94p3v2Xw.roa (hash: xEuRWjb3WfY9qNirTUGj3ZWp2yVhhUygTy4CswJMg3c=)
                          6: uIXD9TM7mcGL2h8D_v3d0KyzT9E.roa (hash: N8tk1k3ctTBw3mBa+DDHR+60L2fh+aJO68VY7R3S2T4=)
                          7: vlexF02dkqJLD0WdrTxwGKUdE4I.roa (hash: cuDkI790X0jMiu+jzLtuqyGyt6ox4BybHkrBEnZriww=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:a9:e4:26:21:06:32:5e:cc:b2:78:c0:f8:ab:d9:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1fc4927ab194ae1237fde2d3bef69038893f0dc5
        Validity
            Not Before: Jan 31 14:00:38 2025 GMT
            Not After : Feb  1 14:00:38 2025 GMT
        Subject: CN=890ba1625962578ebcf8a34e26bcd5c191599c15
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:1e:c1:f1:75:5d:e1:42:9c:f1:bf:89:df:8d:
                    5f:a3:db:f2:e8:93:d1:a6:61:44:42:24:2c:4e:28:
                    15:c6:4c:79:1b:f9:d8:f1:6c:b4:d6:d4:fb:69:3b:
                    d6:90:7e:4d:13:0c:b2:02:26:27:32:47:46:6a:02:
                    16:a7:f4:bd:1f:82:09:b3:08:16:f0:b8:9c:5d:b5:
                    1a:e0:ed:5a:0e:ae:d7:e4:14:ae:7f:0a:46:13:ea:
                    68:04:94:f2:4f:5c:65:f4:b1:62:f2:9e:0b:e8:2b:
                    9a:11:27:af:6e:a5:84:77:04:57:ae:de:25:6f:81:
                    7c:e4:51:ec:60:94:7b:f4:8f:3b:46:97:15:63:c3:
                    fa:18:76:c3:36:c7:b8:56:c8:10:22:5c:b2:7a:9c:
                    41:d2:df:8f:36:00:31:8a:a8:6b:4b:1e:18:eb:a9:
                    7e:99:4b:c1:cb:a9:c0:31:51:0a:88:e5:47:94:94:
                    63:6c:96:54:03:c4:26:30:83:50:02:25:95:8f:e5:
                    78:c5:e1:19:71:0c:a3:8e:74:86:e1:5c:0c:9c:d7:
                    5a:e9:b8:18:5e:0b:77:c5:e5:5c:86:60:27:ef:eb:
                    29:63:f5:0e:2f:bf:47:48:e4:af:28:37:05:87:98:
                    5b:74:87:0a:44:67:39:73:a5:02:7d:78:00:0f:37:
                    62:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:0B:A1:62:59:62:57:8E:BC:F8:A3:4E:26:BC:D5:C1:91:59:9C:15
            X509v3 Authority Key Identifier:
                keyid:1F:C4:92:7A:B1:94:AE:12:37:FD:E2:D3:BE:F6:90:38:89:3F:0D:C5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H8SSerGUrhI3_eLTvvaQOIk_DcU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/943d5d-560c-4314-af82-8b8a01bd7414/1/H8SSerGUrhI3_eLTvvaQOIk_DcU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/59/943d5d-560c-4314-af82-8b8a01bd7414/1/H8SSerGUrhI3_eLTvvaQOIk_DcU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:d4:fe:d5:01:c5:c3:7d:1e:0e:52:76:52:a4:02:02:2d:e3:
         1e:08:61:30:ba:b3:29:63:81:cf:5b:58:c7:a4:d8:03:2e:16:
         8c:6a:1e:63:1c:92:01:49:e7:a1:44:0e:07:20:e1:52:ab:c8:
         05:a1:7e:38:d1:92:b1:70:cc:5c:c5:13:92:3f:dd:d7:40:d0:
         d2:40:df:c9:0e:b5:b7:ee:00:bc:c3:cb:77:4f:31:77:03:cb:
         fc:3a:b4:59:d5:72:d7:e5:53:4a:63:3c:6d:e1:e7:a3:d3:4c:
         ae:d4:28:43:2f:f3:6d:d5:eb:0e:f7:a5:39:78:8e:24:50:67:
         6f:80:51:68:24:f1:2f:fc:90:b6:1b:67:9c:14:80:8e:09:9a:
         7e:0f:2b:d2:2a:42:02:ae:14:c1:3e:6e:e2:5b:b7:3a:c9:c3:
         f4:06:e1:5b:1b:5d:3f:30:fd:d1:dd:cf:cf:79:06:04:e4:0b:
         29:b6:a4:8e:81:f9:d7:69:e0:9d:2a:b4:0f:b0:a4:3f:c8:c6:
         d8:5d:1a:c6:25:04:5d:9b:ce:5d:f8:56:3f:f4:3f:ef:c9:fd:
         f2:5b:81:c9:90:49:3b:e0:bf:e7:00:f4:d8:37:ad:8f:75:26:
         41:4f:d6:61:41:f4:65:18:e0:57:a4:bf:37:c1:39:23:54:95:
         07:67:2a:61
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8qeQmIQYyXsyyeMD4q9kCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFmYzQ5MjdhYjE5NGFlMTIzN2ZkZTJkM2JlZjY5MDM4ODkz
ZjBkYzUwHhcNMjUwMTMxMTQwMDM4WhcNMjUwMjAxMTQwMDM4WjAzMTEwLwYDVQQD
Eyg4OTBiYTE2MjU5NjI1NzhlYmNmOGEzNGUyNmJjZDVjMTkxNTk5YzE1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuR7B8XVd4UKc8b+J341fo9vy6JPR
pmFEQiQsTigVxkx5G/nY8Wy01tT7aTvWkH5NEwyyAiYnMkdGagIWp/S9H4IJswgW
8LicXbUa4O1aDq7X5BSufwpGE+poBJTyT1xl9LFi8p4L6CuaESevbqWEdwRXrt4l
b4F85FHsYJR79I87RpcVY8P6GHbDNse4VsgQIlyyepxB0t+PNgAxiqhrSx4Y66l+
mUvBy6nAMVEKiOVHlJRjbJZUA8QmMINQAiWVj+V4xeEZcQyjjnSG4VwMnNda6bgY
Xgt3xeVchmAn7+spY/UOL79HSOSvKDcFh5hbdIcKRGc5c6UCfXgADzdiCQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIkLoWJZYleOvPijTia81cGRWZwVMB8GA1UdIwQY
MBaAFB/EknqxlK4SN/3i0772kDiJPw3FMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSDhTU2VyR1VyaEkzX2VMVHZ2YVFPSWtfRGNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS85NDNkNWQtNTYwYy00MzE0LWFmODIt
OGI4YTAxYmQ3NDE0LzEvSDhTU2VyR1VyaEkzX2VMVHZ2YVFPSWtfRGNVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OS85NDNkNWQtNTYwYy00MzE0LWFmODItOGI4YTAxYmQ3NDE0
LzEvSDhTU2VyR1VyaEkzX2VMVHZ2YVFPSWtfRGNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALtT+1QHF
w30eDlJ2UqQCAi3jHghhMLqzKWOBz1tYx6TYAy4WjGoeYxySAUnnoUQOByDhUqvI
BaF+ONGSsXDMXMUTkj/d10DQ0kDfyQ61t+4AvMPLd08xdwPL/Dq0WdVy1+VTSmM8
beHno9NMrtQoQy/zbdXrDvelOXiOJFBnb4BRaCTxL/yQthtnnBSAjgmafg8r0ipC
Aq4UwT5u4lu3OsnD9AbhWxtdPzD90d3Pz3kGBOQLKbakjoH512ngnSq0D7CkP8jG
2F0axiUEXZvOXfhWP/Q/78n98luByZBJO+C/5wD02Detj3UmQU/WYUH0ZRjgV6S/
N8E5I1SVB2cqYQ==
-----END CERTIFICATE-----