Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/127684-5afe-4f18-b95d-3072503d8607/1/n_M9TzrAqIeECihM3Bq-t91kLwE.mft
File:                     n_M9TzrAqIeECihM3Bq-t91kLwE.mft (raw, json)
Hash identifier:          e+8n/WIfBnTThls2UoNiTrmUM7nmFmqfyncR068UVzo=
Subject key identifier:   AD:42:BA:82:C7:D1:D3:B5:93:7C:DE:9B:E8:79:93:7B:51:50:94:0A
Authority key identifier: 9F:F3:3D:4F:3A:C0:A8:87:84:0A:28:4C:DC:1A:BE:B7:DD:64:2F:01
Certificate issuer:       /CN=9ff33d4f3ac0a887840a284cdc1abeb7dd642f01
Certificate serial:       0194BBCE72502739C4D0542322DD05F64CD2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/n_M9TzrAqIeECihM3Bq-t91kLwE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5a/127684-5afe-4f18-b95d-3072503d8607/1/n_M9TzrAqIeECihM3Bq-t91kLwE.mft
Manifest number:          0D65
Signing time:             Fri 31 Jan 2025 10:00:56 +0000
Manifest this update:     Fri 31 Jan 2025 10:00:56 +0000
Manifest next update:     Sat 01 Feb 2025 10:00:56 +0000
Files and hashes:         1: FVg-EXFcHktuG7QQnavEaXe-fnM.roa (hash: mi0+1itCdMO3yynnGJ5oIkWt7SrPDpOOMP9BVB9K+Jc=)
                          2: T3nKkG-dCBEn2EriUuJalbbWuME.roa (hash: NecAgRoxclxz3UKtAie4B0/FU5sK9TM4xXuPGjhm4Kc=)
                          3: n_M9TzrAqIeECihM3Bq-t91kLwE.crl (hash: CSfXOEZClJHb5eu4JMFPB9sdUI6PLle/T1bjocItTeQ=)
                          4: nl8-f4Y4T6rTsqYQijhuiNifL1Q.roa (hash: D8rqvsrK84p8WeU5jZAqKp61j1ey2NYKXftp+gwX6/8=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bb:ce:72:50:27:39:c4:d0:54:23:22:dd:05:f6:4c:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9ff33d4f3ac0a887840a284cdc1abeb7dd642f01
        Validity
            Not Before: Jan 31 10:00:56 2025 GMT
            Not After : Feb  1 10:00:56 2025 GMT
        Subject: CN=ad42ba82c7d1d3b5937cde9be879937b5150940a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:28:3d:19:1e:29:95:14:aa:35:78:6c:6a:fe:
                    08:97:2e:28:3b:61:aa:93:aa:c1:0b:5b:7a:ff:0f:
                    1a:12:c1:dc:86:82:fe:2c:d4:23:cb:82:93:2f:f9:
                    01:94:c1:6f:aa:42:04:aa:b2:b9:fb:dd:7f:03:15:
                    76:13:ec:62:93:48:b1:17:af:a8:3d:5f:4b:9e:e9:
                    e7:2e:fb:6f:83:a9:ab:5b:94:b2:ba:54:de:3e:30:
                    ff:99:0e:f0:e7:a7:4d:77:11:d9:54:6a:0d:75:c7:
                    b4:4a:6c:2c:c3:bd:38:2a:98:14:4c:12:d5:49:15:
                    5a:12:77:61:39:f1:2a:ee:e5:d2:e9:c9:ef:65:15:
                    fc:9c:d0:b3:f8:9d:5d:45:69:85:dd:4e:0c:8e:17:
                    5b:d4:82:75:aa:e6:8b:3c:6c:a5:2c:13:5f:80:75:
                    07:24:97:35:f3:23:05:57:db:c6:a1:76:d8:00:ae:
                    0e:4f:e2:1b:57:9f:b9:a0:89:94:a6:66:58:6d:a5:
                    8f:38:32:6b:ad:78:14:7f:f1:03:91:f8:87:cf:83:
                    15:83:29:0e:b9:95:0a:96:c3:df:5a:40:85:35:24:
                    54:52:6e:f3:f1:17:d3:27:f5:89:bb:2b:9c:a1:6e:
                    ef:0d:d4:ee:50:13:ef:03:6a:68:00:29:21:73:58:
                    3b:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:42:BA:82:C7:D1:D3:B5:93:7C:DE:9B:E8:79:93:7B:51:50:94:0A
            X509v3 Authority Key Identifier:
                keyid:9F:F3:3D:4F:3A:C0:A8:87:84:0A:28:4C:DC:1A:BE:B7:DD:64:2F:01

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n_M9TzrAqIeECihM3Bq-t91kLwE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/127684-5afe-4f18-b95d-3072503d8607/1/n_M9TzrAqIeECihM3Bq-t91kLwE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/127684-5afe-4f18-b95d-3072503d8607/1/n_M9TzrAqIeECihM3Bq-t91kLwE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         94:41:5e:b7:db:6c:60:5c:bc:dd:02:d2:e7:3f:a0:0b:dc:63:
         df:c1:90:85:6a:2b:2d:13:f6:ae:7d:60:b6:8f:bd:d4:23:0d:
         a9:22:01:fc:7e:2e:ed:81:c3:e0:d2:5e:69:13:ce:6f:45:b3:
         02:fb:63:db:72:cc:30:be:ef:ee:32:74:b8:22:23:80:6c:29:
         3d:25:82:da:fa:b2:fc:e9:1e:f4:28:0f:48:e1:9d:e5:72:d5:
         0d:ee:52:78:2f:75:51:6a:f7:c4:45:ec:7b:17:36:b1:45:46:
         50:38:3e:e2:17:1c:64:36:37:85:04:aa:7d:5c:4a:06:0e:9a:
         b0:5a:39:34:c6:9c:45:cb:43:60:2c:f9:00:20:e0:6a:a1:62:
         7c:0c:bb:0a:56:77:61:00:2c:05:a4:6b:fe:5a:1f:65:f8:82:
         28:ce:be:73:97:95:3f:e1:6a:49:84:d4:3f:50:f0:ff:a7:bb:
         1e:e8:f6:46:fb:fe:dd:44:ff:63:9d:70:46:0f:78:b8:b5:7c:
         bb:9f:e6:b6:86:f9:73:ad:9d:7c:5c:24:43:a8:76:2c:32:e9:
         48:51:52:65:14:97:5e:92:a6:58:a1:e1:a4:8f:9e:9f:cb:74:
         2c:2d:f8:77:1c:83:d2:39:d4:56:be:9c:20:f1:5d:9f:9c:a1:
         1f:63:5c:f2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS7znJQJznE0FQjIt0F9kzSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlmZjMzZDRmM2FjMGE4ODc4NDBhMjg0Y2RjMWFiZWI3ZGQ2
NDJmMDEwHhcNMjUwMTMxMTAwMDU2WhcNMjUwMjAxMTAwMDU2WjAzMTEwLwYDVQQD
EyhhZDQyYmE4MmM3ZDFkM2I1OTM3Y2RlOWJlODc5OTM3YjUxNTA5NDBhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxCg9GR4plRSqNXhsav4Ily4oO2Gq
k6rBC1t6/w8aEsHchoL+LNQjy4KTL/kBlMFvqkIEqrK5+91/AxV2E+xik0ixF6+o
PV9LnunnLvtvg6mrW5SyulTePjD/mQ7w56dNdxHZVGoNdce0Smwsw704KpgUTBLV
SRVaEndhOfEq7uXS6cnvZRX8nNCz+J1dRWmF3U4Mjhdb1IJ1quaLPGylLBNfgHUH
JJc18yMFV9vGoXbYAK4OT+IbV5+5oImUpmZYbaWPODJrrXgUf/EDkfiHz4MVgykO
uZUKlsPfWkCFNSRUUm7z8RfTJ/WJuyucoW7vDdTuUBPvA2poACkhc1g7CQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK1CuoLH0dO1k3zem+h5k3tRUJQKMB8GA1UdIwQY
MBaAFJ/zPU86wKiHhAooTNwavrfdZC8BMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbl9NOVR6ckFxSWVFQ2loTTNCcS10OTFrTHdFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS8xMjc2ODQtNWFmZS00ZjE4LWI5NWQt
MzA3MjUwM2Q4NjA3LzEvbl9NOVR6ckFxSWVFQ2loTTNCcS10OTFrTHdFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81YS8xMjc2ODQtNWFmZS00ZjE4LWI5NWQtMzA3MjUwM2Q4NjA3
LzEvbl9NOVR6ckFxSWVFQ2loTTNCcS10OTFrTHdFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlEFet9ts
YFy83QLS5z+gC9xj38GQhWorLRP2rn1gto+91CMNqSIB/H4u7YHD4NJeaRPOb0Wz
Avtj23LMML7v7jJ0uCIjgGwpPSWC2vqy/Oke9CgPSOGd5XLVDe5SeC91UWr3xEXs
exc2sUVGUDg+4hccZDY3hQSqfVxKBg6asFo5NMacRctDYCz5ACDgaqFifAy7ClZ3
YQAsBaRr/lofZfiCKM6+c5eVP+FqSYTUP1Dw/6e7Huj2Rvv+3UT/Y51wRg94uLV8
u5/mtob5c62dfFwkQ6h2LDLpSFFSZRSXXpKmWKHhpI+en8t0LC34dxyD0jnUVr6c
IPFdn5yhH2Nc8g==
-----END CERTIFICATE-----