Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/738179-cf67-4199-b532-2fb2958ab8bb/1/B6MpmcR-sx1fvxbsw4curv1Dutc.mft
File:                     B6MpmcR-sx1fvxbsw4curv1Dutc.mft (raw, json)
Hash identifier:          w9ejpLcaSIhGwD06ccbkUAd/H0iKjqt39tj9SRVLnwM=
Subject key identifier:   A1:C3:0B:FD:3D:93:E7:7B:06:AE:A4:F4:83:B8:FA:7B:5D:29:5A:D6
Authority key identifier: 07:A3:29:99:C4:7E:B3:1D:5F:BF:16:EC:C3:87:2E:AE:FD:43:BA:D7
Certificate issuer:       /CN=07a32999c47eb31d5fbf16ecc3872eaefd43bad7
Certificate serial:       0194BC3C358AA8BAD4AE482B8F87103EC4FC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/B6MpmcR-sx1fvxbsw4curv1Dutc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5b/738179-cf67-4199-b532-2fb2958ab8bb/1/B6MpmcR-sx1fvxbsw4curv1Dutc.mft
Manifest number:          051C
Signing time:             Fri 31 Jan 2025 12:00:49 +0000
Manifest this update:     Fri 31 Jan 2025 12:00:49 +0000
Manifest next update:     Sat 01 Feb 2025 12:00:49 +0000
Files and hashes:         1: 0X1Ipto9w1nE9eagzvuD9O-P6yM.roa (hash: 4sHYt9ffM1owRIY1+dPqOYaSkh7XHYwPkbzwcWqEjcU=)
                          2: 7AlArdqKTBFr65OH4hTRmhNCtY0.roa (hash: sCj6GvBz9SIkgTT0uHHgmBuQn+81oXZZmhGm4a4Dh5E=)
                          3: B6MpmcR-sx1fvxbsw4curv1Dutc.crl (hash: RIeqNULA3a/mD/fS187aTqIjAd8qRd8h9jZM+bq5H0k=)
                          4: TITtQN9H4YMtDNIjhOzReJ_u72Q.roa (hash: 67P3zlJcWxvynbC85NC3cxjRvKlgIIBMXl7lB1dlxRY=)
                          5: gfOuYPIFKu1t4LchnV-tiQ23x_o.roa (hash: MaDF2nJtr0HdC25PICF1gfuevH1AQFouYi3XzrLGpak=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:3c:35:8a:a8:ba:d4:ae:48:2b:8f:87:10:3e:c4:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07a32999c47eb31d5fbf16ecc3872eaefd43bad7
        Validity
            Not Before: Jan 31 12:00:49 2025 GMT
            Not After : Feb  1 12:00:49 2025 GMT
        Subject: CN=a1c30bfd3d93e77b06aea4f483b8fa7b5d295ad6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:e5:a4:7a:d5:aa:04:c3:9c:3f:af:f1:a9:3f:
                    9f:7f:93:ec:aa:33:e4:80:4f:35:74:9b:8b:15:ba:
                    22:b4:18:d4:82:df:09:b0:b5:de:63:83:c7:4f:7a:
                    3e:78:89:1e:cb:26:a0:6c:1e:45:3c:0f:ab:ce:32:
                    ad:20:06:47:cc:78:01:a1:f1:f5:d6:68:2d:75:61:
                    56:6f:eb:6d:fe:50:b3:8c:d6:3f:2c:14:99:8f:a8:
                    7f:ce:bc:74:da:3c:31:f4:cb:39:e9:61:13:02:68:
                    bb:ff:bb:e2:b3:f5:ba:61:ed:ca:7a:e1:c5:5f:00:
                    62:0e:ba:b9:35:7c:af:81:b2:75:95:2b:06:8b:5a:
                    1a:b4:6e:58:a2:92:15:01:22:34:c8:4c:4d:37:4f:
                    07:25:a9:5f:2e:22:a3:f9:31:01:ef:8d:19:ef:88:
                    72:63:8c:c2:7b:33:13:9a:d1:bf:40:3b:11:2f:83:
                    5a:ee:d4:b4:a4:c8:2c:7a:7f:39:01:69:a9:79:5d:
                    32:01:7c:f7:1f:46:b9:af:4f:45:0e:90:c8:95:83:
                    2d:58:6c:12:67:89:f9:e8:e5:07:63:3c:be:c8:6b:
                    c8:f9:43:e7:2b:6b:71:6c:af:70:31:84:56:79:aa:
                    4e:b3:51:c5:0f:e5:f6:c3:dc:21:fc:37:77:55:ed:
                    60:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:C3:0B:FD:3D:93:E7:7B:06:AE:A4:F4:83:B8:FA:7B:5D:29:5A:D6
            X509v3 Authority Key Identifier:
                keyid:07:A3:29:99:C4:7E:B3:1D:5F:BF:16:EC:C3:87:2E:AE:FD:43:BA:D7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B6MpmcR-sx1fvxbsw4curv1Dutc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/738179-cf67-4199-b532-2fb2958ab8bb/1/B6MpmcR-sx1fvxbsw4curv1Dutc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/738179-cf67-4199-b532-2fb2958ab8bb/1/B6MpmcR-sx1fvxbsw4curv1Dutc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         97:d8:20:6f:b8:6e:4d:8f:90:d4:c7:0c:71:cd:09:7b:31:5d:
         50:9b:2b:7d:a7:69:39:b2:e1:72:b2:45:d5:0a:38:1d:5f:16:
         80:52:6a:b2:f6:5a:64:31:8b:d1:5d:f2:a0:6b:d8:37:86:77:
         c5:09:26:6c:af:fc:fd:ac:7c:43:ed:54:5e:8f:ca:24:ea:61:
         86:5d:94:c3:c4:3e:53:72:6a:fb:d0:6f:ba:46:ad:89:6c:e7:
         2e:4a:0b:77:9c:5c:a0:dd:69:8a:2e:51:72:69:03:c7:ab:10:
         d0:65:92:46:98:db:fa:3d:48:79:ba:5e:dd:d9:f2:a0:64:f5:
         11:a5:50:d3:b6:6d:42:67:65:9c:19:21:5a:d1:bf:ed:0e:64:
         dc:a5:32:bd:18:f7:06:30:e9:60:ef:d7:72:f2:24:b8:e0:2f:
         3c:ac:35:e0:58:73:58:b3:dd:12:fa:11:19:cb:b3:9a:c2:70:
         4b:b5:b8:5b:4d:e3:ae:eb:02:52:56:01:67:d6:28:10:de:f3:
         61:0e:76:03:cb:8c:eb:e1:7c:ab:56:26:07:46:24:5a:a4:21:
         bd:e4:ac:e9:cc:c9:f8:e0:40:e0:61:84:26:40:4b:82:25:c9:
         b8:b8:73:6a:e1:61:98:bd:2d:cb:76:a2:62:d8:fe:ea:08:fb:
         bf:a7:14:67
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8PDWKqLrUrkgrj4cQPsT8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA3YTMyOTk5YzQ3ZWIzMWQ1ZmJmMTZlY2MzODcyZWFlZmQ0
M2JhZDcwHhcNMjUwMTMxMTIwMDQ5WhcNMjUwMjAxMTIwMDQ5WjAzMTEwLwYDVQQD
EyhhMWMzMGJmZDNkOTNlNzdiMDZhZWE0ZjQ4M2I4ZmE3YjVkMjk1YWQ2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyOWketWqBMOcP6/xqT+ff5PsqjPk
gE81dJuLFboitBjUgt8JsLXeY4PHT3o+eIkeyyagbB5FPA+rzjKtIAZHzHgBofH1
1mgtdWFWb+tt/lCzjNY/LBSZj6h/zrx02jwx9Ms56WETAmi7/7vis/W6Ye3KeuHF
XwBiDrq5NXyvgbJ1lSsGi1oatG5YopIVASI0yExNN08HJalfLiKj+TEB740Z74hy
Y4zCezMTmtG/QDsRL4Na7tS0pMgsen85AWmpeV0yAXz3H0a5r09FDpDIlYMtWGwS
Z4n56OUHYzy+yGvI+UPnK2txbK9wMYRWeapOs1HFD+X2w9wh/Dd3Ve1gSwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKHDC/09k+d7Bq6k9IO4+ntdKVrWMB8GA1UdIwQY
MBaAFAejKZnEfrMdX78W7MOHLq79Q7rXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQjZNcG1jUi1zeDFmdnhic3c0Y3VydjFEdXRjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi83MzgxNzktY2Y2Ny00MTk5LWI1MzIt
MmZiMjk1OGFiOGJiLzEvQjZNcG1jUi1zeDFmdnhic3c0Y3VydjFEdXRjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yi83MzgxNzktY2Y2Ny00MTk5LWI1MzItMmZiMjk1OGFiOGJi
LzEvQjZNcG1jUi1zeDFmdnhic3c0Y3VydjFEdXRjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAl9ggb7hu
TY+Q1McMcc0JezFdUJsrfadpObLhcrJF1Qo4HV8WgFJqsvZaZDGL0V3yoGvYN4Z3
xQkmbK/8/ax8Q+1UXo/KJOphhl2Uw8Q+U3Jq+9BvukatiWznLkoLd5xcoN1pii5R
cmkDx6sQ0GWSRpjb+j1Iebpe3dnyoGT1EaVQ07ZtQmdlnBkhWtG/7Q5k3KUyvRj3
BjDpYO/XcvIkuOAvPKw14FhzWLPdEvoRGcuzmsJwS7W4W03jrusCUlYBZ9YoEN7z
YQ52A8uM6+F8q1YmB0YkWqQhveSs6czJ+OBA4GGEJkBLgiXJuLhzauFhmL0ty3ai
Ytj+6gj7v6cUZw==
-----END CERTIFICATE-----