Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/c28ea4-059c-49dd-9278-a4db396c8987/1/N5SayE0LhpEPT9PPWWKSfYNFCus.mft
File:                     N5SayE0LhpEPT9PPWWKSfYNFCus.mft (raw, json)
Hash identifier:          tcfzddLhh2qZY7aABGCPCRfjVHbv/65NEDqvgZIedlg=
Subject key identifier:   E3:02:3D:D9:DF:32:77:67:27:37:B2:39:60:65:30:F9:79:DF:51:A6
Authority key identifier: 37:94:9A:C8:4D:0B:86:91:0F:4F:D3:CF:59:62:92:7D:83:45:0A:EB
Certificate issuer:       /CN=37949ac84d0b86910f4fd3cf5962927d83450aeb
Certificate serial:       0194BBCED7307353F63C08B490B644C9EF36
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/N5SayE0LhpEPT9PPWWKSfYNFCus.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/64/c28ea4-059c-49dd-9278-a4db396c8987/1/N5SayE0LhpEPT9PPWWKSfYNFCus.mft
Manifest number:          1437
Signing time:             Fri 31 Jan 2025 10:01:22 +0000
Manifest this update:     Fri 31 Jan 2025 10:01:22 +0000
Manifest next update:     Sat 01 Feb 2025 10:01:22 +0000
Files and hashes:         1: N5SayE0LhpEPT9PPWWKSfYNFCus.crl (hash: rWYse2nhndZ/yniw0oL3+NRWsoCIM8gBCORo5kUrnHs=)
                          2: PRhohmSPpTdafiCYHQlb6tS5RSA.roa (hash: rmrtG9C35CBJyHZUuhN45njc7Z7w311hCWAJB2ctSsg=)
                          3: U3FGMgcx33zABNd6WUQZ6FgIXMg.roa (hash: Wpl9P0cBekHap/iywSD8clsCi8JMACpk0Rm1bx3lrQQ=)
                          4: ag6Uw2WZeIksxGOXDr4DgUkmA5c.roa (hash: Dv4MeWf6ZNTTsICz0sxMh5s96US2ndB/BMpQt263Gn0=)
                          5: hn5PYDOLpsdmTwt2qZTXNCawnyY.roa (hash: 3JeglmLM9o2mfs2x0MSYzgxU3A+vKl/1QHtc/EU9QCM=)
                          6: ncXYiMMk7Py1Om5tGMqWGLBtpDE.roa (hash: ue3PRYMatnVnCc7uFg9uHpheEoijmvmRSQgE1aUj8Qs=)
                          7: pehnBB-B-wysgLV5x41--aRvVZU.roa (hash: znIOUjgtTlPjJizZbJTREWW6ctyWS6FYMjde0/qvy2I=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bb:ce:d7:30:73:53:f6:3c:08:b4:90:b6:44:c9:ef:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=37949ac84d0b86910f4fd3cf5962927d83450aeb
        Validity
            Not Before: Jan 31 10:01:22 2025 GMT
            Not After : Feb  1 10:01:22 2025 GMT
        Subject: CN=e3023dd9df3277672737b239606530f979df51a6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:dd:bc:3a:46:62:6e:24:60:90:0d:3c:50:92:
                    3f:7e:ce:73:b5:13:0a:32:ca:a3:b5:d6:71:a2:73:
                    04:d3:a7:0e:aa:1c:3b:5b:b4:6c:a4:73:8b:11:7b:
                    0d:28:ce:5c:c4:e4:6a:fa:17:a4:e3:df:41:71:c7:
                    f9:b9:f0:54:eb:82:b1:39:91:d1:37:83:fa:56:d3:
                    00:f0:d5:5c:a6:82:aa:69:8c:a1:55:72:94:1a:bc:
                    6f:53:30:49:ef:e4:0e:15:9f:e2:49:dc:2a:04:26:
                    08:96:fd:15:ae:a8:7c:c8:bd:fc:0d:4e:b3:02:8b:
                    c3:6c:69:da:54:b2:08:7c:6b:a0:a6:16:08:c9:f5:
                    a4:a8:37:90:f1:72:e9:12:56:c5:67:58:66:b5:b0:
                    09:af:72:07:54:ab:54:45:f0:2d:02:ae:3d:49:7a:
                    d0:50:4a:24:ec:a5:8a:bf:6d:2c:56:26:9e:75:cc:
                    d5:33:ab:5d:63:94:de:f0:b0:8f:6f:a9:26:92:b7:
                    2f:e2:04:a2:17:54:f7:94:14:e0:35:34:4c:55:64:
                    12:84:6f:0d:13:67:75:fa:4d:53:19:26:d2:b8:cf:
                    bb:ad:f9:06:88:2d:c8:d6:69:b5:b7:66:09:fd:ce:
                    cb:c6:cc:a4:dd:97:e4:ea:95:7e:b8:c9:a7:47:19:
                    6c:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:02:3D:D9:DF:32:77:67:27:37:B2:39:60:65:30:F9:79:DF:51:A6
            X509v3 Authority Key Identifier:
                keyid:37:94:9A:C8:4D:0B:86:91:0F:4F:D3:CF:59:62:92:7D:83:45:0A:EB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N5SayE0LhpEPT9PPWWKSfYNFCus.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/c28ea4-059c-49dd-9278-a4db396c8987/1/N5SayE0LhpEPT9PPWWKSfYNFCus.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/64/c28ea4-059c-49dd-9278-a4db396c8987/1/N5SayE0LhpEPT9PPWWKSfYNFCus.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:67:fa:dc:62:18:18:9b:9e:c3:78:5e:37:2d:52:65:a6:34:
         97:da:88:a4:34:be:d0:47:ca:75:8a:a4:4a:7e:f2:7c:27:85:
         37:07:ee:1f:96:ab:81:46:86:c4:58:dd:26:81:ba:63:09:41:
         9f:f9:3f:67:27:33:fe:c1:d8:e1:0c:78:ad:fc:99:e7:7f:ff:
         ce:1e:93:fd:db:34:cb:08:33:7b:db:ee:4b:69:5b:83:3a:48:
         49:03:09:8d:2d:cb:01:c3:75:78:78:57:6a:7e:c0:2c:7e:94:
         ed:20:65:fb:40:69:22:38:28:9f:ee:91:61:e7:f7:55:27:8d:
         18:9e:47:fc:2d:e0:b7:46:be:4f:d8:08:2d:56:b5:a7:86:2c:
         7c:8d:8b:7d:10:39:65:fc:31:fd:6e:c1:ca:8a:b9:c2:38:ca:
         66:5b:c0:37:db:73:80:8b:44:55:46:07:41:81:ac:2a:81:cc:
         97:9c:ea:06:08:eb:1c:e9:57:19:aa:04:cb:d6:5b:52:5b:d2:
         3d:99:93:66:45:a2:c0:61:01:81:0c:16:24:88:5a:cc:4c:05:
         18:04:18:44:ac:bc:fc:f6:90:e6:38:09:7d:5f:ce:8f:e0:cb:
         12:bb:8b:22:ea:1b:21:10:76:52:f4:c2:f1:eb:c7:7c:88:4f:
         ae:64:8f:b8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS7ztcwc1P2PAi0kLZEye82MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM3OTQ5YWM4NGQwYjg2OTEwZjRmZDNjZjU5NjI5MjdkODM0
NTBhZWIwHhcNMjUwMTMxMTAwMTIyWhcNMjUwMjAxMTAwMTIyWjAzMTEwLwYDVQQD
EyhlMzAyM2RkOWRmMzI3NzY3MjczN2IyMzk2MDY1MzBmOTc5ZGY1MWE2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz928OkZibiRgkA08UJI/fs5ztRMK
MsqjtdZxonME06cOqhw7W7RspHOLEXsNKM5cxORq+hek499Bccf5ufBU64KxOZHR
N4P6VtMA8NVcpoKqaYyhVXKUGrxvUzBJ7+QOFZ/iSdwqBCYIlv0Vrqh8yL38DU6z
AovDbGnaVLIIfGugphYIyfWkqDeQ8XLpElbFZ1hmtbAJr3IHVKtURfAtAq49SXrQ
UEok7KWKv20sViaedczVM6tdY5Te8LCPb6kmkrcv4gSiF1T3lBTgNTRMVWQShG8N
E2d1+k1TGSbSuM+7rfkGiC3I1mm1t2YJ/c7Lxsyk3Zfk6pV+uMmnRxls6QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOMCPdnfMndnJzeyOWBlMPl531GmMB8GA1UdIwQY
MBaAFDeUmshNC4aRD0/Tz1likn2DRQrrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTjVTYXlFMExocEVQVDlQUFdXS1NmWU5GQ3VzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC9jMjhlYTQtMDU5Yy00OWRkLTkyNzgt
YTRkYjM5NmM4OTg3LzEvTjVTYXlFMExocEVQVDlQUFdXS1NmWU5GQ3VzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NC9jMjhlYTQtMDU5Yy00OWRkLTkyNzgtYTRkYjM5NmM4OTg3
LzEvTjVTYXlFMExocEVQVDlQUFdXS1NmWU5GQ3VzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANGf63GIY
GJuew3heNy1SZaY0l9qIpDS+0EfKdYqkSn7yfCeFNwfuH5argUaGxFjdJoG6YwlB
n/k/Zycz/sHY4Qx4rfyZ53//zh6T/ds0ywgze9vuS2lbgzpISQMJjS3LAcN1eHhX
an7ALH6U7SBl+0BpIjgon+6RYef3VSeNGJ5H/C3gt0a+T9gILVa1p4YsfI2LfRA5
Zfwx/W7Byoq5wjjKZlvAN9tzgItEVUYHQYGsKoHMl5zqBgjrHOlXGaoEy9ZbUlvS
PZmTZkWiwGEBgQwWJIhazEwFGAQYRKy8/PaQ5jgJfV/Oj+DLEruLIuobIRB2UvTC
8evHfIhPrmSPuA==
-----END CERTIFICATE-----