Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/30cd0a-93cf-45dc-9356-14a09993d671/1/UQtBnwwXtMi-IX9kOI0mjRTcJh4.mft
File:                     UQtBnwwXtMi-IX9kOI0mjRTcJh4.mft (raw, json)
Hash identifier:          F0uw19wXW2PvG3NQkOcPCYVz35AFJHu090rL/U7p23w=
Subject key identifier:   1B:7C:AB:63:F8:8E:DE:E9:7B:B6:3A:58:04:BD:8E:17:D4:FD:BB:80
Authority key identifier: 51:0B:41:9F:0C:17:B4:C8:BE:21:7F:64:38:8D:26:8D:14:DC:26:1E
Certificate issuer:       /CN=510b419f0c17b4c8be217f64388d268d14dc261e
Certificate serial:       0194BBCDD4D1CCCE65992D024AB524B36552
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UQtBnwwXtMi-IX9kOI0mjRTcJh4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/68/30cd0a-93cf-45dc-9356-14a09993d671/1/UQtBnwwXtMi-IX9kOI0mjRTcJh4.mft
Manifest number:          0F43
Signing time:             Fri 31 Jan 2025 10:00:16 +0000
Manifest this update:     Fri 31 Jan 2025 10:00:16 +0000
Manifest next update:     Sat 01 Feb 2025 10:00:16 +0000
Files and hashes:         1: 8FpdEn-l_hiolzNzzKTj8ttk4Hg.roa (hash: 8myazzM92zabo3pNlq4+VGmIqnp1nra4hTR3bbkhXqo=)
                          2: C9FeLXHlmSb6adQSBmHRmx1p1GQ.roa (hash: wsQwdaHpob1xHgKH8CTJtFsTYcrf5LAWX2Z18JuGPe4=)
                          3: EJxH9YM4T4z2OK_adCvCeJ1uWkQ.roa (hash: uAsvwaMtcMOr9i0+t37QKzdz9ftJWtmHdf0VDRcsGJI=)
                          4: PAbHc64weo8hVFOoyNw_KIYZGbQ.roa (hash: QrXbLReiK7UXgLaMSU+fS4kFmpcrsFUElNX3domZ2dw=)
                          5: UQtBnwwXtMi-IX9kOI0mjRTcJh4.crl (hash: uVwIbasTk6ZRxm5ZeblyQj4bFA2Ue30he/exSsY1A1s=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bb:cd:d4:d1:cc:ce:65:99:2d:02:4a:b5:24:b3:65:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=510b419f0c17b4c8be217f64388d268d14dc261e
        Validity
            Not Before: Jan 31 10:00:16 2025 GMT
            Not After : Feb  1 10:00:16 2025 GMT
        Subject: CN=1b7cab63f88edee97bb63a5804bd8e17d4fdbb80
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:00:e4:d9:e8:0b:cf:f1:01:33:aa:17:3e:82:
                    a2:0b:76:35:de:cb:17:71:8a:dc:f9:eb:26:15:cd:
                    93:53:08:8c:8e:e6:80:31:24:9e:5c:2e:87:94:d0:
                    49:ee:62:1f:00:68:c5:f1:9a:e8:47:8a:4d:b5:a4:
                    5e:e1:51:ad:59:dd:68:96:e9:b0:97:fd:5f:fb:63:
                    a1:ab:11:6d:f1:72:52:0f:f0:3e:80:e2:9d:d9:ff:
                    ae:40:f0:e6:b0:59:55:19:5a:56:21:29:11:1b:fe:
                    76:ea:be:ab:7e:9b:06:7b:f0:d1:c2:0b:4c:ff:4e:
                    09:60:d1:66:19:a2:53:d0:95:bd:3f:b4:a7:99:bd:
                    4c:ad:50:76:1a:b6:30:c5:da:62:96:43:5c:a1:fd:
                    11:08:70:b5:37:3f:65:8c:83:21:47:d1:f9:45:ea:
                    f9:43:ce:41:7d:64:90:37:88:75:c3:40:24:71:e6:
                    f1:ee:34:32:ba:ec:cf:c0:1d:02:b4:bc:6d:1b:5f:
                    79:09:d7:b6:fd:3e:89:48:1d:64:26:3c:74:50:5b:
                    99:d4:9c:c9:d9:33:d7:89:34:a2:d7:60:6f:95:c8:
                    95:18:04:33:b8:af:bd:6a:7c:9d:94:06:d8:1a:1d:
                    c1:9a:ad:5a:76:ea:e8:08:61:33:ce:19:0d:3b:c1:
                    b7:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:7C:AB:63:F8:8E:DE:E9:7B:B6:3A:58:04:BD:8E:17:D4:FD:BB:80
            X509v3 Authority Key Identifier:
                keyid:51:0B:41:9F:0C:17:B4:C8:BE:21:7F:64:38:8D:26:8D:14:DC:26:1E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UQtBnwwXtMi-IX9kOI0mjRTcJh4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/30cd0a-93cf-45dc-9356-14a09993d671/1/UQtBnwwXtMi-IX9kOI0mjRTcJh4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/68/30cd0a-93cf-45dc-9356-14a09993d671/1/UQtBnwwXtMi-IX9kOI0mjRTcJh4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:44:27:5d:d3:4a:b9:2e:10:b8:ab:0f:69:08:54:26:42:4a:
         e0:10:a8:77:3f:99:10:ff:3b:31:b0:50:63:dd:42:d7:12:e0:
         34:73:55:e5:f9:0e:c6:ca:2b:b4:2a:ab:d7:10:48:e6:95:a0:
         f5:2a:1a:f4:85:9c:6f:d6:8c:62:b0:7e:ae:3b:98:85:d5:b9:
         5d:e1:ed:5b:84:71:b1:61:6a:4b:18:57:28:21:26:83:2b:02:
         4e:7d:9a:81:6a:4f:7d:75:ae:16:1c:36:b3:e6:37:c6:2c:ca:
         86:47:1f:fc:e7:f6:77:d0:a6:b9:e3:ad:68:e7:c2:f2:d6:77:
         40:e4:88:ae:aa:ce:7a:a1:c5:e4:1d:ff:13:28:b4:c0:df:05:
         e5:96:9a:85:1f:2f:f8:e9:ba:e9:11:03:23:d9:bb:94:22:5c:
         38:da:64:5f:b0:8e:9c:32:40:dc:0e:fe:ec:0b:09:3c:2f:18:
         64:6f:ae:f6:bd:25:77:b2:6e:2f:e9:64:da:89:7f:57:4b:c4:
         bb:13:72:d4:b7:ea:fa:01:52:69:25:53:47:92:31:02:a5:4f:
         d8:ba:33:73:d9:95:07:d1:1d:de:6c:8c:77:3f:43:af:af:b9:
         b6:2b:43:fe:c7:be:05:b0:de:61:9b:a6:f7:d9:a3:b0:b8:bc:
         dc:f3:30:c0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS7zdTRzM5lmS0CSrUks2VSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUxMGI0MTlmMGMxN2I0YzhiZTIxN2Y2NDM4OGQyNjhkMTRk
YzI2MWUwHhcNMjUwMTMxMTAwMDE2WhcNMjUwMjAxMTAwMDE2WjAzMTEwLwYDVQQD
EygxYjdjYWI2M2Y4OGVkZWU5N2JiNjNhNTgwNGJkOGUxN2Q0ZmRiYjgwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAygDk2egLz/EBM6oXPoKiC3Y13ssX
cYrc+esmFc2TUwiMjuaAMSSeXC6HlNBJ7mIfAGjF8ZroR4pNtaRe4VGtWd1olumw
l/1f+2OhqxFt8XJSD/A+gOKd2f+uQPDmsFlVGVpWISkRG/526r6rfpsGe/DRwgtM
/04JYNFmGaJT0JW9P7Snmb1MrVB2GrYwxdpilkNcof0RCHC1Nz9ljIMhR9H5Rer5
Q85BfWSQN4h1w0Akcebx7jQyuuzPwB0CtLxtG195Cde2/T6JSB1kJjx0UFuZ1JzJ
2TPXiTSi12BvlciVGAQzuK+9anydlAbYGh3Bmq1aduroCGEzzhkNO8G36QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBt8q2P4jt7pe7Y6WAS9jhfU/buAMB8GA1UdIwQY
MBaAFFELQZ8MF7TIviF/ZDiNJo0U3CYeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVVF0Qm53d1h0TWktSVg5a09JMG1qUlRjSmg0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OC8zMGNkMGEtOTNjZi00NWRjLTkzNTYt
MTRhMDk5OTNkNjcxLzEvVVF0Qm53d1h0TWktSVg5a09JMG1qUlRjSmg0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82OC8zMGNkMGEtOTNjZi00NWRjLTkzNTYtMTRhMDk5OTNkNjcx
LzEvVVF0Qm53d1h0TWktSVg5a09JMG1qUlRjSmg0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALEQnXdNK
uS4QuKsPaQhUJkJK4BCodz+ZEP87MbBQY91C1xLgNHNV5fkOxsortCqr1xBI5pWg
9Soa9IWcb9aMYrB+rjuYhdW5XeHtW4RxsWFqSxhXKCEmgysCTn2agWpPfXWuFhw2
s+Y3xizKhkcf/Of2d9CmueOtaOfC8tZ3QOSIrqrOeqHF5B3/Eyi0wN8F5ZaahR8v
+Om66REDI9m7lCJcONpkX7COnDJA3A7+7AsJPC8YZG+u9r0ld7JuL+lk2ol/V0vE
uxNy1Lfq+gFSaSVTR5IxAqVP2Lozc9mVB9Ed3myMdz9Dr6+5titD/se+BbDeYZum
99mjsLi83PMwwA==
-----END CERTIFICATE-----