Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/b27203-9d48-49a5-af25-49d40a13cbc2/1/wly3EywZ99UfAC7UrYEa7PWyD1c.mft
File:                     wly3EywZ99UfAC7UrYEa7PWyD1c.mft (raw, json)
Hash identifier:          7CCaFxFwr58iT6BOtYw8VYoy07w3n9DU88GcSwm+cgs=
Subject key identifier:   0B:3C:5E:22:D9:2A:44:44:AB:B2:9D:3B:CD:1B:53:99:7D:6F:3D:C7
Authority key identifier: C2:5C:B7:13:2C:19:F7:D5:1F:00:2E:D4:AD:81:1A:EC:F5:B2:0F:57
Certificate issuer:       /CN=c25cb7132c19f7d51f002ed4ad811aecf5b20f57
Certificate serial:       0194BCA9A875100FDD8AEE79B10EF8B314E9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wly3EywZ99UfAC7UrYEa7PWyD1c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/69/b27203-9d48-49a5-af25-49d40a13cbc2/1/wly3EywZ99UfAC7UrYEa7PWyD1c.mft
Manifest number:          0627
Signing time:             Fri 31 Jan 2025 14:00:22 +0000
Manifest this update:     Fri 31 Jan 2025 14:00:22 +0000
Manifest next update:     Sat 01 Feb 2025 14:00:22 +0000
Files and hashes:         1: 0yK9CSc1iwH9Ha7iv7t9MQLBMSc.roa (hash: rrGUPdLm/yz0jAaBzRKBfGiiUHE1bJZVAlwYqWnvc2g=)
                          2: Mr7THJO68NohwknMfTQKnqHV-vc.roa (hash: knt9VF7cf9YizkNpPo4OGyLEE0z8MhXR+E+kt4mIdVA=)
                          3: TB6H5V1Ni-tKp6BX2r-SHLcytb4.roa (hash: 0fhq54aZgsVM/k0+CX/b9ZvdCc1x5cY4r3GXAZAMq6M=)
                          4: qFBBKSstVuYlvg1tCU9IRdG8_KQ.roa (hash: woIS65FxXCdUB0qPb1Sk66filHI9SQzJMbXAm2PrCSk=)
                          5: wly3EywZ99UfAC7UrYEa7PWyD1c.crl (hash: 52Jnee/WxBkybxE47ysgVYvGAd5ujmARG6bvVizQh54=)
                          6: zSfZVih6hBceUixRgoQRbTOqrPs.roa (hash: azI0MEflNFx/avYXf2xzg+zXEruqyuhKpmbLg+R7a0o=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:a9:a8:75:10:0f:dd:8a:ee:79:b1:0e:f8:b3:14:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c25cb7132c19f7d51f002ed4ad811aecf5b20f57
        Validity
            Not Before: Jan 31 14:00:22 2025 GMT
            Not After : Feb  1 14:00:22 2025 GMT
        Subject: CN=0b3c5e22d92a4444abb29d3bcd1b53997d6f3dc7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:67:81:9e:a7:eb:7b:0f:ce:c2:e1:b2:cf:9e:
                    3c:69:90:6d:30:07:90:7e:0c:1a:a6:61:b0:83:19:
                    28:ad:c0:5e:7e:16:05:ee:43:c6:99:bc:54:05:1b:
                    5f:8b:4d:31:70:d5:40:68:31:4b:63:4b:36:52:cf:
                    27:da:e3:e1:58:90:2c:f3:27:87:cf:b1:db:63:6f:
                    c7:ba:56:14:dd:61:c7:b6:fd:42:0d:fd:73:e3:b5:
                    77:02:61:a3:7d:72:fc:ef:3b:43:a3:dd:b7:02:28:
                    3a:0f:82:bd:77:76:ec:3d:c4:e6:f3:06:f5:63:63:
                    07:4f:e3:15:63:f2:ba:9c:32:f9:08:a0:ee:a7:0a:
                    2d:53:de:c5:0d:73:a5:86:12:20:ad:2c:ae:29:51:
                    2d:76:f9:f2:3d:c6:1f:0c:86:41:88:53:b3:36:75:
                    cb:6b:7c:65:d3:fe:ac:74:98:ca:14:5b:5b:c2:d0:
                    b1:8e:a2:60:97:a0:1c:3d:b0:7d:bd:ad:fe:6a:a6:
                    92:a2:22:c0:84:cd:45:5b:2c:f1:e4:ef:5d:51:24:
                    0a:f7:9e:20:c9:97:22:69:be:ce:69:85:96:83:86:
                    9d:66:6c:86:b7:41:0b:62:72:1f:c5:7d:d6:ae:04:
                    5a:a5:e3:71:bd:99:a8:0c:7e:09:08:c3:68:6c:30:
                    29:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:3C:5E:22:D9:2A:44:44:AB:B2:9D:3B:CD:1B:53:99:7D:6F:3D:C7
            X509v3 Authority Key Identifier:
                keyid:C2:5C:B7:13:2C:19:F7:D5:1F:00:2E:D4:AD:81:1A:EC:F5:B2:0F:57

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wly3EywZ99UfAC7UrYEa7PWyD1c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/b27203-9d48-49a5-af25-49d40a13cbc2/1/wly3EywZ99UfAC7UrYEa7PWyD1c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/69/b27203-9d48-49a5-af25-49d40a13cbc2/1/wly3EywZ99UfAC7UrYEa7PWyD1c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:66:bc:01:ff:21:0a:e5:aa:3d:1f:cd:80:4b:02:14:8d:90:
         26:4b:9e:3f:21:83:24:6c:4f:05:a4:69:9f:61:c3:e8:3e:c4:
         fe:e7:ee:6b:8a:a6:34:62:a1:fb:cc:ea:3a:67:53:1a:d6:57:
         be:49:aa:96:82:4f:e7:75:f1:09:f2:4e:c3:c7:6a:1c:b0:c0:
         e7:0d:42:79:8a:38:05:02:97:cf:2f:55:52:d3:b5:bd:28:71:
         89:7c:31:cd:b5:34:08:c4:65:6a:26:4a:16:10:b1:cc:5b:14:
         a4:1f:0c:f5:bb:d1:40:fc:df:72:bb:89:ed:26:60:8b:0d:dd:
         b4:b3:de:ca:fe:88:53:ab:01:70:6e:63:77:33:a8:57:77:14:
         52:d0:a6:20:d3:7d:f7:ae:05:7e:73:67:17:7e:40:74:8c:76:
         a7:3b:5b:4e:5c:f5:6a:db:b5:fa:89:28:92:c7:eb:31:2f:20:
         55:5a:bd:a6:70:ef:97:80:2f:9f:2e:95:a4:90:65:bf:15:53:
         3b:04:9a:84:e9:8e:78:ac:3f:80:88:44:76:57:9a:85:d0:51:
         0f:ce:df:17:a3:db:a3:f4:ab:de:23:45:77:7d:ac:04:a5:ec:
         5f:9c:02:82:49:ef:ff:2d:f4:87:33:a8:bb:78:98:46:c5:75:
         19:2e:18:a1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8qah1EA/diu55sQ74sxTpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMyNWNiNzEzMmMxOWY3ZDUxZjAwMmVkNGFkODExYWVjZjVi
MjBmNTcwHhcNMjUwMTMxMTQwMDIyWhcNMjUwMjAxMTQwMDIyWjAzMTEwLwYDVQQD
EygwYjNjNWUyMmQ5MmE0NDQ0YWJiMjlkM2JjZDFiNTM5OTdkNmYzZGM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4WeBnqfrew/OwuGyz548aZBtMAeQ
fgwapmGwgxkorcBefhYF7kPGmbxUBRtfi00xcNVAaDFLY0s2Us8n2uPhWJAs8yeH
z7HbY2/HulYU3WHHtv1CDf1z47V3AmGjfXL87ztDo923Aig6D4K9d3bsPcTm8wb1
Y2MHT+MVY/K6nDL5CKDupwotU97FDXOlhhIgrSyuKVEtdvnyPcYfDIZBiFOzNnXL
a3xl0/6sdJjKFFtbwtCxjqJgl6AcPbB9va3+aqaSoiLAhM1FWyzx5O9dUSQK954g
yZciab7OaYWWg4adZmyGt0ELYnIfxX3WrgRapeNxvZmoDH4JCMNobDAp1QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAs8XiLZKkREq7KdO80bU5l9bz3HMB8GA1UdIwQY
MBaAFMJctxMsGffVHwAu1K2BGuz1sg9XMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd2x5M0V5d1o5OVVmQUM3VXJZRWE3UFd5RDFjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS9iMjcyMDMtOWQ0OC00OWE1LWFmMjUt
NDlkNDBhMTNjYmMyLzEvd2x5M0V5d1o5OVVmQUM3VXJZRWE3UFd5RDFjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82OS9iMjcyMDMtOWQ0OC00OWE1LWFmMjUtNDlkNDBhMTNjYmMy
LzEvd2x5M0V5d1o5OVVmQUM3VXJZRWE3UFd5RDFjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYWa8Af8h
CuWqPR/NgEsCFI2QJkuePyGDJGxPBaRpn2HD6D7E/ufua4qmNGKh+8zqOmdTGtZX
vkmqloJP53XxCfJOw8dqHLDA5w1CeYo4BQKXzy9VUtO1vShxiXwxzbU0CMRlaiZK
FhCxzFsUpB8M9bvRQPzfcruJ7SZgiw3dtLPeyv6IU6sBcG5jdzOoV3cUUtCmINN9
964FfnNnF35AdIx2pztbTlz1atu1+okoksfrMS8gVVq9pnDvl4Avny6VpJBlvxVT
OwSahOmOeKw/gIhEdleahdBRD87fF6Pbo/Sr3iNFd32sBKXsX5wCgknv/y30hzOo
u3iYRsV1GS4YoQ==
-----END CERTIFICATE-----