Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/517694-c8a1-458b-9cf2-6c7e5685890c/1/H0c4OJyzuZjsT6bUJy-N15n7xKk.mft
File:                     H0c4OJyzuZjsT6bUJy-N15n7xKk.mft (raw, json)
Hash identifier:          He4ev0YtsyHiPOaXQD1GVIc0QrWldJyYWOEscRLGYqg=
Subject key identifier:   A9:4B:BC:D1:60:56:04:31:11:A5:DC:F5:4F:19:4A:69:FC:CE:93:D8
Authority key identifier: 1F:47:38:38:9C:B3:B9:98:EC:4F:A6:D4:27:2F:8D:D7:99:FB:C4:A9
Certificate issuer:       /CN=1f4738389cb3b998ec4fa6d4272f8dd799fbc4a9
Certificate serial:       0194BD17F57950558BC5CE6577EF59703CA6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/H0c4OJyzuZjsT6bUJy-N15n7xKk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/75/517694-c8a1-458b-9cf2-6c7e5685890c/1/H0c4OJyzuZjsT6bUJy-N15n7xKk.mft
Manifest number:          1192
Signing time:             Fri 31 Jan 2025 16:00:51 +0000
Manifest this update:     Fri 31 Jan 2025 16:00:51 +0000
Manifest next update:     Sat 01 Feb 2025 16:00:51 +0000
Files and hashes:         1: 1-6x9jHZ3cw39179HQd4O3fAvnpk.roa (hash: PgXhvVg0YUToc07oyC3isPahNyz6852StHcO0CF7qN8=)
                          2: 1nUEd9XAFqDWEykKA06-e3Jht8E.roa (hash: FjXuDY1LWSoerVvC1COnQH7k++3mS52vkkMLizNO12Q=)
                          3: 2pdvmZCHvau2bejs7kiQ6VYT8aY.roa (hash: sxVxk1VG9jbnXlYRRTgFy8naU2+NPtqmSzhI8JvCk0Q=)
                          4: 7jhea4Z45q_-w6Bw5hm9Ljo6jd0.roa (hash: 0432QcgMFkJ7sn27j+nTeHIZYZPsrtQmgOnk9+WOg5s=)
                          5: E2kHiMdYodrnFH2KHA9US6yByGg.roa (hash: 4gqy0Z2gsQk+minstyMsiIr4y+M4uI9pxsNNqBMzDmE=)
                          6: H0c4OJyzuZjsT6bUJy-N15n7xKk.crl (hash: 4gZQE+37FqSTJUkC4TSO0V8KcF8A2I1vQFzEsmL3+1I=)
                          7: H46sB790XpHEnYv4TqNMx8liI5A.roa (hash: tky/zzkhPHiHwewqdrJ7FzGu6YnMSWzvscvwv5Raoik=)
                          8: LIpJLbylGhFRNKd4Vb6i8k36YRg.roa (hash: Uma+Nee5Et6Up+tXMeUjv4OVtrZCCxIFiku3HIhbB/4=)
                          9: ORp5S2gwOdo1fvVCheux3Z-tEqE.roa (hash: 6QCXpLzMvGC+j67Cjb2lewZSHVD5p64YnzlA/zGClIY=)
                          10: PLU8wqNdMXnL9v3tJJzISiKB10E.roa (hash: VqGtKJSXmrM4NojpQ2fDKWSLpkBqvw8V5Igvg7IZsCo=)
                          11: RNEGyKfylX6Y800rWZPCCJc50_A.roa (hash: VU3yf9iAHvzAzzlVwWU4OukRHg8QQbxfRarucNtL/BU=)
                          12: VZ4v5Zl_fSWlCJddoFWAprfwDEQ.roa (hash: HSIRCE/846JiI6ro7JECbGIyt/cQkLU+ZkGrpS5afGk=)
                          13: WZBLvv9OFIzqKVar5Stt9tIoe6c.roa (hash: eDDz9g857ZbC4qMPJ/+ARLyYUZhWBgiSlQKhk+w4u2c=)
                          14: YGMe0KWo_m6eJ0gMSerQxd_mK7o.roa (hash: TX2OaT/Kq4swweS2SKxtiDq7F1NZ0dIzMpi6TRLh/ZA=)
                          15: c_pxESaR2x3BQriZw_LEmjpxO70.roa (hash: ITBXKxhG6Il2Rusll6rxDZnAehiUkrccIwyacpQft4Y=)
                          16: dpNKQ2Sgz6QIHDbXymZzkoop83E.roa (hash: VrlYMgpMUbMGcZ9vFi+tBzjsUYnk4uGqxHrElmnVkpU=)
                          17: gDccJCyvv-XSleOWBZa0j1v0ILc.roa (hash: CO5e5TItEhwMis3LPrh0yYWspCPoVfBb8vdm/rXIFt8=)
                          18: gfqVNhzGNxb7VDFrcNLUrtDXd5o.roa (hash: Krtgp6Kar2XuUAEtscbGlUw/+BkCTJxFBL71vdsXlls=)
                          19: sQpCyqrYhPNlqPdrmizFtrGO14c.roa (hash: yjB8Md4YNzJrNV3sVTOoBXACOOSqrVWUCWDSaqokA0I=)
                          20: sTCjVSTmDshI0UQ4XJFDWyeTvEw.roa (hash: kRON3o29OnRVzY/uFJzsoCpOZD9O1rSV9QBQnyCi9Nk=)
                          21: z10me3-6yqryER4MpvIKiLcjNws.roa (hash: PjRl12NyPSpVNtUWuutmb/VXRvozChTacSvxqPRianU=)
                          22: zd8S8_RgIECBQgNFopt3gQi-4JA.roa (hash: 1PRRid9DTRPe3oTZKlt84NqobBLMXq/tvroFe+HAuOY=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bd:17:f5:79:50:55:8b:c5:ce:65:77:ef:59:70:3c:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1f4738389cb3b998ec4fa6d4272f8dd799fbc4a9
        Validity
            Not Before: Jan 31 16:00:51 2025 GMT
            Not After : Feb  1 16:00:51 2025 GMT
        Subject: CN=a94bbcd16056043111a5dcf54f194a69fcce93d8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:cb:b1:d4:80:f3:3a:8e:52:09:06:17:2a:03:
                    e6:4e:cb:d3:8f:4f:73:f9:68:50:db:88:1a:c5:ac:
                    44:01:84:b2:ad:c4:33:ec:59:af:36:97:33:c4:2e:
                    c0:0a:da:87:6a:ef:f7:39:e5:44:f5:0f:f1:5d:4e:
                    d6:49:21:a2:aa:91:27:3f:7b:7c:47:f9:04:c2:54:
                    a9:70:36:ad:d2:45:cf:22:5d:ab:29:9f:eb:ed:67:
                    2d:3e:96:1f:58:67:3c:5b:2f:34:56:5a:1f:ca:45:
                    02:0f:9f:3d:9d:c1:df:32:3b:34:29:f3:f7:79:a0:
                    a4:66:bf:eb:5d:e1:48:cb:67:06:4d:83:0f:b6:b0:
                    9c:b4:cc:f1:e3:76:16:8a:93:44:68:ee:a0:4d:8d:
                    a2:cf:ca:25:9f:4e:a9:f3:31:d4:80:ce:d8:12:74:
                    9c:3c:6d:dc:1b:99:95:cf:ee:43:20:4b:ea:c0:ec:
                    06:83:34:da:a0:72:cb:0b:5d:bd:c0:af:35:83:e0:
                    68:f6:96:20:06:e3:0f:a3:f0:df:7a:81:1c:28:9e:
                    99:86:c1:a7:d0:10:fe:1e:de:ae:6e:8e:6b:ab:16:
                    dc:df:c0:78:a8:c1:72:df:69:ae:c9:dd:ea:f3:26:
                    81:64:7f:c2:a4:d0:ec:f0:8f:94:6e:2c:14:df:00:
                    84:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:4B:BC:D1:60:56:04:31:11:A5:DC:F5:4F:19:4A:69:FC:CE:93:D8
            X509v3 Authority Key Identifier:
                keyid:1F:47:38:38:9C:B3:B9:98:EC:4F:A6:D4:27:2F:8D:D7:99:FB:C4:A9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H0c4OJyzuZjsT6bUJy-N15n7xKk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/517694-c8a1-458b-9cf2-6c7e5685890c/1/H0c4OJyzuZjsT6bUJy-N15n7xKk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/75/517694-c8a1-458b-9cf2-6c7e5685890c/1/H0c4OJyzuZjsT6bUJy-N15n7xKk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:9c:73:73:82:d9:e2:43:83:6f:44:75:43:bd:95:3f:4b:3b:
         bd:b0:87:73:63:00:44:80:98:67:fb:e6:5f:e1:92:61:46:b8:
         4a:b5:0a:8d:7f:a6:3b:d2:da:5c:b9:ab:81:44:a8:e8:bd:e7:
         71:f1:e7:71:c3:c4:cc:7d:58:2c:34:e7:1e:8a:76:c8:c4:35:
         91:81:bc:86:4e:dd:54:a8:a9:a7:d3:a2:ea:a7:a9:ef:87:1d:
         d9:d8:50:82:a0:83:fe:a7:43:7a:db:56:ce:4c:c1:3d:0c:37:
         dc:13:f5:4f:ff:5e:38:0a:c1:d7:15:2d:02:43:23:8b:7e:8b:
         e0:f4:af:5e:0e:6d:30:bc:dc:18:28:58:e3:4c:8f:a1:fe:84:
         2a:c8:ff:42:46:71:7c:df:39:c2:c6:df:06:8b:93:75:dc:ba:
         8d:20:44:2f:0c:c8:60:07:5b:73:d9:81:1d:54:12:2b:0a:8d:
         f8:b2:44:3a:34:30:5e:3a:6b:0d:72:ac:f9:f5:66:d7:88:fd:
         a0:89:f9:92:b9:62:11:2f:d3:87:7a:ba:11:46:35:7a:a6:1f:
         99:33:44:b3:71:32:60:b4:e5:af:aa:41:8f:fd:cf:31:66:96:
         e9:97:60:f8:49:5d:3b:da:a8:4f:48:77:d4:27:d7:aa:ee:74:
         5b:0c:72:4d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9F/V5UFWLxc5ld+9ZcDymMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFmNDczODM4OWNiM2I5OThlYzRmYTZkNDI3MmY4ZGQ3OTlm
YmM0YTkwHhcNMjUwMTMxMTYwMDUxWhcNMjUwMjAxMTYwMDUxWjAzMTEwLwYDVQQD
EyhhOTRiYmNkMTYwNTYwNDMxMTFhNWRjZjU0ZjE5NGE2OWZjY2U5M2Q4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnsux1IDzOo5SCQYXKgPmTsvTj09z
+WhQ24gaxaxEAYSyrcQz7FmvNpczxC7ACtqHau/3OeVE9Q/xXU7WSSGiqpEnP3t8
R/kEwlSpcDat0kXPIl2rKZ/r7WctPpYfWGc8Wy80VlofykUCD589ncHfMjs0KfP3
eaCkZr/rXeFIy2cGTYMPtrCctMzx43YWipNEaO6gTY2iz8oln06p8zHUgM7YEnSc
PG3cG5mVz+5DIEvqwOwGgzTaoHLLC129wK81g+Bo9pYgBuMPo/DfeoEcKJ6ZhsGn
0BD+Ht6ubo5rqxbc38B4qMFy32muyd3q8yaBZH/CpNDs8I+UbiwU3wCELQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKlLvNFgVgQxEaXc9U8ZSmn8zpPYMB8GA1UdIwQY
MBaAFB9HODics7mY7E+m1CcvjdeZ+8SpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSDBjNE9KeXp1WmpzVDZiVUp5LU4xNW43eEtrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NS81MTc2OTQtYzhhMS00NThiLTljZjIt
NmM3ZTU2ODU4OTBjLzEvSDBjNE9KeXp1WmpzVDZiVUp5LU4xNW43eEtrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83NS81MTc2OTQtYzhhMS00NThiLTljZjItNmM3ZTU2ODU4OTBj
LzEvSDBjNE9KeXp1WmpzVDZiVUp5LU4xNW43eEtrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAP5xzc4LZ
4kODb0R1Q72VP0s7vbCHc2MARICYZ/vmX+GSYUa4SrUKjX+mO9LaXLmrgUSo6L3n
cfHnccPEzH1YLDTnHop2yMQ1kYG8hk7dVKipp9Oi6qep74cd2dhQgqCD/qdDettW
zkzBPQw33BP1T/9eOArB1xUtAkMji36L4PSvXg5tMLzcGChY40yPof6EKsj/QkZx
fN85wsbfBouTddy6jSBELwzIYAdbc9mBHVQSKwqN+LJEOjQwXjprDXKs+fVm14j9
oIn5krliES/Th3q6EUY1eqYfmTNEs3EyYLTlr6pBj/3PMWaW6Zdg+EldO9qoT0h3
1CfXqu50WwxyTQ==
-----END CERTIFICATE-----