Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/951c8e-4a86-4c8e-9986-0bfbad4849cd/1/HYYmdJy_hLz0Lrsphbht7oMOXBQ.mft
File:                     HYYmdJy_hLz0Lrsphbht7oMOXBQ.mft (raw, json)
Hash identifier:          sMwT1Jzzm6sd0eKE2OXB/RnygSP9NShYzbgwUpXty0g=
Subject key identifier:   AA:B8:38:71:58:D6:43:ED:03:4D:AA:46:2F:0A:3E:65:58:A5:D9:2B
Authority key identifier: 1D:86:26:74:9C:BF:84:BC:F4:2E:BB:29:85:B8:6D:EE:83:0E:5C:14
Certificate issuer:       /CN=1d8626749cbf84bcf42ebb2985b86dee830e5c14
Certificate serial:       0194BCAA37E52A2269DEED4290BD3FE80EA7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HYYmdJy_hLz0Lrsphbht7oMOXBQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/77/951c8e-4a86-4c8e-9986-0bfbad4849cd/1/HYYmdJy_hLz0Lrsphbht7oMOXBQ.mft
Manifest number:          1432
Signing time:             Fri 31 Jan 2025 14:00:59 +0000
Manifest this update:     Fri 31 Jan 2025 14:00:59 +0000
Manifest next update:     Sat 01 Feb 2025 14:00:59 +0000
Files and hashes:         1: 1a8VrRBxuEM9gIitWA-MTYGiH6k.roa (hash: o75BqB590sV6r1bb5EcguY1B6QE3rDYfVkZNGdgh7Sw=)
                          2: 5xOfslnPq8-oHcDS47I_csGpD8Q.roa (hash: 4dFQELulj6P8yjTGdV2+DXhC0ieIeLQi8X9meQWips0=)
                          3: DCocrInE23WH5yhpx0FXxrNY7_Y.roa (hash: O6VU1JCrRAIS6a+yNeHmYk7E8wYytQ8Lu8b/Fc+fOqI=)
                          4: HYYmdJy_hLz0Lrsphbht7oMOXBQ.crl (hash: 4kv8B5J6LCRLUe3hl1/MCe2uvskQ90QXMmjY6GoYlsk=)
                          5: du6DBdKlb1Cr5Z5mqlctF2rW68k.roa (hash: XaoP28uRsMgk856VCX7c/74Lo2ezwg/z+6hQ43OafIc=)
                          6: gvR46ytTmKrRi4maCYGnQqf4WI8.roa (hash: ViNC6FNBy9cckM8WILnCXIRpeOOtSFGRhOo8i05WQf8=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:aa:37:e5:2a:22:69:de:ed:42:90:bd:3f:e8:0e:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1d8626749cbf84bcf42ebb2985b86dee830e5c14
        Validity
            Not Before: Jan 31 14:00:59 2025 GMT
            Not After : Feb  1 14:00:59 2025 GMT
        Subject: CN=aab8387158d643ed034daa462f0a3e6558a5d92b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:98:24:b1:95:52:99:fb:9c:c2:95:1e:d6:bc:
                    87:ef:59:77:a2:32:79:ec:b0:b1:9e:89:1a:1a:f5:
                    b4:fc:01:23:bf:a5:1d:8f:c9:33:be:13:51:38:df:
                    aa:30:d9:c2:32:5f:47:89:17:6a:e4:4e:6a:ee:4e:
                    28:04:89:e3:3a:ea:28:fa:63:27:eb:73:0e:f8:a1:
                    3a:d3:7b:18:f3:a7:98:c7:e6:be:0e:89:12:48:75:
                    55:a9:86:ed:0f:82:ea:9b:60:63:3a:5b:5c:9c:29:
                    9c:03:6a:ca:53:6c:ed:66:fa:e5:5b:26:8a:6a:3d:
                    39:6b:b7:a7:b4:43:23:46:bb:46:51:95:6b:8d:7a:
                    d1:43:53:5e:b0:aa:d4:3e:4c:42:5d:d7:06:f2:20:
                    a6:99:eb:e7:b1:2b:5b:0e:83:d4:21:05:72:0b:fb:
                    c8:36:17:2b:70:89:a5:d0:20:78:3a:1d:ab:64:42:
                    7a:cd:19:eb:7f:48:51:6a:40:2a:91:37:32:e6:c8:
                    be:1d:53:60:f6:fd:c5:0b:9e:97:75:a4:21:6e:2d:
                    d8:c5:70:fa:c0:12:05:0f:0d:e8:d4:f5:b6:0e:d2:
                    30:ed:62:3d:dc:b4:12:f3:fa:7a:1e:fa:07:d0:08:
                    19:39:eb:4c:22:92:83:82:64:0a:f3:17:8d:d7:58:
                    89:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:B8:38:71:58:D6:43:ED:03:4D:AA:46:2F:0A:3E:65:58:A5:D9:2B
            X509v3 Authority Key Identifier:
                keyid:1D:86:26:74:9C:BF:84:BC:F4:2E:BB:29:85:B8:6D:EE:83:0E:5C:14

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HYYmdJy_hLz0Lrsphbht7oMOXBQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/951c8e-4a86-4c8e-9986-0bfbad4849cd/1/HYYmdJy_hLz0Lrsphbht7oMOXBQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/77/951c8e-4a86-4c8e-9986-0bfbad4849cd/1/HYYmdJy_hLz0Lrsphbht7oMOXBQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:c3:2a:dd:f1:50:14:fe:18:2e:10:91:7f:da:ec:97:7c:d2:
         7e:18:ee:1c:06:f3:b6:71:ef:dd:b0:26:d6:ad:75:ec:8e:04:
         aa:8f:1b:b7:a3:11:db:d9:fb:15:e8:6a:2b:80:06:e0:76:fb:
         93:79:a9:ca:18:86:06:c6:fb:d3:5c:36:aa:d0:fb:0e:4a:33:
         72:f3:a1:c7:ef:de:72:29:c5:51:96:99:37:56:2f:21:4a:b8:
         72:c9:44:ef:a4:d6:c8:59:e6:69:4a:68:53:03:5c:e7:2f:28:
         0c:93:87:f0:fc:05:e0:24:04:88:15:f1:32:cc:0a:2f:37:c3:
         ff:9d:52:37:4d:cc:8a:b5:27:19:45:42:26:68:ed:2f:02:fe:
         11:c3:13:b7:28:de:60:57:ad:17:87:6a:2c:c4:ee:04:b0:79:
         a6:2e:87:4e:40:2a:5a:a2:37:0d:3b:29:1d:ad:ac:0b:9d:de:
         5c:aa:c3:14:b5:8f:8d:8e:9a:b1:1e:42:ca:25:f4:d9:44:8d:
         62:39:1c:24:9a:8e:9c:0a:a8:48:db:b6:5a:58:ae:96:04:84:
         19:cd:1d:c9:ec:41:21:ce:2b:96:09:58:5d:f6:9d:20:d4:94:
         0b:7c:d7:63:74:aa:1b:16:ba:b8:d8:dd:d8:e8:be:c0:7c:c1:
         06:aa:6d:76
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8qjflKiJp3u1CkL0/6A6nMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFkODYyNjc0OWNiZjg0YmNmNDJlYmIyOTg1Yjg2ZGVlODMw
ZTVjMTQwHhcNMjUwMTMxMTQwMDU5WhcNMjUwMjAxMTQwMDU5WjAzMTEwLwYDVQQD
EyhhYWI4Mzg3MTU4ZDY0M2VkMDM0ZGFhNDYyZjBhM2U2NTU4YTVkOTJiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAupgksZVSmfucwpUe1ryH71l3ojJ5
7LCxnokaGvW0/AEjv6Udj8kzvhNRON+qMNnCMl9HiRdq5E5q7k4oBInjOuoo+mMn
63MO+KE603sY86eYx+a+DokSSHVVqYbtD4Lqm2BjOltcnCmcA2rKU2ztZvrlWyaK
aj05a7entEMjRrtGUZVrjXrRQ1NesKrUPkxCXdcG8iCmmevnsStbDoPUIQVyC/vI
NhcrcIml0CB4Oh2rZEJ6zRnrf0hRakAqkTcy5si+HVNg9v3FC56XdaQhbi3YxXD6
wBIFDw3o1PW2DtIw7WI93LQS8/p6HvoH0AgZOetMIpKDgmQK8xeN11iJnQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKq4OHFY1kPtA02qRi8KPmVYpdkrMB8GA1UdIwQY
MBaAFB2GJnScv4S89C67KYW4be6DDlwUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSFlZbWRKeV9oTHowTHJzcGhiaHQ3b01PWEJRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ny85NTFjOGUtNGE4Ni00YzhlLTk5ODYt
MGJmYmFkNDg0OWNkLzEvSFlZbWRKeV9oTHowTHJzcGhiaHQ3b01PWEJRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Ny85NTFjOGUtNGE4Ni00YzhlLTk5ODYtMGJmYmFkNDg0OWNk
LzEvSFlZbWRKeV9oTHowTHJzcGhiaHQ3b01PWEJRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHMMq3fFQ
FP4YLhCRf9rsl3zSfhjuHAbztnHv3bAm1q117I4Eqo8bt6MR29n7FehqK4AG4Hb7
k3mpyhiGBsb701w2qtD7DkozcvOhx+/ecinFUZaZN1YvIUq4cslE76TWyFnmaUpo
UwNc5y8oDJOH8PwF4CQEiBXxMswKLzfD/51SN03MirUnGUVCJmjtLwL+EcMTtyje
YFetF4dqLMTuBLB5pi6HTkAqWqI3DTspHa2sC53eXKrDFLWPjY6asR5CyiX02USN
YjkcJJqOnAqoSNu2WliulgSEGc0dyexBIc4rlglYXfadINSUC3zXY3SqGxa6uNjd
2Oi+wHzBBqptdg==
-----END CERTIFICATE-----