Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/e862de-c46c-4f21-b38e-eb5bc7d97aa0/1/6kaWPMR52tvjxSI0q5-rqoEi0ls.mft
File:                     6kaWPMR52tvjxSI0q5-rqoEi0ls.mft (raw, json)
Hash identifier:          ZlbIYb2nsNvQlCxdzTzaYaKBzLTcVYqUXMn/iNIUc4Y=
Subject key identifier:   95:51:92:77:06:37:68:EE:A2:96:8C:C3:25:36:5C:70:B4:56:52:DF
Authority key identifier: EA:46:96:3C:C4:79:DA:DB:E3:C5:22:34:AB:9F:AB:AA:81:22:D2:5B
Certificate issuer:       /CN=ea46963cc479dadbe3c52234ab9fabaa8122d25b
Certificate serial:       0194BBCDC0D89F63CD1A0E2469AF35F34CED
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6kaWPMR52tvjxSI0q5-rqoEi0ls.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7b/e862de-c46c-4f21-b38e-eb5bc7d97aa0/1/6kaWPMR52tvjxSI0q5-rqoEi0ls.mft
Manifest number:          142B
Signing time:             Fri 31 Jan 2025 10:00:11 +0000
Manifest this update:     Fri 31 Jan 2025 10:00:11 +0000
Manifest next update:     Sat 01 Feb 2025 10:00:11 +0000
Files and hashes:         1: 6kaWPMR52tvjxSI0q5-rqoEi0ls.crl (hash: qPiwBb0FdZ2e92VDV8r0AdKC11tR/rRYw7pCQc5fLSE=)
                          2: DvlADeL3DKlMhpNLmRDNZZC9s_8.roa (hash: ppZ4t6nO0Jqn1uF68GC6tifAyuOnHQDQs17xRKMAVEw=)
                          3: F_Vpqfvbjxx20g95CeLrBsXvf_k.roa (hash: qNGonkdXf+gHEPyA9PESPfgKfYoSpxpEByMqfe+I7MQ=)
                          4: S5-7pFac3Ww2rKkOW0pDvjHzO1w.roa (hash: y0paFatbjL3QesVnybDnaaTih+L+bbmSVD8cw6FJ/Tk=)
                          5: U3bTZa6VR2lgQV_xss-nw_qWA0o.roa (hash: FagQxwFZxM/p097AXxbzD9JDCXqd3EarlmqmrLlSZP8=)
                          6: b9wkPnLySz-ATLfF0ql-d4ycVn8.roa (hash: 9oUyMaJaRwmTAQVIcoe9p1Xl0C9S5KqKUeBPGeCZniU=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bb:cd:c0:d8:9f:63:cd:1a:0e:24:69:af:35:f3:4c:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ea46963cc479dadbe3c52234ab9fabaa8122d25b
        Validity
            Not Before: Jan 31 10:00:11 2025 GMT
            Not After : Feb  1 10:00:11 2025 GMT
        Subject: CN=95519277063768eea2968cc325365c70b45652df
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:b9:be:92:61:18:cd:75:33:09:63:ad:db:29:
                    1e:5c:7d:87:e0:7e:10:87:71:4a:3c:2d:ef:8f:e3:
                    0c:ab:fd:dd:39:0d:33:20:58:ce:90:a7:43:af:fb:
                    73:b5:2f:a1:f2:47:f8:4c:e8:a2:30:c0:93:d4:fa:
                    9f:c4:33:39:4b:73:1e:13:71:83:ea:f5:94:4b:4d:
                    d0:32:55:66:37:78:a3:15:c0:13:c4:7b:95:13:b5:
                    e0:b1:70:a9:a0:f0:5b:e4:93:20:f6:2e:42:7a:0f:
                    32:62:c4:78:9c:01:9a:48:5d:cf:b9:e9:6b:d8:64:
                    c1:98:51:66:e8:7d:53:18:d8:ba:3b:a7:ac:a8:07:
                    45:79:39:0c:29:bb:55:9a:1c:9a:73:14:bc:b1:9b:
                    e0:b2:5d:54:c7:3b:87:f3:ab:51:c0:2e:2b:a0:eb:
                    af:fd:89:f5:ce:82:b6:49:b3:4d:d1:05:20:44:7a:
                    07:e1:80:c8:72:2f:13:05:46:69:94:e2:8a:f1:3a:
                    78:f2:30:ff:77:68:98:84:ee:22:9b:fe:fe:c3:b4:
                    dd:a1:6f:8a:e7:dd:9c:f6:0a:8d:ca:cf:37:93:2a:
                    05:1d:74:09:ad:f0:5c:d4:2e:33:82:e9:9d:8e:0c:
                    c3:d7:a4:d8:bd:51:0a:4f:43:dc:9c:7b:44:3c:3d:
                    8a:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:51:92:77:06:37:68:EE:A2:96:8C:C3:25:36:5C:70:B4:56:52:DF
            X509v3 Authority Key Identifier:
                keyid:EA:46:96:3C:C4:79:DA:DB:E3:C5:22:34:AB:9F:AB:AA:81:22:D2:5B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6kaWPMR52tvjxSI0q5-rqoEi0ls.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/e862de-c46c-4f21-b38e-eb5bc7d97aa0/1/6kaWPMR52tvjxSI0q5-rqoEi0ls.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/e862de-c46c-4f21-b38e-eb5bc7d97aa0/1/6kaWPMR52tvjxSI0q5-rqoEi0ls.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:64:fa:96:08:70:42:e7:74:f7:42:92:d0:b7:a8:95:39:0d:
         be:23:6f:55:bb:5c:f3:31:0c:11:3c:45:d6:0f:6c:ca:27:c9:
         15:57:f0:f1:2b:1e:62:ac:73:e2:9b:8a:93:46:7a:fb:80:8a:
         b9:14:79:99:c2:33:f4:5d:7e:b6:96:09:7a:55:d6:97:04:82:
         59:3d:04:43:13:03:7b:21:65:de:86:2f:71:b7:d6:be:8e:5d:
         fe:58:40:9e:9c:b1:a4:b4:6e:8c:80:af:c3:c5:07:33:ca:25:
         54:29:6c:4c:cf:7b:fa:ad:ec:c3:f9:41:90:cf:a7:ac:e3:0e:
         6e:ee:99:3f:3b:a9:44:5a:e5:8c:80:07:fa:c9:87:81:e8:2d:
         23:01:9a:a1:4d:8e:06:4a:cf:07:53:12:24:17:70:1c:9a:b9:
         8b:60:26:1c:ae:67:b3:81:90:cf:53:e1:66:a6:8a:e0:ea:04:
         98:92:b7:1d:a1:65:78:cc:3c:a5:5a:99:77:f9:9e:af:70:5c:
         12:c5:3c:45:3a:18:9b:d1:8a:52:c0:29:15:da:2b:da:70:c9:
         b8:26:7f:f0:dc:b5:54:3a:3e:c7:21:98:80:9b:b1:b1:21:65:
         61:2f:80:20:f2:3b:b9:d1:44:52:ce:69:36:27:64:1d:83:47:
         65:09:60:b7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS7zcDYn2PNGg4kaa8180ztMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVhNDY5NjNjYzQ3OWRhZGJlM2M1MjIzNGFiOWZhYmFhODEy
MmQyNWIwHhcNMjUwMTMxMTAwMDExWhcNMjUwMjAxMTAwMDExWjAzMTEwLwYDVQQD
Eyg5NTUxOTI3NzA2Mzc2OGVlYTI5NjhjYzMyNTM2NWM3MGI0NTY1MmRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA27m+kmEYzXUzCWOt2ykeXH2H4H4Q
h3FKPC3vj+MMq/3dOQ0zIFjOkKdDr/tztS+h8kf4TOiiMMCT1PqfxDM5S3MeE3GD
6vWUS03QMlVmN3ijFcATxHuVE7XgsXCpoPBb5JMg9i5Ceg8yYsR4nAGaSF3Puelr
2GTBmFFm6H1TGNi6O6esqAdFeTkMKbtVmhyacxS8sZvgsl1UxzuH86tRwC4roOuv
/Yn1zoK2SbNN0QUgRHoH4YDIci8TBUZplOKK8Tp48jD/d2iYhO4im/7+w7TdoW+K
592c9gqNys83kyoFHXQJrfBc1C4zgumdjgzD16TYvVEKT0PcnHtEPD2KcQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJVRkncGN2juopaMwyU2XHC0VlLfMB8GA1UdIwQY
MBaAFOpGljzEedrb48UiNKufq6qBItJbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNmthV1BNUjUydHZqeFNJMHE1LXJxb0VpMGxzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yi9lODYyZGUtYzQ2Yy00ZjIxLWIzOGUt
ZWI1YmM3ZDk3YWEwLzEvNmthV1BNUjUydHZqeFNJMHE1LXJxb0VpMGxzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Yi9lODYyZGUtYzQ2Yy00ZjIxLWIzOGUtZWI1YmM3ZDk3YWEw
LzEvNmthV1BNUjUydHZqeFNJMHE1LXJxb0VpMGxzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAk2T6lghw
Qud090KS0LeolTkNviNvVbtc8zEMETxF1g9syifJFVfw8SseYqxz4puKk0Z6+4CK
uRR5mcIz9F1+tpYJelXWlwSCWT0EQxMDeyFl3oYvcbfWvo5d/lhAnpyxpLRujICv
w8UHM8olVClsTM97+q3sw/lBkM+nrOMObu6ZPzupRFrljIAH+smHgegtIwGaoU2O
BkrPB1MSJBdwHJq5i2AmHK5ns4GQz1PhZqaK4OoEmJK3HaFleMw8pVqZd/mer3Bc
EsU8RToYm9GKUsApFdor2nDJuCZ/8Ny1VDo+xyGYgJuxsSFlYS+AIPI7udFEUs5p
NidkHYNHZQlgtw==
-----END CERTIFICATE-----