Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/8b01c2-ecbe-4f88-ae37-504c8fc220ea/1/BWLVpnt6IPhl51MWOm7Q5fNH6Dk.mft
File:                     BWLVpnt6IPhl51MWOm7Q5fNH6Dk.mft (raw, json)
Hash identifier:          nT1gNZPqsUEQ1YK0PX4MYZ4E0jS5Ma+u1By7a3F0RpU=
Subject key identifier:   76:58:B0:16:74:8D:E5:DD:9F:E1:0E:CD:F2:1E:D9:D5:C3:B9:9F:E2
Authority key identifier: 05:62:D5:A6:7B:7A:20:F8:65:E7:53:16:3A:6E:D0:E5:F3:47:E8:39
Certificate issuer:       /CN=0562d5a67b7a20f865e753163a6ed0e5f347e839
Certificate serial:       0194BD4E92905A018F7CEBCE1CD190AD40F8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BWLVpnt6IPhl51MWOm7Q5fNH6Dk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/82/8b01c2-ecbe-4f88-ae37-504c8fc220ea/1/BWLVpnt6IPhl51MWOm7Q5fNH6Dk.mft
Manifest number:          1140
Signing time:             Fri 31 Jan 2025 17:00:30 +0000
Manifest this update:     Fri 31 Jan 2025 17:00:30 +0000
Manifest next update:     Sat 01 Feb 2025 17:00:30 +0000
Files and hashes:         1: BWLVpnt6IPhl51MWOm7Q5fNH6Dk.crl (hash: csBuTDdSiyOVYXAFPVN4+I4YRWKl4dCtEmDEM8QIMow=)
                          2: E8BXFCmMPxiHqsBIE2fe1Q-VAJ0.roa (hash: bCNkqefIqMAzox7Azz8+ddEpEANUZYA+NYa3IR7PwR4=)
                          3: SWJa5dsueLRnxSbfAdzIJPGv5bg.roa (hash: gZ5PAdWGvsSeRpcHkVwguzrdbgVOBUIorql6INPH73A=)
                          4: YNQ4ZzGibrxUxlrkmprAIR1YVl8.roa (hash: V1uF6OdTmR62xjW831R1fzO5FgyYWpUvIlZXAdhlBYk=)
                          5: Z073Xoz6NNMLozbzx4BYZKRbE_Y.roa (hash: GgoadE+XPM8kCbOw8AtDPP7sSAXbl83gRja3FPoUrsA=)
                          6: jCB9u3qv4BG9cI-rqtdTgsQeqrs.roa (hash: 1+L43+VxrVB/KEJhsF1U3J4F2Ua4lSa+maBf4O2HDZ4=)
                          7: zJzkzhEHh5iCKShvFrkOwPKYR2U.roa (hash: l2tLYSV2hK6uaLIrHqnfajZM8CBVZInCAsyfW/dDlC0=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bd:4e:92:90:5a:01:8f:7c:eb:ce:1c:d1:90:ad:40:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0562d5a67b7a20f865e753163a6ed0e5f347e839
        Validity
            Not Before: Jan 31 17:00:30 2025 GMT
            Not After : Feb  1 17:00:30 2025 GMT
        Subject: CN=7658b016748de5dd9fe10ecdf21ed9d5c3b99fe2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:61:fc:fd:56:1a:ac:ac:58:cf:ab:3b:19:05:
                    55:b2:f9:ff:b8:56:0a:9e:93:11:0b:60:83:f0:5d:
                    ef:c7:e0:94:7f:8b:dc:a4:0d:a7:a3:9b:f1:c9:0b:
                    32:4f:79:e5:27:ee:f0:1f:c6:5d:00:7c:10:aa:ee:
                    fb:63:28:76:34:38:89:f0:b5:f7:f7:fd:e3:7f:82:
                    63:53:fe:03:48:28:b0:bc:74:20:fb:e3:ef:82:d7:
                    14:af:4b:b6:d9:26:3f:1c:54:e2:53:47:a2:ff:fc:
                    9b:d7:29:f9:52:80:1a:c5:ad:11:87:ac:68:1b:76:
                    ae:10:57:da:2e:77:c0:51:25:f4:da:a4:d3:75:ba:
                    8c:6c:bb:85:b1:07:45:54:fe:f7:e0:e3:99:5a:0b:
                    f5:1e:93:e2:3b:5f:77:46:5d:76:43:5b:9b:51:33:
                    2b:b9:3c:d6:0b:ed:a7:5c:a9:97:56:1b:59:5a:45:
                    78:1d:3e:df:cf:33:1f:f6:ac:51:70:2a:8f:e1:57:
                    73:34:01:e6:ec:9c:19:de:78:4e:c4:92:a2:a3:a9:
                    48:95:ca:1b:93:46:e7:9b:13:cb:28:ce:b0:f4:20:
                    43:e8:a2:f3:17:83:87:90:26:d9:3a:d8:54:45:40:
                    32:7a:9d:77:cb:c2:4c:18:ff:8d:1a:07:cc:66:fe:
                    65:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:58:B0:16:74:8D:E5:DD:9F:E1:0E:CD:F2:1E:D9:D5:C3:B9:9F:E2
            X509v3 Authority Key Identifier:
                keyid:05:62:D5:A6:7B:7A:20:F8:65:E7:53:16:3A:6E:D0:E5:F3:47:E8:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BWLVpnt6IPhl51MWOm7Q5fNH6Dk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/8b01c2-ecbe-4f88-ae37-504c8fc220ea/1/BWLVpnt6IPhl51MWOm7Q5fNH6Dk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/82/8b01c2-ecbe-4f88-ae37-504c8fc220ea/1/BWLVpnt6IPhl51MWOm7Q5fNH6Dk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:8a:1c:64:d5:19:61:c3:c7:e6:e3:42:9d:c5:8c:cb:c3:55:
         c3:ed:62:e1:60:a2:f0:ff:3e:3d:1e:0e:8a:f8:82:1d:41:e8:
         36:2f:d8:2a:ad:98:79:ca:85:ab:ea:c0:77:e2:ed:bc:95:6e:
         88:37:73:66:3d:e3:7d:27:3d:35:a4:18:2c:a7:6e:b5:37:59:
         78:24:8d:cd:19:fc:62:a7:13:d7:56:06:66:0c:31:d3:b2:32:
         3b:4e:0d:57:76:d5:ac:0b:89:1a:3d:c0:24:3c:83:06:f9:19:
         14:c4:a8:de:66:42:fd:0d:d4:70:03:d6:1e:f0:62:7c:65:2a:
         7c:e7:a6:58:bf:db:cc:72:2e:be:27:ad:ee:f9:f8:53:3c:6a:
         2c:f1:bb:11:3d:38:c7:c7:50:c9:39:4d:f9:b3:b5:b4:d1:f4:
         c7:02:15:16:75:23:f6:04:04:97:6e:06:66:59:89:6f:4e:c3:
         0f:4c:22:13:01:fa:bd:de:40:7d:95:37:24:68:c5:6c:71:ff:
         b9:00:ac:40:dc:a4:e3:e9:3b:a8:10:57:ed:13:ae:38:bf:34:
         9c:6f:55:f9:4f:04:bb:19:21:04:3d:0a:7d:f6:33:a6:cd:83:
         7f:b5:c5:f5:c1:bd:cc:9b:b4:25:f8:15:63:2d:62:4c:bf:f7:
         aa:ac:1c:ff
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9TpKQWgGPfOvOHNGQrUD4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA1NjJkNWE2N2I3YTIwZjg2NWU3NTMxNjNhNmVkMGU1ZjM0
N2U4MzkwHhcNMjUwMTMxMTcwMDMwWhcNMjUwMjAxMTcwMDMwWjAzMTEwLwYDVQQD
Eyg3NjU4YjAxNjc0OGRlNWRkOWZlMTBlY2RmMjFlZDlkNWMzYjk5ZmUyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsGH8/VYarKxYz6s7GQVVsvn/uFYK
npMRC2CD8F3vx+CUf4vcpA2no5vxyQsyT3nlJ+7wH8ZdAHwQqu77Yyh2NDiJ8LX3
9/3jf4JjU/4DSCiwvHQg++PvgtcUr0u22SY/HFTiU0ei//yb1yn5UoAaxa0Rh6xo
G3auEFfaLnfAUSX02qTTdbqMbLuFsQdFVP734OOZWgv1HpPiO193Rl12Q1ubUTMr
uTzWC+2nXKmXVhtZWkV4HT7fzzMf9qxRcCqP4VdzNAHm7JwZ3nhOxJKio6lIlcob
k0bnmxPLKM6w9CBD6KLzF4OHkCbZOthURUAyep13y8JMGP+NGgfMZv5l0QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHZYsBZ0jeXdn+EOzfIe2dXDuZ/iMB8GA1UdIwQY
MBaAFAVi1aZ7eiD4ZedTFjpu0OXzR+g5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQldMVnBudDZJUGhsNTFNV09tN1E1Zk5INkRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Mi84YjAxYzItZWNiZS00Zjg4LWFlMzct
NTA0YzhmYzIyMGVhLzEvQldMVnBudDZJUGhsNTFNV09tN1E1Zk5INkRrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Mi84YjAxYzItZWNiZS00Zjg4LWFlMzctNTA0YzhmYzIyMGVh
LzEvQldMVnBudDZJUGhsNTFNV09tN1E1Zk5INkRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOIocZNUZ
YcPH5uNCncWMy8NVw+1i4WCi8P8+PR4OiviCHUHoNi/YKq2YecqFq+rAd+LtvJVu
iDdzZj3jfSc9NaQYLKdutTdZeCSNzRn8YqcT11YGZgwx07IyO04NV3bVrAuJGj3A
JDyDBvkZFMSo3mZC/Q3UcAPWHvBifGUqfOemWL/bzHIuviet7vn4UzxqLPG7ET04
x8dQyTlN+bO1tNH0xwIVFnUj9gQEl24GZlmJb07DD0wiEwH6vd5AfZU3JGjFbHH/
uQCsQNyk4+k7qBBX7ROuOL80nG9V+U8EuxkhBD0KffYzps2Df7XF9cG9zJu0JfgV
Yy1iTL/3qqwc/w==
-----END CERTIFICATE-----