Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/5b48a7-a0d7-43f2-a362-8b2b4738b1cc/1/S5Mx-nvkcNwXnhbDBumMbHMaV1w.mft
File:                     S5Mx-nvkcNwXnhbDBumMbHMaV1w.mft (raw, json)
Hash identifier:          iG4mf4AtyTSSIUlk4UD6PLw6lzZOQJazA3igZShupqw=
Subject key identifier:   A2:FE:1E:FD:27:DB:14:A6:EA:4D:EA:98:55:7E:F6:A4:51:B8:8B:04
Authority key identifier: 4B:93:31:FA:7B:E4:70:DC:17:9E:16:C3:06:E9:8C:6C:73:1A:57:5C
Certificate issuer:       /CN=4b9331fa7be470dc179e16c306e98c6c731a575c
Certificate serial:       0194BC3BBD1BAA9D04505F1B349BD3DD43B0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/S5Mx-nvkcNwXnhbDBumMbHMaV1w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/84/5b48a7-a0d7-43f2-a362-8b2b4738b1cc/1/S5Mx-nvkcNwXnhbDBumMbHMaV1w.mft
Manifest number:          01DD
Signing time:             Fri 31 Jan 2025 12:00:19 +0000
Manifest this update:     Fri 31 Jan 2025 12:00:19 +0000
Manifest next update:     Sat 01 Feb 2025 12:00:19 +0000
Files and hashes:         1: 0_z69Mp8Uq-H2QPlCa0CLWX2coU.roa (hash: wm+6P/OKtHhF/O/CkulyZkvoYkTpsb5odPnFIekRy3I=)
                          2: D4PPtKoYzm6TEOaEItnlpLXHHvM.roa (hash: lDsciGTqjNOV2/WKbPe1B6UAqKR1IlIJEKOSyRbTxtQ=)
                          3: MwPt3-lNxJQ0lSrDu2rUHsootYs.roa (hash: bydJdTHTrRRYVn8SiGfcc/ZiHB/j7SoLmJFPkOOHs20=)
                          4: OKyKpN95rjkz0BkAHFrKr0JjvkE.roa (hash: sfF8wY2hkU4qO50ecHF6qLBt9Z8YYYVQ9BQjou15tdc=)
                          5: S5Mx-nvkcNwXnhbDBumMbHMaV1w.crl (hash: IiRi8v76RaIV14o2r1FgtTi+TDr5anwahJeiKAVOrRo=)
                          6: _Khf-n0vZfCAmh5Kz1BybwMWUtk.roa (hash: kt8gl4Nj76yRL5CdwZbXkVqwHK70gqMfG0Z0kpN+NYA=)
                          7: mmsNCxoKHaDPhHn0fBPGBcpDtik.roa (hash: CFO4I9XsLXxPAwXry17kYeZuNErEd6F2BAETZZAMwFo=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:3b:bd:1b:aa:9d:04:50:5f:1b:34:9b:d3:dd:43:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4b9331fa7be470dc179e16c306e98c6c731a575c
        Validity
            Not Before: Jan 31 12:00:19 2025 GMT
            Not After : Feb  1 12:00:19 2025 GMT
        Subject: CN=a2fe1efd27db14a6ea4dea98557ef6a451b88b04
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:90:3a:64:f4:34:a4:23:29:a3:b2:62:ec:ed:
                    48:25:7d:5b:f9:d6:3b:eb:97:a5:49:14:6e:8b:28:
                    20:78:1e:93:e0:c5:66:3c:fc:55:87:10:97:b5:14:
                    43:d3:a3:94:a6:94:3a:90:93:4e:86:d1:06:70:85:
                    36:26:5c:05:b7:4f:ee:6e:6c:e7:75:2e:4d:4f:2e:
                    86:4f:fb:82:54:ad:0a:f6:42:8c:0a:21:33:c4:94:
                    55:4f:ca:66:f6:f4:b4:4a:1b:89:ec:25:de:31:88:
                    fd:8d:76:d7:17:ca:92:3f:76:e4:ac:26:cb:61:de:
                    78:ba:e5:f4:b3:b3:a0:fe:dd:29:5b:d8:5a:c1:45:
                    7b:7a:b4:5e:6c:ed:fd:3a:a4:bc:ac:f5:d6:76:59:
                    11:77:45:e2:21:89:7b:0c:9b:2e:3c:55:6b:de:50:
                    72:a8:0a:f4:ee:85:c0:70:9a:8f:63:50:d6:79:ad:
                    b7:33:c2:02:16:76:e5:15:3b:46:45:17:5d:27:3d:
                    aa:b1:3d:ba:2d:26:61:11:23:19:c4:ff:e4:8d:15:
                    79:ea:c6:f9:19:7c:52:84:6c:b3:9e:2f:c9:50:4a:
                    9f:e9:97:2c:b7:6d:97:55:22:85:7b:55:32:fa:71:
                    e7:6a:be:58:e9:5f:07:eb:c4:55:be:b6:fe:4b:62:
                    04:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:FE:1E:FD:27:DB:14:A6:EA:4D:EA:98:55:7E:F6:A4:51:B8:8B:04
            X509v3 Authority Key Identifier:
                keyid:4B:93:31:FA:7B:E4:70:DC:17:9E:16:C3:06:E9:8C:6C:73:1A:57:5C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S5Mx-nvkcNwXnhbDBumMbHMaV1w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/5b48a7-a0d7-43f2-a362-8b2b4738b1cc/1/S5Mx-nvkcNwXnhbDBumMbHMaV1w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/84/5b48a7-a0d7-43f2-a362-8b2b4738b1cc/1/S5Mx-nvkcNwXnhbDBumMbHMaV1w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:9b:73:e6:1c:00:c5:f4:23:b9:67:bb:92:74:c1:1b:67:ef:
         83:50:54:68:05:30:62:37:11:7f:ad:bf:33:cb:5d:9e:8e:1b:
         f3:a3:26:ba:ba:b4:ac:6c:7e:ea:12:1d:6d:d1:ef:45:4a:dd:
         50:4f:07:09:cc:ae:28:2a:3b:aa:df:df:7a:26:cf:3c:76:fa:
         51:78:13:6b:d1:8d:40:f0:4c:4f:90:aa:53:aa:fc:b4:d9:b9:
         9f:48:d3:81:94:2f:e6:18:49:33:30:70:be:4b:27:e0:19:95:
         8a:dd:95:4c:14:6e:4b:a4:5e:de:4c:a5:f0:0a:99:e8:b0:3a:
         1c:75:c4:44:96:59:6c:5a:75:f6:bf:1e:eb:56:80:ba:ca:c3:
         25:5f:c2:42:7c:5e:80:d4:67:dc:61:87:f4:ba:99:52:c7:5a:
         e2:dd:db:d3:31:35:c5:83:a3:6a:b9:ec:a9:ec:d7:3c:af:78:
         dc:31:d3:01:e7:11:7c:4f:83:a6:ba:f9:92:f4:fc:ac:45:5e:
         f7:98:e0:c6:0c:84:22:bf:aa:03:79:eb:3b:76:bd:db:14:e3:
         9d:bd:f7:a9:42:85:b2:be:40:67:c2:9b:cd:ff:90:09:37:8c:
         47:52:1a:81:60:33:5f:6c:53:86:ee:08:72:d8:7f:5c:6a:af:
         17:aa:05:29
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8O70bqp0EUF8bNJvT3UOwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRiOTMzMWZhN2JlNDcwZGMxNzllMTZjMzA2ZTk4YzZjNzMx
YTU3NWMwHhcNMjUwMTMxMTIwMDE5WhcNMjUwMjAxMTIwMDE5WjAzMTEwLwYDVQQD
EyhhMmZlMWVmZDI3ZGIxNGE2ZWE0ZGVhOTg1NTdlZjZhNDUxYjg4YjA0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqJA6ZPQ0pCMpo7Ji7O1IJX1b+dY7
65elSRRuiyggeB6T4MVmPPxVhxCXtRRD06OUppQ6kJNOhtEGcIU2JlwFt0/ubmzn
dS5NTy6GT/uCVK0K9kKMCiEzxJRVT8pm9vS0ShuJ7CXeMYj9jXbXF8qSP3bkrCbL
Yd54uuX0s7Og/t0pW9hawUV7erRebO39OqS8rPXWdlkRd0XiIYl7DJsuPFVr3lBy
qAr07oXAcJqPY1DWea23M8ICFnblFTtGRRddJz2qsT26LSZhESMZxP/kjRV56sb5
GXxShGyzni/JUEqf6Zcst22XVSKFe1Uy+nHnar5Y6V8H68RVvrb+S2IE+wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKL+Hv0n2xSm6k3qmFV+9qRRuIsEMB8GA1UdIwQY
MBaAFEuTMfp75HDcF54WwwbpjGxzGldcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUzVNeC1udmtjTndYbmhiREJ1bU1iSE1hVjF3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NC81YjQ4YTctYTBkNy00M2YyLWEzNjIt
OGIyYjQ3MzhiMWNjLzEvUzVNeC1udmtjTndYbmhiREJ1bU1iSE1hVjF3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84NC81YjQ4YTctYTBkNy00M2YyLWEzNjItOGIyYjQ3MzhiMWNj
LzEvUzVNeC1udmtjTndYbmhiREJ1bU1iSE1hVjF3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZZtz5hwA
xfQjuWe7knTBG2fvg1BUaAUwYjcRf62/M8tdno4b86Mmurq0rGx+6hIdbdHvRUrd
UE8HCcyuKCo7qt/feibPPHb6UXgTa9GNQPBMT5CqU6r8tNm5n0jTgZQv5hhJMzBw
vksn4BmVit2VTBRuS6Re3kyl8AqZ6LA6HHXERJZZbFp19r8e61aAusrDJV/CQnxe
gNRn3GGH9LqZUsda4t3b0zE1xYOjarnsqezXPK943DHTAecRfE+Dprr5kvT8rEVe
95jgxgyEIr+qA3nrO3a92xTjnb33qUKFsr5AZ8Kbzf+QCTeMR1IagWAzX2xThu4I
cth/XGqvF6oFKQ==
-----END CERTIFICATE-----