Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/b62e59-e2c5-4a76-8b67-55672634cbc1/1/o2eb9MYn2F_uLOE6U8RIUbnfBWM.mft
File:                     o2eb9MYn2F_uLOE6U8RIUbnfBWM.mft (raw, json)
Hash identifier:          epWl//eYUGd1drWcM0vGvXQsKogvHwmK06qM3/QQdwc=
Subject key identifier:   F6:04:D7:51:4E:E2:C3:3F:6D:C6:2F:4E:2E:22:C7:63:A7:2E:22:AE
Authority key identifier: A3:67:9B:F4:C6:27:D8:5F:EE:2C:E1:3A:53:C4:48:51:B9:DF:05:63
Certificate issuer:       /CN=a3679bf4c627d85fee2ce13a53c44851b9df0563
Certificate serial:       0194BC3C3009A5552DC713332514699ABC88
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/o2eb9MYn2F_uLOE6U8RIUbnfBWM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/84/b62e59-e2c5-4a76-8b67-55672634cbc1/1/o2eb9MYn2F_uLOE6U8RIUbnfBWM.mft
Manifest number:          1431
Signing time:             Fri 31 Jan 2025 12:00:48 +0000
Manifest this update:     Fri 31 Jan 2025 12:00:48 +0000
Manifest next update:     Sat 01 Feb 2025 12:00:48 +0000
Files and hashes:         1: 0oVfx4tRY8OdO-PChC_5XteysH0.roa (hash: GbKCzhdeN2aFWua1Fqr/ZrjdIb+wfBYag5SVn3tUFwo=)
                          2: GZBEBDVvuKrEI33iqx5474Emrgs.roa (hash: SDZZZgxy/5ICMbfCuvtBTCFMkjZCnFz//IQw8odu3Ls=)
                          3: o2eb9MYn2F_uLOE6U8RIUbnfBWM.crl (hash: Q5MqKWc++SLQs4pNGDQXQNjz+CULpxVnsLko21ivcyw=)
                          4: oKzbCL58HVtAnFWpHugzLfrJ8iY.roa (hash: SJH3c6VE4yqyIoy12Om89pergpbwGay6VY1wyMQ+Tyk=)
                          5: tNdxttBXTBiTceqWIf2Yd2dCvUo.roa (hash: 2+tcAly28pcm8UnLTqlieZLYgz2WMmQ9UXx8tjmG79M=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:3c:30:09:a5:55:2d:c7:13:33:25:14:69:9a:bc:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a3679bf4c627d85fee2ce13a53c44851b9df0563
        Validity
            Not Before: Jan 31 12:00:48 2025 GMT
            Not After : Feb  1 12:00:48 2025 GMT
        Subject: CN=f604d7514ee2c33f6dc62f4e2e22c763a72e22ae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:03:86:bc:31:28:f9:87:7c:77:eb:77:fd:a3:
                    86:4a:86:38:1f:9b:bd:eb:2f:49:29:ea:72:90:e6:
                    04:6f:d1:b6:8d:af:8e:3c:87:96:c0:f3:76:ac:fa:
                    5e:dd:2f:35:3b:6c:50:12:55:0f:b8:4c:e5:c2:4e:
                    1d:2e:62:7a:50:70:ae:b3:16:aa:0f:10:d4:c2:fb:
                    50:70:bf:c3:db:d4:81:f8:61:b8:d1:b3:f8:a7:19:
                    3e:1f:d3:9c:23:f9:ed:7f:4f:a4:5c:3c:99:b2:c5:
                    07:32:88:f9:5d:fa:7e:a7:99:3e:d7:c8:cd:ec:02:
                    75:8d:62:e4:f8:86:a9:b4:b8:d7:fe:1e:70:3a:ee:
                    d4:5e:39:b8:d0:c4:48:fe:5b:0a:4d:a6:43:20:cd:
                    60:51:1a:55:f0:12:22:65:a7:d3:b8:40:36:20:ea:
                    53:77:78:c4:74:82:e7:49:b3:54:5f:ea:5e:3a:db:
                    13:98:66:0a:6d:e8:4e:43:60:4e:f8:17:ec:f6:23:
                    79:58:39:21:75:79:6b:12:a4:a8:2b:6b:e7:72:73:
                    c3:3e:5a:25:1d:86:68:e6:20:a0:f1:ff:56:69:db:
                    6d:1b:ce:5b:cc:2c:51:06:24:8f:b1:4d:59:58:5d:
                    63:c3:26:cc:18:bb:b3:94:10:eb:0f:3a:61:ba:1f:
                    68:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:04:D7:51:4E:E2:C3:3F:6D:C6:2F:4E:2E:22:C7:63:A7:2E:22:AE
            X509v3 Authority Key Identifier:
                keyid:A3:67:9B:F4:C6:27:D8:5F:EE:2C:E1:3A:53:C4:48:51:B9:DF:05:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o2eb9MYn2F_uLOE6U8RIUbnfBWM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/b62e59-e2c5-4a76-8b67-55672634cbc1/1/o2eb9MYn2F_uLOE6U8RIUbnfBWM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/84/b62e59-e2c5-4a76-8b67-55672634cbc1/1/o2eb9MYn2F_uLOE6U8RIUbnfBWM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b1:9d:4e:e9:4c:c8:d8:9e:e6:68:9f:1e:98:2a:25:5c:1c:40:
         c1:4c:8b:95:77:23:bc:c8:7e:7d:62:ca:97:da:de:4b:d7:e0:
         b8:e3:77:be:25:37:8b:a9:6b:2b:04:71:26:c4:74:ae:0e:bf:
         03:2d:e0:cc:67:3b:f7:ce:44:5c:2c:5c:9c:c0:77:2f:af:d0:
         39:69:7f:21:04:2d:e9:54:17:b4:3c:d1:e8:d2:fa:22:e3:d9:
         78:17:99:ca:dc:e0:06:7a:d8:ff:92:de:be:09:20:af:90:a4:
         47:57:1b:cb:fb:48:b8:e7:e2:95:61:9b:df:6b:06:80:58:de:
         c8:65:45:80:8c:d7:0a:9f:b8:43:f1:42:fe:a6:03:1e:6d:6b:
         41:b6:23:66:d9:2e:1f:b6:82:20:8c:67:bf:d7:a5:f5:a0:e3:
         da:a5:91:9c:45:dc:d7:61:b4:e5:60:99:0e:7c:40:e5:6a:f1:
         e7:99:e3:72:ad:c5:08:ce:ba:3c:be:4e:40:85:00:b4:b3:74:
         1b:ae:e2:2f:f5:ee:c9:ad:b3:72:43:ff:0e:0d:e1:f5:6f:89:
         fe:33:a1:0a:9f:62:cc:c8:ce:dd:d0:e4:e2:1f:74:21:24:f2:
         8b:17:07:ee:82:f5:5d:88:b7:c7:08:0a:e1:1a:de:d9:f5:07:
         67:2f:21:21
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8PDAJpVUtxxMzJRRpmryIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEzNjc5YmY0YzYyN2Q4NWZlZTJjZTEzYTUzYzQ0ODUxYjlk
ZjA1NjMwHhcNMjUwMTMxMTIwMDQ4WhcNMjUwMjAxMTIwMDQ4WjAzMTEwLwYDVQQD
EyhmNjA0ZDc1MTRlZTJjMzNmNmRjNjJmNGUyZTIyYzc2M2E3MmUyMmFlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqQOGvDEo+Yd8d+t3/aOGSoY4H5u9
6y9JKepykOYEb9G2ja+OPIeWwPN2rPpe3S81O2xQElUPuEzlwk4dLmJ6UHCusxaq
DxDUwvtQcL/D29SB+GG40bP4pxk+H9OcI/ntf0+kXDyZssUHMoj5Xfp+p5k+18jN
7AJ1jWLk+IaptLjX/h5wOu7UXjm40MRI/lsKTaZDIM1gURpV8BIiZafTuEA2IOpT
d3jEdILnSbNUX+peOtsTmGYKbehOQ2BO+Bfs9iN5WDkhdXlrEqSoK2vncnPDPlol
HYZo5iCg8f9WadttG85bzCxRBiSPsU1ZWF1jwybMGLuzlBDrDzphuh9ozQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPYE11FO4sM/bcYvTi4ix2OnLiKuMB8GA1UdIwQY
MBaAFKNnm/TGJ9hf7izhOlPESFG53wVjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbzJlYjlNWW4yRl91TE9FNlU4UklVYm5mQldNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NC9iNjJlNTktZTJjNS00YTc2LThiNjct
NTU2NzI2MzRjYmMxLzEvbzJlYjlNWW4yRl91TE9FNlU4UklVYm5mQldNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84NC9iNjJlNTktZTJjNS00YTc2LThiNjctNTU2NzI2MzRjYmMx
LzEvbzJlYjlNWW4yRl91TE9FNlU4UklVYm5mQldNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsZ1O6UzI
2J7maJ8emColXBxAwUyLlXcjvMh+fWLKl9reS9fguON3viU3i6lrKwRxJsR0rg6/
Ay3gzGc7985EXCxcnMB3L6/QOWl/IQQt6VQXtDzR6NL6IuPZeBeZytzgBnrY/5Le
vgkgr5CkR1cby/tIuOfilWGb32sGgFjeyGVFgIzXCp+4Q/FC/qYDHm1rQbYjZtku
H7aCIIxnv9el9aDj2qWRnEXc12G05WCZDnxA5Wrx55njcq3FCM66PL5OQIUAtLN0
G67iL/Xuya2zckP/Dg3h9W+J/jOhCp9izMjO3dDk4h90ISTyixcH7oL1XYi3xwgK
4Rre2fUHZy8hIQ==
-----END CERTIFICATE-----