Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/4c48bb-366c-41f5-9b2d-530440c4fa29/1/HkogILgtApTpCi1rLA8o0Rc7ZGU.mft
File:                     HkogILgtApTpCi1rLA8o0Rc7ZGU.mft (raw, json)
Hash identifier:          Ld7fjJHuiR2HJbi91kzDKwFzOttp2VFQnZ4MduJLeXI=
Subject key identifier:   0C:C9:44:BD:8A:18:BA:7B:F0:D8:CF:02:18:74:17:29:63:A1:BE:96
Authority key identifier: 1E:4A:20:20:B8:2D:02:94:E9:0A:2D:6B:2C:0F:28:D1:17:3B:64:65
Certificate issuer:       /CN=1e4a2020b82d0294e90a2d6b2c0f28d1173b6465
Certificate serial:       0194BCAA3F94540D1FF86D4D881605B2A410
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HkogILgtApTpCi1rLA8o0Rc7ZGU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8c/4c48bb-366c-41f5-9b2d-530440c4fa29/1/HkogILgtApTpCi1rLA8o0Rc7ZGU.mft
Manifest number:          142B
Signing time:             Fri 31 Jan 2025 14:01:01 +0000
Manifest this update:     Fri 31 Jan 2025 14:01:01 +0000
Manifest next update:     Sat 01 Feb 2025 14:01:01 +0000
Files and hashes:         1: 7wJbNCUcwtFlKnAHPgTuv8Sn0i4.roa (hash: Yg17vxRzYWiVt6fOmSwVpKWZGt89EQyeG3U2CWqSktI=)
                          2: HkogILgtApTpCi1rLA8o0Rc7ZGU.crl (hash: 5N1oXI/TQ/1CNCVrt3LNSKDHyEE9VAlo8LwBV+RQEaU=)
                          3: I1sRKyvYdSWFdpxY3K3hgfpLh8c.roa (hash: EW9DVDBND5j7A8L4kBfb9CEdZ+sujph27uho+pUx/m0=)
                          4: IWHxNStdjrSROqwuZe7sT7LT4Nk.roa (hash: S/bzV1Gz+VxqpXjM3Pl83zzxF5vyuBSuFK0LxiEoibw=)
                          5: yFf2Zz0VjYagA0shVIplpiusWp4.roa (hash: Sonq+rZh7+zVQsS+x3AiHiTrq12H+Dw70vUAQVtyO0E=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:aa:3f:94:54:0d:1f:f8:6d:4d:88:16:05:b2:a4:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1e4a2020b82d0294e90a2d6b2c0f28d1173b6465
        Validity
            Not Before: Jan 31 14:01:01 2025 GMT
            Not After : Feb  1 14:01:01 2025 GMT
        Subject: CN=0cc944bd8a18ba7bf0d8cf021874172963a1be96
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:a7:dc:fa:51:44:29:0a:7d:b0:38:74:43:9d:
                    83:98:a2:c6:56:1e:70:e3:59:71:d7:08:d7:3f:f5:
                    3b:50:40:58:a0:8c:d1:ad:00:cc:5a:80:32:e8:54:
                    5e:45:09:4e:83:7b:a0:ef:12:43:ab:34:66:fd:4f:
                    b6:27:7e:64:01:be:90:45:d8:2e:33:b3:97:94:72:
                    30:24:d8:2d:71:16:17:a3:aa:2a:ed:d3:b7:ad:13:
                    d5:8c:d7:c0:1e:22:12:ce:53:f0:08:30:72:1e:5b:
                    04:33:ae:25:e2:a5:4b:b8:db:40:de:41:74:89:6c:
                    61:78:81:b7:6e:a5:43:f5:6b:a3:1c:8b:dd:57:38:
                    77:10:62:b0:66:b1:a0:6d:bc:21:b5:19:af:02:be:
                    f1:8c:3c:45:08:3a:ef:45:be:c6:8f:7b:2b:d8:31:
                    99:2a:4a:d5:26:fa:07:7e:5b:8f:0d:33:06:25:c9:
                    07:98:bf:85:eb:1f:cc:da:0c:dd:e4:63:24:89:cf:
                    a8:96:97:e0:14:0b:33:00:f8:2e:c2:0d:e6:86:81:
                    2d:7e:e9:9c:96:85:c1:d4:87:64:f6:f4:49:7b:62:
                    4d:b2:e9:33:fb:5d:7d:8c:90:33:5c:eb:ef:4b:aa:
                    60:1c:18:9c:4f:41:1d:ba:af:75:86:06:53:87:43:
                    cc:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:C9:44:BD:8A:18:BA:7B:F0:D8:CF:02:18:74:17:29:63:A1:BE:96
            X509v3 Authority Key Identifier:
                keyid:1E:4A:20:20:B8:2D:02:94:E9:0A:2D:6B:2C:0F:28:D1:17:3B:64:65

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HkogILgtApTpCi1rLA8o0Rc7ZGU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/4c48bb-366c-41f5-9b2d-530440c4fa29/1/HkogILgtApTpCi1rLA8o0Rc7ZGU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/4c48bb-366c-41f5-9b2d-530440c4fa29/1/HkogILgtApTpCi1rLA8o0Rc7ZGU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:f2:05:10:29:06:2e:4b:19:bc:e4:91:78:00:2c:e0:ee:e5:
         61:db:bc:30:c3:62:04:62:b4:28:d0:0a:3e:1a:08:3d:18:11:
         66:0a:90:86:4d:75:c0:51:a1:f1:86:05:dc:16:a4:79:ef:5e:
         8f:d6:dd:ee:5f:9c:e4:26:ee:cb:c7:ec:88:4b:54:86:94:03:
         ee:87:91:c8:8d:1f:da:28:cd:40:f8:55:6f:52:e2:0d:34:f2:
         18:1d:af:ab:05:1d:ab:df:ea:28:39:9a:e8:f5:16:31:5b:e7:
         47:7a:f6:bf:f8:b0:3f:0e:29:08:db:84:cf:0b:26:fe:14:94:
         05:83:32:a9:d1:eb:61:4a:a4:3c:dc:54:33:66:a1:0c:f1:0a:
         43:77:ed:ba:03:fa:c0:6a:7b:c3:39:87:de:31:e1:ad:39:a9:
         f1:3a:36:70:98:d2:5d:7b:ca:a2:bc:72:6e:db:5c:37:fa:e4:
         1f:c8:4d:42:60:e1:5e:56:00:9b:64:b7:c5:7e:23:7a:09:e7:
         a2:de:c3:40:d1:68:52:19:7c:0a:97:d3:aa:29:3e:0f:4e:bc:
         03:77:2e:7b:49:c3:a3:29:eb:9a:73:6a:fe:86:33:e7:39:b1:
         84:54:78:df:80:01:03:ba:fe:42:d5:c8:a6:ee:ab:92:7a:3e:
         b8:50:15:ea
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8qj+UVA0f+G1NiBYFsqQQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFlNGEyMDIwYjgyZDAyOTRlOTBhMmQ2YjJjMGYyOGQxMTcz
YjY0NjUwHhcNMjUwMTMxMTQwMTAxWhcNMjUwMjAxMTQwMTAxWjAzMTEwLwYDVQQD
EygwY2M5NDRiZDhhMThiYTdiZjBkOGNmMDIxODc0MTcyOTYzYTFiZTk2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvqfc+lFEKQp9sDh0Q52DmKLGVh5w
41lx1wjXP/U7UEBYoIzRrQDMWoAy6FReRQlOg3ug7xJDqzRm/U+2J35kAb6QRdgu
M7OXlHIwJNgtcRYXo6oq7dO3rRPVjNfAHiISzlPwCDByHlsEM64l4qVLuNtA3kF0
iWxheIG3bqVD9WujHIvdVzh3EGKwZrGgbbwhtRmvAr7xjDxFCDrvRb7Gj3sr2DGZ
KkrVJvoHfluPDTMGJckHmL+F6x/M2gzd5GMkic+olpfgFAszAPguwg3mhoEtfumc
loXB1Idk9vRJe2JNsukz+119jJAzXOvvS6pgHBicT0Eduq91hgZTh0PMwwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAzJRL2KGLp78NjPAhh0Fyljob6WMB8GA1UdIwQY
MBaAFB5KICC4LQKU6QotaywPKNEXO2RlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSGtvZ0lMZ3RBcFRwQ2kxckxBOG8wUmM3WkdVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yy80YzQ4YmItMzY2Yy00MWY1LTliMmQt
NTMwNDQwYzRmYTI5LzEvSGtvZ0lMZ3RBcFRwQ2kxckxBOG8wUmM3WkdVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yy80YzQ4YmItMzY2Yy00MWY1LTliMmQtNTMwNDQwYzRmYTI5
LzEvSGtvZ0lMZ3RBcFRwQ2kxckxBOG8wUmM3WkdVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPPIFECkG
LksZvOSReAAs4O7lYdu8MMNiBGK0KNAKPhoIPRgRZgqQhk11wFGh8YYF3Bakee9e
j9bd7l+c5Cbuy8fsiEtUhpQD7oeRyI0f2ijNQPhVb1LiDTTyGB2vqwUdq9/qKDma
6PUWMVvnR3r2v/iwPw4pCNuEzwsm/hSUBYMyqdHrYUqkPNxUM2ahDPEKQ3ftugP6
wGp7wzmH3jHhrTmp8To2cJjSXXvKorxybttcN/rkH8hNQmDhXlYAm2S3xX4jegnn
ot7DQNFoUhl8CpfTqik+D068A3cue0nDoynrmnNq/oYz5zmxhFR434ABA7r+QtXI
pu6rkno+uFAV6g==
-----END CERTIFICATE-----