Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/971311-f47f-46db-8c57-e9782041cc24/1/gW0iCytaRvvrJ-8tlp-iHdM4xbM.mft
File:                     gW0iCytaRvvrJ-8tlp-iHdM4xbM.mft (raw, json)
Hash identifier:          6qT47kpaMPWfucqWz//DHjkYv+KErA/w1rvn2aMF7f8=
Subject key identifier:   A9:EE:59:F4:B9:A6:98:C1:B6:BA:DC:7A:74:77:EB:FB:B2:F7:36:10
Authority key identifier: 81:6D:22:0B:2B:5A:46:FB:EB:27:EF:2D:96:9F:A2:1D:D3:38:C5:B3
Certificate issuer:       /CN=816d220b2b5a46fbeb27ef2d969fa21dd338c5b3
Certificate serial:       0194BD853E7707196F6871FF305EDFBD9AF7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gW0iCytaRvvrJ-8tlp-iHdM4xbM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8d/971311-f47f-46db-8c57-e9782041cc24/1/gW0iCytaRvvrJ-8tlp-iHdM4xbM.mft
Manifest number:          08D2
Signing time:             Fri 31 Jan 2025 18:00:13 +0000
Manifest this update:     Fri 31 Jan 2025 18:00:13 +0000
Manifest next update:     Sat 01 Feb 2025 18:00:13 +0000
Files and hashes:         1: FmQ80l0dYXHJ_YszXOyTcMs1MTU.roa (hash: fSjkPRX7Cv4pegplKIsFbpWztpRWIWp5drmzYAiL38E=)
                          2: M2T_h-HT-LjV3MxmhC3AaCL7DR0.roa (hash: JUe0w/L/a5YNGKCvQ5Od3tGqP8OCxA0GZG5F9koR5ws=)
                          3: gW0iCytaRvvrJ-8tlp-iHdM4xbM.crl (hash: 5KE0QUv7DE8h5lkheD70OwECigm3lWVpBQxCfTd63tE=)
                          4: hfZ9JmRYsdrX_WsZKnGJG03yjoY.roa (hash: KsXjtR8VJ0gF1kTfS5RfLRCRZJ2gEjdzhxwY2pQ41Hg=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bd:85:3e:77:07:19:6f:68:71:ff:30:5e:df:bd:9a:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=816d220b2b5a46fbeb27ef2d969fa21dd338c5b3
        Validity
            Not Before: Jan 31 18:00:13 2025 GMT
            Not After : Feb  1 18:00:13 2025 GMT
        Subject: CN=a9ee59f4b9a698c1b6badc7a7477ebfbb2f73610
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:5b:d0:df:4e:b8:2f:eb:b4:d1:a1:72:e5:dc:
                    bf:8b:d9:11:a0:ad:ef:34:f0:93:75:95:d7:26:93:
                    b7:47:55:45:5d:e2:ba:da:de:27:01:c6:6e:c3:31:
                    e5:75:78:ab:e8:7d:46:9a:38:df:a9:80:02:ae:2f:
                    f2:d0:7f:d5:09:01:59:0b:47:03:0f:a1:bc:c9:49:
                    e2:3a:08:5c:0d:44:fd:11:59:1c:34:21:62:bf:c4:
                    fa:4d:ee:81:93:2d:26:c0:52:92:5f:d8:40:36:d0:
                    8d:4d:19:61:d6:1c:63:1e:53:c9:31:05:a0:80:a0:
                    ed:49:26:bf:4e:69:3d:ca:b9:23:50:16:0a:fb:f7:
                    60:67:c4:96:c8:12:6c:62:94:87:81:8a:77:64:ad:
                    d7:60:f9:43:f1:99:ed:46:fe:a6:c7:d5:b6:4d:7e:
                    93:72:1b:52:86:95:55:df:77:23:7d:ab:9d:9a:90:
                    5b:22:d2:ab:c2:17:ba:2f:c7:f1:ae:63:eb:e2:c7:
                    10:d7:84:ba:b7:1e:eb:18:e6:71:e8:3c:cf:e6:0d:
                    10:27:c5:2f:bd:cd:a1:ec:5e:84:e9:44:95:d3:aa:
                    cc:c5:49:d2:34:72:58:9a:0c:64:b4:80:0a:63:29:
                    58:c1:2a:86:4f:c7:a2:b6:e0:a8:7c:c1:f0:d8:65:
                    99:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:EE:59:F4:B9:A6:98:C1:B6:BA:DC:7A:74:77:EB:FB:B2:F7:36:10
            X509v3 Authority Key Identifier:
                keyid:81:6D:22:0B:2B:5A:46:FB:EB:27:EF:2D:96:9F:A2:1D:D3:38:C5:B3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gW0iCytaRvvrJ-8tlp-iHdM4xbM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/971311-f47f-46db-8c57-e9782041cc24/1/gW0iCytaRvvrJ-8tlp-iHdM4xbM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/971311-f47f-46db-8c57-e9782041cc24/1/gW0iCytaRvvrJ-8tlp-iHdM4xbM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:50:21:5e:d4:32:6f:e9:2a:46:92:d0:3b:b0:66:cd:f7:f0:
         66:c2:b5:1b:e6:2e:20:ce:60:0c:8e:df:6f:3e:fe:8b:2a:6c:
         06:3a:83:88:51:b9:3e:4d:9c:1b:80:b2:b8:f1:8d:0d:28:38:
         17:6e:ad:5a:15:d1:7d:65:3a:3f:9e:0b:c3:04:b2:20:2c:e8:
         41:d4:79:4f:bf:f3:32:76:23:9b:b6:fa:e0:21:35:06:52:8b:
         87:da:d5:1f:51:61:b7:a2:a1:22:80:c8:06:b8:b0:54:d3:98:
         c1:5d:1c:d0:ae:1f:27:2e:0c:f5:1c:00:f2:c5:bd:80:6b:9c:
         3c:ca:5f:dc:7b:9f:31:1f:59:de:93:87:35:b5:86:f4:9e:aa:
         c5:b3:7b:48:45:e4:d0:45:20:10:2d:05:f6:76:fb:c3:29:94:
         4e:2b:cb:9a:ac:16:bd:67:dd:c7:ca:c9:cf:f2:30:37:fe:ea:
         8d:36:af:3a:7b:12:43:21:90:eb:81:bf:5d:fa:d0:a1:5c:43:
         ea:f8:4d:71:ab:e6:0c:c5:b4:4c:c9:df:69:e9:19:07:d0:1b:
         0e:b0:34:7d:5d:52:52:7b:f8:77:83:50:97:48:77:70:58:79:
         01:6f:bb:d2:5f:83:bd:f1:88:7b:8b:df:e0:78:39:bc:7d:b5:
         6f:6e:ac:b6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9hT53BxlvaHH/MF7fvZr3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgxNmQyMjBiMmI1YTQ2ZmJlYjI3ZWYyZDk2OWZhMjFkZDMz
OGM1YjMwHhcNMjUwMTMxMTgwMDEzWhcNMjUwMjAxMTgwMDEzWjAzMTEwLwYDVQQD
EyhhOWVlNTlmNGI5YTY5OGMxYjZiYWRjN2E3NDc3ZWJmYmIyZjczNjEwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxlvQ3064L+u00aFy5dy/i9kRoK3v
NPCTdZXXJpO3R1VFXeK62t4nAcZuwzHldXir6H1GmjjfqYACri/y0H/VCQFZC0cD
D6G8yUniOghcDUT9EVkcNCFiv8T6Te6Bky0mwFKSX9hANtCNTRlh1hxjHlPJMQWg
gKDtSSa/Tmk9yrkjUBYK+/dgZ8SWyBJsYpSHgYp3ZK3XYPlD8ZntRv6mx9W2TX6T
chtShpVV33cjfaudmpBbItKrwhe6L8fxrmPr4scQ14S6tx7rGOZx6DzP5g0QJ8Uv
vc2h7F6E6USV06rMxUnSNHJYmgxktIAKYylYwSqGT8eituCofMHw2GWZcQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKnuWfS5ppjBtrrcenR36/uy9zYQMB8GA1UdIwQY
MBaAFIFtIgsrWkb76yfvLZafoh3TOMWzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ1cwaUN5dGFSdnZySi04dGxwLWlIZE00eGJNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZC85NzEzMTEtZjQ3Zi00NmRiLThjNTct
ZTk3ODIwNDFjYzI0LzEvZ1cwaUN5dGFSdnZySi04dGxwLWlIZE00eGJNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZC85NzEzMTEtZjQ3Zi00NmRiLThjNTctZTk3ODIwNDFjYzI0
LzEvZ1cwaUN5dGFSdnZySi04dGxwLWlIZE00eGJNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACVAhXtQy
b+kqRpLQO7BmzffwZsK1G+YuIM5gDI7fbz7+iypsBjqDiFG5Pk2cG4CyuPGNDSg4
F26tWhXRfWU6P54LwwSyICzoQdR5T7/zMnYjm7b64CE1BlKLh9rVH1Fht6KhIoDI
BriwVNOYwV0c0K4fJy4M9RwA8sW9gGucPMpf3HufMR9Z3pOHNbWG9J6qxbN7SEXk
0EUgEC0F9nb7wymUTivLmqwWvWfdx8rJz/IwN/7qjTavOnsSQyGQ64G/XfrQoVxD
6vhNcavmDMW0TMnfaekZB9AbDrA0fV1SUnv4d4NQl0h3cFh5AW+70l+DvfGIe4vf
4Hg5vH21b26stg==
-----END CERTIFICATE-----