Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/1f5e07-32b6-4114-8b0d-d3b58f698148/1/rPkQ82KRw8Ik3bWW2VZUMZfxY94.mft
File:                     rPkQ82KRw8Ik3bWW2VZUMZfxY94.mft (raw, json)
Hash identifier:          2xIxtWfPfwWMlKgG120+IYHcnhRczRChv1W/F4yWU6s=
Subject key identifier:   D7:D6:26:18:38:FC:7A:06:12:8A:5B:B7:18:E2:A9:A0:30:96:94:C7
Authority key identifier: AC:F9:10:F3:62:91:C3:C2:24:DD:B5:96:D9:56:54:31:97:F1:63:DE
Certificate issuer:       /CN=acf910f36291c3c224ddb596d956543197f163de
Certificate serial:       0194BBCE3D31BB04A4701CAD8605DCC776D6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rPkQ82KRw8Ik3bWW2VZUMZfxY94.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8e/1f5e07-32b6-4114-8b0d-d3b58f698148/1/rPkQ82KRw8Ik3bWW2VZUMZfxY94.mft
Manifest number:          13EB
Signing time:             Fri 31 Jan 2025 10:00:42 +0000
Manifest this update:     Fri 31 Jan 2025 10:00:42 +0000
Manifest next update:     Sat 01 Feb 2025 10:00:42 +0000
Files and hashes:         1: 8eCmueBEOSsAwO1CHji1gE-_3LI.roa (hash: l5xAz+doohGBqrtfOFmej8JqC0mnQVYKQDeIBm1ToAM=)
                          2: DtvFUItZKqyAuC0qVO7xK12HQO0.roa (hash: z+RXHMTUA/r+jPrvwbj//4T8rVTRPjeJiPQfneeOdNs=)
                          3: J5Nzje0wm67y5K6t3cH8za4h1d0.roa (hash: qpAZrfLDKqU9NwWz286x02NAvGgP6kk6hcqmLvVKz8c=)
                          4: klr8zXHLn6mli5IxFQr4R9FyMV0.roa (hash: I+JofOB+oo9ML4ISV8ODtPvO84Ef+x27qR0wwlNvvJ8=)
                          5: q0Eds_oIDCgE88gdpI6r4kp33h8.roa (hash: sqISDzfU6JYm1UcY8Gcz5wDK5BeEeTVU67gC4Pg+KUk=)
                          6: rPkQ82KRw8Ik3bWW2VZUMZfxY94.crl (hash: YGele7Id6dS/UR9hETPzhKZayUjQurMfFeoDanUXxRo=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bb:ce:3d:31:bb:04:a4:70:1c:ad:86:05:dc:c7:76:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=acf910f36291c3c224ddb596d956543197f163de
        Validity
            Not Before: Jan 31 10:00:42 2025 GMT
            Not After : Feb  1 10:00:42 2025 GMT
        Subject: CN=d7d6261838fc7a06128a5bb718e2a9a0309694c7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:65:8c:c3:ac:d0:b2:db:87:29:7f:ed:1c:f4:
                    a8:e4:74:de:68:53:7d:a5:e1:be:5a:98:b1:4e:70:
                    d2:eb:8c:31:72:9f:d7:b4:ce:a4:86:42:17:24:79:
                    e7:32:4d:4d:27:e5:13:8a:30:3e:3c:58:83:04:93:
                    12:70:68:3f:c5:f5:2d:7b:b7:0e:23:e4:7a:82:01:
                    4f:44:26:9a:6e:c2:b9:2e:6c:a7:ea:50:e2:26:d4:
                    b9:08:99:0d:3b:b3:8d:34:e3:6d:73:18:78:a3:9d:
                    74:ce:99:ec:4f:a9:b7:96:9c:fb:ba:c1:ce:a9:8b:
                    73:aa:a8:e1:57:0d:41:55:80:8c:fa:ee:f8:c6:b9:
                    0d:ac:c0:98:1a:2e:8a:59:7d:de:9e:4e:d4:66:2f:
                    f2:ce:d7:95:31:d1:9b:56:91:9e:02:f4:81:b7:35:
                    f0:d9:8e:4b:10:e3:f0:2a:0d:1b:9b:2c:1a:4a:55:
                    1b:be:0a:d6:75:41:e6:7c:8f:64:e0:54:07:68:63:
                    09:67:61:17:9f:15:cd:08:d0:6f:35:10:fc:1f:cc:
                    10:12:98:a2:54:74:c5:ca:10:37:9b:9b:bb:de:0e:
                    df:48:2c:18:57:42:ec:85:85:d3:6b:21:51:63:4a:
                    6e:22:4b:c3:fb:75:0f:19:5d:5b:a2:60:42:ad:03:
                    99:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:D6:26:18:38:FC:7A:06:12:8A:5B:B7:18:E2:A9:A0:30:96:94:C7
            X509v3 Authority Key Identifier:
                keyid:AC:F9:10:F3:62:91:C3:C2:24:DD:B5:96:D9:56:54:31:97:F1:63:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rPkQ82KRw8Ik3bWW2VZUMZfxY94.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/1f5e07-32b6-4114-8b0d-d3b58f698148/1/rPkQ82KRw8Ik3bWW2VZUMZfxY94.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/1f5e07-32b6-4114-8b0d-d3b58f698148/1/rPkQ82KRw8Ik3bWW2VZUMZfxY94.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:60:e7:25:ea:ca:3b:58:fe:cc:32:cc:d5:b2:5c:df:73:72:
         ad:3a:71:74:8d:f1:c3:16:a8:59:b8:a0:17:2e:e7:b9:70:7a:
         7f:1d:36:0a:b5:96:ed:6c:6b:2e:e4:2c:f8:ef:0c:00:dc:ce:
         4a:3d:0e:48:50:f1:2d:56:37:07:5c:62:6d:10:7d:6f:74:04:
         7a:19:47:0c:f7:37:43:fb:20:ba:42:4f:e4:fc:ba:e6:84:4f:
         3d:2f:0f:61:6d:f8:09:14:8b:22:d3:53:72:0b:ea:e3:78:17:
         17:7b:b2:b8:78:74:b4:99:ef:21:ba:2a:ae:61:ad:fe:4c:96:
         90:9e:e7:05:8b:f5:47:ed:cc:31:27:5c:f7:b9:0a:5d:01:59:
         5b:96:56:1e:50:a9:23:62:89:45:43:16:4e:26:b4:ba:8d:cd:
         e8:9f:79:50:8b:ab:ae:dd:42:45:56:a1:e6:bb:eb:ed:10:3c:
         6d:21:6e:e1:a3:0f:73:6b:d1:b3:71:e4:bf:79:ab:aa:04:33:
         05:ef:4e:71:d3:64:36:c4:5c:28:56:3d:07:11:7c:a1:4b:a1:
         0e:8c:2b:2c:96:c6:1e:62:e1:f1:a0:e0:32:40:4d:7e:ab:3b:
         83:82:5d:aa:19:38:92:1e:33:83:f8:ca:ac:98:4b:c7:ec:34:
         de:ee:75:ce
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS7zj0xuwSkcBythgXcx3bWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFjZjkxMGYzNjI5MWMzYzIyNGRkYjU5NmQ5NTY1NDMxOTdm
MTYzZGUwHhcNMjUwMTMxMTAwMDQyWhcNMjUwMjAxMTAwMDQyWjAzMTEwLwYDVQQD
EyhkN2Q2MjYxODM4ZmM3YTA2MTI4YTViYjcxOGUyYTlhMDMwOTY5NGM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu2WMw6zQstuHKX/tHPSo5HTeaFN9
peG+WpixTnDS64wxcp/XtM6khkIXJHnnMk1NJ+UTijA+PFiDBJMScGg/xfUte7cO
I+R6ggFPRCaabsK5Lmyn6lDiJtS5CJkNO7ONNONtcxh4o510zpnsT6m3lpz7usHO
qYtzqqjhVw1BVYCM+u74xrkNrMCYGi6KWX3enk7UZi/yzteVMdGbVpGeAvSBtzXw
2Y5LEOPwKg0bmywaSlUbvgrWdUHmfI9k4FQHaGMJZ2EXnxXNCNBvNRD8H8wQEpii
VHTFyhA3m5u73g7fSCwYV0LshYXTayFRY0puIkvD+3UPGV1bomBCrQOZBQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNfWJhg4/HoGEopbtxjiqaAwlpTHMB8GA1UdIwQY
MBaAFKz5EPNikcPCJN21ltlWVDGX8WPeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvclBrUTgyS1J3OElrM2JXVzJWWlVNWmZ4WTk0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS8xZjVlMDctMzJiNi00MTE0LThiMGQt
ZDNiNThmNjk4MTQ4LzEvclBrUTgyS1J3OElrM2JXVzJWWlVNWmZ4WTk0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS8xZjVlMDctMzJiNi00MTE0LThiMGQtZDNiNThmNjk4MTQ4
LzEvclBrUTgyS1J3OElrM2JXVzJWWlVNWmZ4WTk0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABmDnJerK
O1j+zDLM1bJc33NyrTpxdI3xwxaoWbigFy7nuXB6fx02CrWW7WxrLuQs+O8MANzO
Sj0OSFDxLVY3B1xibRB9b3QEehlHDPc3Q/sgukJP5Py65oRPPS8PYW34CRSLItNT
cgvq43gXF3uyuHh0tJnvIboqrmGt/kyWkJ7nBYv1R+3MMSdc97kKXQFZW5ZWHlCp
I2KJRUMWTia0uo3N6J95UIurrt1CRVah5rvr7RA8bSFu4aMPc2vRs3Hkv3mrqgQz
Be9OcdNkNsRcKFY9BxF8oUuhDowrLJbGHmLh8aDgMkBNfqs7g4Jdqhk4kh4zg/jK
rJhLx+w03u51zg==
-----END CERTIFICATE-----