Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/f8314e-a3bc-45e9-a9f5-4c98d9a51405/1/xEFzi6q5iLHWhpO7BeKb-7Tw9nE.mft
File:                     xEFzi6q5iLHWhpO7BeKb-7Tw9nE.mft (raw, json)
Hash identifier:          BtUBj5Tk1R2+a9ft/x079rEepfrD69Gr24Slt/DZ99Q=
Subject key identifier:   10:43:1A:75:E3:B8:19:58:CF:A0:35:34:C2:C3:C5:D1:8D:ED:BD:96
Authority key identifier: C4:41:73:8B:AA:B9:88:B1:D6:86:93:BB:05:E2:9B:FB:B4:F0:F6:71
Certificate issuer:       /CN=c441738baab988b1d68693bb05e29bfbb4f0f671
Certificate serial:       0194BD854771BA1769C5D1B7EC3AB0246FD9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xEFzi6q5iLHWhpO7BeKb-7Tw9nE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/93/f8314e-a3bc-45e9-a9f5-4c98d9a51405/1/xEFzi6q5iLHWhpO7BeKb-7Tw9nE.mft
Manifest number:          142E
Signing time:             Fri 31 Jan 2025 18:00:15 +0000
Manifest this update:     Fri 31 Jan 2025 18:00:15 +0000
Manifest next update:     Sat 01 Feb 2025 18:00:15 +0000
Files and hashes:         1: 31Tgo6hkUgGEDxpcJDek08Avr_U.roa (hash: kmmgYbNt9oWzUWS0e88Ufjcw3KVy4vM/TBImZVi6icQ=)
                          2: BVA-ewMKFfhNlaM9uEKeCRcxb44.roa (hash: p6Ztck3uBhR0bzcjLWO0QVdiIOvuYAXPjQqrSbEcptQ=)
                          3: HqPvNlx7UZiRVbk5_3PH9NhbC6A.roa (hash: +/Uf0WY1OyHo7LRFa5WaahOPnbyyowzO8Q8lBC3l8kM=)
                          4: RowHyzmbIUhwLNzP2aGdUq-bTxw.roa (hash: BWNoFSha19ToKG1Hm+elPv4NQAdo5EC6p+W2DfujBas=)
                          5: dcug0fKg-KsGzBpKENJINtdS5vw.roa (hash: 4mmQ47qSm1UkTR696jh82p3nO+ZrpORkySuxILnJi4I=)
                          6: kXFsWv63EX5LzlpEXl1PFUMjMlU.roa (hash: 55+NcYoCAfsxn/1QTku+M6mFFv7l9njuKzUccasgI84=)
                          7: qBz1hjzykMH_ZcIwvTn0SDyhgfs.roa (hash: W/hp3H2l3tBtLyOj1Fa5/YEuC/XubK4WM06Ks3Q9e/8=)
                          8: xEFzi6q5iLHWhpO7BeKb-7Tw9nE.crl (hash: JqRe86zfnyOtlcObrOLIOZEz4/VwfS1pKeAGyp1RZGo=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bd:85:47:71:ba:17:69:c5:d1:b7:ec:3a:b0:24:6f:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c441738baab988b1d68693bb05e29bfbb4f0f671
        Validity
            Not Before: Jan 31 18:00:15 2025 GMT
            Not After : Feb  1 18:00:15 2025 GMT
        Subject: CN=10431a75e3b81958cfa03534c2c3c5d18dedbd96
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:0a:d5:07:03:92:c4:f2:d8:5d:99:92:84:1f:
                    bb:c8:d5:77:cd:d3:22:3b:62:17:9d:46:2c:85:b0:
                    a6:27:f5:22:71:5e:8e:95:03:0f:41:ee:6d:8b:a0:
                    3a:cf:d8:e5:55:f2:05:fb:96:cf:71:31:97:18:24:
                    6b:0d:5d:04:ba:cb:64:36:47:5a:b9:6d:d4:4c:32:
                    19:0e:54:2d:30:fc:a2:6f:67:9b:63:a3:81:d1:d4:
                    be:d7:4a:ce:f3:c0:48:1a:7a:d9:8f:b1:3e:0b:2f:
                    cb:29:c8:a9:26:6d:83:d2:85:86:28:12:af:52:2a:
                    1a:1d:06:32:7c:52:91:17:ff:e1:3f:3e:f0:20:3f:
                    b0:61:ce:9e:4c:d6:52:57:b6:ea:17:fb:ae:72:05:
                    09:de:bc:12:1d:22:b8:59:f8:73:18:cb:f7:72:07:
                    7b:8f:39:b3:fc:02:17:53:f8:bd:20:94:da:2f:e5:
                    ae:1d:9c:42:da:8a:13:a2:83:28:23:25:7b:c8:d9:
                    c5:48:a0:54:b9:a6:89:31:6b:db:95:3e:0d:70:aa:
                    c0:e3:45:27:17:17:16:b0:c0:d7:29:59:5a:47:d4:
                    a8:e4:cb:bd:42:d2:77:9b:35:c6:da:b4:bf:3e:87:
                    43:2c:4c:5b:bb:4f:0e:2b:fe:9d:a0:6b:7e:45:3c:
                    b9:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:43:1A:75:E3:B8:19:58:CF:A0:35:34:C2:C3:C5:D1:8D:ED:BD:96
            X509v3 Authority Key Identifier:
                keyid:C4:41:73:8B:AA:B9:88:B1:D6:86:93:BB:05:E2:9B:FB:B4:F0:F6:71

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xEFzi6q5iLHWhpO7BeKb-7Tw9nE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/f8314e-a3bc-45e9-a9f5-4c98d9a51405/1/xEFzi6q5iLHWhpO7BeKb-7Tw9nE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/93/f8314e-a3bc-45e9-a9f5-4c98d9a51405/1/xEFzi6q5iLHWhpO7BeKb-7Tw9nE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a2:db:4e:48:a8:94:f3:7c:6b:fe:8a:9e:7a:b4:0b:75:52:22:
         ab:1a:21:46:73:5f:69:6b:1a:55:06:8d:a5:d7:11:60:51:8a:
         87:ee:d6:d3:ac:20:cd:cc:0a:b0:2c:23:6a:7e:da:fd:e7:fa:
         e3:71:92:54:ad:74:fb:0b:55:15:77:6b:65:70:8d:06:11:54:
         f1:f3:b1:c5:c5:7f:6d:8e:c0:d2:4f:56:d8:2e:e0:8f:aa:c7:
         4e:49:cf:af:62:3e:df:22:46:e3:26:88:45:e6:5d:3d:32:c6:
         9f:56:e2:4d:fd:2f:da:33:77:93:38:f0:40:81:67:dc:86:8e:
         18:97:e5:77:0e:e0:c3:a1:2f:6c:14:e2:c2:8c:fc:1a:39:e0:
         69:67:d5:c8:ba:fe:65:60:58:de:a0:12:17:0e:c2:8e:7b:fc:
         28:3a:08:7c:20:16:ae:bf:28:5e:89:68:9e:7f:0c:50:65:ba:
         08:5d:13:c9:bb:a7:4d:7d:62:96:82:6a:04:b0:68:f3:8e:18:
         91:ca:40:d8:73:32:9f:aa:a4:5a:43:6a:67:e3:41:f7:ac:f4:
         98:4a:28:d9:70:e6:94:4a:da:3d:a9:74:68:fd:57:98:2d:bf:
         43:b2:bb:3e:cc:ad:43:90:96:5a:6b:62:2c:f8:ad:5a:66:aa:
         78:11:3c:b3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9hUdxuhdpxdG37DqwJG/ZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM0NDE3MzhiYWFiOTg4YjFkNjg2OTNiYjA1ZTI5YmZiYjRm
MGY2NzEwHhcNMjUwMTMxMTgwMDE1WhcNMjUwMjAxMTgwMDE1WjAzMTEwLwYDVQQD
EygxMDQzMWE3NWUzYjgxOTU4Y2ZhMDM1MzRjMmMzYzVkMThkZWRiZDk2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArwrVBwOSxPLYXZmShB+7yNV3zdMi
O2IXnUYshbCmJ/UicV6OlQMPQe5ti6A6z9jlVfIF+5bPcTGXGCRrDV0EustkNkda
uW3UTDIZDlQtMPyib2ebY6OB0dS+10rO88BIGnrZj7E+Cy/LKcipJm2D0oWGKBKv
UioaHQYyfFKRF//hPz7wID+wYc6eTNZSV7bqF/uucgUJ3rwSHSK4WfhzGMv3cgd7
jzmz/AIXU/i9IJTaL+WuHZxC2ooTooMoIyV7yNnFSKBUuaaJMWvblT4NcKrA40Un
FxcWsMDXKVlaR9So5Mu9QtJ3mzXG2rS/PodDLExbu08OK/6doGt+RTy5ZQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBBDGnXjuBlYz6A1NMLDxdGN7b2WMB8GA1UdIwQY
MBaAFMRBc4uquYix1oaTuwXim/u08PZxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveEVGemk2cTVpTEhXaHBPN0JlS2ItN1R3OW5FLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85My9mODMxNGUtYTNiYy00NWU5LWE5ZjUt
NGM5OGQ5YTUxNDA1LzEveEVGemk2cTVpTEhXaHBPN0JlS2ItN1R3OW5FLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85My9mODMxNGUtYTNiYy00NWU5LWE5ZjUtNGM5OGQ5YTUxNDA1
LzEveEVGemk2cTVpTEhXaHBPN0JlS2ItN1R3OW5FLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAottOSKiU
83xr/oqeerQLdVIiqxohRnNfaWsaVQaNpdcRYFGKh+7W06wgzcwKsCwjan7a/ef6
43GSVK10+wtVFXdrZXCNBhFU8fOxxcV/bY7A0k9W2C7gj6rHTknPr2I+3yJG4yaI
ReZdPTLGn1biTf0v2jN3kzjwQIFn3IaOGJfldw7gw6EvbBTiwoz8GjngaWfVyLr+
ZWBY3qASFw7Cjnv8KDoIfCAWrr8oXolonn8MUGW6CF0TybunTX1iloJqBLBo844Y
kcpA2HMyn6qkWkNqZ+NB96z0mEoo2XDmlEraPal0aP1XmC2/Q7K7PsytQ5CWWmti
LPitWmaqeBE8sw==
-----END CERTIFICATE-----