Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/0ac27a-2159-48d7-8bfd-c907ae1c211e/1/V3Ah3N9Etq_dOBBUfFWnm9Gp-js.mft
File:                     V3Ah3N9Etq_dOBBUfFWnm9Gp-js.mft (raw, json)
Hash identifier:          DeKaXbvYNCocRArQptqtD6KIjEc4XIq7moXMEqYeVvY=
Subject key identifier:   F8:5E:60:B2:AD:F3:00:A5:6C:18:4A:6F:06:8B:DB:19:CE:19:DD:92
Authority key identifier: 57:70:21:DC:DF:44:B6:AF:DD:38:10:54:7C:55:A7:9B:D1:A9:FA:3B
Certificate issuer:       /CN=577021dcdf44b6afdd3810547c55a79bd1a9fa3b
Certificate serial:       0194BD17E4C36F08CF9BBC20E5861E1CA2AA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/V3Ah3N9Etq_dOBBUfFWnm9Gp-js.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/99/0ac27a-2159-48d7-8bfd-c907ae1c211e/1/V3Ah3N9Etq_dOBBUfFWnm9Gp-js.mft
Manifest number:          0D52
Signing time:             Fri 31 Jan 2025 16:00:46 +0000
Manifest this update:     Fri 31 Jan 2025 16:00:46 +0000
Manifest next update:     Sat 01 Feb 2025 16:00:46 +0000
Files and hashes:         1: EBviMFYi8rZcphn8RJGlAKBgxTk.roa (hash: 8nvV1InE36Gf9l6K4C4ZM0vFwJYFzsCUlHvr3Ohnwio=)
                          2: GyhAtf15yZqMprvOSAG-mSzNZTU.roa (hash: jfVjDUAXNOWRUx2duW7NqVNPhOHvwJFkEOJDlRjLf1c=)
                          3: UVX7i73xTf8HXSe4y9KHKB797Lc.roa (hash: aDk/GLVDvACcwLd9kMCdjb1R7e1Nu8NwyRgL4qjO1BE=)
                          4: V3Ah3N9Etq_dOBBUfFWnm9Gp-js.crl (hash: w8G2LVG5u3ikoNoWSw8nEGihe9qcqvCVmtiHQRwQMgo=)
                          5: VjMPHeJDKYGawcvbQkGRY-IGbRw.roa (hash: U2Wh3/ktayWnH5Ju+3oCrYV1vRV7bDQpKkdbX5Ys83Y=)
                          6: Y2_bnui3NBLO8jQirmiUuAzGyRw.roa (hash: Sj4Gp5iophRPrZcWhz+iS2BZX0tuH2ZNqq3e2/zFjig=)
                          7: ntrt1qLEp7JFw_l17Dbev4liPcY.roa (hash: 5lVCUBQu1df/S1FQOKl/MyF/XxoO3ZxscsaY8Q1dPLk=)
                          8: vfMCWDXHqUhfE9pCWjy3UIK3sYE.roa (hash: cZ4cjZLkxHd/pGP9SjokJ4j+E/I+MNHdDpithj4CeCo=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bd:17:e4:c3:6f:08:cf:9b:bc:20:e5:86:1e:1c:a2:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=577021dcdf44b6afdd3810547c55a79bd1a9fa3b
        Validity
            Not Before: Jan 31 16:00:46 2025 GMT
            Not After : Feb  1 16:00:46 2025 GMT
        Subject: CN=f85e60b2adf300a56c184a6f068bdb19ce19dd92
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:07:44:fc:3a:dc:1c:72:e3:bc:f1:68:c5:07:
                    b3:9a:d5:0e:fe:61:4a:82:d9:9b:97:e8:16:3f:ee:
                    76:8d:14:92:e8:76:71:80:14:7e:64:1d:2d:c2:20:
                    07:a0:45:6d:04:5d:74:95:fc:91:6f:ca:f5:3c:d7:
                    65:53:00:37:4d:ec:bb:12:11:5f:8b:80:d2:60:cc:
                    ea:bc:83:59:c8:2a:e2:36:db:d4:a7:eb:aa:37:ec:
                    f4:ed:80:ff:73:b7:2d:0c:a5:03:d7:4d:dd:c7:2d:
                    76:0d:41:a6:5f:a3:f9:aa:bd:6f:b4:be:d2:82:21:
                    8a:b8:c3:5e:9b:3d:6a:fc:98:1a:de:bb:7a:86:cb:
                    f4:7e:38:dc:dc:bc:a5:f1:7c:d6:d7:b9:ea:81:f5:
                    a9:68:ca:e8:6f:28:67:6e:13:14:d0:36:d2:1d:d5:
                    cb:50:c7:1d:7d:4f:88:1d:5c:73:83:ab:4d:17:3d:
                    04:c9:ca:af:e8:7a:c0:0d:0e:41:cf:73:22:62:83:
                    82:f8:44:ad:71:6a:04:6c:5a:f2:e9:10:ad:dd:4e:
                    6f:82:2a:22:ac:53:81:1a:51:c0:94:d8:ef:48:37:
                    2e:37:22:4b:78:81:f6:66:07:bb:6f:61:5a:b2:b0:
                    25:d6:23:55:2f:76:16:1b:04:01:fa:ef:a5:ea:b9:
                    94:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:5E:60:B2:AD:F3:00:A5:6C:18:4A:6F:06:8B:DB:19:CE:19:DD:92
            X509v3 Authority Key Identifier:
                keyid:57:70:21:DC:DF:44:B6:AF:DD:38:10:54:7C:55:A7:9B:D1:A9:FA:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V3Ah3N9Etq_dOBBUfFWnm9Gp-js.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/0ac27a-2159-48d7-8bfd-c907ae1c211e/1/V3Ah3N9Etq_dOBBUfFWnm9Gp-js.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/99/0ac27a-2159-48d7-8bfd-c907ae1c211e/1/V3Ah3N9Etq_dOBBUfFWnm9Gp-js.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:3b:df:7d:85:ff:f5:ac:95:65:d2:5e:e6:c8:d0:34:4d:f0:
         58:c3:38:2c:54:3b:de:0b:10:86:99:9a:fd:51:56:cd:0d:0e:
         87:c0:2f:66:c5:52:22:c2:01:7b:6a:7d:d4:0f:9b:e7:76:12:
         f4:62:31:4d:e1:cd:17:6e:f0:b2:79:98:2a:91:28:ce:fb:96:
         01:b9:18:00:a1:7c:4b:06:bb:d3:ca:0a:45:b3:5d:2d:57:81:
         92:29:39:7a:47:a1:e7:5a:9e:78:18:3c:1e:44:74:f0:ee:b5:
         76:45:51:73:5b:65:50:8f:b0:a8:16:6f:9a:d0:49:7c:e3:3c:
         4d:83:d3:cc:d3:a4:ac:c0:4e:3e:7b:c8:10:52:c0:47:e1:89:
         2a:6e:75:f0:78:42:08:43:e5:75:01:11:9c:e7:65:ba:6a:3b:
         21:17:9c:53:bd:36:69:8b:cb:38:86:60:32:f1:ab:f3:5f:10:
         60:17:e7:ed:4a:24:d7:55:d6:ab:0d:bb:dd:74:c6:ac:ad:69:
         33:60:d3:1c:08:74:36:f3:cc:72:26:c2:43:7a:50:08:b3:86:
         cf:31:44:41:c9:53:9f:f2:fc:96:2c:5f:9c:a5:90:77:c3:04:
         45:c5:ce:7b:e5:63:42:7d:6b:a5:9f:d6:85:22:6c:03:d4:95:
         0c:c0:0b:89
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9F+TDbwjPm7wg5YYeHKKqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU3NzAyMWRjZGY0NGI2YWZkZDM4MTA1NDdjNTVhNzliZDFh
OWZhM2IwHhcNMjUwMTMxMTYwMDQ2WhcNMjUwMjAxMTYwMDQ2WjAzMTEwLwYDVQQD
EyhmODVlNjBiMmFkZjMwMGE1NmMxODRhNmYwNjhiZGIxOWNlMTlkZDkyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvAdE/DrcHHLjvPFoxQezmtUO/mFK
gtmbl+gWP+52jRSS6HZxgBR+ZB0twiAHoEVtBF10lfyRb8r1PNdlUwA3Tey7EhFf
i4DSYMzqvINZyCriNtvUp+uqN+z07YD/c7ctDKUD103dxy12DUGmX6P5qr1vtL7S
giGKuMNemz1q/Jga3rt6hsv0fjjc3Lyl8XzW17nqgfWpaMrobyhnbhMU0DbSHdXL
UMcdfU+IHVxzg6tNFz0Eycqv6HrADQ5Bz3MiYoOC+EStcWoEbFry6RCt3U5vgioi
rFOBGlHAlNjvSDcuNyJLeIH2Zge7b2FasrAl1iNVL3YWGwQB+u+l6rmUpQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPheYLKt8wClbBhKbwaL2xnOGd2SMB8GA1UdIwQY
MBaAFFdwIdzfRLav3TgQVHxVp5vRqfo7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVjNBaDNOOUV0cV9kT0JCVWZGV25tOUdwLWpzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OS8wYWMyN2EtMjE1OS00OGQ3LThiZmQt
YzkwN2FlMWMyMTFlLzEvVjNBaDNOOUV0cV9kT0JCVWZGV25tOUdwLWpzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85OS8wYWMyN2EtMjE1OS00OGQ3LThiZmQtYzkwN2FlMWMyMTFl
LzEvVjNBaDNOOUV0cV9kT0JCVWZGV25tOUdwLWpzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUDvffYX/
9ayVZdJe5sjQNE3wWMM4LFQ73gsQhpma/VFWzQ0Oh8AvZsVSIsIBe2p91A+b53YS
9GIxTeHNF27wsnmYKpEozvuWAbkYAKF8Swa708oKRbNdLVeBkik5ekeh51qeeBg8
HkR08O61dkVRc1tlUI+wqBZvmtBJfOM8TYPTzNOkrMBOPnvIEFLAR+GJKm518HhC
CEPldQERnOdlumo7IRecU702aYvLOIZgMvGr818QYBfn7Uok11XWqw273XTGrK1p
M2DTHAh0NvPMcibCQ3pQCLOGzzFEQclTn/L8lixfnKWQd8MERcXOe+VjQn1rpZ/W
hSJsA9SVDMALiQ==
-----END CERTIFICATE-----