Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/ff3618-7032-4143-9374-ba1418d22087/1/XOGq4Mk60EtymAgraL9qVPpovPA.mft
File:                     XOGq4Mk60EtymAgraL9qVPpovPA.mft (raw, json)
Hash identifier:          LIQ+rdURaeVjGTr2wSbqoygxBKcCyqUUp+TFQtD491Q=
Subject key identifier:   01:80:AD:FA:06:06:CA:ED:6A:01:D1:11:B4:19:48:CC:D0:C8:DE:A2
Authority key identifier: 5C:E1:AA:E0:C9:3A:D0:4B:72:98:08:2B:68:BF:6A:54:FA:68:BC:F0
Certificate issuer:       /CN=5ce1aae0c93ad04b7298082b68bf6a54fa68bcf0
Certificate serial:       0194BCE0E1BCB8C03BF82431962FF4FF8FD4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XOGq4Mk60EtymAgraL9qVPpovPA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9b/ff3618-7032-4143-9374-ba1418d22087/1/XOGq4Mk60EtymAgraL9qVPpovPA.mft
Manifest number:          142D
Signing time:             Fri 31 Jan 2025 15:00:41 +0000
Manifest this update:     Fri 31 Jan 2025 15:00:41 +0000
Manifest next update:     Sat 01 Feb 2025 15:00:41 +0000
Files and hashes:         1: FBcAeE9oQIOW9kKPQJ1vgouTAbk.roa (hash: L0pGWwbFutGyRI32rrNWdKvE3ZZY088xKR9lZle7SCg=)
                          2: Tz90Wvu7GQ9v16xjtv3fYSRjDy8.roa (hash: /VeLcpXw8PuMvzvcyJgx3jKW0zDlptf/ULhrAgfV2dQ=)
                          3: XOGq4Mk60EtymAgraL9qVPpovPA.crl (hash: Vr+D2GaHn5DJWEdBcvsqFCK4SkjntdrPRoB3qDFG2QM=)
                          4: jwOao49fuGzjzKpy4DVicXhqkq8.roa (hash: vTxxc3wFEPVm9vo1ixcSgxSo2myxU1VuH0FNYAoBops=)
                          5: pjWvLHgWJr8VfxqCyu_wjseZwrI.roa (hash: M+VetrzhMK4qS2ZDHlL6T1xkNC7G/F+gqzb3HNS9swc=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:e0:e1:bc:b8:c0:3b:f8:24:31:96:2f:f4:ff:8f:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5ce1aae0c93ad04b7298082b68bf6a54fa68bcf0
        Validity
            Not Before: Jan 31 15:00:41 2025 GMT
            Not After : Feb  1 15:00:41 2025 GMT
        Subject: CN=0180adfa0606caed6a01d111b41948ccd0c8dea2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:51:84:ed:ef:bc:3f:36:18:44:e0:0c:f6:31:
                    28:97:c1:ad:44:1c:56:c0:94:01:8c:f3:95:da:93:
                    31:ad:54:1f:50:4f:9a:d4:84:fe:2d:1d:2c:1a:64:
                    bb:8a:42:ec:eb:be:6a:d6:f0:e8:dd:84:fb:a1:15:
                    12:af:4a:fb:d7:32:b7:c1:e8:3f:dd:74:c4:8a:46:
                    ab:be:b1:90:ec:9c:4d:73:1a:03:3e:d2:11:e7:62:
                    29:88:aa:e0:cf:0e:58:34:50:8b:c0:d1:6d:6e:62:
                    ce:34:69:7e:ff:96:6b:43:a5:d0:d2:b5:ea:1c:74:
                    07:11:46:3a:94:9b:85:5b:e4:e9:26:1b:0f:93:d5:
                    54:18:0d:cc:3d:8b:73:a2:d1:9e:59:6b:7e:4f:68:
                    5f:a2:07:08:e5:a4:30:7c:9d:2a:9f:58:c3:ca:5a:
                    97:f2:69:a0:a3:22:c9:6f:74:69:ea:aa:18:98:22:
                    0f:d5:71:5b:f4:37:51:d2:ad:27:87:c2:93:19:dc:
                    e2:88:89:77:b4:e1:66:d2:bc:6b:e0:c1:28:82:32:
                    f1:e5:8c:60:3c:b8:48:4f:f7:27:3e:b2:cf:eb:93:
                    f2:60:c2:7a:0b:25:75:a3:5d:c8:fa:77:d0:6b:c1:
                    4a:0d:b1:b0:8e:d7:df:94:1c:30:67:ba:f1:a6:18:
                    87:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:80:AD:FA:06:06:CA:ED:6A:01:D1:11:B4:19:48:CC:D0:C8:DE:A2
            X509v3 Authority Key Identifier:
                keyid:5C:E1:AA:E0:C9:3A:D0:4B:72:98:08:2B:68:BF:6A:54:FA:68:BC:F0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XOGq4Mk60EtymAgraL9qVPpovPA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/ff3618-7032-4143-9374-ba1418d22087/1/XOGq4Mk60EtymAgraL9qVPpovPA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/ff3618-7032-4143-9374-ba1418d22087/1/XOGq4Mk60EtymAgraL9qVPpovPA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:96:de:39:0d:bc:29:8c:6d:eb:5f:cf:37:1c:2d:35:10:0d:
         41:55:ee:18:90:c6:73:5a:c0:7c:a6:55:9d:8f:c3:03:b1:c1:
         c1:38:f7:f2:16:0f:3e:84:7e:91:dc:54:4a:00:a4:1a:0f:f8:
         c9:6a:36:3e:74:cb:fb:ab:d3:0a:67:68:b8:e2:76:08:04:98:
         41:5c:54:f9:24:ba:64:e1:0c:ea:3b:4e:3f:96:97:23:6f:7e:
         0d:b2:3f:f7:5f:68:66:39:9e:67:f0:bb:98:21:be:fa:32:af:
         ff:e9:e3:e1:76:bd:3c:62:e6:48:a3:52:c1:74:95:7b:52:c8:
         d3:03:86:d3:9a:fb:62:06:30:3b:60:f6:51:5c:e2:01:8c:76:
         d4:a2:46:58:04:00:22:5f:fd:26:ca:cb:a6:4a:d7:72:71:e8:
         54:14:34:d1:c9:c2:b5:9b:3f:96:99:90:ba:79:62:78:ff:3d:
         d2:0a:88:af:7a:87:1f:42:d2:9f:3d:de:cd:b5:7f:18:fe:82:
         62:12:c8:85:fc:e7:bb:30:ca:f2:a3:c9:fa:6d:09:ca:b4:c0:
         88:c2:67:0a:be:71:57:87:fa:a3:37:7d:3f:e6:be:00:4a:69:
         7c:27:92:b8:be:7f:27:bc:35:cb:30:0e:d7:b6:52:b3:d7:42:
         ea:58:1b:fa
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS84OG8uMA7+CQxli/0/4/UMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVjZTFhYWUwYzkzYWQwNGI3Mjk4MDgyYjY4YmY2YTU0ZmE2
OGJjZjAwHhcNMjUwMTMxMTUwMDQxWhcNMjUwMjAxMTUwMDQxWjAzMTEwLwYDVQQD
EygwMTgwYWRmYTA2MDZjYWVkNmEwMWQxMTFiNDE5NDhjY2QwYzhkZWEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA31GE7e+8PzYYROAM9jEol8GtRBxW
wJQBjPOV2pMxrVQfUE+a1IT+LR0sGmS7ikLs675q1vDo3YT7oRUSr0r71zK3weg/
3XTEikarvrGQ7JxNcxoDPtIR52IpiKrgzw5YNFCLwNFtbmLONGl+/5ZrQ6XQ0rXq
HHQHEUY6lJuFW+TpJhsPk9VUGA3MPYtzotGeWWt+T2hfogcI5aQwfJ0qn1jDylqX
8mmgoyLJb3Rp6qoYmCIP1XFb9DdR0q0nh8KTGdziiIl3tOFm0rxr4MEogjLx5Yxg
PLhIT/cnPrLP65PyYMJ6CyV1o13I+nfQa8FKDbGwjtfflBwwZ7rxphiHUQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAGArfoGBsrtagHREbQZSMzQyN6iMB8GA1UdIwQY
MBaAFFzhquDJOtBLcpgIK2i/alT6aLzwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWE9HcTRNazYwRXR5bUFncmFMOXFWUHBvdlBBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yi9mZjM2MTgtNzAzMi00MTQzLTkzNzQt
YmExNDE4ZDIyMDg3LzEvWE9HcTRNazYwRXR5bUFncmFMOXFWUHBvdlBBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Yi9mZjM2MTgtNzAzMi00MTQzLTkzNzQtYmExNDE4ZDIyMDg3
LzEvWE9HcTRNazYwRXR5bUFncmFMOXFWUHBvdlBBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbZbeOQ28
KYxt61/PNxwtNRANQVXuGJDGc1rAfKZVnY/DA7HBwTj38hYPPoR+kdxUSgCkGg/4
yWo2PnTL+6vTCmdouOJ2CASYQVxU+SS6ZOEM6jtOP5aXI29+DbI/919oZjmeZ/C7
mCG++jKv/+nj4Xa9PGLmSKNSwXSVe1LI0wOG05r7YgYwO2D2UVziAYx21KJGWAQA
Il/9JsrLpkrXcnHoVBQ00cnCtZs/lpmQunlieP890gqIr3qHH0LSnz3ezbV/GP6C
YhLIhfznuzDK8qPJ+m0JyrTAiMJnCr5xV4f6ozd9P+a+AEppfCeSuL5/J7w1yzAO
17ZSs9dC6lgb+g==
-----END CERTIFICATE-----