Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/1f9e6c-e6b8-4ad4-9941-f46f9d674f6c/1/cZ5ZtQF7_mNEEZSe_y1wugoHxUA.mft
File:                     cZ5ZtQF7_mNEEZSe_y1wugoHxUA.mft (raw, json)
Hash identifier:          +DH/KYjoF4BES81Pp0CUfiVGAjKoHY1AbZJcFx6kFN8=
Subject key identifier:   C8:C6:4D:03:99:6C:0E:3E:79:2E:56:9F:AD:47:BF:64:75:BD:7D:E3
Authority key identifier: 71:9E:59:B5:01:7B:FE:63:44:11:94:9E:FF:2D:70:BA:0A:07:C5:40
Certificate issuer:       /CN=719e59b5017bfe634411949eff2d70ba0a07c540
Certificate serial:       0194BCE0E527D218A5C2949525A5B058DCE8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cZ5ZtQF7_mNEEZSe_y1wugoHxUA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a3/1f9e6c-e6b8-4ad4-9941-f46f9d674f6c/1/cZ5ZtQF7_mNEEZSe_y1wugoHxUA.mft
Manifest number:          09DD
Signing time:             Fri 31 Jan 2025 15:00:42 +0000
Manifest this update:     Fri 31 Jan 2025 15:00:42 +0000
Manifest next update:     Sat 01 Feb 2025 15:00:42 +0000
Files and hashes:         1: NznO4CxJJ6L0xLB6PTLKpB7weFM.roa (hash: cSE4XxBXPFFORCEl811D1OzY3o/1e0FebNC7EW5YkMk=)
                          2: cZ5ZtQF7_mNEEZSe_y1wugoHxUA.crl (hash: rqCDuAEjCNT1f83PhjSvR4iDHRiDuONgdQTbLAQu6ZM=)
                          3: hVV7bHBD-mLe_PCozGrmTHxovsM.roa (hash: YI06CwugD4QjZYDajA4+sFtJ0/JL/QvZ5A+ius2+OkM=)
                          4: i_ZSP4msxm1SkHkJA_HtKWJPNjY.roa (hash: XTx/K5oWGL66kYYSkjQ0rxGrZ4iJ40KRc43mQ3O3oXM=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:e0:e5:27:d2:18:a5:c2:94:95:25:a5:b0:58:dc:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=719e59b5017bfe634411949eff2d70ba0a07c540
        Validity
            Not Before: Jan 31 15:00:42 2025 GMT
            Not After : Feb  1 15:00:42 2025 GMT
        Subject: CN=c8c64d03996c0e3e792e569fad47bf6475bd7de3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:d2:ec:b6:cc:ab:f7:cb:48:ee:78:45:e1:9f:
                    83:29:bb:1a:bf:c6:a4:32:68:58:45:bd:52:ae:15:
                    9e:eb:99:cf:1f:d1:6c:35:9a:37:1b:0c:17:b8:75:
                    91:38:66:63:86:cd:1e:d8:45:86:8a:9b:0e:ff:54:
                    e6:df:c0:d5:6d:01:2f:7b:81:70:11:b4:e4:65:8e:
                    cf:6a:e9:63:dd:ac:2c:d0:f5:af:7c:d1:39:32:68:
                    7d:fe:28:6f:ac:39:62:6b:84:e3:78:95:2c:85:75:
                    53:8e:40:bb:46:cb:9a:ac:35:1e:45:1d:a5:10:f4:
                    9c:4a:b2:c7:a3:04:2d:d6:79:42:68:ac:5d:e5:26:
                    69:3b:b9:7a:a1:34:e2:a7:21:76:35:cd:9c:93:80:
                    45:d3:fb:94:97:44:04:9f:09:f5:25:fa:d7:8f:df:
                    d2:04:29:a7:70:c9:a6:1d:d2:26:d2:81:a5:7e:4f:
                    50:87:f2:1d:b1:21:05:63:ce:2e:08:97:c9:ad:52:
                    21:94:b2:6c:93:7f:b6:5e:a7:ec:44:9b:3d:df:fa:
                    08:90:f9:df:ec:b7:dd:5a:7e:e0:11:a4:01:0a:fc:
                    41:1e:ca:c6:55:81:26:bb:17:54:19:e6:4f:1e:44:
                    9c:bd:9f:ed:27:ed:a3:df:3d:96:c7:ca:52:47:95:
                    d8:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:C6:4D:03:99:6C:0E:3E:79:2E:56:9F:AD:47:BF:64:75:BD:7D:E3
            X509v3 Authority Key Identifier:
                keyid:71:9E:59:B5:01:7B:FE:63:44:11:94:9E:FF:2D:70:BA:0A:07:C5:40

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cZ5ZtQF7_mNEEZSe_y1wugoHxUA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/1f9e6c-e6b8-4ad4-9941-f46f9d674f6c/1/cZ5ZtQF7_mNEEZSe_y1wugoHxUA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/1f9e6c-e6b8-4ad4-9941-f46f9d674f6c/1/cZ5ZtQF7_mNEEZSe_y1wugoHxUA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:34:f8:fe:5b:20:24:4b:41:c9:e4:a9:07:75:fd:12:b3:ad:
         39:7d:74:e2:18:52:51:31:84:58:ef:a3:77:11:4a:09:df:90:
         c4:e3:63:4a:21:9d:63:2d:d1:f3:59:aa:67:51:96:ee:e8:4a:
         e1:25:00:81:38:1c:3b:06:76:1d:3e:1c:0b:9f:27:5c:5e:77:
         89:bc:0a:c2:19:05:e3:db:9f:e7:cc:fe:70:33:83:a1:1b:55:
         8a:13:78:4f:25:35:9b:90:8d:fe:91:96:04:a1:dc:6e:2d:70:
         6b:0b:16:89:bf:c7:27:57:8d:ff:b5:c1:92:66:9f:ce:18:d2:
         2e:89:24:af:cd:b4:ba:cd:5d:4e:61:52:44:86:b9:a6:8b:db:
         7f:cc:07:7d:ab:a8:15:da:17:95:48:78:9d:5d:d2:d7:53:6e:
         c4:b1:83:99:f1:ad:40:9a:bd:cb:8a:50:c1:51:61:07:1d:0b:
         c1:04:25:c6:00:96:09:a3:05:50:15:63:33:13:da:04:fa:9f:
         f3:7a:69:db:9d:b6:ba:aa:de:0b:e1:35:57:b4:2b:cf:e5:a1:
         04:f6:92:37:7c:6f:7e:31:9e:f1:e8:4d:25:2a:57:8e:65:28:
         56:83:0f:36:f5:78:ea:33:ed:a1:1c:09:60:62:81:61:1f:76:
         f0:4a:3e:ed
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS84OUn0hilwpSVJaWwWNzoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcxOWU1OWI1MDE3YmZlNjM0NDExOTQ5ZWZmMmQ3MGJhMGEw
N2M1NDAwHhcNMjUwMTMxMTUwMDQyWhcNMjUwMjAxMTUwMDQyWjAzMTEwLwYDVQQD
EyhjOGM2NGQwMzk5NmMwZTNlNzkyZTU2OWZhZDQ3YmY2NDc1YmQ3ZGUzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq9Lstsyr98tI7nhF4Z+DKbsav8ak
MmhYRb1SrhWe65nPH9FsNZo3GwwXuHWROGZjhs0e2EWGipsO/1Tm38DVbQEve4Fw
EbTkZY7Paulj3aws0PWvfNE5Mmh9/ihvrDlia4TjeJUshXVTjkC7RsuarDUeRR2l
EPScSrLHowQt1nlCaKxd5SZpO7l6oTTipyF2Nc2ck4BF0/uUl0QEnwn1JfrXj9/S
BCmncMmmHdIm0oGlfk9Qh/IdsSEFY84uCJfJrVIhlLJsk3+2XqfsRJs93/oIkPnf
7LfdWn7gEaQBCvxBHsrGVYEmuxdUGeZPHkScvZ/tJ+2j3z2Wx8pSR5XYKwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMjGTQOZbA4+eS5Wn61Hv2R1vX3jMB8GA1UdIwQY
MBaAFHGeWbUBe/5jRBGUnv8tcLoKB8VAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY1o1WnRRRjdfbU5FRVpTZV95MXd1Z29IeFVBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy8xZjllNmMtZTZiOC00YWQ0LTk5NDEt
ZjQ2ZjlkNjc0ZjZjLzEvY1o1WnRRRjdfbU5FRVpTZV95MXd1Z29IeFVBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMy8xZjllNmMtZTZiOC00YWQ0LTk5NDEtZjQ2ZjlkNjc0ZjZj
LzEvY1o1WnRRRjdfbU5FRVpTZV95MXd1Z29IeFVBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANTT4/lsg
JEtByeSpB3X9ErOtOX104hhSUTGEWO+jdxFKCd+QxONjSiGdYy3R81mqZ1GW7uhK
4SUAgTgcOwZ2HT4cC58nXF53ibwKwhkF49uf58z+cDODoRtVihN4TyU1m5CN/pGW
BKHcbi1wawsWib/HJ1eN/7XBkmafzhjSLokkr820us1dTmFSRIa5povbf8wHfauo
FdoXlUh4nV3S11NuxLGDmfGtQJq9y4pQwVFhBx0LwQQlxgCWCaMFUBVjMxPaBPqf
83pp2522uqreC+E1V7Qrz+WhBPaSN3xvfjGe8ehNJSpXjmUoVoMPNvV46jPtoRwJ
YGKBYR928Eo+7Q==
-----END CERTIFICATE-----