Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/dcf976-007d-4542-b0e2-5f8fc707836a/1/WTiXF0-WdJDb9hidR53yyTcb9AQ.mft
File:                     WTiXF0-WdJDb9hidR53yyTcb9AQ.mft (raw, json)
Hash identifier:          69zc0nVuLCclCU2FNFJ147KY+uA6rYTsBK/eGtns2TQ=
Subject key identifier:   78:A5:AF:A4:85:6D:EC:39:6E:DA:FE:9D:06:4A:70:CB:51:F4:8C:BD
Authority key identifier: 59:38:97:17:4F:96:74:90:DB:F6:18:9D:47:9D:F2:C9:37:1B:F4:04
Certificate issuer:       /CN=593897174f967490dbf6189d479df2c9371bf404
Certificate serial:       0194BD4E7107F9A1E272E4F506F4CC54A1A3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WTiXF0-WdJDb9hidR53yyTcb9AQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bb/dcf976-007d-4542-b0e2-5f8fc707836a/1/WTiXF0-WdJDb9hidR53yyTcb9AQ.mft
Manifest number:          0D3E
Signing time:             Fri 31 Jan 2025 17:00:22 +0000
Manifest this update:     Fri 31 Jan 2025 17:00:22 +0000
Manifest next update:     Sat 01 Feb 2025 17:00:22 +0000
Files and hashes:         1: 6EXhvKaYuiSv7QzpiDlEqKp3HxQ.roa (hash: XgOtkTf6/3mw63PcUPKIMiqdp+H34pYiXMAQZ7u4ASY=)
                          2: Bb8ycOE7qhSFoSMHyD2xB85u_Z0.roa (hash: KcdCM+LEn+v24gkqqCtc8motwJZXGA9KFLUTB0+gGg8=)
                          3: WTiXF0-WdJDb9hidR53yyTcb9AQ.crl (hash: cgOTuBZKT1T7ku7ip0j1oM1jjcpKxU5n7SrAy/lw6g8=)
                          4: kTl30QOsbrDzk_mb8ECK1dAhV14.roa (hash: ktEj7/KQdl7DWD89NCLPeaAfOqTe9FU+2FvlPHr9TVM=)
                          5: x4O9V3tAmzZjxZHKXXKdfDf1aNY.roa (hash: F4vKg2iqkGQkTay3EP9VXjOjSKkwkZAg3JC6CDhOzYc=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bd:4e:71:07:f9:a1:e2:72:e4:f5:06:f4:cc:54:a1:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=593897174f967490dbf6189d479df2c9371bf404
        Validity
            Not Before: Jan 31 17:00:22 2025 GMT
            Not After : Feb  1 17:00:22 2025 GMT
        Subject: CN=78a5afa4856dec396edafe9d064a70cb51f48cbd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:cb:22:ae:e9:58:6c:54:9d:98:bc:c4:1b:bf:
                    42:c4:70:d6:7c:4c:36:da:59:37:09:d7:8c:6a:32:
                    d5:4e:d2:10:87:dd:f8:3e:d7:ed:a1:02:37:ab:dd:
                    2d:55:4b:8a:ef:fe:d5:cc:39:8a:da:60:e1:19:91:
                    fb:38:e7:51:bb:cb:48:1a:4e:f0:4c:5c:d0:4d:3b:
                    e1:3c:71:28:2b:e6:bd:fc:9a:fe:1b:ca:7b:d9:01:
                    d8:86:a9:52:36:e9:a0:21:be:0d:7f:46:e5:ed:e1:
                    3d:2f:b1:a5:44:c8:6f:4d:40:a4:7e:75:fd:3b:63:
                    e8:c5:0c:84:7b:b3:86:0b:e3:60:f9:5d:20:51:c8:
                    2d:cf:f5:c0:97:77:4c:95:e0:a3:f5:b7:f8:e3:77:
                    08:4a:1c:ec:fb:77:56:1a:87:41:cc:2b:97:f6:a3:
                    46:70:d5:14:30:53:bb:da:46:89:25:88:67:87:e3:
                    29:15:59:f8:b2:54:28:32:0f:43:d6:75:31:84:a7:
                    de:c7:03:97:1e:a7:e0:a4:ce:8d:10:94:d0:86:25:
                    d3:84:90:fe:14:28:bb:cd:e5:14:6c:26:bb:b4:7e:
                    d8:1e:9b:a5:f4:07:ba:17:a1:38:21:38:87:ab:66:
                    26:d6:84:b2:59:8f:f5:20:80:2f:e1:5f:c2:b9:56:
                    eb:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:A5:AF:A4:85:6D:EC:39:6E:DA:FE:9D:06:4A:70:CB:51:F4:8C:BD
            X509v3 Authority Key Identifier:
                keyid:59:38:97:17:4F:96:74:90:DB:F6:18:9D:47:9D:F2:C9:37:1B:F4:04

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WTiXF0-WdJDb9hidR53yyTcb9AQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/dcf976-007d-4542-b0e2-5f8fc707836a/1/WTiXF0-WdJDb9hidR53yyTcb9AQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/dcf976-007d-4542-b0e2-5f8fc707836a/1/WTiXF0-WdJDb9hidR53yyTcb9AQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:50:d5:ce:e8:2c:57:da:66:7f:bc:5c:61:14:c2:8e:68:c8:
         1b:e7:bb:be:f6:40:2e:d2:16:e6:5d:eb:4d:10:4e:72:40:e1:
         ad:df:21:57:2d:09:0e:66:53:18:33:6c:79:77:b1:ce:fd:8d:
         09:cb:30:f8:fe:ae:fb:f2:39:0f:d7:84:8b:ba:77:83:e3:20:
         d4:7d:c1:1c:fc:2b:20:d1:23:9f:e3:dd:a6:44:52:73:02:58:
         33:37:53:48:a2:cf:68:6e:ab:dc:5b:71:32:e2:01:3e:02:13:
         a7:01:a1:86:55:a8:64:0f:ce:20:bd:9f:66:df:eb:3b:a6:e8:
         6d:06:e5:9d:ce:19:a9:05:12:31:dc:f1:61:13:37:fa:9e:f0:
         e1:41:60:bd:9c:14:56:f3:27:08:0e:a6:a2:27:6e:a0:c8:0b:
         57:3d:cf:69:dc:a4:08:79:50:88:8d:af:5e:7d:c1:75:91:19:
         1e:6c:53:a1:6b:6e:6b:e9:0d:21:2c:23:1d:c1:7f:83:ed:23:
         3b:d9:07:44:ff:5f:ca:4c:02:46:2e:cf:48:81:d2:0f:7f:1a:
         cf:e0:60:cd:0d:a4:a0:3a:f6:71:b3:b7:d1:10:ce:3b:d2:27:
         ed:fc:c2:14:49:2d:b0:06:52:7d:b0:c0:15:81:ae:9e:d6:c9:
         d5:08:77:2a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9TnEH+aHicuT1BvTMVKGjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU5Mzg5NzE3NGY5Njc0OTBkYmY2MTg5ZDQ3OWRmMmM5Mzcx
YmY0MDQwHhcNMjUwMTMxMTcwMDIyWhcNMjUwMjAxMTcwMDIyWjAzMTEwLwYDVQQD
Eyg3OGE1YWZhNDg1NmRlYzM5NmVkYWZlOWQwNjRhNzBjYjUxZjQ4Y2JkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0ssirulYbFSdmLzEG79CxHDWfEw2
2lk3CdeMajLVTtIQh934PtftoQI3q90tVUuK7/7VzDmK2mDhGZH7OOdRu8tIGk7w
TFzQTTvhPHEoK+a9/Jr+G8p72QHYhqlSNumgIb4Nf0bl7eE9L7GlRMhvTUCkfnX9
O2PoxQyEe7OGC+Ng+V0gUcgtz/XAl3dMleCj9bf443cIShzs+3dWGodBzCuX9qNG
cNUUMFO72kaJJYhnh+MpFVn4slQoMg9D1nUxhKfexwOXHqfgpM6NEJTQhiXThJD+
FCi7zeUUbCa7tH7YHpul9Ae6F6E4ITiHq2Ym1oSyWY/1IIAv4V/CuVbrnQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHilr6SFbew5btr+nQZKcMtR9Iy9MB8GA1UdIwQY
MBaAFFk4lxdPlnSQ2/YYnUed8sk3G/QEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV1RpWEYwLVdkSkRiOWhpZFI1M3l5VGNiOUFRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYi9kY2Y5NzYtMDA3ZC00NTQyLWIwZTIt
NWY4ZmM3MDc4MzZhLzEvV1RpWEYwLVdkSkRiOWhpZFI1M3l5VGNiOUFRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYi9kY2Y5NzYtMDA3ZC00NTQyLWIwZTItNWY4ZmM3MDc4MzZh
LzEvV1RpWEYwLVdkSkRiOWhpZFI1M3l5VGNiOUFRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUVDVzugs
V9pmf7xcYRTCjmjIG+e7vvZALtIW5l3rTRBOckDhrd8hVy0JDmZTGDNseXexzv2N
Ccsw+P6u+/I5D9eEi7p3g+Mg1H3BHPwrINEjn+PdpkRScwJYMzdTSKLPaG6r3Ftx
MuIBPgITpwGhhlWoZA/OIL2fZt/rO6bobQblnc4ZqQUSMdzxYRM3+p7w4UFgvZwU
VvMnCA6moiduoMgLVz3PadykCHlQiI2vXn3BdZEZHmxToWtua+kNISwjHcF/g+0j
O9kHRP9fykwCRi7PSIHSD38az+BgzQ2koDr2cbO30RDOO9In7fzCFEktsAZSfbDA
FYGuntbJ1Qh3Kg==
-----END CERTIFICATE-----