Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/ce3fa7-fc88-4f48-a5ce-a45bbcb34de5/1/B9dTNfd79CQJdid7HdDhm7I6jh0.mft
File:                     B9dTNfd79CQJdid7HdDhm7I6jh0.mft (raw, json)
Hash identifier:          Rmo9Syd/GnNwvOjDjvjTXg8JQBxpwy81Ox72KLo1QFA=
Subject key identifier:   CB:FA:28:7A:9C:EE:E7:02:F9:59:05:93:71:AA:72:9F:9D:23:58:B0
Authority key identifier: 07:D7:53:35:F7:7B:F4:24:09:76:27:7B:1D:D0:E1:9B:B2:3A:8E:1D
Certificate issuer:       /CN=07d75335f77bf4240976277b1dd0e19bb23a8e1d
Certificate serial:       0194BCAA048CDB25AE77F731E90B53BD76CB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/B9dTNfd79CQJdid7HdDhm7I6jh0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c8/ce3fa7-fc88-4f48-a5ce-a45bbcb34de5/1/B9dTNfd79CQJdid7HdDhm7I6jh0.mft
Manifest number:          142D
Signing time:             Fri 31 Jan 2025 14:00:46 +0000
Manifest this update:     Fri 31 Jan 2025 14:00:46 +0000
Manifest next update:     Sat 01 Feb 2025 14:00:46 +0000
Files and hashes:         1: B9dTNfd79CQJdid7HdDhm7I6jh0.crl (hash: Mq1B75oCO+jHJuaFitqmzFmYiVcBrLeCO38L0SVxJyE=)
                          2: DJMvMcbCqWs8S1k8F1cr0oOlAV4.roa (hash: 2/XmIDp0C9u6r+CcJVDowCbwT1OywEIeqWzkNLLwQok=)
                          3: f3raIBer4Wbe3buOh8JkfhD4mEA.roa (hash: B9RYB76x05XWJNka7NBoycDREl2ucTVGVKrV+eIK26g=)
                          4: hfYnlizg3MwR5qQug8OaGFYUftA.roa (hash: DTFlk5aAr3e9+sYI7V08QHNOE3ZymaaIt731TRyJnHQ=)
                          5: tBNDimUXEukADWJF9dJCQTAu8Xs.roa (hash: xy9pbAco54L3WlU6x7baSUsepcCgwp7AyR8Cg3prULc=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:aa:04:8c:db:25:ae:77:f7:31:e9:0b:53:bd:76:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07d75335f77bf4240976277b1dd0e19bb23a8e1d
        Validity
            Not Before: Jan 31 14:00:46 2025 GMT
            Not After : Feb  1 14:00:46 2025 GMT
        Subject: CN=cbfa287a9ceee702f959059371aa729f9d2358b0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:87:77:41:1f:04:b5:e5:de:f6:bc:8f:4b:41:
                    ad:b7:a5:13:81:bf:c8:94:f2:df:c4:39:01:d8:67:
                    90:d1:7f:f8:96:8b:e4:25:2b:cb:ba:54:b9:1f:ac:
                    ef:ef:c0:e0:39:f6:eb:7b:31:30:23:2e:3d:82:71:
                    5a:41:25:38:c2:70:75:47:ec:e3:e3:1c:bc:8b:38:
                    6a:0f:db:d7:c0:02:bc:c3:f1:d5:77:19:b1:4b:5c:
                    4e:37:01:79:f3:c3:c1:be:8a:c4:09:f4:ca:2b:9a:
                    07:c1:97:57:7b:b2:2e:e1:b5:12:70:6b:7b:6d:bc:
                    1f:99:d5:5d:81:6d:00:f4:7f:71:fb:9f:8e:43:bd:
                    19:43:d7:36:b3:22:69:c7:f8:85:3e:a7:7f:a7:5a:
                    56:e8:f2:a5:25:30:d9:d3:75:1d:f9:02:22:83:3a:
                    49:70:52:91:c4:44:35:27:d3:10:ce:ee:28:0e:20:
                    1e:59:f2:57:77:fe:20:68:88:51:7d:5d:73:c1:95:
                    a8:dd:83:46:7b:8e:25:5a:cf:ea:30:32:81:db:bb:
                    27:56:0f:3a:85:59:4c:2b:1d:39:b4:08:ed:4f:8d:
                    41:c7:01:38:4b:cb:83:23:df:14:85:07:64:6e:1f:
                    6c:87:ea:83:f0:76:6c:91:df:c3:3c:25:04:a8:2b:
                    76:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:FA:28:7A:9C:EE:E7:02:F9:59:05:93:71:AA:72:9F:9D:23:58:B0
            X509v3 Authority Key Identifier:
                keyid:07:D7:53:35:F7:7B:F4:24:09:76:27:7B:1D:D0:E1:9B:B2:3A:8E:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B9dTNfd79CQJdid7HdDhm7I6jh0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/ce3fa7-fc88-4f48-a5ce-a45bbcb34de5/1/B9dTNfd79CQJdid7HdDhm7I6jh0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/ce3fa7-fc88-4f48-a5ce-a45bbcb34de5/1/B9dTNfd79CQJdid7HdDhm7I6jh0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:ed:02:42:24:33:b9:33:8e:0a:c6:e2:c0:8b:d6:99:0a:4f:
         0b:c0:8e:f6:61:6c:bd:85:78:89:93:e6:a1:0d:e8:25:9d:a2:
         fa:7e:d0:20:a1:7c:c7:07:51:93:60:05:82:84:0c:6b:08:08:
         d6:ad:09:fc:05:54:97:0c:d4:aa:ac:e8:f2:4e:c3:4f:16:0c:
         92:cb:54:e8:b0:db:70:87:e7:ff:67:e6:3b:92:de:db:81:0f:
         22:a6:6e:51:98:3e:1e:9c:4b:df:56:af:78:9d:f5:e5:1a:28:
         a9:51:3d:82:79:15:8f:dc:25:8d:6b:d0:f3:7b:e8:21:3a:ac:
         81:c6:f8:ed:75:3e:08:64:47:51:e6:ee:d4:aa:2d:2f:00:03:
         ba:0c:65:01:cd:c5:09:a9:d8:2a:b8:a6:6c:16:a2:d4:c5:b9:
         29:80:b5:bb:8d:25:bc:ab:43:99:fd:bc:04:1a:12:11:87:eb:
         84:f8:40:ea:86:df:0a:03:40:29:27:53:bc:00:5a:5d:fb:45:
         89:7c:ac:9b:82:ea:21:0e:1c:da:ea:93:b1:10:e8:3a:1a:ab:
         53:4a:39:17:62:0b:cb:9a:0e:c5:a8:2f:45:69:78:20:4d:17:
         40:fa:1e:b1:de:17:26:ba:b0:0d:f9:64:00:a9:96:f6:16:4c:
         f2:36:0b:3a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8qgSM2yWud/cx6QtTvXbLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA3ZDc1MzM1Zjc3YmY0MjQwOTc2Mjc3YjFkZDBlMTliYjIz
YThlMWQwHhcNMjUwMTMxMTQwMDQ2WhcNMjUwMjAxMTQwMDQ2WjAzMTEwLwYDVQQD
EyhjYmZhMjg3YTljZWVlNzAyZjk1OTA1OTM3MWFhNzI5ZjlkMjM1OGIwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4Id3QR8EteXe9ryPS0Gtt6UTgb/I
lPLfxDkB2GeQ0X/4lovkJSvLulS5H6zv78DgOfbrezEwIy49gnFaQSU4wnB1R+zj
4xy8izhqD9vXwAK8w/HVdxmxS1xONwF588PBvorECfTKK5oHwZdXe7Iu4bUScGt7
bbwfmdVdgW0A9H9x+5+OQ70ZQ9c2syJpx/iFPqd/p1pW6PKlJTDZ03Ud+QIigzpJ
cFKRxEQ1J9MQzu4oDiAeWfJXd/4gaIhRfV1zwZWo3YNGe44lWs/qMDKB27snVg86
hVlMKx05tAjtT41BxwE4S8uDI98UhQdkbh9sh+qD8HZskd/DPCUEqCt2OwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMv6KHqc7ucC+VkFk3Gqcp+dI1iwMB8GA1UdIwQY
MBaAFAfXUzX3e/QkCXYnex3Q4ZuyOo4dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQjlkVE5mZDc5Q1FKZGlkN0hkRGhtN0k2amgwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9jZTNmYTctZmM4OC00ZjQ4LWE1Y2Ut
YTQ1YmJjYjM0ZGU1LzEvQjlkVE5mZDc5Q1FKZGlkN0hkRGhtN0k2amgwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC9jZTNmYTctZmM4OC00ZjQ4LWE1Y2UtYTQ1YmJjYjM0ZGU1
LzEvQjlkVE5mZDc5Q1FKZGlkN0hkRGhtN0k2amgwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAV+0CQiQz
uTOOCsbiwIvWmQpPC8CO9mFsvYV4iZPmoQ3oJZ2i+n7QIKF8xwdRk2AFgoQMawgI
1q0J/AVUlwzUqqzo8k7DTxYMkstU6LDbcIfn/2fmO5Le24EPIqZuUZg+HpxL31av
eJ315RooqVE9gnkVj9wljWvQ83voITqsgcb47XU+CGRHUebu1KotLwADugxlAc3F
CanYKrimbBai1MW5KYC1u40lvKtDmf28BBoSEYfrhPhA6obfCgNAKSdTvABaXftF
iXysm4LqIQ4c2uqTsRDoOhqrU0o5F2ILy5oOxagvRWl4IE0XQPoesd4XJrqwDflk
AKmW9hZM8jYLOg==
-----END CERTIFICATE-----