Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/30d4e8-e090-4bf2-8185-3687c818ede5/1/oxbHZZrx1WvHGPr2FPCSdY9e3H8.mft
File:                     oxbHZZrx1WvHGPr2FPCSdY9e3H8.mft (raw, json)
Hash identifier:          Po3h4UZlLZxiez7Jqc7q+ySvU1OobXHsT4Pq36XuFH0=
Subject key identifier:   E8:D9:E4:7C:BB:34:48:65:6F:FC:20:79:F3:3B:F2:CE:BF:75:28:30
Authority key identifier: A3:16:C7:65:9A:F1:D5:6B:C7:18:FA:F6:14:F0:92:75:8F:5E:DC:7F
Certificate issuer:       /CN=a316c7659af1d56bc718faf614f092758f5edc7f
Certificate serial:       0194BC052FF9194A3E8740C54941AC31943E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/oxbHZZrx1WvHGPr2FPCSdY9e3H8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cc/30d4e8-e090-4bf2-8185-3687c818ede5/1/oxbHZZrx1WvHGPr2FPCSdY9e3H8.mft
Manifest number:          0E06
Signing time:             Fri 31 Jan 2025 11:00:43 +0000
Manifest this update:     Fri 31 Jan 2025 11:00:43 +0000
Manifest next update:     Sat 01 Feb 2025 11:00:43 +0000
Files and hashes:         1: 2E5B6hTQ8FYt2qCEddzv6E09HfU.roa (hash: YU3JzyaYxmpBfxew9K/2XcID/FBkgDQAWKRh4zEO3iM=)
                          2: KPfJAcgx7L3A0aFCbGFayqyF-FY.roa (hash: xJj+dDH+N/nG56pXNQf9GMw4+lIOhhZqTxulM01CFMg=)
                          3: Qx409Qk6GX6Nwcvw3Y5aDCAHJk0.roa (hash: OCq3Y6pgPMMrp5TWkQ0F3uKjszaciJXmNLT1MDQryyA=)
                          4: iK9udSOii6eVubAybBf08kgqr4w.roa (hash: ec+Jzg/u7sS5r/6pUZL1GtKcTt/c/Wl3ArbZF1Qkfkk=)
                          5: oxbHZZrx1WvHGPr2FPCSdY9e3H8.crl (hash: iEJKNT1PmRjZhNlm1/navf/+Dq+z4fTnlBhwebjYiF8=)
                          6: yFU0STDV72MqU-sRM_Kr-cA_ycU.roa (hash: 5zjLZ1D73ucyALUkDp0UIe5Nzvw4GxQzx2gLau7CgqA=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:05:2f:f9:19:4a:3e:87:40:c5:49:41:ac:31:94:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a316c7659af1d56bc718faf614f092758f5edc7f
        Validity
            Not Before: Jan 31 11:00:43 2025 GMT
            Not After : Feb  1 11:00:43 2025 GMT
        Subject: CN=e8d9e47cbb3448656ffc2079f33bf2cebf752830
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:da:92:24:92:0f:07:f1:82:81:47:21:6e:17:
                    15:4c:c0:bd:f6:a4:58:e9:60:18:0b:fb:06:70:ff:
                    73:72:6a:d7:fd:5e:df:55:ff:0b:4c:10:ae:1b:e6:
                    a4:a0:4e:bd:9b:87:4c:7c:47:52:48:d4:c7:51:7d:
                    5f:dd:0f:a2:c7:d7:97:94:93:eb:70:5b:75:d2:f2:
                    13:ff:0e:18:60:e9:d2:17:6c:c7:d7:c7:57:39:56:
                    b9:fc:2a:56:2c:f3:08:4e:21:e1:87:80:28:56:4e:
                    6a:24:55:55:e7:49:ca:96:12:3b:9a:0e:ae:c2:57:
                    a4:3b:da:8f:17:22:7f:56:9d:db:c4:2b:36:a3:f7:
                    0c:4e:b8:41:ee:91:8d:8b:f0:45:80:f6:bc:9e:41:
                    67:41:40:c7:63:42:ca:25:81:91:d4:f5:95:9a:73:
                    ba:4b:45:97:8a:05:ac:fe:f4:5b:2c:76:9e:2e:1a:
                    92:64:d7:ed:96:6b:2e:63:b6:2e:1a:4f:82:a9:35:
                    c9:81:d5:7f:56:33:43:03:fc:18:f9:9e:c6:a5:5a:
                    32:6a:59:21:50:47:c2:c5:51:81:ac:62:a8:26:ee:
                    21:33:bb:7a:40:94:67:61:f0:54:a9:e2:28:06:e6:
                    fc:19:b8:f5:10:a0:06:36:25:81:42:1f:ca:98:35:
                    8c:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:D9:E4:7C:BB:34:48:65:6F:FC:20:79:F3:3B:F2:CE:BF:75:28:30
            X509v3 Authority Key Identifier:
                keyid:A3:16:C7:65:9A:F1:D5:6B:C7:18:FA:F6:14:F0:92:75:8F:5E:DC:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oxbHZZrx1WvHGPr2FPCSdY9e3H8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/30d4e8-e090-4bf2-8185-3687c818ede5/1/oxbHZZrx1WvHGPr2FPCSdY9e3H8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/30d4e8-e090-4bf2-8185-3687c818ede5/1/oxbHZZrx1WvHGPr2FPCSdY9e3H8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:d8:72:8f:d6:41:0c:a1:65:68:f0:6e:69:a0:5c:a9:60:c7:
         8a:d5:db:f4:ff:d4:61:56:60:1d:b2:14:bc:92:8f:c2:1e:4c:
         ff:4d:38:24:e5:5d:30:97:c2:e3:b0:65:f6:37:ec:68:92:27:
         6a:63:97:8f:29:96:3d:0b:07:f0:9e:80:af:3d:e8:d5:54:0c:
         bc:36:14:b2:48:50:b7:85:63:45:82:d3:cf:bc:d4:4d:ed:ef:
         b4:bc:f1:3c:d8:95:74:6d:4e:fb:54:a5:c8:82:90:db:20:07:
         c3:ee:40:d2:33:89:27:ed:84:9a:17:80:5f:ae:d1:22:34:f4:
         4b:69:c7:9c:4b:1d:f9:e0:9e:72:fa:62:de:9d:00:81:27:13:
         8a:79:0f:35:53:4b:c4:76:b0:30:d3:14:14:d0:0c:28:cb:be:
         be:80:f4:be:f4:d7:15:a6:2f:4b:a3:75:ec:c6:d2:dd:c1:22:
         44:fa:37:92:9a:66:70:2f:c7:9c:ed:75:f2:b0:e3:0d:2d:cc:
         fd:02:d9:56:c0:7e:67:aa:93:27:d0:64:1f:da:d4:de:07:bc:
         ba:67:9e:da:67:95:48:17:65:53:f5:98:a6:6e:f4:4b:8f:1f:
         43:d4:9b:c5:3f:51:34:96:4f:fa:78:1d:cb:17:4a:52:72:a8:
         a3:81:5a:2a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8BS/5GUo+h0DFSUGsMZQ+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEzMTZjNzY1OWFmMWQ1NmJjNzE4ZmFmNjE0ZjA5Mjc1OGY1
ZWRjN2YwHhcNMjUwMTMxMTEwMDQzWhcNMjUwMjAxMTEwMDQzWjAzMTEwLwYDVQQD
EyhlOGQ5ZTQ3Y2JiMzQ0ODY1NmZmYzIwNzlmMzNiZjJjZWJmNzUyODMwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtNqSJJIPB/GCgUchbhcVTMC99qRY
6WAYC/sGcP9zcmrX/V7fVf8LTBCuG+akoE69m4dMfEdSSNTHUX1f3Q+ix9eXlJPr
cFt10vIT/w4YYOnSF2zH18dXOVa5/CpWLPMITiHhh4AoVk5qJFVV50nKlhI7mg6u
wlekO9qPFyJ/Vp3bxCs2o/cMTrhB7pGNi/BFgPa8nkFnQUDHY0LKJYGR1PWVmnO6
S0WXigWs/vRbLHaeLhqSZNftlmsuY7YuGk+CqTXJgdV/VjNDA/wY+Z7GpVoyalkh
UEfCxVGBrGKoJu4hM7t6QJRnYfBUqeIoBub8Gbj1EKAGNiWBQh/KmDWM4wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOjZ5Hy7NEhlb/wgefM78s6/dSgwMB8GA1UdIwQY
MBaAFKMWx2Wa8dVrxxj69hTwknWPXtx/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb3hiSFpacngxV3ZIR1ByMkZQQ1NkWTllM0g4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy8zMGQ0ZTgtZTA5MC00YmYyLTgxODUt
MzY4N2M4MThlZGU1LzEvb3hiSFpacngxV3ZIR1ByMkZQQ1NkWTllM0g4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYy8zMGQ0ZTgtZTA5MC00YmYyLTgxODUtMzY4N2M4MThlZGU1
LzEvb3hiSFpacngxV3ZIR1ByMkZQQ1NkWTllM0g4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAR9hyj9ZB
DKFlaPBuaaBcqWDHitXb9P/UYVZgHbIUvJKPwh5M/004JOVdMJfC47Bl9jfsaJIn
amOXjymWPQsH8J6Arz3o1VQMvDYUskhQt4VjRYLTz7zUTe3vtLzxPNiVdG1O+1Sl
yIKQ2yAHw+5A0jOJJ+2EmheAX67RIjT0S2nHnEsd+eCecvpi3p0AgScTinkPNVNL
xHawMNMUFNAMKMu+voD0vvTXFaYvS6N17MbS3cEiRPo3kppmcC/HnO118rDjDS3M
/QLZVsB+Z6qTJ9BkH9rU3ge8umee2meVSBdlU/WYpm70S48fQ9SbxT9RNJZP+ngd
yxdKUnKoo4FaKg==
-----END CERTIFICATE-----