Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/39d734-6fb1-4dc0-a128-d75f595fa7c3/1/YMjVd0f3KXAO8vVhT2397I0Rny0.mft
File:                     YMjVd0f3KXAO8vVhT2397I0Rny0.mft (raw, json)
Hash identifier:          jAwZJAl1lUE3OCk29Df4bQTAfGsaG3cr6oG1K0TEtyo=
Subject key identifier:   05:73:D1:1B:84:CF:A2:9E:20:87:B1:8C:A0:74:54:90:37:76:95:66
Authority key identifier: 60:C8:D5:77:47:F7:29:70:0E:F2:F5:61:4F:6D:FD:EC:8D:11:9F:2D
Certificate issuer:       /CN=60c8d57747f729700ef2f5614f6dfdec8d119f2d
Certificate serial:       0194BD858E666E7831E67F89B93EDAACB3F8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YMjVd0f3KXAO8vVhT2397I0Rny0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d6/39d734-6fb1-4dc0-a128-d75f595fa7c3/1/YMjVd0f3KXAO8vVhT2397I0Rny0.mft
Manifest number:          0D06
Signing time:             Fri 31 Jan 2025 18:00:33 +0000
Manifest this update:     Fri 31 Jan 2025 18:00:33 +0000
Manifest next update:     Sat 01 Feb 2025 18:00:33 +0000
Files and hashes:         1: YMjVd0f3KXAO8vVhT2397I0Rny0.crl (hash: N92XWhTwb8zsa8Qr1OPeEC8m1POE/0PM4p2QUEL522U=)
                          2: qx-NGj8MV_Cd9zpPet-1VEa08Ro.roa (hash: cxZbSa6oQLmYFFxeIAfjlhTWw1+qGjLvscb3SdGJg1o=)
                          3: r2K_C06ic0Dj0a3NFZhhI6ooNvs.roa (hash: bne8Sm5wB0CMu858I+GoE6ZpkxWpdhA80NITFW1Cun8=)
                          4: yeRaarOsqQL6T8MId8Dw-zjDpyI.roa (hash: PcKi02vr0pDiDVlpa/LbtFTT0UyPuUQNtlWvZyQzOuw=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bd:85:8e:66:6e:78:31:e6:7f:89:b9:3e:da:ac:b3:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=60c8d57747f729700ef2f5614f6dfdec8d119f2d
        Validity
            Not Before: Jan 31 18:00:33 2025 GMT
            Not After : Feb  1 18:00:33 2025 GMT
        Subject: CN=0573d11b84cfa29e2087b18ca074549037769566
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:76:c3:8d:90:d5:b3:6f:fd:3d:de:0b:5c:1c:
                    59:72:d9:ec:f7:8f:9c:06:79:41:fa:e2:a1:0f:00:
                    c7:94:14:24:63:10:57:c5:a5:7b:36:5f:f9:e1:4f:
                    27:73:f3:5c:31:ad:3d:60:f1:c9:72:59:9f:07:cf:
                    a0:f0:66:c6:83:24:ed:ea:0f:00:f6:99:2c:76:f0:
                    4d:9a:09:63:21:cf:34:30:dc:f9:40:83:70:db:89:
                    ae:8f:99:0d:4b:2a:80:c1:df:24:0b:fd:02:e5:7a:
                    01:8c:21:b5:80:79:aa:df:dc:e1:5f:e6:dd:24:e6:
                    0f:a0:c1:4c:82:56:0d:e9:cc:c1:fe:92:33:0c:c8:
                    97:58:ba:f5:64:e6:03:76:ba:fa:6d:39:fe:4f:b0:
                    21:71:e9:6f:f1:cd:95:6c:71:03:bb:a3:94:9a:80:
                    fd:67:92:0d:86:4d:ec:8e:25:50:fb:bc:c3:3e:fc:
                    3a:42:2e:1e:ea:66:86:63:f5:95:e5:13:c2:a1:82:
                    32:e4:c2:1f:cb:cd:64:5d:cf:49:17:79:33:7c:af:
                    51:55:6e:3e:30:22:5c:8e:00:05:26:36:22:ba:e1:
                    09:0a:fc:df:a4:a6:48:d0:53:b2:fc:b8:a7:d6:f4:
                    cd:f2:a1:d6:2e:31:5e:93:3b:ee:62:2e:2e:7f:48:
                    14:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:73:D1:1B:84:CF:A2:9E:20:87:B1:8C:A0:74:54:90:37:76:95:66
            X509v3 Authority Key Identifier:
                keyid:60:C8:D5:77:47:F7:29:70:0E:F2:F5:61:4F:6D:FD:EC:8D:11:9F:2D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YMjVd0f3KXAO8vVhT2397I0Rny0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/39d734-6fb1-4dc0-a128-d75f595fa7c3/1/YMjVd0f3KXAO8vVhT2397I0Rny0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/39d734-6fb1-4dc0-a128-d75f595fa7c3/1/YMjVd0f3KXAO8vVhT2397I0Rny0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:c2:36:3b:04:ed:3c:2d:36:da:f1:1c:d0:45:24:5f:a4:8c:
         b4:41:52:bd:76:de:a5:82:ea:bb:9c:a4:67:ea:64:63:41:a0:
         3f:f9:6e:13:12:51:fc:79:c5:f8:e5:eb:a4:6c:f0:ab:b8:da:
         21:a7:1a:d1:76:ae:f2:42:c5:99:67:63:79:95:59:12:4a:7a:
         da:ca:82:62:39:f0:14:24:63:7c:c5:e6:ff:f3:d2:46:d1:2a:
         02:ad:95:82:d5:be:98:a7:17:f5:18:5c:70:15:6b:92:20:92:
         43:fe:e9:e1:69:85:8d:31:10:4c:ac:f3:b2:23:ff:36:3b:11:
         54:90:38:68:41:ce:35:66:11:99:77:d2:93:1d:e6:8e:0d:6c:
         c2:cf:10:e8:f5:c2:08:d7:99:94:2f:83:c7:c2:e5:a8:fa:fb:
         c3:8d:ce:3e:ad:e0:fe:e4:27:97:65:1b:4c:26:93:bb:0b:46:
         97:c6:fd:d9:85:ad:a0:5b:5d:94:01:ef:66:52:89:e5:f6:cc:
         96:b8:94:77:bc:9e:fe:7d:30:b3:a3:10:2f:a4:0a:4c:fc:d5:
         72:6a:e2:e2:de:1f:6b:1f:d9:45:2b:83:28:5d:d3:d5:7e:9a:
         7b:88:6e:32:8c:8e:3e:27:11:50:3f:34:ed:41:6e:2d:c2:16:
         fd:44:85:95
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9hY5mbngx5n+JuT7arLP4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYwYzhkNTc3NDdmNzI5NzAwZWYyZjU2MTRmNmRmZGVjOGQx
MTlmMmQwHhcNMjUwMTMxMTgwMDMzWhcNMjUwMjAxMTgwMDMzWjAzMTEwLwYDVQQD
EygwNTczZDExYjg0Y2ZhMjllMjA4N2IxOGNhMDc0NTQ5MDM3NzY5NTY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsHbDjZDVs2/9Pd4LXBxZctns94+c
BnlB+uKhDwDHlBQkYxBXxaV7Nl/54U8nc/NcMa09YPHJclmfB8+g8GbGgyTt6g8A
9pksdvBNmgljIc80MNz5QINw24muj5kNSyqAwd8kC/0C5XoBjCG1gHmq39zhX+bd
JOYPoMFMglYN6czB/pIzDMiXWLr1ZOYDdrr6bTn+T7Ahcelv8c2VbHEDu6OUmoD9
Z5INhk3sjiVQ+7zDPvw6Qi4e6maGY/WV5RPCoYIy5MIfy81kXc9JF3kzfK9RVW4+
MCJcjgAFJjYiuuEJCvzfpKZI0FOy/Lin1vTN8qHWLjFekzvuYi4uf0gU1QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAVz0RuEz6KeIIexjKB0VJA3dpVmMB8GA1UdIwQY
MBaAFGDI1XdH9ylwDvL1YU9t/eyNEZ8tMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWU1qVmQwZjNLWEFPOHZWaFQyMzk3STBSbnkwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNi8zOWQ3MzQtNmZiMS00ZGMwLWExMjgt
ZDc1ZjU5NWZhN2MzLzEvWU1qVmQwZjNLWEFPOHZWaFQyMzk3STBSbnkwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNi8zOWQ3MzQtNmZiMS00ZGMwLWExMjgtZDc1ZjU5NWZhN2Mz
LzEvWU1qVmQwZjNLWEFPOHZWaFQyMzk3STBSbnkwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcsI2OwTt
PC022vEc0EUkX6SMtEFSvXbepYLqu5ykZ+pkY0GgP/luExJR/HnF+OXrpGzwq7ja
Iaca0Xau8kLFmWdjeZVZEkp62sqCYjnwFCRjfMXm//PSRtEqAq2VgtW+mKcX9Rhc
cBVrkiCSQ/7p4WmFjTEQTKzzsiP/NjsRVJA4aEHONWYRmXfSkx3mjg1sws8Q6PXC
CNeZlC+Dx8LlqPr7w43OPq3g/uQnl2UbTCaTuwtGl8b92YWtoFtdlAHvZlKJ5fbM
lriUd7ye/n0ws6MQL6QKTPzVcmri4t4fax/ZRSuDKF3T1X6ae4huMoyOPicRUD80
7UFuLcIW/USFlQ==
-----END CERTIFICATE-----