Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/720c04-e9c7-48b2-8fec-9cfe1b57cd20/1/nLgLxLWXwXa9hTjBiP7HPaJeboQ.mft
File:                     nLgLxLWXwXa9hTjBiP7HPaJeboQ.mft (raw, json)
Hash identifier:          i4S9kVmHy3rOx8psn4e5keDBmZcHwAfSQFbKLPRy3qc=
Subject key identifier:   8D:F0:AB:80:4A:03:5D:A8:AA:F9:39:66:2A:CA:6C:CA:F5:EC:F8:DA
Authority key identifier: 9C:B8:0B:C4:B5:97:C1:76:BD:85:38:C1:88:FE:C7:3D:A2:5E:6E:84
Certificate issuer:       /CN=9cb80bc4b597c176bd8538c188fec73da25e6e84
Certificate serial:       0194BC051A1C57F092C31C9B67F089E3F8D6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nLgLxLWXwXa9hTjBiP7HPaJeboQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d6/720c04-e9c7-48b2-8fec-9cfe1b57cd20/1/nLgLxLWXwXa9hTjBiP7HPaJeboQ.mft
Manifest number:          0242
Signing time:             Fri 31 Jan 2025 11:00:38 +0000
Manifest this update:     Fri 31 Jan 2025 11:00:38 +0000
Manifest next update:     Sat 01 Feb 2025 11:00:38 +0000
Files and hashes:         1: OVY04NJtWOb1QjATK5euWrh4CQ8.roa (hash: j/MgyRylmuUoLQy6OKDt9MIYFnZ2DVJgTnTK/6Q7Hwk=)
                          2: XGP4BVjR9mKecY9_Y5PB3S55Op8.roa (hash: LBuVoXcYp6eMyvTKDWsBH0kGww7zomqnau8IZ80K36I=)
                          3: eHfcFIuh7a0rJe6KKja_O8myTZY.roa (hash: GXSPQsoUru8NRUfB62M8YLlBncATWqQP9KOtIR+XCk8=)
                          4: lgOapuL_7EbGPh0vvxP468rGEbg.roa (hash: lE3QsF1vh14GOUfJI4gTv7cwcmoRbKzoN9tDRBFhj40=)
                          5: nLgLxLWXwXa9hTjBiP7HPaJeboQ.crl (hash: dk1wKxnPGo4jJBWxVT3/JoEpYhy9fruRXUv5GK1e6so=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:05:1a:1c:57:f0:92:c3:1c:9b:67:f0:89:e3:f8:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9cb80bc4b597c176bd8538c188fec73da25e6e84
        Validity
            Not Before: Jan 31 11:00:38 2025 GMT
            Not After : Feb  1 11:00:38 2025 GMT
        Subject: CN=8df0ab804a035da8aaf939662aca6ccaf5ecf8da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:9a:fd:06:e3:f0:4a:02:73:fe:1b:d8:dc:68:
                    dc:12:d6:60:a0:cf:69:94:2d:9e:e5:35:79:34:ff:
                    3c:b5:e4:52:55:97:3b:17:76:37:6c:96:a3:4b:dc:
                    9b:15:e7:d6:e8:41:9c:ad:3f:d0:ed:88:37:fc:73:
                    01:b1:dd:b9:64:ad:c0:8e:28:2e:35:bb:19:37:66:
                    02:d2:98:5d:e1:09:8c:93:3c:ec:57:31:5c:55:b4:
                    51:0c:50:36:90:ed:39:cd:5f:fa:f0:60:df:22:cd:
                    e4:6c:70:fc:76:9d:0b:bc:bc:89:61:82:31:d1:36:
                    b8:5d:53:24:b8:e0:3b:6b:e6:cf:c6:4c:fc:ff:85:
                    6f:57:fe:5b:ff:7a:eb:06:1e:13:8d:6f:15:bc:72:
                    95:b3:a6:0e:8f:c1:c6:60:32:8e:c9:c1:ef:e4:d9:
                    71:60:8a:a6:9c:f6:2d:cd:25:26:14:5c:89:57:83:
                    2e:6a:dc:11:14:18:81:0a:1c:06:6d:ef:b0:9e:c5:
                    fe:a7:b4:73:09:f8:7e:02:f1:6d:e1:d1:f3:2d:ca:
                    b6:2d:c0:62:1b:1f:a4:1c:48:6c:83:0e:91:ab:1c:
                    9a:18:f4:27:4d:ca:ee:44:63:88:d6:7a:67:20:3f:
                    07:2c:82:c5:15:64:ab:96:1a:d5:91:e2:4a:e7:94:
                    00:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:F0:AB:80:4A:03:5D:A8:AA:F9:39:66:2A:CA:6C:CA:F5:EC:F8:DA
            X509v3 Authority Key Identifier:
                keyid:9C:B8:0B:C4:B5:97:C1:76:BD:85:38:C1:88:FE:C7:3D:A2:5E:6E:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nLgLxLWXwXa9hTjBiP7HPaJeboQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/720c04-e9c7-48b2-8fec-9cfe1b57cd20/1/nLgLxLWXwXa9hTjBiP7HPaJeboQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/720c04-e9c7-48b2-8fec-9cfe1b57cd20/1/nLgLxLWXwXa9hTjBiP7HPaJeboQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:20:7d:2b:4b:4f:e3:11:a2:d3:ec:83:4f:07:22:b3:98:92:
         e0:e6:f3:06:e1:7b:ce:b6:84:20:9f:9d:b2:c4:0b:18:15:75:
         49:fb:a3:f5:69:e2:00:6b:01:91:38:06:77:11:68:25:81:d5:
         65:d3:1d:f7:a5:62:a2:9a:08:ef:ca:93:5b:29:91:71:7d:9e:
         e9:5d:e2:aa:d5:a6:f6:af:d9:2a:b0:fa:d5:1a:a5:52:14:35:
         c0:69:1e:1d:b0:6d:29:fc:86:b0:4c:31:24:c2:ea:64:b7:bb:
         41:db:7b:12:29:a1:c4:d5:1d:9b:ba:34:56:54:88:1a:6d:d4:
         62:14:16:ba:d4:41:29:0d:16:08:a5:77:37:ae:fd:0d:69:63:
         3c:f0:30:5b:e8:21:2d:f6:80:db:22:b8:a9:0c:47:01:9c:04:
         bf:61:67:42:07:ee:f6:67:05:0b:3e:43:39:03:f2:17:a4:86:
         c0:95:7b:c4:04:e0:e9:70:c7:12:57:ce:a6:ab:19:bd:c8:7a:
         fe:36:84:e1:6f:35:1c:e4:91:5c:bd:a7:4d:58:a0:90:00:33:
         9b:0b:77:69:ea:b7:e7:20:22:e8:ee:c5:25:cd:4b:e2:67:fb:
         38:ad:05:b4:b8:b7:17:c5:52:1f:55:24:40:75:a2:67:12:5a:
         4e:e2:67:8f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8BRocV/CSwxybZ/CJ4/jWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDljYjgwYmM0YjU5N2MxNzZiZDg1MzhjMTg4ZmVjNzNkYTI1
ZTZlODQwHhcNMjUwMTMxMTEwMDM4WhcNMjUwMjAxMTEwMDM4WjAzMTEwLwYDVQQD
Eyg4ZGYwYWI4MDRhMDM1ZGE4YWFmOTM5NjYyYWNhNmNjYWY1ZWNmOGRhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnpr9BuPwSgJz/hvY3GjcEtZgoM9p
lC2e5TV5NP88teRSVZc7F3Y3bJajS9ybFefW6EGcrT/Q7Yg3/HMBsd25ZK3Ajigu
NbsZN2YC0phd4QmMkzzsVzFcVbRRDFA2kO05zV/68GDfIs3kbHD8dp0LvLyJYYIx
0Ta4XVMkuOA7a+bPxkz8/4VvV/5b/3rrBh4TjW8VvHKVs6YOj8HGYDKOycHv5Nlx
YIqmnPYtzSUmFFyJV4MuatwRFBiBChwGbe+wnsX+p7RzCfh+AvFt4dHzLcq2LcBi
Gx+kHEhsgw6RqxyaGPQnTcruRGOI1npnID8HLILFFWSrlhrVkeJK55QANQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI3wq4BKA12oqvk5ZirKbMr17PjaMB8GA1UdIwQY
MBaAFJy4C8S1l8F2vYU4wYj+xz2iXm6EMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbkxnTHhMV1h3WGE5aFRqQmlQN0hQYUplYm9RLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNi83MjBjMDQtZTljNy00OGIyLThmZWMt
OWNmZTFiNTdjZDIwLzEvbkxnTHhMV1h3WGE5aFRqQmlQN0hQYUplYm9RLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNi83MjBjMDQtZTljNy00OGIyLThmZWMtOWNmZTFiNTdjZDIw
LzEvbkxnTHhMV1h3WGE5aFRqQmlQN0hQYUplYm9RLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAESB9K0tP
4xGi0+yDTwcis5iS4ObzBuF7zraEIJ+dssQLGBV1Sfuj9WniAGsBkTgGdxFoJYHV
ZdMd96ViopoI78qTWymRcX2e6V3iqtWm9q/ZKrD61RqlUhQ1wGkeHbBtKfyGsEwx
JMLqZLe7Qdt7EimhxNUdm7o0VlSIGm3UYhQWutRBKQ0WCKV3N679DWljPPAwW+gh
LfaA2yK4qQxHAZwEv2FnQgfu9mcFCz5DOQPyF6SGwJV7xATg6XDHElfOpqsZvch6
/jaE4W81HOSRXL2nTVigkAAzmwt3aeq35yAi6O7FJc1L4mf7OK0FtLi3F8VSH1Uk
QHWiZxJaTuJnjw==
-----END CERTIFICATE-----