Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/a8dadc-611b-4063-adb6-55b659cd82bb/1/IXt6sGK8gos0jQUwbmU1R0i51tY.mft
File:                     IXt6sGK8gos0jQUwbmU1R0i51tY.mft (raw, json)
Hash identifier:          XSVxBA5uO7d+wRgy5oOpWczL6Wr0aG25Tjgvk8rtKIQ=
Subject key identifier:   8E:22:E2:58:DE:6B:ED:DC:D5:4A:EA:BA:5E:62:D5:34:7D:D2:FD:32
Authority key identifier: 21:7B:7A:B0:62:BC:82:8B:34:8D:05:30:6E:65:35:47:48:B9:D6:D6
Certificate issuer:       /CN=217b7ab062bc828b348d05306e65354748b9d6d6
Certificate serial:       0194BCE0B9EB7E02783D4285A65CA54A45F4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IXt6sGK8gos0jQUwbmU1R0i51tY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d6/a8dadc-611b-4063-adb6-55b659cd82bb/1/IXt6sGK8gos0jQUwbmU1R0i51tY.mft
Manifest number:          07DF
Signing time:             Fri 31 Jan 2025 15:00:31 +0000
Manifest this update:     Fri 31 Jan 2025 15:00:31 +0000
Manifest next update:     Sat 01 Feb 2025 15:00:31 +0000
Files and hashes:         1: 6JGZ23nNSLMhsYIjcaIj2CRNg78.roa (hash: NSMNj7MzfzRiB7ibkUFT80cS+9FzXyjpiqmTdXm+uYY=)
                          2: 718NxJ1XBcNuKhqWIG0Rrq-vXh8.roa (hash: wdVkn0ntzy4TqX3icxEaxiw5SC2YAgS+gtseIyBfjQs=)
                          3: IXt6sGK8gos0jQUwbmU1R0i51tY.crl (hash: 2+6WiiL6AYwytCFSbl9YA0thgvra/8D/pzb4qNbsQmk=)
                          4: MxnaSSbQw86rarIinDMMZivkGdw.roa (hash: h/ddKvaGl3fWPEP8Nd57aepj+bfiFJtbw0YUdod9iB0=)
                          5: VxdHezzHKrkrE2Feoz1POMlVQMY.roa (hash: FkZe/vgHmq1Yaa4HgYSORTSSTc1UQglxGrV02REUteE=)
                          6: XIWD4tmKPBUNLGHuM83XfdqSQLo.roa (hash: 1D5W9f26KTQarHJTs0xIKCgYO2HEyTRn2m31rQHLa2g=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:e0:b9:eb:7e:02:78:3d:42:85:a6:5c:a5:4a:45:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=217b7ab062bc828b348d05306e65354748b9d6d6
        Validity
            Not Before: Jan 31 15:00:31 2025 GMT
            Not After : Feb  1 15:00:31 2025 GMT
        Subject: CN=8e22e258de6beddcd54aeaba5e62d5347dd2fd32
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:94:3d:dd:f9:8f:95:30:72:b9:43:87:96:97:
                    0d:7e:8d:46:a5:5c:1d:53:e2:0b:0d:1d:a6:cc:22:
                    7d:6a:32:ec:7f:b5:1f:62:60:25:e4:ca:45:db:c0:
                    37:6b:4e:60:d2:09:6e:27:be:0a:bc:bb:dd:db:e3:
                    a5:84:09:1c:13:53:4f:f8:28:a0:c0:bb:aa:ed:41:
                    72:27:87:da:92:63:1e:74:5a:74:f0:d3:cd:9f:34:
                    0c:42:be:d8:0c:bc:b6:1a:4f:b3:4f:86:02:6c:f5:
                    e6:17:61:da:52:73:32:67:64:8b:37:5d:69:52:07:
                    e2:82:9c:77:e2:9b:35:62:3d:79:66:48:ce:ae:bf:
                    52:91:3d:84:43:0d:a7:39:fc:0c:19:6b:95:a1:47:
                    c8:8a:55:df:c1:20:dc:0d:da:f9:46:d1:1f:bd:18:
                    31:ad:e1:39:36:5a:a3:93:d3:50:9e:4b:03:8f:a9:
                    4e:f3:7f:f2:60:b4:92:f4:8b:00:eb:49:8a:82:fe:
                    3c:ac:38:b8:df:25:57:a4:d7:99:68:bf:c8:4f:e3:
                    1a:71:0f:d6:b8:3d:51:04:25:f5:d4:8a:b2:40:2a:
                    d6:63:53:f1:87:0a:95:08:6b:73:de:2d:9c:7d:b4:
                    5c:cf:9a:75:06:9c:90:77:1c:28:af:dc:38:35:69:
                    1c:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:22:E2:58:DE:6B:ED:DC:D5:4A:EA:BA:5E:62:D5:34:7D:D2:FD:32
            X509v3 Authority Key Identifier:
                keyid:21:7B:7A:B0:62:BC:82:8B:34:8D:05:30:6E:65:35:47:48:B9:D6:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IXt6sGK8gos0jQUwbmU1R0i51tY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/a8dadc-611b-4063-adb6-55b659cd82bb/1/IXt6sGK8gos0jQUwbmU1R0i51tY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/a8dadc-611b-4063-adb6-55b659cd82bb/1/IXt6sGK8gos0jQUwbmU1R0i51tY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:0e:bc:37:38:24:e3:a0:87:07:4a:d0:59:be:0f:b6:57:65:
         65:cd:31:3d:14:47:1d:c7:c1:a4:1e:5d:28:ec:ea:ac:fd:08:
         af:eb:10:81:49:7b:35:e2:0b:ff:81:01:51:63:bd:34:d1:7f:
         54:03:a5:6f:72:ca:05:1d:a7:8d:21:a0:d5:a8:f8:a6:46:17:
         28:cb:c7:d7:3b:4d:8e:46:58:c7:6c:ad:82:42:85:73:d0:43:
         87:39:98:7d:b2:cd:17:c9:e7:9b:77:5e:9c:39:57:5b:f8:e0:
         fc:07:9d:be:97:c2:41:5a:37:96:95:27:d2:3c:27:8d:c4:ed:
         0b:0f:a8:0d:8e:73:c8:a1:24:61:10:7a:b7:d3:2b:c7:ff:e5:
         f4:04:b2:11:c9:44:46:a3:fb:f0:26:ae:b0:6c:3a:a6:50:43:
         6f:c3:7f:b8:44:a6:56:83:ce:13:94:bb:39:3c:f5:3a:8f:3e:
         98:de:c5:7e:f0:d1:22:a9:9e:20:e3:5d:30:eb:f0:f9:a6:9b:
         91:42:68:83:7b:6b:61:4b:79:8b:fc:70:32:7f:f4:0e:97:d9:
         c2:c5:e0:88:48:3f:b6:83:db:01:36:73:87:bf:57:e4:ab:cf:
         36:4b:35:29:07:ce:3d:05:aa:2f:f3:7d:d7:bc:38:c8:4b:c4:
         d6:25:a8:07
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS84LnrfgJ4PUKFplylSkX0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIxN2I3YWIwNjJiYzgyOGIzNDhkMDUzMDZlNjUzNTQ3NDhi
OWQ2ZDYwHhcNMjUwMTMxMTUwMDMxWhcNMjUwMjAxMTUwMDMxWjAzMTEwLwYDVQQD
Eyg4ZTIyZTI1OGRlNmJlZGRjZDU0YWVhYmE1ZTYyZDUzNDdkZDJmZDMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy5Q93fmPlTByuUOHlpcNfo1GpVwd
U+ILDR2mzCJ9ajLsf7UfYmAl5MpF28A3a05g0gluJ74KvLvd2+OlhAkcE1NP+Cig
wLuq7UFyJ4fakmMedFp08NPNnzQMQr7YDLy2Gk+zT4YCbPXmF2HaUnMyZ2SLN11p
Ugfigpx34ps1Yj15ZkjOrr9SkT2EQw2nOfwMGWuVoUfIilXfwSDcDdr5RtEfvRgx
reE5Nlqjk9NQnksDj6lO83/yYLSS9IsA60mKgv48rDi43yVXpNeZaL/IT+MacQ/W
uD1RBCX11IqyQCrWY1PxhwqVCGtz3i2cfbRcz5p1BpyQdxwor9w4NWkckwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI4i4ljea+3c1Urqul5i1TR90v0yMB8GA1UdIwQY
MBaAFCF7erBivIKLNI0FMG5lNUdIudbWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSVh0NnNHSzhnb3MwalFVd2JtVTFSMGk1MXRZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNi9hOGRhZGMtNjExYi00MDYzLWFkYjYt
NTViNjU5Y2Q4MmJiLzEvSVh0NnNHSzhnb3MwalFVd2JtVTFSMGk1MXRZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNi9hOGRhZGMtNjExYi00MDYzLWFkYjYtNTViNjU5Y2Q4MmJi
LzEvSVh0NnNHSzhnb3MwalFVd2JtVTFSMGk1MXRZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHg68Nzgk
46CHB0rQWb4PtldlZc0xPRRHHcfBpB5dKOzqrP0Ir+sQgUl7NeIL/4EBUWO9NNF/
VAOlb3LKBR2njSGg1aj4pkYXKMvH1ztNjkZYx2ytgkKFc9BDhzmYfbLNF8nnm3de
nDlXW/jg/AedvpfCQVo3lpUn0jwnjcTtCw+oDY5zyKEkYRB6t9Mrx//l9ASyEclE
RqP78CausGw6plBDb8N/uESmVoPOE5S7OTz1Oo8+mN7FfvDRIqmeIONdMOvw+aab
kUJog3trYUt5i/xwMn/0DpfZwsXgiEg/toPbATZzh79X5KvPNks1KQfOPQWqL/N9
17w4yEvE1iWoBw==
-----END CERTIFICATE-----