Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/6e874e-73fe-4dbb-b74c-0423f263f2cb/1/wE23YjJB1-Znj8JXUfpOC2ZlGGs.mft
File:                     wE23YjJB1-Znj8JXUfpOC2ZlGGs.mft (raw, json)
Hash identifier:          ZZVa9lheIxHU5S9g+nedx1EISj6ReiD+NDVSB58QOpE=
Subject key identifier:   5B:9A:ED:F7:90:9E:23:42:6F:C3:A5:0E:85:A5:5A:BB:01:6D:3D:5E
Authority key identifier: C0:4D:B7:62:32:41:D7:E6:67:8F:C2:57:51:FA:4E:0B:66:65:18:6B
Certificate issuer:       /CN=c04db7623241d7e6678fc25751fa4e0b6665186b
Certificate serial:       0194BCA9D4A41530B89B6875E4329998C78C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wE23YjJB1-Znj8JXUfpOC2ZlGGs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d8/6e874e-73fe-4dbb-b74c-0423f263f2cb/1/wE23YjJB1-Znj8JXUfpOC2ZlGGs.mft
Manifest number:          0EA2
Signing time:             Fri 31 Jan 2025 14:00:34 +0000
Manifest this update:     Fri 31 Jan 2025 14:00:34 +0000
Manifest next update:     Sat 01 Feb 2025 14:00:34 +0000
Files and hashes:         1: 0kvVQcd2e4SnQh3xLN4W9Ie4suY.roa (hash: dfbeFrG20UF3jAoNCZUQnOLXn1JG2r7gMGzts7DU6SI=)
                          2: G9kyMwWcS8p8oKM_jVsKr46KkCA.roa (hash: v58cL7h9PNX8KV7JDf5chBz/sfdy/p9d8c9Lb1ABEtg=)
                          3: Jsb0BR9UN-dcyjDsxkaO3-Yvltw.roa (hash: mF6vNbBQIU1GWKkIg2h8rHabqCIgbySUD4lzazj7BZI=)
                          4: L1zaQrOyYMyhb-vjYsccEQ0rOGs.roa (hash: h8hWAA3iPsZGpLorxG9VKCzAf/rtjUUbjPF4osJaSgE=)
                          5: mpKpYmY8DEGhZcV6ltJDz93teq8.roa (hash: 7UANVEML/0vRWe4hxTYzTFGxeQ0U+2SuSQ0y29OV6fo=)
                          6: pU_eB5rSsUS6EVPfiP0TBGNtCcY.roa (hash: rx92LY3LSKSOciZBDpqfQO1j0HB6jcKddcqiSbdXBt8=)
                          7: wE23YjJB1-Znj8JXUfpOC2ZlGGs.crl (hash: To9c83113Ttj4EnpPugW07lfDjHT9fyrxyPprUTyqBo=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:a9:d4:a4:15:30:b8:9b:68:75:e4:32:99:98:c7:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c04db7623241d7e6678fc25751fa4e0b6665186b
        Validity
            Not Before: Jan 31 14:00:34 2025 GMT
            Not After : Feb  1 14:00:34 2025 GMT
        Subject: CN=5b9aedf7909e23426fc3a50e85a55abb016d3d5e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:26:e1:09:c7:69:00:f9:9a:98:ef:86:9e:9e:
                    21:e9:8b:1e:69:39:49:28:c6:a6:01:4b:f0:19:7e:
                    11:ce:92:0e:3e:6b:97:53:88:c4:47:26:09:d7:fb:
                    94:54:04:57:43:8d:a5:b1:d4:7e:5f:e9:d0:61:b7:
                    7d:5c:13:89:eb:9d:e7:80:d7:5c:a2:a4:0d:29:91:
                    a3:09:df:ef:30:a9:75:52:05:14:b1:15:e4:54:e5:
                    47:2a:2b:a6:c1:85:b4:db:c7:c8:fa:7e:2e:38:3a:
                    bd:90:4b:d2:01:70:c7:10:1e:c5:13:29:fb:e2:c8:
                    30:a3:f3:01:4b:eb:aa:c1:5f:8e:c2:7e:73:40:83:
                    41:66:0d:6f:ce:a3:da:6c:a1:3b:db:cd:ef:26:ff:
                    73:8e:e3:b6:81:3c:8c:fc:a8:01:04:62:e1:55:ee:
                    29:2b:93:15:92:ef:28:8c:db:b3:85:b0:8e:e3:a3:
                    c8:25:53:4c:49:f9:d5:d6:1d:d8:04:64:09:a5:5a:
                    03:a1:49:00:5f:ab:8e:c8:b3:a6:cd:55:8f:ff:49:
                    d9:91:ae:03:ff:25:93:91:13:8d:1d:7c:08:0b:4a:
                    c7:8c:99:b6:d9:0c:bc:bb:cd:b8:6a:09:52:d7:56:
                    ba:c7:d9:08:9c:0c:df:f5:1f:21:e9:0f:29:b6:20:
                    dd:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:9A:ED:F7:90:9E:23:42:6F:C3:A5:0E:85:A5:5A:BB:01:6D:3D:5E
            X509v3 Authority Key Identifier:
                keyid:C0:4D:B7:62:32:41:D7:E6:67:8F:C2:57:51:FA:4E:0B:66:65:18:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wE23YjJB1-Znj8JXUfpOC2ZlGGs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/6e874e-73fe-4dbb-b74c-0423f263f2cb/1/wE23YjJB1-Znj8JXUfpOC2ZlGGs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/6e874e-73fe-4dbb-b74c-0423f263f2cb/1/wE23YjJB1-Znj8JXUfpOC2ZlGGs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:02:8c:e8:b1:2d:17:a8:81:07:9f:10:56:56:7b:e6:a5:1d:
         1c:a2:21:5f:30:13:b7:ec:1e:dd:6e:27:21:6d:7e:e7:ef:a7:
         e3:2f:1d:da:98:2f:b0:a0:63:35:f7:e9:3e:fd:94:aa:ad:d2:
         af:ff:bb:ee:d1:70:aa:ff:d8:05:27:ad:34:75:a7:7c:4d:c6:
         32:57:c8:45:f0:5b:0b:fc:3e:3f:98:0a:83:17:a5:5b:b2:de:
         a4:68:f8:10:49:1b:1a:77:68:00:68:79:aa:25:a9:d9:ca:c1:
         60:8e:8d:98:1d:71:73:b3:47:5e:0b:f5:6c:38:56:e1:57:b1:
         46:65:5b:65:d4:5a:7a:40:7c:f9:f7:94:c6:a7:89:85:c5:f6:
         05:e3:79:11:86:b1:33:24:e3:a4:06:f1:51:4d:98:36:00:c3:
         64:4d:03:a8:4c:82:15:71:36:eb:c5:de:15:3b:11:22:27:d2:
         43:0d:ba:b7:34:d2:d6:05:88:1e:28:4e:0f:30:55:40:40:cb:
         a1:4d:71:e4:f2:04:98:b0:bc:af:2a:bd:6f:f7:32:fc:f1:46:
         32:de:50:bc:f5:19:d7:2b:fa:94:21:98:06:f7:2d:21:c3:54:
         9e:00:8d:c8:27:8b:19:ab:71:69:cd:a7:74:28:fd:89:1a:37:
         a7:b9:81:6b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8qdSkFTC4m2h15DKZmMeMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMwNGRiNzYyMzI0MWQ3ZTY2NzhmYzI1NzUxZmE0ZTBiNjY2
NTE4NmIwHhcNMjUwMTMxMTQwMDM0WhcNMjUwMjAxMTQwMDM0WjAzMTEwLwYDVQQD
Eyg1YjlhZWRmNzkwOWUyMzQyNmZjM2E1MGU4NWE1NWFiYjAxNmQzZDVlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvSbhCcdpAPmamO+Gnp4h6YseaTlJ
KMamAUvwGX4RzpIOPmuXU4jERyYJ1/uUVARXQ42lsdR+X+nQYbd9XBOJ653ngNdc
oqQNKZGjCd/vMKl1UgUUsRXkVOVHKiumwYW028fI+n4uODq9kEvSAXDHEB7FEyn7
4sgwo/MBS+uqwV+Own5zQINBZg1vzqPabKE7283vJv9zjuO2gTyM/KgBBGLhVe4p
K5MVku8ojNuzhbCO46PIJVNMSfnV1h3YBGQJpVoDoUkAX6uOyLOmzVWP/0nZka4D
/yWTkRONHXwIC0rHjJm22Qy8u824aglS11a6x9kInAzf9R8h6Q8ptiDd4QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFua7feQniNCb8OlDoWlWrsBbT1eMB8GA1UdIwQY
MBaAFMBNt2IyQdfmZ4/CV1H6TgtmZRhrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd0UyM1lqSkIxLVpuajhKWFVmcE9DMlpsR0dzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOC82ZTg3NGUtNzNmZS00ZGJiLWI3NGMt
MDQyM2YyNjNmMmNiLzEvd0UyM1lqSkIxLVpuajhKWFVmcE9DMlpsR0dzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOC82ZTg3NGUtNzNmZS00ZGJiLWI3NGMtMDQyM2YyNjNmMmNi
LzEvd0UyM1lqSkIxLVpuajhKWFVmcE9DMlpsR0dzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGwKM6LEt
F6iBB58QVlZ75qUdHKIhXzATt+we3W4nIW1+5++n4y8d2pgvsKBjNffpPv2Uqq3S
r/+77tFwqv/YBSetNHWnfE3GMlfIRfBbC/w+P5gKgxelW7LepGj4EEkbGndoAGh5
qiWp2crBYI6NmB1xc7NHXgv1bDhW4VexRmVbZdRaekB8+feUxqeJhcX2BeN5EYax
MyTjpAbxUU2YNgDDZE0DqEyCFXE268XeFTsRIifSQw26tzTS1gWIHihODzBVQEDL
oU1x5PIEmLC8ryq9b/cy/PFGMt5QvPUZ1yv6lCGYBvctIcNUngCNyCeLGatxac2n
dCj9iRo3p7mBaw==
-----END CERTIFICATE-----