Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/2b4934-4ea2-45c1-ae07-d45ab7df2de1/1/deBbwhsqbxAzcR_8pkkcbDDOWko.mft
File:                     deBbwhsqbxAzcR_8pkkcbDDOWko.mft (raw, json)
Hash identifier:          2Xu9MIz6IdNlVg56e77gfuHeLeo+29cX/JslptBeESg=
Subject key identifier:   80:7A:BD:14:69:A4:59:79:5C:05:6B:6F:0D:CB:BE:6A:5F:2E:BE:68
Authority key identifier: 75:E0:5B:C2:1B:2A:6F:10:33:71:1F:FC:A6:49:1C:6C:30:CE:5A:4A
Certificate issuer:       /CN=75e05bc21b2a6f1033711ffca6491c6c30ce5a4a
Certificate serial:       0194BC050D35E330AA5D4B3C3E2F48C9D9E2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/deBbwhsqbxAzcR_8pkkcbDDOWko.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e2/2b4934-4ea2-45c1-ae07-d45ab7df2de1/1/deBbwhsqbxAzcR_8pkkcbDDOWko.mft
Manifest number:          1434
Signing time:             Fri 31 Jan 2025 11:00:35 +0000
Manifest this update:     Fri 31 Jan 2025 11:00:35 +0000
Manifest next update:     Sat 01 Feb 2025 11:00:35 +0000
Files and hashes:         1: UJAjdPQrd8bP5k3ucoOuD61_MT8.roa (hash: ugk9F1DdJco8dK5O++Cvmb5dblVQF4BV4yb8wudILQ0=)
                          2: WkmHxNpKrmAzpx_FXkIaqhpVbpg.roa (hash: +AeFew5fsUdx9Fz3OOuJ7ZKCrATyNvcvfW0fCxc+tvg=)
                          3: deBbwhsqbxAzcR_8pkkcbDDOWko.crl (hash: K9eyuET8cE/opkqkynmk3y4zYBmHGeU9i7HTARtf9tU=)
                          4: imLX_iKSVxIt55dbqRMupQNb-6o.roa (hash: OviNWocn0RhLkHHteMWnzyr2rnMguzIPeb1JC9urBc0=)
                          5: iwdwl1HuN2YXg9VICxrnQ2L8T_o.roa (hash: tLBry0LnEHMR25EGcYFuNe2nISzjy4sXmppIiMI5cVo=)
                          6: ju7dlcjXTVtzrpg-cXuTrngFgtw.roa (hash: Odms44ovs7hGv3jdYt/7+590lUec8LGS69mCjmZU8q4=)
                          7: rsxSpj9moP8LtPzNvFBSE3jnhTY.roa (hash: EI5toUib0yn2k83FMVjkqamZ8A/+xIBPYiOu2bZVLHc=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:05:0d:35:e3:30:aa:5d:4b:3c:3e:2f:48:c9:d9:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=75e05bc21b2a6f1033711ffca6491c6c30ce5a4a
        Validity
            Not Before: Jan 31 11:00:35 2025 GMT
            Not After : Feb  1 11:00:35 2025 GMT
        Subject: CN=807abd1469a459795c056b6f0dcbbe6a5f2ebe68
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:61:2c:c4:80:f9:78:c3:52:00:33:0b:fb:52:
                    2d:04:cc:c3:6e:03:ee:a5:6c:b5:6a:30:c7:e9:1d:
                    a7:f1:81:1c:09:d0:a1:75:cc:0a:52:63:d4:70:f2:
                    6d:7c:b7:6b:f7:19:7a:32:07:ca:bd:6f:fa:8f:88:
                    6a:e8:77:b6:62:6e:e2:b7:34:d1:2f:0a:fc:15:cd:
                    7b:90:da:4b:08:85:b0:a4:ab:05:32:5d:8d:2d:6e:
                    98:5c:43:9c:c8:4f:98:cf:cb:fb:ed:c8:15:c8:a5:
                    d1:54:ba:be:3e:2e:6e:53:a1:18:74:d2:83:bb:e4:
                    bc:2c:b9:c6:0d:93:98:d3:f1:a5:db:4f:c1:df:54:
                    68:66:75:94:e0:60:6d:77:f6:bd:40:9d:b9:a1:f0:
                    15:6b:fe:eb:19:04:fd:54:a5:bc:0d:93:02:fd:c1:
                    53:7b:41:a1:6b:07:67:16:bb:22:35:bb:4c:bf:af:
                    09:34:19:ba:16:d9:73:91:4b:54:5f:57:6d:fa:04:
                    0a:d0:15:5a:ad:9b:cb:da:c9:aa:80:e5:c4:1b:bf:
                    0d:92:49:28:90:88:44:34:3d:4f:d5:a7:03:2c:82:
                    f3:a4:3b:32:7a:4a:5c:4c:95:e4:25:f6:25:95:5c:
                    4a:96:88:50:dd:ca:bf:d4:e9:67:ff:67:7c:0e:31:
                    09:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:7A:BD:14:69:A4:59:79:5C:05:6B:6F:0D:CB:BE:6A:5F:2E:BE:68
            X509v3 Authority Key Identifier:
                keyid:75:E0:5B:C2:1B:2A:6F:10:33:71:1F:FC:A6:49:1C:6C:30:CE:5A:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/deBbwhsqbxAzcR_8pkkcbDDOWko.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/2b4934-4ea2-45c1-ae07-d45ab7df2de1/1/deBbwhsqbxAzcR_8pkkcbDDOWko.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/2b4934-4ea2-45c1-ae07-d45ab7df2de1/1/deBbwhsqbxAzcR_8pkkcbDDOWko.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ad:e4:42:ef:6a:40:5a:3f:e6:a6:7b:ee:37:89:d7:60:32:ab:
         8c:69:58:ac:14:59:c4:b0:e4:0a:2e:ba:4f:7f:17:14:e2:43:
         00:60:ec:ec:3a:de:92:42:6a:29:4e:91:7b:02:b2:2d:3a:d4:
         2f:43:96:95:bf:ca:43:38:7e:bc:0c:d1:e1:8d:c2:41:dc:73:
         dd:a7:ac:3e:9a:03:15:69:4f:4a:65:5a:ff:56:27:55:09:7d:
         84:8e:3c:e3:51:78:d7:e8:6f:7a:7c:9d:54:e2:b8:92:e0:26:
         6c:fb:50:86:55:3b:8f:3d:00:9a:29:ce:fb:61:db:74:ed:30:
         c0:cd:68:c7:22:26:7f:10:cd:f7:14:e0:ed:3c:2c:67:a0:64:
         c2:bf:fd:a3:a6:b5:99:1e:6e:c3:19:f9:13:ff:83:d6:89:fe:
         43:d7:e6:c8:a8:45:16:2d:7a:fb:1a:15:79:ff:1e:f0:ff:1a:
         d8:ec:47:e2:46:59:07:f7:5e:7f:0b:08:db:91:de:ca:cf:cf:
         7c:ca:45:93:df:ec:c1:73:66:d7:6d:4a:12:4c:f8:51:cd:9c:
         ed:d4:95:4d:b0:17:d0:de:fa:c1:ea:62:f4:b8:bd:9c:d8:36:
         ae:69:ea:0a:c2:fe:54:6e:96:29:ac:09:a5:bf:4c:0d:f7:1d:
         18:9c:66:0a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8BQ014zCqXUs8Pi9IydniMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc1ZTA1YmMyMWIyYTZmMTAzMzcxMWZmY2E2NDkxYzZjMzBj
ZTVhNGEwHhcNMjUwMTMxMTEwMDM1WhcNMjUwMjAxMTEwMDM1WjAzMTEwLwYDVQQD
Eyg4MDdhYmQxNDY5YTQ1OTc5NWMwNTZiNmYwZGNiYmU2YTVmMmViZTY4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy2EsxID5eMNSADML+1ItBMzDbgPu
pWy1ajDH6R2n8YEcCdChdcwKUmPUcPJtfLdr9xl6MgfKvW/6j4hq6He2Ym7itzTR
Lwr8Fc17kNpLCIWwpKsFMl2NLW6YXEOcyE+Yz8v77cgVyKXRVLq+Pi5uU6EYdNKD
u+S8LLnGDZOY0/Gl20/B31RoZnWU4GBtd/a9QJ25ofAVa/7rGQT9VKW8DZMC/cFT
e0GhawdnFrsiNbtMv68JNBm6FtlzkUtUX1dt+gQK0BVarZvL2smqgOXEG78Nkkko
kIhEND1P1acDLILzpDsyekpcTJXkJfYllVxKlohQ3cq/1Oln/2d8DjEJ1QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIB6vRRppFl5XAVrbw3LvmpfLr5oMB8GA1UdIwQY
MBaAFHXgW8IbKm8QM3Ef/KZJHGwwzlpKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZGVCYndoc3FieEF6Y1JfOHBra2NiRERPV2tvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi8yYjQ5MzQtNGVhMi00NWMxLWFlMDct
ZDQ1YWI3ZGYyZGUxLzEvZGVCYndoc3FieEF6Y1JfOHBra2NiRERPV2tvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMi8yYjQ5MzQtNGVhMi00NWMxLWFlMDctZDQ1YWI3ZGYyZGUx
LzEvZGVCYndoc3FieEF6Y1JfOHBra2NiRERPV2tvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAreRC72pA
Wj/mpnvuN4nXYDKrjGlYrBRZxLDkCi66T38XFOJDAGDs7DrekkJqKU6RewKyLTrU
L0OWlb/KQzh+vAzR4Y3CQdxz3aesPpoDFWlPSmVa/1YnVQl9hI4841F41+hvenyd
VOK4kuAmbPtQhlU7jz0AminO+2HbdO0wwM1oxyImfxDN9xTg7TwsZ6Bkwr/9o6a1
mR5uwxn5E/+D1on+Q9fmyKhFFi16+xoVef8e8P8a2OxH4kZZB/defwsI25Heys/P
fMpFk9/swXNm121KEkz4Uc2c7dSVTbAX0N76wepi9Li9nNg2rmnqCsL+VG6WKawJ
pb9MDfcdGJxmCg==
-----END CERTIFICATE-----