Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/cf9cd6-e717-4dda-82ef-6dfe0f7d53bd/1/ERJUBMbdRy8QAe2f_fcmdirHcB0.mft
File:                     ERJUBMbdRy8QAe2f_fcmdirHcB0.mft (raw, json)
Hash identifier:          DLKdbZ8Y9tj3f0MTigMgmEaCdz9ZsooOzsBIYla93yA=
Subject key identifier:   8B:11:80:28:A5:BC:98:FA:83:9B:CF:D2:74:66:F6:B3:1C:AF:F8:C6
Authority key identifier: 11:12:54:04:C6:DD:47:2F:10:01:ED:9F:FD:F7:26:76:2A:C7:70:1D
Certificate issuer:       /CN=11125404c6dd472f1001ed9ffdf726762ac7701d
Certificate serial:       0194BD8532D60B8156F6B60A5BC9F6C021D1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ERJUBMbdRy8QAe2f_fcmdirHcB0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e2/cf9cd6-e717-4dda-82ef-6dfe0f7d53bd/1/ERJUBMbdRy8QAe2f_fcmdirHcB0.mft
Manifest number:          6E
Signing time:             Fri 31 Jan 2025 18:00:10 +0000
Manifest this update:     Fri 31 Jan 2025 18:00:10 +0000
Manifest next update:     Sat 01 Feb 2025 18:00:10 +0000
Files and hashes:         1: 7dcli4xVMUWvgQbFQeWeKq9zhiU.roa (hash: QOei2HTvqJoevZqPdJP9SridnGWvSVOTd/8fOeClw9s=)
                          2: ERJUBMbdRy8QAe2f_fcmdirHcB0.crl (hash: VGZceWq/IkORuBQFAiKe9+f49RaBadwyqNT1kqLpgvo=)
                          3: FRnz626bdZUi5dlnogDmmaKmtDw.roa (hash: KOMP72ozcqmiyzHqhYqDx7aKQMM+4lcWHZNxZP25854=)
                          4: RCUtTKBPBoSKR2wwa8B0W47XWEM.roa (hash: AEJlL4bhsHAgCbizEJxDPTW1T7XXa+3+vQvB/un6vPo=)
                          5: ZC089-t1OsXy6_xB9kNC_Q9cSQA.roa (hash: cCDSZAzCOsmACqoHFg30WYnjU+FYSMU7OYG7Sk6Hgsk=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bd:85:32:d6:0b:81:56:f6:b6:0a:5b:c9:f6:c0:21:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11125404c6dd472f1001ed9ffdf726762ac7701d
        Validity
            Not Before: Jan 31 18:00:10 2025 GMT
            Not After : Feb  1 18:00:10 2025 GMT
        Subject: CN=8b118028a5bc98fa839bcfd27466f6b31caff8c6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:9a:8d:46:30:2a:f2:6e:da:62:37:9f:df:ef:
                    c2:5f:5e:0e:b7:30:67:be:71:66:3f:2f:8a:c3:8f:
                    c2:86:60:98:49:a3:98:a1:20:e4:88:2c:1f:d8:c7:
                    74:ca:24:ad:c2:5a:f9:c8:6f:64:e1:a2:38:89:af:
                    9c:df:89:1c:c8:72:2c:54:1a:7b:ff:ff:66:ce:d9:
                    c6:e2:48:6f:d4:6a:f7:6c:22:11:d3:a6:4e:4d:b6:
                    51:32:81:d3:b1:1a:46:48:24:0f:54:e0:a9:3d:4e:
                    20:65:6b:1b:f0:92:b9:0b:1f:43:8b:9e:4d:13:70:
                    cd:88:07:82:8b:73:5c:03:3f:b6:ff:51:09:38:fc:
                    93:f4:7e:e9:7f:bc:f9:1c:6d:0a:02:bd:bf:26:d6:
                    b1:c0:b7:b0:40:df:c8:28:df:33:34:d1:04:16:cd:
                    3f:0a:a4:b7:34:ba:28:f0:98:4a:ff:d6:2b:ae:79:
                    f7:e6:c8:f8:6e:23:0d:2c:c3:c0:9f:4b:28:b1:a4:
                    d8:e5:5f:0b:dd:7f:b0:ec:7b:40:1b:cb:cf:88:12:
                    6c:45:16:e9:bb:61:9f:98:61:b6:62:71:51:68:a9:
                    ce:50:69:8a:e2:5a:4e:8c:0c:f0:7e:83:85:56:8e:
                    33:ac:9e:36:96:65:41:88:c2:e6:90:eb:76:34:bf:
                    90:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:11:80:28:A5:BC:98:FA:83:9B:CF:D2:74:66:F6:B3:1C:AF:F8:C6
            X509v3 Authority Key Identifier:
                keyid:11:12:54:04:C6:DD:47:2F:10:01:ED:9F:FD:F7:26:76:2A:C7:70:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ERJUBMbdRy8QAe2f_fcmdirHcB0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/cf9cd6-e717-4dda-82ef-6dfe0f7d53bd/1/ERJUBMbdRy8QAe2f_fcmdirHcB0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/cf9cd6-e717-4dda-82ef-6dfe0f7d53bd/1/ERJUBMbdRy8QAe2f_fcmdirHcB0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:4a:88:12:d1:12:a3:bf:60:78:f9:52:d9:22:97:38:cc:73:
         0d:1c:a0:25:4a:de:4f:59:d5:33:37:b1:ac:fe:17:c9:be:a6:
         d5:0c:e3:66:c9:d0:8e:d7:25:61:62:5e:7e:95:19:32:e5:65:
         d2:49:e0:d8:e8:33:62:b9:44:11:fa:08:c3:56:ef:41:e6:fb:
         9d:7e:ef:95:6a:46:88:e7:0f:26:3a:39:38:bc:cd:70:8a:cd:
         a8:6e:59:42:73:2a:4f:ab:7f:81:9b:8f:cb:df:28:d5:2f:93:
         92:9f:99:22:b0:c8:ff:d3:f5:e8:f4:e1:fe:71:1d:0c:e9:28:
         63:55:e7:63:e5:5d:62:c6:28:a4:0e:14:6a:62:00:5e:e3:8e:
         25:1a:15:60:6a:01:5f:eb:ee:c8:57:8a:e7:f2:23:c8:93:4f:
         8f:a1:b8:52:44:ac:b3:77:66:42:ca:a3:c6:74:b8:72:a2:e8:
         97:fe:1b:14:c0:f6:62:65:fa:39:75:c4:1e:d1:ad:29:12:8b:
         a2:11:a9:dd:e3:f3:14:28:dd:79:88:33:86:eb:e2:2f:08:ee:
         01:c7:e8:b1:bf:83:69:f3:9e:11:f6:ae:cd:6f:64:26:57:b8:
         79:95:e0:e5:03:18:cd:ec:48:fe:c0:f0:7a:86:3f:95:d9:c1:
         69:80:29:48
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9hTLWC4FW9rYKW8n2wCHRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDExMTI1NDA0YzZkZDQ3MmYxMDAxZWQ5ZmZkZjcyNjc2MmFj
NzcwMWQwHhcNMjUwMTMxMTgwMDEwWhcNMjUwMjAxMTgwMDEwWjAzMTEwLwYDVQQD
Eyg4YjExODAyOGE1YmM5OGZhODM5YmNmZDI3NDY2ZjZiMzFjYWZmOGM2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsZqNRjAq8m7aYjef3+/CX14OtzBn
vnFmPy+Kw4/ChmCYSaOYoSDkiCwf2Md0yiStwlr5yG9k4aI4ia+c34kcyHIsVBp7
//9mztnG4khv1Gr3bCIR06ZOTbZRMoHTsRpGSCQPVOCpPU4gZWsb8JK5Cx9Di55N
E3DNiAeCi3NcAz+2/1EJOPyT9H7pf7z5HG0KAr2/JtaxwLewQN/IKN8zNNEEFs0/
CqS3NLoo8JhK/9Yrrnn35sj4biMNLMPAn0sosaTY5V8L3X+w7HtAG8vPiBJsRRbp
u2GfmGG2YnFRaKnOUGmK4lpOjAzwfoOFVo4zrJ42lmVBiMLmkOt2NL+QywIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIsRgCilvJj6g5vP0nRm9rMcr/jGMB8GA1UdIwQY
MBaAFBESVATG3UcvEAHtn/33JnYqx3AdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRVJKVUJNYmRSeThRQWUyZl9mY21kaXJIY0IwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi9jZjljZDYtZTcxNy00ZGRhLTgyZWYt
NmRmZTBmN2Q1M2JkLzEvRVJKVUJNYmRSeThRQWUyZl9mY21kaXJIY0IwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMi9jZjljZDYtZTcxNy00ZGRhLTgyZWYtNmRmZTBmN2Q1M2Jk
LzEvRVJKVUJNYmRSeThRQWUyZl9mY21kaXJIY0IwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhUqIEtES
o79gePlS2SKXOMxzDRygJUreT1nVMzexrP4Xyb6m1QzjZsnQjtclYWJefpUZMuVl
0kng2OgzYrlEEfoIw1bvQeb7nX7vlWpGiOcPJjo5OLzNcIrNqG5ZQnMqT6t/gZuP
y98o1S+Tkp+ZIrDI/9P16PTh/nEdDOkoY1XnY+VdYsYopA4UamIAXuOOJRoVYGoB
X+vuyFeK5/IjyJNPj6G4UkSss3dmQsqjxnS4cqLol/4bFMD2YmX6OXXEHtGtKRKL
ohGp3ePzFCjdeYgzhuviLwjuAcfosb+DafOeEfauzW9kJle4eZXg5QMYzexI/sDw
eoY/ldnBaYApSA==
-----END CERTIFICATE-----