Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/f0f5e3-6050-4e2d-a4ea-a4ea0a63f766/1/pcY3PqsZz0PdL0MRE5g4PuK60DA.mft
File:                     pcY3PqsZz0PdL0MRE5g4PuK60DA.mft (raw, json)
Hash identifier:          HkdrA5h2z+0oRZqqn4Wju2WA3FdUBzveb75F2qeM8Po=
Subject key identifier:   F7:8E:A0:00:A1:3F:53:33:24:1F:65:4F:1E:DF:B2:51:68:E9:B2:0A
Authority key identifier: A5:C6:37:3E:AB:19:CF:43:DD:2F:43:11:13:98:38:3E:E2:BA:D0:30
Certificate issuer:       /CN=a5c6373eab19cf43dd2f43111398383ee2bad030
Certificate serial:       0194BD4EBA0E401484F14CFD6AC09964548D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pcY3PqsZz0PdL0MRE5g4PuK60DA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e2/f0f5e3-6050-4e2d-a4ea-a4ea0a63f766/1/pcY3PqsZz0PdL0MRE5g4PuK60DA.mft
Manifest number:          0EE3
Signing time:             Fri 31 Jan 2025 17:00:40 +0000
Manifest this update:     Fri 31 Jan 2025 17:00:40 +0000
Manifest next update:     Sat 01 Feb 2025 17:00:40 +0000
Files and hashes:         1: IVs_hi0L8DU-XvjpZ3j52FBoeuA.roa (hash: gjbii66qiZGzea5anGixtq9DuuHhboIpMcO6QPFsj6s=)
                          2: S3XpEBxlerRtwSFaGLA6G44LRQI.roa (hash: Z/+jFc8Tb7annjDdHUmTXSmFMVDmPYF89/cdJ7u6K/A=)
                          3: SgFbVxQz_PfUqEkR2KpsWzBqv-I.roa (hash: JZQmoWcxoRLb9ag2bxJ9giCLXyREML88URiigrxBGlQ=)
                          4: VrU7ZjcTG9RIkuIvhPHDcadoKZM.roa (hash: g8P7wwNKLRxTvKsPwE4zpfRuDPifBy4qLKB2zlBcTlw=)
                          5: pcY3PqsZz0PdL0MRE5g4PuK60DA.crl (hash: FkHlcb6TZJpjU8+jiBILkd71ulmDc13zpwu6/gTghkE=)
                          6: rwgU2mlTS06e7YPqA2lYPO26aP0.roa (hash: w9oJA8hR7uQfiHK53Tj7B18Tkd/AVTn4HnDtFZKJyRA=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bd:4e:ba:0e:40:14:84:f1:4c:fd:6a:c0:99:64:54:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a5c6373eab19cf43dd2f43111398383ee2bad030
        Validity
            Not Before: Jan 31 17:00:40 2025 GMT
            Not After : Feb  1 17:00:40 2025 GMT
        Subject: CN=f78ea000a13f5333241f654f1edfb25168e9b20a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:61:ce:10:85:12:fc:6c:42:d5:f8:74:5b:94:
                    db:55:37:ac:66:4d:69:6e:00:2e:72:bb:67:c2:7b:
                    90:ea:db:bf:27:c6:3e:b2:4e:39:e1:5e:5a:10:6d:
                    6d:b7:6d:93:07:d5:88:23:44:55:02:88:db:8f:0a:
                    21:57:65:97:fa:d5:08:33:22:0b:fd:d0:39:e4:51:
                    a5:8d:d8:eb:6d:d8:2f:84:19:9d:13:5e:e6:6a:2d:
                    53:26:91:db:f1:b3:d9:7b:39:43:77:01:db:b9:2b:
                    12:1a:93:de:cd:4a:4f:34:2a:4a:88:60:65:27:5c:
                    a2:86:78:1a:74:d0:fd:56:d8:7a:32:e2:2b:00:91:
                    1e:ee:38:08:07:24:fc:f8:7e:81:1e:70:2c:87:a3:
                    01:11:e4:aa:aa:7d:f5:b0:8c:3c:04:8b:52:1f:8c:
                    d9:ef:1b:76:c6:27:e4:fb:42:10:29:b7:49:11:ba:
                    db:80:89:10:c5:f6:5f:1c:03:e1:f2:cb:a4:dc:42:
                    4d:27:11:6b:8f:6f:f7:a2:fa:89:73:84:d5:c5:da:
                    d0:a3:6a:09:71:2c:9c:d8:6f:18:1b:cb:68:9f:fb:
                    cc:f1:47:13:5b:62:98:6b:44:58:c8:24:e1:a4:4e:
                    ee:4d:53:c7:0e:aa:1b:b7:4f:f1:88:6a:cf:2d:72:
                    3f:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:8E:A0:00:A1:3F:53:33:24:1F:65:4F:1E:DF:B2:51:68:E9:B2:0A
            X509v3 Authority Key Identifier:
                keyid:A5:C6:37:3E:AB:19:CF:43:DD:2F:43:11:13:98:38:3E:E2:BA:D0:30

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pcY3PqsZz0PdL0MRE5g4PuK60DA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/f0f5e3-6050-4e2d-a4ea-a4ea0a63f766/1/pcY3PqsZz0PdL0MRE5g4PuK60DA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/f0f5e3-6050-4e2d-a4ea-a4ea0a63f766/1/pcY3PqsZz0PdL0MRE5g4PuK60DA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8e:54:bf:74:cb:a9:28:67:70:f7:87:27:85:c7:0f:35:67:73:
         be:65:7a:41:84:73:98:48:b4:33:3d:0b:51:94:cd:62:9a:4e:
         0a:04:50:1d:8a:ed:cb:a8:51:7e:d2:88:01:cd:cc:90:f7:99:
         26:78:74:52:6e:d8:2a:fc:73:5d:4b:bd:be:55:d7:ec:60:b8:
         cf:62:78:f1:74:44:44:e0:44:8b:b5:86:97:3b:47:b3:3b:d0:
         14:3c:cd:38:04:4d:4b:61:9d:35:fd:44:4d:87:21:45:a0:19:
         4d:2b:b3:9e:b9:71:e2:ef:28:3b:8d:84:b5:f4:b6:9d:eb:f7:
         ae:5f:4d:2a:2b:e8:39:1f:ce:1b:ca:b4:21:cf:3e:45:f5:ee:
         69:60:a2:74:cf:f4:ca:86:01:90:57:09:49:bf:9a:30:d5:2f:
         1c:fc:47:16:14:f2:61:bb:9d:cb:c6:2b:d9:52:59:78:f2:d4:
         8c:af:39:f0:c8:da:1d:be:aa:18:31:ce:91:05:1c:23:c8:ea:
         58:a1:f4:72:07:42:2d:bd:a7:2b:c6:3d:63:9c:9f:c8:51:03:
         9b:88:a8:7a:7d:15:7e:43:66:55:a8:b6:c8:8d:39:bd:48:56:
         ca:b5:88:00:9c:c4:00:70:bf:76:b8:a2:4a:f7:15:98:99:24:
         d6:7e:48:72
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9TroOQBSE8Uz9asCZZFSNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE1YzYzNzNlYWIxOWNmNDNkZDJmNDMxMTEzOTgzODNlZTJi
YWQwMzAwHhcNMjUwMTMxMTcwMDQwWhcNMjUwMjAxMTcwMDQwWjAzMTEwLwYDVQQD
EyhmNzhlYTAwMGExM2Y1MzMzMjQxZjY1NGYxZWRmYjI1MTY4ZTliMjBhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs2HOEIUS/GxC1fh0W5TbVTesZk1p
bgAucrtnwnuQ6tu/J8Y+sk454V5aEG1tt22TB9WII0RVAojbjwohV2WX+tUIMyIL
/dA55FGljdjrbdgvhBmdE17mai1TJpHb8bPZezlDdwHbuSsSGpPezUpPNCpKiGBl
J1yihngadND9Vth6MuIrAJEe7jgIByT8+H6BHnAsh6MBEeSqqn31sIw8BItSH4zZ
7xt2xifk+0IQKbdJEbrbgIkQxfZfHAPh8suk3EJNJxFrj2/3ovqJc4TVxdrQo2oJ
cSyc2G8YG8ton/vM8UcTW2KYa0RYyCThpE7uTVPHDqobt0/xiGrPLXI/2QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPeOoAChP1MzJB9lTx7fslFo6bIKMB8GA1UdIwQY
MBaAFKXGNz6rGc9D3S9DEROYOD7iutAwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcGNZM1Bxc1p6MFBkTDBNUkU1ZzRQdUs2MERBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi9mMGY1ZTMtNjA1MC00ZTJkLWE0ZWEt
YTRlYTBhNjNmNzY2LzEvcGNZM1Bxc1p6MFBkTDBNUkU1ZzRQdUs2MERBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMi9mMGY1ZTMtNjA1MC00ZTJkLWE0ZWEtYTRlYTBhNjNmNzY2
LzEvcGNZM1Bxc1p6MFBkTDBNUkU1ZzRQdUs2MERBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjlS/dMup
KGdw94cnhccPNWdzvmV6QYRzmEi0Mz0LUZTNYppOCgRQHYrty6hRftKIAc3MkPeZ
Jnh0Um7YKvxzXUu9vlXX7GC4z2J48XREROBEi7WGlztHszvQFDzNOARNS2GdNf1E
TYchRaAZTSuznrlx4u8oO42EtfS2nev3rl9NKivoOR/OG8q0Ic8+RfXuaWCidM/0
yoYBkFcJSb+aMNUvHPxHFhTyYbudy8Yr2VJZePLUjK858MjaHb6qGDHOkQUcI8jq
WKH0cgdCLb2nK8Y9Y5yfyFEDm4ioen0VfkNmVai2yI05vUhWyrWIAJzEAHC/drii
SvcVmJkk1n5Icg==
-----END CERTIFICATE-----