Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/83535a-e1bd-4fb7-9f09-7b7e976c8412/1/H6eVFn0tn7QglB8XKHvfPF7tjfk.mft
File:                     H6eVFn0tn7QglB8XKHvfPF7tjfk.mft (raw, json)
Hash identifier:          ZcIDOtg6PY1VNykJT3A8cFCU3yYyVX6XwCv6k4sVORU=
Subject key identifier:   42:E0:11:B0:D3:BB:20:23:C1:6A:E7:30:FE:76:DB:B6:28:CB:87:25
Authority key identifier: 1F:A7:95:16:7D:2D:9F:B4:20:94:1F:17:28:7B:DF:3C:5E:ED:8D:F9
Certificate issuer:       /CN=1fa795167d2d9fb420941f17287bdf3c5eed8df9
Certificate serial:       0194BD177E39FB169FFF546EFFBEC95CD50B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/H6eVFn0tn7QglB8XKHvfPF7tjfk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e8/83535a-e1bd-4fb7-9f09-7b7e976c8412/1/H6eVFn0tn7QglB8XKHvfPF7tjfk.mft
Manifest number:          0544
Signing time:             Fri 31 Jan 2025 16:00:20 +0000
Manifest this update:     Fri 31 Jan 2025 16:00:20 +0000
Manifest next update:     Sat 01 Feb 2025 16:00:20 +0000
Files and hashes:         1: 34L0qge2tNB4WEjnnevARD_mNUU.roa (hash: ry58BGExakUgGHZ3z3Fi8XcJ02SF1yHnFqs3N6sRqHc=)
                          2: 43gEJXLRZhBLeSI-aOiwsJo8t18.roa (hash: hJ2/LJzxG3xhi0jErGx6Rimn7Tgu+B52/B5v7PqA0Q4=)
                          3: FySTZF5XmiRgffP_0Q1bU_jIQpg.roa (hash: GbwThYD6w19HqYzAx38shdLTpkIXF4U5UQypl5TKy7s=)
                          4: H6eVFn0tn7QglB8XKHvfPF7tjfk.crl (hash: fu9bjOvbZCkz0Rl5hjUrc25aF2QsxMlfgzrOJAdQoRs=)
                          5: aSAbXtaRyXcPhRakK1aghIwRn3g.roa (hash: up2cOGYfGLooX0y47JfJVek/1Cnxd7U8E51loywLrVw=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bd:17:7e:39:fb:16:9f:ff:54:6e:ff:be:c9:5c:d5:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1fa795167d2d9fb420941f17287bdf3c5eed8df9
        Validity
            Not Before: Jan 31 16:00:20 2025 GMT
            Not After : Feb  1 16:00:20 2025 GMT
        Subject: CN=42e011b0d3bb2023c16ae730fe76dbb628cb8725
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:e0:86:3a:27:7e:33:e9:43:9f:d2:ec:71:36:
                    e3:30:aa:31:05:49:8c:3f:37:fc:3e:49:95:2d:4e:
                    07:18:a0:b2:df:ae:63:fd:17:8c:03:6a:96:f6:7d:
                    dc:cc:72:30:b4:4a:58:2a:09:a7:61:11:6b:da:47:
                    24:d8:d5:5e:22:14:92:a7:80:27:4e:01:ce:09:aa:
                    73:8d:8c:2e:4c:39:c7:4b:69:98:53:b4:5d:55:88:
                    4b:cc:0a:2f:7b:93:2d:bd:09:7b:a1:b6:77:ea:ed:
                    5b:f4:55:2f:64:1d:b3:ab:93:12:a5:f3:5e:33:5b:
                    57:97:54:75:fd:5e:d1:6a:43:bc:17:5c:7f:68:e7:
                    33:c6:e3:db:23:26:0f:d1:f5:18:9a:a0:11:e7:c7:
                    6e:27:42:50:b9:9f:ad:27:35:58:dc:de:cd:1b:ba:
                    c0:0c:f4:19:f9:02:6e:84:08:c5:9a:c2:e8:ad:46:
                    91:35:43:44:2c:5e:98:c4:4f:47:32:1b:5e:cf:38:
                    24:fe:3f:b1:32:c7:ce:ed:06:b1:b6:73:b6:56:51:
                    b8:5f:84:18:bf:cf:4e:f2:bc:b2:a9:df:76:27:0e:
                    01:07:8a:19:67:d7:bf:a8:d5:6b:3b:90:b9:ae:4e:
                    c9:88:08:5b:43:c1:e8:a0:6d:04:92:65:1e:66:be:
                    4f:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:E0:11:B0:D3:BB:20:23:C1:6A:E7:30:FE:76:DB:B6:28:CB:87:25
            X509v3 Authority Key Identifier:
                keyid:1F:A7:95:16:7D:2D:9F:B4:20:94:1F:17:28:7B:DF:3C:5E:ED:8D:F9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H6eVFn0tn7QglB8XKHvfPF7tjfk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/83535a-e1bd-4fb7-9f09-7b7e976c8412/1/H6eVFn0tn7QglB8XKHvfPF7tjfk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/83535a-e1bd-4fb7-9f09-7b7e976c8412/1/H6eVFn0tn7QglB8XKHvfPF7tjfk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:d2:04:05:70:16:54:47:a0:a9:c0:cf:29:bd:ef:7d:42:92:
         b8:62:a2:58:e2:a9:69:76:3d:2c:bd:19:19:38:22:27:9e:2f:
         cc:e0:0b:6d:b7:0f:0f:da:fb:2e:51:d6:56:3b:43:fb:09:23:
         8a:64:b8:e6:9b:7b:f0:a7:b3:80:8f:0e:07:e9:e4:e1:42:64:
         09:a7:b4:66:32:60:21:49:43:3f:15:4f:23:49:55:e7:9e:68:
         bd:15:5a:60:63:38:09:19:a7:d9:91:29:44:6c:f4:61:c5:2b:
         25:76:a3:74:a2:7e:d7:7b:6f:17:92:9f:dd:df:da:b9:f1:c1:
         a5:b6:4f:9f:00:6c:7c:2e:7f:b9:44:bc:fb:c3:76:4b:09:97:
         93:d3:5a:16:06:88:94:7e:97:ce:f9:7a:18:d9:5b:5c:b1:ef:
         50:e7:f0:28:2d:9b:52:22:b9:ac:8a:47:0e:81:06:c9:11:2a:
         e0:fd:32:b8:6b:66:b3:e1:a5:53:40:24:e8:3a:59:9c:cb:40:
         74:d9:d3:06:91:52:16:da:53:34:4d:ac:ed:d7:ee:cf:8f:a1:
         08:9f:f8:6e:7f:48:9a:28:ec:54:2c:03:62:ff:a9:85:1e:c6:
         90:22:7c:37:ab:d5:12:b5:52:cb:6f:7c:84:63:10:75:a9:67:
         36:9a:84:f0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9F345+xaf/1Ru/77JXNULMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFmYTc5NTE2N2QyZDlmYjQyMDk0MWYxNzI4N2JkZjNjNWVl
ZDhkZjkwHhcNMjUwMTMxMTYwMDIwWhcNMjUwMjAxMTYwMDIwWjAzMTEwLwYDVQQD
Eyg0MmUwMTFiMGQzYmIyMDIzYzE2YWU3MzBmZTc2ZGJiNjI4Y2I4NzI1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyeCGOid+M+lDn9LscTbjMKoxBUmM
Pzf8PkmVLU4HGKCy365j/ReMA2qW9n3czHIwtEpYKgmnYRFr2kck2NVeIhSSp4An
TgHOCapzjYwuTDnHS2mYU7RdVYhLzAove5MtvQl7obZ36u1b9FUvZB2zq5MSpfNe
M1tXl1R1/V7RakO8F1x/aOczxuPbIyYP0fUYmqAR58duJ0JQuZ+tJzVY3N7NG7rA
DPQZ+QJuhAjFmsLorUaRNUNELF6YxE9HMhtezzgk/j+xMsfO7QaxtnO2VlG4X4QY
v89O8ryyqd92Jw4BB4oZZ9e/qNVrO5C5rk7JiAhbQ8HooG0EkmUeZr5P/QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFELgEbDTuyAjwWrnMP5227Yoy4clMB8GA1UdIwQY
MBaAFB+nlRZ9LZ+0IJQfFyh73zxe7Y35MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSDZlVkZuMHRuN1FnbEI4WEtIdmZQRjd0amZrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOC84MzUzNWEtZTFiZC00ZmI3LTlmMDkt
N2I3ZTk3NmM4NDEyLzEvSDZlVkZuMHRuN1FnbEI4WEtIdmZQRjd0amZrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOC84MzUzNWEtZTFiZC00ZmI3LTlmMDktN2I3ZTk3NmM4NDEy
LzEvSDZlVkZuMHRuN1FnbEI4WEtIdmZQRjd0amZrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbtIEBXAW
VEegqcDPKb3vfUKSuGKiWOKpaXY9LL0ZGTgiJ54vzOALbbcPD9r7LlHWVjtD+wkj
imS45pt78KezgI8OB+nk4UJkCae0ZjJgIUlDPxVPI0lV555ovRVaYGM4CRmn2ZEp
RGz0YcUrJXajdKJ+13tvF5Kf3d/aufHBpbZPnwBsfC5/uUS8+8N2SwmXk9NaFgaI
lH6Xzvl6GNlbXLHvUOfwKC2bUiK5rIpHDoEGyREq4P0yuGtms+GlU0Ak6DpZnMtA
dNnTBpFSFtpTNE2s7dfuz4+hCJ/4bn9ImijsVCwDYv+phR7GkCJ8N6vVErVSy298
hGMQdalnNpqE8A==
-----END CERTIFICATE-----