Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/09d137-477b-4efe-a3d3-4b23956fbd86/1/250Zf7vuKh3MtPVXIqghDTEFsEI.mft
File:                     250Zf7vuKh3MtPVXIqghDTEFsEI.mft (raw, json)
Hash identifier:          58HFl09CxiT+zXjrGbio07FY7E9D0d4LRzS4oOrQ8h8=
Subject key identifier:   51:73:5B:C8:F0:4D:4E:31:87:D9:1F:B9:2A:9A:3F:BE:83:DC:1C:58
Authority key identifier: DB:9D:19:7F:BB:EE:2A:1D:CC:B4:F5:57:22:A8:21:0D:31:05:B0:42
Certificate issuer:       /CN=db9d197fbbee2a1dccb4f55722a8210d3105b042
Certificate serial:       0194BC3BF3A2EC87393A7CC8AAF0C7670013
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/250Zf7vuKh3MtPVXIqghDTEFsEI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ea/09d137-477b-4efe-a3d3-4b23956fbd86/1/250Zf7vuKh3MtPVXIqghDTEFsEI.mft
Manifest number:          0FF1
Signing time:             Fri 31 Jan 2025 12:00:33 +0000
Manifest this update:     Fri 31 Jan 2025 12:00:33 +0000
Manifest next update:     Sat 01 Feb 2025 12:00:33 +0000
Files and hashes:         1: 0c-KKappZ1t73aXjS8mz1x-xTGc.roa (hash: MAa3tSzCnjrh/og+z4XVJnuDQ4AqmSQvPQCYBTfEoDQ=)
                          2: 250Zf7vuKh3MtPVXIqghDTEFsEI.crl (hash: wScWeeGeAE8xWw2Z8qOl7TBSXbby0qwd6O39B/fWl7U=)
                          3: 3sv6NKDpba_DUykmu28n6vWbI8U.roa (hash: gUh8eARhI2X9S3x1fvxAhLVuOISp5wl4VqYYPGnDg8Y=)
                          4: 4rupNMtZnDN0QSWru1RNhLDuJIo.roa (hash: z4IbiN1+w7zdJy/d9hWZDYM0E9ZzQh9TzT+f2XEsa+o=)
                          5: E2YGCkvl1qJmLxaFsCR58I4gibo.roa (hash: xheLTw+nhNWSmWNkdWISArZADpVzS+Ca89hGltJJMno=)
                          6: Sp4iVd_pOq560eUzaVqvX_2Gqas.roa (hash: JgPqfPTZcwMnjOQsf/Q1+96TPKUck5H6ntnLpmTpKbM=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:3b:f3:a2:ec:87:39:3a:7c:c8:aa:f0:c7:67:00:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=db9d197fbbee2a1dccb4f55722a8210d3105b042
        Validity
            Not Before: Jan 31 12:00:33 2025 GMT
            Not After : Feb  1 12:00:33 2025 GMT
        Subject: CN=51735bc8f04d4e3187d91fb92a9a3fbe83dc1c58
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:13:82:20:24:56:44:24:8b:45:24:cb:ca:79:
                    dd:19:68:64:45:08:25:69:79:de:e3:e2:b7:c9:a4:
                    db:36:4e:74:ac:7a:f1:6f:e8:7f:0f:39:a7:f8:56:
                    38:32:a3:48:79:ef:c5:d7:6a:16:ec:fa:12:1f:bb:
                    c4:90:d1:3a:c0:b5:f1:c3:30:76:5c:9f:cb:d7:94:
                    64:fe:b2:69:c0:36:2b:9a:46:63:ab:fa:1d:ba:0f:
                    8e:0a:ba:87:56:97:a5:a6:d4:33:ca:37:f4:23:ac:
                    df:87:d3:c9:c2:12:d6:c4:6d:02:33:74:16:09:72:
                    31:2c:0b:ea:f0:65:63:fa:2c:7f:2a:3d:b2:9e:a4:
                    4d:63:9f:c7:ed:b1:cb:82:d6:a7:9a:7f:d4:ed:29:
                    3e:04:1c:86:f6:0c:ca:03:bb:3b:16:f2:1f:61:a2:
                    28:7a:81:1d:00:48:a7:3f:b6:f1:97:1f:94:8a:09:
                    c4:ee:f9:c3:7c:a7:bb:1c:66:44:99:3e:67:81:86:
                    a8:89:87:c8:26:49:4a:ba:ce:d3:e6:57:fc:cb:a2:
                    74:98:35:d8:2c:fe:6f:8b:a0:8b:45:f4:1b:65:8f:
                    a9:fc:1f:e0:61:4b:a1:b2:76:9b:ec:70:e2:bb:d8:
                    31:8e:fe:f0:22:7a:c4:8c:23:d4:ff:0b:dc:50:90:
                    9d:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:73:5B:C8:F0:4D:4E:31:87:D9:1F:B9:2A:9A:3F:BE:83:DC:1C:58
            X509v3 Authority Key Identifier:
                keyid:DB:9D:19:7F:BB:EE:2A:1D:CC:B4:F5:57:22:A8:21:0D:31:05:B0:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/250Zf7vuKh3MtPVXIqghDTEFsEI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/09d137-477b-4efe-a3d3-4b23956fbd86/1/250Zf7vuKh3MtPVXIqghDTEFsEI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/09d137-477b-4efe-a3d3-4b23956fbd86/1/250Zf7vuKh3MtPVXIqghDTEFsEI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a4:67:77:68:50:eb:b7:a5:36:af:61:95:df:f2:26:96:4c:68:
         c4:27:3f:3d:6e:74:a3:f5:a4:7f:c6:03:b9:26:16:7d:f1:c1:
         46:53:d2:d1:f2:7e:34:e8:88:10:62:e4:78:64:95:05:ae:10:
         9f:98:cc:6b:8c:48:89:2a:86:29:2b:6e:56:6f:8c:5b:59:5e:
         1d:1a:33:b8:3d:9c:7d:1e:f3:32:8a:c2:fb:b8:9c:42:07:06:
         0b:63:1d:fe:19:30:a2:d0:8c:1b:61:ae:c7:10:63:a4:4e:dc:
         45:8f:62:bc:e1:36:11:49:05:b2:7d:f3:3c:ee:51:74:c1:09:
         34:91:b4:0a:cd:6c:58:05:90:81:18:37:a5:a3:bf:03:96:f1:
         c3:c9:36:fa:3f:db:3d:63:c7:27:bb:11:d3:1e:1d:48:5b:1a:
         57:e6:46:65:2e:0b:2d:6d:a6:35:1e:6b:b2:6f:76:e9:53:e0:
         26:70:59:50:90:d8:6a:b5:1b:45:93:00:c2:2b:a4:2e:8f:3d:
         f7:a5:67:9c:91:20:ac:09:c6:9d:bc:c6:e5:49:ea:b3:ad:7f:
         bd:52:0a:25:f9:5c:ac:ad:6c:79:74:d2:71:39:8a:51:30:be:
         5f:e2:b8:1e:c4:83:c2:96:6c:ce:7d:27:69:04:a5:de:6f:94:
         96:a9:0b:fa
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8O/Oi7Ic5OnzIqvDHZwATMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRiOWQxOTdmYmJlZTJhMWRjY2I0ZjU1NzIyYTgyMTBkMzEw
NWIwNDIwHhcNMjUwMTMxMTIwMDMzWhcNMjUwMjAxMTIwMDMzWjAzMTEwLwYDVQQD
Eyg1MTczNWJjOGYwNGQ0ZTMxODdkOTFmYjkyYTlhM2ZiZTgzZGMxYzU4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArROCICRWRCSLRSTLynndGWhkRQgl
aXne4+K3yaTbNk50rHrxb+h/Dzmn+FY4MqNIee/F12oW7PoSH7vEkNE6wLXxwzB2
XJ/L15Rk/rJpwDYrmkZjq/odug+OCrqHVpelptQzyjf0I6zfh9PJwhLWxG0CM3QW
CXIxLAvq8GVj+ix/Kj2ynqRNY5/H7bHLgtanmn/U7Sk+BByG9gzKA7s7FvIfYaIo
eoEdAEinP7bxlx+UignE7vnDfKe7HGZEmT5ngYaoiYfIJklKus7T5lf8y6J0mDXY
LP5vi6CLRfQbZY+p/B/gYUuhsnab7HDiu9gxjv7wInrEjCPU/wvcUJCdMwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFFzW8jwTU4xh9kfuSqaP76D3BxYMB8GA1UdIwQY
MBaAFNudGX+77iodzLT1VyKoIQ0xBbBCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMjUwWmY3dnVLaDNNdFBWWElxZ2hEVEVGc0VJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYS8wOWQxMzctNDc3Yi00ZWZlLWEzZDMt
NGIyMzk1NmZiZDg2LzEvMjUwWmY3dnVLaDNNdFBWWElxZ2hEVEVGc0VJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYS8wOWQxMzctNDc3Yi00ZWZlLWEzZDMtNGIyMzk1NmZiZDg2
LzEvMjUwWmY3dnVLaDNNdFBWWElxZ2hEVEVGc0VJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApGd3aFDr
t6U2r2GV3/ImlkxoxCc/PW50o/Wkf8YDuSYWffHBRlPS0fJ+NOiIEGLkeGSVBa4Q
n5jMa4xIiSqGKStuVm+MW1leHRozuD2cfR7zMorC+7icQgcGC2Md/hkwotCMG2Gu
xxBjpE7cRY9ivOE2EUkFsn3zPO5RdMEJNJG0Cs1sWAWQgRg3paO/A5bxw8k2+j/b
PWPHJ7sR0x4dSFsaV+ZGZS4LLW2mNR5rsm926VPgJnBZUJDYarUbRZMAwiukLo89
96VnnJEgrAnGnbzG5Unqs61/vVIKJflcrK1seXTScTmKUTC+X+K4HsSDwpZszn0n
aQSl3m+UlqkL+g==
-----END CERTIFICATE-----