Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/457e13-41d3-40ef-b572-9e895d0ef8d2/1/SYbHOZTQLZH8l9kW6YCabZgeaxc.mft
File:                     SYbHOZTQLZH8l9kW6YCabZgeaxc.mft (raw, json)
Hash identifier:          fxBS0qg8uBYfnz1yIK6mDnEf/3orJA67k3dKZ84rbQg=
Subject key identifier:   C5:1F:68:77:E3:88:BB:9B:CD:99:C1:31:5E:FB:0A:ED:F3:13:51:C1
Authority key identifier: 49:86:C7:39:94:D0:2D:91:FC:97:D9:16:E9:80:9A:6D:98:1E:6B:17
Certificate issuer:       /CN=4986c73994d02d91fc97d916e9809a6d981e6b17
Certificate serial:       0194BD85227DFA31BBA8188344947C440FBA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SYbHOZTQLZH8l9kW6YCabZgeaxc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ea/457e13-41d3-40ef-b572-9e895d0ef8d2/1/SYbHOZTQLZH8l9kW6YCabZgeaxc.mft
Manifest number:          148B
Signing time:             Fri 31 Jan 2025 18:00:06 +0000
Manifest this update:     Fri 31 Jan 2025 18:00:06 +0000
Manifest next update:     Sat 01 Feb 2025 18:00:06 +0000
Files and hashes:         1: 0bnoilJqdREsxptDb-ivl7D9RO8.roa (hash: xwj9p29IkVHnJneRSxNDQqnx9KWrH7LG11fEPkl1kbA=)
                          2: Bg93JFwINWxdkawOyHY8qWmPBDQ.roa (hash: X8+NWj7+BvAd/saRT6xxiZBBeHuHSgVwSstTt2jZPB8=)
                          3: MtzNm3AFaiQ9hwZitYp07ne4ByI.roa (hash: RnaPmJCIZPKxOjqc9sF1aBMH5/cdwTLmLsfA5zpCvRw=)
                          4: SYbHOZTQLZH8l9kW6YCabZgeaxc.crl (hash: bX0buVxf0yqnWVEJxfg23MdJAaZd2s9fdg9yZgdD5WI=)
                          5: dEkWV8xPj6ZjKfgx5t3dIacQr1A.roa (hash: ZOk1wKX5K0Mx4fspQclTvx+3kOne5shTmWgvCBY9O/Q=)
                          6: jCGPrsfu_kkLCWd9SLSh8k9RCDY.roa (hash: nJWJVfdnaxgnwtEwCA2dV6/d7vihHjQfau3NCe9AO80=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bd:85:22:7d:fa:31:bb:a8:18:83:44:94:7c:44:0f:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4986c73994d02d91fc97d916e9809a6d981e6b17
        Validity
            Not Before: Jan 31 18:00:06 2025 GMT
            Not After : Feb  1 18:00:06 2025 GMT
        Subject: CN=c51f6877e388bb9bcd99c1315efb0aedf31351c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:eb:1b:93:66:72:7b:be:1b:fa:89:59:c6:28:
                    32:c6:e7:d1:01:6f:97:72:d2:5c:25:38:08:e8:30:
                    9a:76:55:8e:41:2c:80:48:3f:f3:a0:be:77:97:d0:
                    2d:34:f8:bd:b1:f6:a0:15:ac:9d:ca:de:97:2f:2d:
                    44:29:8d:23:39:15:28:65:da:fe:18:21:95:2a:3a:
                    5d:f4:c3:88:a8:d8:e0:ea:c4:2f:e0:3f:78:59:28:
                    fe:f4:34:ff:7b:a5:36:c0:f8:96:aa:32:e8:8f:43:
                    71:8e:00:14:23:9b:6d:0b:e0:5e:b6:79:d6:d6:63:
                    4d:5a:50:10:63:6c:7b:2f:4d:b7:82:9c:31:2a:1f:
                    da:e3:96:ca:8a:34:08:10:1e:d2:98:56:26:e5:63:
                    f6:96:83:50:bd:47:8d:5f:5f:f0:af:2b:d9:56:aa:
                    a7:74:0b:60:f5:01:fa:ad:99:b5:8a:9c:f9:8e:ed:
                    b0:79:9c:98:c5:11:83:e0:7c:ff:f9:ae:18:54:56:
                    f3:87:d2:1a:0f:88:d8:8f:2c:fd:69:80:68:2e:ef:
                    ac:a2:4d:20:89:c9:3e:f2:40:d1:67:de:d5:d2:3d:
                    3c:d2:e7:02:5b:f6:8d:23:9d:a3:20:d6:25:6c:81:
                    7c:38:e2:bd:94:d1:88:be:32:ef:cb:d4:26:a8:0e:
                    bd:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:1F:68:77:E3:88:BB:9B:CD:99:C1:31:5E:FB:0A:ED:F3:13:51:C1
            X509v3 Authority Key Identifier:
                keyid:49:86:C7:39:94:D0:2D:91:FC:97:D9:16:E9:80:9A:6D:98:1E:6B:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SYbHOZTQLZH8l9kW6YCabZgeaxc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/457e13-41d3-40ef-b572-9e895d0ef8d2/1/SYbHOZTQLZH8l9kW6YCabZgeaxc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/457e13-41d3-40ef-b572-9e895d0ef8d2/1/SYbHOZTQLZH8l9kW6YCabZgeaxc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:f4:b4:24:59:bc:2d:25:5c:99:05:1f:7f:25:f3:13:92:bb:
         cd:d6:83:8f:20:9a:98:e5:36:81:65:68:8f:2d:8b:28:78:4f:
         e9:ec:0a:c6:70:8d:94:55:0a:d0:ec:d0:e3:1b:91:c9:ba:89:
         d8:f6:02:19:52:30:99:4b:13:96:34:3a:d9:23:c8:23:94:a3:
         d1:15:0a:16:72:11:1a:0c:03:9e:35:6e:8a:83:30:53:be:e4:
         61:14:c1:1f:a2:ab:74:be:f5:fc:24:b7:86:6b:1e:b2:ed:07:
         11:de:44:bf:20:11:c6:87:67:fb:f2:a9:0e:20:68:08:2c:b2:
         62:8b:7b:bf:ce:fc:4a:f6:34:03:16:65:0e:27:0d:a5:02:76:
         cc:53:34:cc:12:fe:17:d9:46:9d:64:a5:c0:23:32:53:6a:ac:
         dc:44:c5:a8:6b:60:7d:88:a5:60:36:e2:3a:4b:b7:51:a6:d1:
         e0:de:bc:64:4d:fc:55:10:c8:3d:a7:05:10:38:e7:1f:e1:0e:
         76:04:76:4b:3d:9b:68:4f:67:7b:0f:16:60:04:40:15:dc:c0:
         28:10:74:56:90:e8:a7:84:0e:2b:36:f3:bb:d5:80:3c:ee:2e:
         af:e2:2c:a2:f3:af:62:fc:a4:c7:b2:7c:96:fa:d5:8e:06:f4:
         3f:46:1a:f3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9hSJ9+jG7qBiDRJR8RA+6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ5ODZjNzM5OTRkMDJkOTFmYzk3ZDkxNmU5ODA5YTZkOTgx
ZTZiMTcwHhcNMjUwMTMxMTgwMDA2WhcNMjUwMjAxMTgwMDA2WjAzMTEwLwYDVQQD
EyhjNTFmNjg3N2UzODhiYjliY2Q5OWMxMzE1ZWZiMGFlZGYzMTM1MWMxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvesbk2Zye74b+olZxigyxufRAW+X
ctJcJTgI6DCadlWOQSyASD/zoL53l9AtNPi9sfagFaydyt6XLy1EKY0jORUoZdr+
GCGVKjpd9MOIqNjg6sQv4D94WSj+9DT/e6U2wPiWqjLoj0NxjgAUI5ttC+BetnnW
1mNNWlAQY2x7L023gpwxKh/a45bKijQIEB7SmFYm5WP2loNQvUeNX1/wryvZVqqn
dAtg9QH6rZm1ipz5ju2weZyYxRGD4Hz/+a4YVFbzh9IaD4jYjyz9aYBoLu+sok0g
ick+8kDRZ97V0j080ucCW/aNI52jINYlbIF8OOK9lNGIvjLvy9QmqA69EQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMUfaHfjiLubzZnBMV77Cu3zE1HBMB8GA1UdIwQY
MBaAFEmGxzmU0C2R/JfZFumAmm2YHmsXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU1liSE9aVFFMWkg4bDlrVzZZQ2FiWmdlYXhjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYS80NTdlMTMtNDFkMy00MGVmLWI1NzIt
OWU4OTVkMGVmOGQyLzEvU1liSE9aVFFMWkg4bDlrVzZZQ2FiWmdlYXhjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYS80NTdlMTMtNDFkMy00MGVmLWI1NzItOWU4OTVkMGVmOGQy
LzEvU1liSE9aVFFMWkg4bDlrVzZZQ2FiWmdlYXhjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATPS0JFm8
LSVcmQUffyXzE5K7zdaDjyCamOU2gWVojy2LKHhP6ewKxnCNlFUK0OzQ4xuRybqJ
2PYCGVIwmUsTljQ62SPII5Sj0RUKFnIRGgwDnjVuioMwU77kYRTBH6KrdL71/CS3
hmsesu0HEd5EvyARxodn+/KpDiBoCCyyYot7v878SvY0AxZlDicNpQJ2zFM0zBL+
F9lGnWSlwCMyU2qs3ETFqGtgfYilYDbiOku3UabR4N68ZE38VRDIPacFEDjnH+EO
dgR2Sz2baE9new8WYARAFdzAKBB0VpDop4QOKzbzu9WAPO4ur+IsovOvYvykx7J8
lvrVjgb0P0Ya8w==
-----END CERTIFICATE-----