Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/7b6edc-ad23-4d73-ab56-0a1a35897f10/1/kpNSqNLdcMkf_OyOMj_mnx6aQTk.mft
File:                     kpNSqNLdcMkf_OyOMj_mnx6aQTk.mft (raw, json)
Hash identifier:          oF+Jj0AQYTSkz2q46Kme76fhuRu07N72oiw3fHEqMpA=
Subject key identifier:   05:F4:CF:3D:AD:CB:48:7D:98:6C:4D:20:64:56:21:89:2A:B3:E1:03
Authority key identifier: 92:93:52:A8:D2:DD:70:C9:1F:FC:EC:8E:32:3F:E6:9F:1E:9A:41:39
Certificate issuer:       /CN=929352a8d2dd70c91ffcec8e323fe69f1e9a4139
Certificate serial:       0194BBCDB9B0D8EBBF359A2F5F7D2E15C1FB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kpNSqNLdcMkf_OyOMj_mnx6aQTk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/eb/7b6edc-ad23-4d73-ab56-0a1a35897f10/1/kpNSqNLdcMkf_OyOMj_mnx6aQTk.mft
Manifest number:          1437
Signing time:             Fri 31 Jan 2025 10:00:09 +0000
Manifest this update:     Fri 31 Jan 2025 10:00:09 +0000
Manifest next update:     Sat 01 Feb 2025 10:00:09 +0000
Files and hashes:         1: L3kS7Jn1yhF9Sq1B0Zxhnxy-UmQ.roa (hash: 7USsx/75CcWYYXOpIrJthPZ+SLbNDigaF6/K5IzHy04=)
                          2: L3xdjIH2zy7v5Cj6gtkLDE8Ij7M.roa (hash: Q+o3qtQDOHZiPtx1qsjKwH4+/xbmKCsf4LWPeNV0Toc=)
                          3: Te7YHi2pfVF9zbo2M3FU6X9QFw8.roa (hash: iefxuR6cCSeQuUVD7gHNM5oNj3aGdVfsEjg121b/nwY=)
                          4: U18SPSBUf3dwumuu9FyNIqHDXLw.roa (hash: V5VQUyBsrAGopRO8qXTISlE1ORxyujJueAvt5anuNoc=)
                          5: YbdTZXXJ_bhou-ns1MRKdw7L4Hs.roa (hash: Yu99aBSHIFLARWNtpLmDu4XobT/yupAF1F7TMAyI2tE=)
                          6: Z82XkiOXgkgyHP_qUTQtV9ipAQI.roa (hash: Pcm+DnawQak47wg3O3tVgdWOq8t4gYDBeT6sBFXXJVE=)
                          7: kpNSqNLdcMkf_OyOMj_mnx6aQTk.crl (hash: cOBjxsHpbJITPoZdzxRP9Vf9XGq73CExSMJ/c7C4ldA=)
                          8: xzAOimHDia6u9KEZ2lcYuzbmUh8.roa (hash: twU3Zu+3OA4eLfmXFSTTDjCKPfrJ6o8S1Q+yF0JIdC4=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bb:cd:b9:b0:d8:eb:bf:35:9a:2f:5f:7d:2e:15:c1:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=929352a8d2dd70c91ffcec8e323fe69f1e9a4139
        Validity
            Not Before: Jan 31 10:00:09 2025 GMT
            Not After : Feb  1 10:00:09 2025 GMT
        Subject: CN=05f4cf3dadcb487d986c4d20645621892ab3e103
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:31:d1:04:79:4f:b3:77:a4:6d:fb:11:41:de:
                    b3:40:39:98:0f:77:ff:39:f4:28:bb:7d:fe:42:f5:
                    7f:07:13:92:e8:d3:7a:d4:11:89:6a:0e:30:88:26:
                    d3:3f:7d:56:78:93:1b:d3:9a:f5:75:aa:dc:7b:39:
                    e0:92:be:7a:68:11:6e:43:3f:72:2f:2c:11:69:97:
                    76:61:03:98:db:4f:3f:dc:e5:82:0e:5b:aa:22:cf:
                    26:98:47:e5:b2:45:a0:2a:10:6d:a5:54:c2:24:cc:
                    fa:b8:e5:99:ce:f1:6b:0e:47:ec:f1:8d:5c:58:60:
                    ff:62:9f:a5:9d:ea:f0:87:c5:72:74:24:b3:4b:06:
                    40:77:8c:2a:f3:b4:4c:1f:e3:b2:06:5d:0c:f5:61:
                    c0:eb:47:eb:d5:a6:f9:a9:c7:be:77:1a:fa:dc:15:
                    fd:13:ba:5b:2a:97:f2:e2:a3:8f:b4:03:9c:02:32:
                    19:bf:8c:5c:c8:ac:3a:0e:af:5a:a7:1c:20:cd:26:
                    62:2a:24:19:f2:c5:0b:b3:b8:55:37:79:0d:64:7f:
                    42:9f:a4:c7:44:ac:40:6a:22:d4:d4:03:20:95:41:
                    e0:e2:5b:82:5b:78:02:d3:2c:33:10:6a:13:54:87:
                    f5:51:08:54:7c:96:cd:6c:30:1f:07:a3:4a:8c:3a:
                    b7:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:F4:CF:3D:AD:CB:48:7D:98:6C:4D:20:64:56:21:89:2A:B3:E1:03
            X509v3 Authority Key Identifier:
                keyid:92:93:52:A8:D2:DD:70:C9:1F:FC:EC:8E:32:3F:E6:9F:1E:9A:41:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kpNSqNLdcMkf_OyOMj_mnx6aQTk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/7b6edc-ad23-4d73-ab56-0a1a35897f10/1/kpNSqNLdcMkf_OyOMj_mnx6aQTk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/7b6edc-ad23-4d73-ab56-0a1a35897f10/1/kpNSqNLdcMkf_OyOMj_mnx6aQTk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         dd:ff:21:73:bd:ca:70:91:21:97:cc:04:56:ed:7b:aa:fb:d5:
         ad:53:c9:5a:61:16:5d:67:7c:3b:f3:1f:b8:aa:53:b2:ee:76:
         9f:32:61:0e:64:6b:77:a1:b4:31:4d:63:0f:91:f4:f6:cc:77:
         67:7b:a9:a3:d3:43:c2:32:7a:a5:00:25:4d:0a:ac:d9:2f:00:
         d5:84:50:b5:0a:b3:14:cc:be:62:2b:9e:bd:79:e8:23:16:4d:
         68:46:5d:59:1c:67:57:3d:7c:62:8f:98:13:80:8f:62:02:19:
         eb:ea:00:40:02:6f:41:b6:bf:93:ff:4f:61:30:2e:ab:b3:e7:
         95:46:3c:3a:55:29:09:58:8b:42:92:bb:90:44:22:3b:67:b3:
         ea:e6:4f:5f:39:6b:29:3e:7d:19:b1:be:5b:a2:5d:38:d5:b5:
         11:e8:95:3f:48:39:08:11:5e:b4:85:9e:ca:92:fb:ef:f3:b7:
         8f:a5:fe:83:c6:35:a6:fb:fc:a9:52:31:d7:74:49:79:99:ba:
         45:e7:e4:63:f7:c6:9b:33:b9:f8:4b:84:82:8e:61:cf:a6:9c:
         8a:86:f0:0c:5a:de:77:8e:d6:ce:bd:77:7a:e9:bc:f5:a7:5b:
         f7:76:8a:ae:7a:b2:e0:54:76:b3:f1:de:61:1e:51:e8:e8:bf:
         65:7c:47:d4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS7zbmw2Ou/NZovX30uFcH7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkyOTM1MmE4ZDJkZDcwYzkxZmZjZWM4ZTMyM2ZlNjlmMWU5
YTQxMzkwHhcNMjUwMTMxMTAwMDA5WhcNMjUwMjAxMTAwMDA5WjAzMTEwLwYDVQQD
EygwNWY0Y2YzZGFkY2I0ODdkOTg2YzRkMjA2NDU2MjE4OTJhYjNlMTAzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnjHRBHlPs3ekbfsRQd6zQDmYD3f/
OfQou33+QvV/BxOS6NN61BGJag4wiCbTP31WeJMb05r1darcezngkr56aBFuQz9y
LywRaZd2YQOY208/3OWCDluqIs8mmEflskWgKhBtpVTCJMz6uOWZzvFrDkfs8Y1c
WGD/Yp+lnerwh8VydCSzSwZAd4wq87RMH+OyBl0M9WHA60fr1ab5qce+dxr63BX9
E7pbKpfy4qOPtAOcAjIZv4xcyKw6Dq9apxwgzSZiKiQZ8sULs7hVN3kNZH9Cn6TH
RKxAaiLU1AMglUHg4luCW3gC0ywzEGoTVIf1UQhUfJbNbDAfB6NKjDq3DQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAX0zz2ty0h9mGxNIGRWIYkqs+EDMB8GA1UdIwQY
MBaAFJKTUqjS3XDJH/zsjjI/5p8emkE5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva3BOU3FOTGRjTWtmX095T01qX21ueDZhUVRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi83YjZlZGMtYWQyMy00ZDczLWFiNTYt
MGExYTM1ODk3ZjEwLzEva3BOU3FOTGRjTWtmX095T01qX21ueDZhUVRrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYi83YjZlZGMtYWQyMy00ZDczLWFiNTYtMGExYTM1ODk3ZjEw
LzEva3BOU3FOTGRjTWtmX095T01qX21ueDZhUVRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA3f8hc73K
cJEhl8wEVu17qvvVrVPJWmEWXWd8O/MfuKpTsu52nzJhDmRrd6G0MU1jD5H09sx3
Z3upo9NDwjJ6pQAlTQqs2S8A1YRQtQqzFMy+YiuevXnoIxZNaEZdWRxnVz18Yo+Y
E4CPYgIZ6+oAQAJvQba/k/9PYTAuq7PnlUY8OlUpCViLQpK7kEQiO2ez6uZPXzlr
KT59GbG+W6JdONW1EeiVP0g5CBFetIWeypL77/O3j6X+g8Y1pvv8qVIx13RJeZm6
RefkY/fGmzO5+EuEgo5hz6aciobwDFred47Wzr13eum89adb93aKrnqy4FR2s/He
YR5R6Oi/ZXxH1A==
-----END CERTIFICATE-----