Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/c1f90a-2bad-41b4-b1a6-46b3028a03b0/1/u9NRsnT8I6QnKDA2OKDWK2BkAbQ.mft
File:                     u9NRsnT8I6QnKDA2OKDWK2BkAbQ.mft (raw, json)
Hash identifier:          7HZ3BP2mSBp8uff4AMcYH8zcjvyzdV7jn6dxhcUeNYU=
Subject key identifier:   52:27:24:88:5A:6E:6A:B0:EB:33:17:4F:85:35:50:96:EB:94:DB:5C
Authority key identifier: BB:D3:51:B2:74:FC:23:A4:27:28:30:36:38:A0:D6:2B:60:64:01:B4
Certificate issuer:       /CN=bbd351b274fc23a42728303638a0d62b606401b4
Certificate serial:       0194BC04AA501A51C4F9181BE4284FBF1DEA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/u9NRsnT8I6QnKDA2OKDWK2BkAbQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ed/c1f90a-2bad-41b4-b1a6-46b3028a03b0/1/u9NRsnT8I6QnKDA2OKDWK2BkAbQ.mft
Manifest number:          142B
Signing time:             Fri 31 Jan 2025 11:00:09 +0000
Manifest this update:     Fri 31 Jan 2025 11:00:09 +0000
Manifest next update:     Sat 01 Feb 2025 11:00:09 +0000
Files and hashes:         1: 5g1tjgsfll7LK-waAj9bTQ2h-3c.roa (hash: 8D1n33aMnmCgAozOd2zA5z3xSs5pmebBm8HLBHCuK3k=)
                          2: LH7w3vOlTcRmJHq2EtyJwGzFlEE.roa (hash: BdRuTFIKBfgw0BiPV5lECgqiOEd6ZtJOGCfbNoIAYBE=)
                          3: Q6nJt5OyB3yAAOcFFRG5qOehAok.roa (hash: KO9C76YDm/Okx701iaZdKEGFLB0y+hfe45N6CADpuPc=)
                          4: mSE5jFaDyQq229roQ5L8OUwLYf8.roa (hash: 9syYjhG++XjU5LLyMYmj6GtRt7K4tV+VTMTyeR8mVrI=)
                          5: mrSrlKE7xCslqlPTXvwVWDdiqIY.roa (hash: p/QlzvPV8hfJGKn1J+54dIx9OQB/pBF0YHBs+kQo1HM=)
                          6: u9NRsnT8I6QnKDA2OKDWK2BkAbQ.crl (hash: G7e+oRDwX4J2Vjqw4R7jQEqwXfYCb6pNA0GhiKowBN0=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:04:aa:50:1a:51:c4:f9:18:1b:e4:28:4f:bf:1d:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bbd351b274fc23a42728303638a0d62b606401b4
        Validity
            Not Before: Jan 31 11:00:09 2025 GMT
            Not After : Feb  1 11:00:09 2025 GMT
        Subject: CN=522724885a6e6ab0eb33174f85355096eb94db5c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:38:51:95:46:e6:e8:41:d7:d4:67:63:b2:1e:
                    75:70:f2:64:20:cc:90:13:a2:a2:c2:73:e4:bd:93:
                    c2:91:d7:ba:6b:c1:fd:a5:34:7a:2a:c2:c1:da:21:
                    4d:4b:b5:c5:6e:ef:9b:79:fa:6c:3c:19:50:ee:df:
                    47:7f:ee:1a:6f:65:33:7d:ef:cb:ba:d5:20:f3:e4:
                    c8:a4:9e:09:b9:c7:28:77:44:e5:3f:7a:ef:4a:06:
                    b0:54:b6:8b:38:6c:d7:4a:21:84:8d:7d:67:90:c2:
                    68:36:78:4d:b2:c0:dc:43:b3:99:79:bf:f0:28:3c:
                    47:62:fb:05:07:2f:82:01:1f:aa:b9:0c:47:41:17:
                    52:21:22:ce:f3:9f:ba:a9:74:3f:cf:fe:f3:17:db:
                    c4:30:22:ff:50:c9:5c:f4:6e:ce:da:b5:a1:a6:01:
                    b6:b7:69:cc:36:36:e1:fb:18:b8:48:db:23:3a:92:
                    5c:d0:43:e2:93:82:3b:3b:e5:83:e7:9b:86:0d:13:
                    0a:24:25:b1:97:be:42:c5:0b:23:75:c8:06:47:8f:
                    db:ea:26:3f:1d:48:c1:89:e7:77:1b:6e:6a:9b:b8:
                    a1:69:8f:c3:9b:31:93:09:14:c8:0d:35:95:1b:43:
                    b6:c3:59:31:25:00:b9:50:5e:78:90:c5:9f:72:3e:
                    f1:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:27:24:88:5A:6E:6A:B0:EB:33:17:4F:85:35:50:96:EB:94:DB:5C
            X509v3 Authority Key Identifier:
                keyid:BB:D3:51:B2:74:FC:23:A4:27:28:30:36:38:A0:D6:2B:60:64:01:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u9NRsnT8I6QnKDA2OKDWK2BkAbQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/c1f90a-2bad-41b4-b1a6-46b3028a03b0/1/u9NRsnT8I6QnKDA2OKDWK2BkAbQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/c1f90a-2bad-41b4-b1a6-46b3028a03b0/1/u9NRsnT8I6QnKDA2OKDWK2BkAbQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:70:49:b7:50:f9:85:bd:20:08:93:41:aa:d4:dc:7c:b4:1e:
         7a:30:f1:2f:31:28:73:10:20:2c:05:da:72:01:40:ed:50:eb:
         a8:ef:5a:03:18:13:e5:8b:92:e6:95:85:88:3d:d7:09:d6:a1:
         11:90:25:37:b2:71:c2:5b:23:24:99:ee:7e:ff:a4:9c:c3:b9:
         9f:f0:1f:65:3b:3b:1f:60:ec:32:78:9b:b4:5e:a8:ac:a4:90:
         53:62:b7:4b:c1:d7:64:46:82:29:0a:0c:cc:00:ce:ff:3c:d3:
         25:31:b5:f5:94:e5:bc:c8:d6:6d:89:22:fa:70:c8:4d:ec:b5:
         10:cc:eb:e9:1e:f0:cb:b6:3f:7d:e3:5b:18:5e:84:e1:0b:5c:
         26:05:df:c2:d2:19:da:4c:5c:40:6e:3d:1b:41:7a:ad:89:1f:
         f8:18:af:5e:9b:14:98:4a:87:d1:9c:88:48:0c:e9:59:90:6e:
         f4:01:0e:44:fa:23:b3:d1:c9:b7:ec:92:f7:55:e7:df:4a:e5:
         d2:74:91:54:0a:29:c4:74:f3:3e:af:10:e2:e9:9e:d0:ae:43:
         2c:a7:68:79:25:c1:e7:4e:96:55:01:43:97:ad:58:3d:87:25:
         b0:b4:31:5f:85:44:a5:a6:5f:b5:8e:43:f5:dd:e3:7c:5b:a9:
         30:c6:89:fc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8BKpQGlHE+Rgb5ChPvx3qMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJiZDM1MWIyNzRmYzIzYTQyNzI4MzAzNjM4YTBkNjJiNjA2
NDAxYjQwHhcNMjUwMTMxMTEwMDA5WhcNMjUwMjAxMTEwMDA5WjAzMTEwLwYDVQQD
Eyg1MjI3MjQ4ODVhNmU2YWIwZWIzMzE3NGY4NTM1NTA5NmViOTRkYjVjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsThRlUbm6EHX1Gdjsh51cPJkIMyQ
E6KiwnPkvZPCkde6a8H9pTR6KsLB2iFNS7XFbu+befpsPBlQ7t9Hf+4ab2Uzfe/L
utUg8+TIpJ4Juccod0TlP3rvSgawVLaLOGzXSiGEjX1nkMJoNnhNssDcQ7OZeb/w
KDxHYvsFBy+CAR+quQxHQRdSISLO85+6qXQ/z/7zF9vEMCL/UMlc9G7O2rWhpgG2
t2nMNjbh+xi4SNsjOpJc0EPik4I7O+WD55uGDRMKJCWxl75CxQsjdcgGR4/b6iY/
HUjBied3G25qm7ihaY/DmzGTCRTIDTWVG0O2w1kxJQC5UF54kMWfcj7xEwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFInJIhabmqw6zMXT4U1UJbrlNtcMB8GA1UdIwQY
MBaAFLvTUbJ0/COkJygwNjig1itgZAG0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdTlOUnNuVDhJNlFuS0RBMk9LRFdLMkJrQWJRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZC9jMWY5MGEtMmJhZC00MWI0LWIxYTYt
NDZiMzAyOGEwM2IwLzEvdTlOUnNuVDhJNlFuS0RBMk9LRFdLMkJrQWJRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZC9jMWY5MGEtMmJhZC00MWI0LWIxYTYtNDZiMzAyOGEwM2Iw
LzEvdTlOUnNuVDhJNlFuS0RBMk9LRFdLMkJrQWJRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcXBJt1D5
hb0gCJNBqtTcfLQeejDxLzEocxAgLAXacgFA7VDrqO9aAxgT5YuS5pWFiD3XCdah
EZAlN7JxwlsjJJnufv+knMO5n/AfZTs7H2DsMnibtF6orKSQU2K3S8HXZEaCKQoM
zADO/zzTJTG19ZTlvMjWbYki+nDITey1EMzr6R7wy7Y/feNbGF6E4QtcJgXfwtIZ
2kxcQG49G0F6rYkf+BivXpsUmEqH0ZyISAzpWZBu9AEORPojs9HJt+yS91Xn30rl
0nSRVAopxHTzPq8Q4ume0K5DLKdoeSXB506WVQFDl61YPYclsLQxX4VEpaZftY5D
9d3jfFupMMaJ/A==
-----END CERTIFICATE-----