Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/f22131-a0ff-4f27-8dfa-69152e9a08c3/1/l4OlSHs1wdHh8VfBkTErPfS8F6s.mft
File:                     l4OlSHs1wdHh8VfBkTErPfS8F6s.mft (raw, json)
Hash identifier:          pARb6u28kg02ditxQu5KG2w48kP+PlHpGwN4v/6YN5U=
Subject key identifier:   82:AA:B6:3A:12:0F:E7:38:4C:63:CA:8B:E7:A2:15:07:F7:22:FE:30
Authority key identifier: 97:83:A5:48:7B:35:C1:D1:E1:F1:57:C1:91:31:2B:3D:F4:BC:17:AB
Certificate issuer:       /CN=9783a5487b35c1d1e1f157c191312b3df4bc17ab
Certificate serial:       0194BC3BE2A02CB79C3FC62EC5A7C319E5DB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/l4OlSHs1wdHh8VfBkTErPfS8F6s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ef/f22131-a0ff-4f27-8dfa-69152e9a08c3/1/l4OlSHs1wdHh8VfBkTErPfS8F6s.mft
Manifest number:          1436
Signing time:             Fri 31 Jan 2025 12:00:28 +0000
Manifest this update:     Fri 31 Jan 2025 12:00:28 +0000
Manifest next update:     Sat 01 Feb 2025 12:00:28 +0000
Files and hashes:         1: aKjmqm2DJ2EfaRG2CAg2q9YTguc.roa (hash: lmYc7ArFDt/9efw/iJ2GmvrSQ8wNvBHpxPAHRuZKMMA=)
                          2: dZKiynV1KRUB63s1S23kLXoELXM.roa (hash: uX/2Ee9kxHZZdlU8CO8raSIbXckmFA2hSc0ftFZonCA=)
                          3: l4OlSHs1wdHh8VfBkTErPfS8F6s.crl (hash: sCHQxUqzrgGZUcR7R+iO3FwPl/6EnvEWVjDRY6bSu9M=)
                          4: qJCRilc3Ebh9B_aySeVMKldeveM.roa (hash: ioODI+aP1jwlezBm9lY+fz3m5yXxE8s++45dvu8zDyU=)
                          5: zR4VCepGwzjWvZZ7s_QPwCRLuXQ.roa (hash: I/vylIp0wmKTYGLVF3RkbAls7GMsIEUykJvxklzddzk=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:3b:e2:a0:2c:b7:9c:3f:c6:2e:c5:a7:c3:19:e5:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9783a5487b35c1d1e1f157c191312b3df4bc17ab
        Validity
            Not Before: Jan 31 12:00:28 2025 GMT
            Not After : Feb  1 12:00:28 2025 GMT
        Subject: CN=82aab63a120fe7384c63ca8be7a21507f722fe30
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:c5:17:fa:24:a2:17:b9:00:56:43:df:3e:9d:
                    a5:b2:b8:6f:a7:ab:4f:84:fc:eb:d2:a0:fd:d3:ad:
                    8c:c7:2b:b7:bc:ae:95:b6:0e:de:41:19:da:bb:2a:
                    1e:c3:3d:71:d5:72:8e:f2:b4:63:22:dc:78:b7:c4:
                    b9:57:ba:61:6b:8a:81:ec:c0:27:60:51:20:dc:d1:
                    b3:e7:5f:75:ba:c6:03:a2:fd:6f:0b:27:8e:29:ed:
                    7d:71:8d:87:9c:40:17:db:37:80:45:ac:0f:69:f3:
                    de:91:74:b2:54:ab:bf:58:d2:83:91:10:24:86:fd:
                    57:87:e0:7f:d6:10:fa:b7:b2:ff:49:44:85:48:d4:
                    9c:cc:ef:92:95:0a:6c:01:aa:9a:6e:64:fb:ea:05:
                    ca:37:97:c7:fd:0b:8a:2d:dc:ef:bd:e4:12:5c:58:
                    8f:85:42:c4:64:d5:73:6d:2e:fd:de:60:dc:9a:2c:
                    f8:0f:b2:81:cc:10:42:bf:e4:d7:19:16:5a:59:6a:
                    fb:89:db:21:33:25:15:80:e8:de:e8:ac:0a:df:a0:
                    bc:a6:f2:b5:f1:22:26:23:7f:9b:f2:86:f1:1d:d0:
                    e2:9c:a9:50:a7:05:3a:9e:88:a5:6d:41:ee:4d:02:
                    0f:ce:34:b6:b7:5d:e3:a9:e6:10:58:69:c6:8e:f3:
                    45:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:AA:B6:3A:12:0F:E7:38:4C:63:CA:8B:E7:A2:15:07:F7:22:FE:30
            X509v3 Authority Key Identifier:
                keyid:97:83:A5:48:7B:35:C1:D1:E1:F1:57:C1:91:31:2B:3D:F4:BC:17:AB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l4OlSHs1wdHh8VfBkTErPfS8F6s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/f22131-a0ff-4f27-8dfa-69152e9a08c3/1/l4OlSHs1wdHh8VfBkTErPfS8F6s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/f22131-a0ff-4f27-8dfa-69152e9a08c3/1/l4OlSHs1wdHh8VfBkTErPfS8F6s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:b7:66:57:ea:14:50:f8:41:71:96:4f:67:be:04:9b:d0:20:
         1f:16:42:93:fd:93:29:7c:53:b2:5b:cf:50:30:95:39:6c:30:
         73:81:80:96:67:5a:2c:8e:b7:d3:22:4f:97:ab:9d:bd:55:71:
         34:a0:12:78:e2:d2:0c:c6:53:75:25:2e:a6:bf:ba:31:d4:2d:
         b0:25:c8:12:f1:1a:89:69:37:ee:38:52:ea:61:4f:3e:e4:20:
         ec:49:85:c6:c3:e1:07:9a:11:55:42:80:6b:75:b2:a6:f2:91:
         f8:da:a1:c7:91:3e:1d:2f:70:b1:d8:a7:e5:d5:be:d6:d8:c1:
         be:71:e7:4f:64:73:b6:07:22:5d:7c:1e:c5:b8:06:e7:4d:91:
         a1:2d:ef:46:d6:b8:e1:32:21:1f:c3:ae:92:77:ba:d5:d6:d2:
         55:d8:aa:e1:5d:6e:6d:fc:aa:05:d5:b7:88:7a:d5:f8:97:90:
         17:a4:29:8b:04:94:c7:fa:ce:9d:64:c7:8e:e6:7a:fd:7e:ac:
         65:42:38:60:ea:66:13:27:1e:9d:f1:d0:a5:b1:b5:53:4d:fa:
         d6:78:4d:57:f0:9a:ad:d0:14:d4:8c:02:2e:45:2c:3c:fc:e9:
         3b:bb:53:93:96:2c:20:ef:de:b0:a6:e7:0e:2b:f4:f6:bc:a0:
         3b:f0:eb:4a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8O+KgLLecP8YuxafDGeXbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk3ODNhNTQ4N2IzNWMxZDFlMWYxNTdjMTkxMzEyYjNkZjRi
YzE3YWIwHhcNMjUwMTMxMTIwMDI4WhcNMjUwMjAxMTIwMDI4WjAzMTEwLwYDVQQD
Eyg4MmFhYjYzYTEyMGZlNzM4NGM2M2NhOGJlN2EyMTUwN2Y3MjJmZTMwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuMUX+iSiF7kAVkPfPp2lsrhvp6tP
hPzr0qD9062Mxyu3vK6Vtg7eQRnauyoewz1x1XKO8rRjItx4t8S5V7pha4qB7MAn
YFEg3NGz5191usYDov1vCyeOKe19cY2HnEAX2zeARawPafPekXSyVKu/WNKDkRAk
hv1Xh+B/1hD6t7L/SUSFSNSczO+SlQpsAaqabmT76gXKN5fH/QuKLdzvveQSXFiP
hULEZNVzbS793mDcmiz4D7KBzBBCv+TXGRZaWWr7idshMyUVgOje6KwK36C8pvK1
8SImI3+b8obxHdDinKlQpwU6noilbUHuTQIPzjS2t13jqeYQWGnGjvNFFQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIKqtjoSD+c4TGPKi+eiFQf3Iv4wMB8GA1UdIwQY
MBaAFJeDpUh7NcHR4fFXwZExKz30vBerMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbDRPbFNIczF3ZEhoOFZmQmtURXJQZlM4RjZzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZi9mMjIxMzEtYTBmZi00ZjI3LThkZmEt
NjkxNTJlOWEwOGMzLzEvbDRPbFNIczF3ZEhoOFZmQmtURXJQZlM4RjZzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZi9mMjIxMzEtYTBmZi00ZjI3LThkZmEtNjkxNTJlOWEwOGMz
LzEvbDRPbFNIczF3ZEhoOFZmQmtURXJQZlM4RjZzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAR7dmV+oU
UPhBcZZPZ74Em9AgHxZCk/2TKXxTslvPUDCVOWwwc4GAlmdaLI630yJPl6udvVVx
NKASeOLSDMZTdSUupr+6MdQtsCXIEvEaiWk37jhS6mFPPuQg7EmFxsPhB5oRVUKA
a3WypvKR+Nqhx5E+HS9wsdin5dW+1tjBvnHnT2RztgciXXwexbgG502RoS3vRta4
4TIhH8Oukne61dbSVdiq4V1ubfyqBdW3iHrV+JeQF6QpiwSUx/rOnWTHjuZ6/X6s
ZUI4YOpmEycenfHQpbG1U0361nhNV/CardAU1IwCLkUsPPzpO7tTk5YsIO/esKbn
Div09rygO/DrSg==
-----END CERTIFICATE-----