Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/2f034c-23d4-469a-a006-cbed01781fce/1/2ewIW6qMqntbk07KKcF5YfyI2xs.mft
File:                     2ewIW6qMqntbk07KKcF5YfyI2xs.mft (raw, json)
Hash identifier:          +oWBP9wYnoN0TTJV66Et9ZPtl3pznb3PaKHeFNGVqeI=
Subject key identifier:   05:39:2A:CF:C0:7A:FD:A8:CC:15:56:1A:F6:63:C6:80:78:E2:C0:86
Authority key identifier: D9:EC:08:5B:AA:8C:AA:7B:5B:93:4E:CA:29:C1:79:61:FC:88:DB:1B
Certificate issuer:       /CN=d9ec085baa8caa7b5b934eca29c17961fc88db1b
Certificate serial:       019288C1480DCAB5F7853735BC9F689C46AF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2ewIW6qMqntbk07KKcF5YfyI2xs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/02/2f034c-23d4-469a-a006-cbed01781fce/1/2ewIW6qMqntbk07KKcF5YfyI2xs.mft
Manifest number:          0DA3
Signing time:             Mon 14 Oct 2024 02:00:21 +0000
Manifest this update:     Mon 14 Oct 2024 02:00:21 +0000
Manifest next update:     Tue 15 Oct 2024 02:00:21 +0000
Files and hashes:         1: 1-tYkAAfygqrp19HcVsg_DhCfLGc.roa (hash: 7ZwpGo1tip9pqxHrPt4TThD2x2AcCracKQmXrXKgesE=)
                          2: 2ewIW6qMqntbk07KKcF5YfyI2xs.crl (hash: yGx2T/f0vtL9XA/tZulNLlX4mGbZsOFAexkOpiuoNQE=)
                          3: eA3Iml9daMrmSRua1K_ZqYRDYp4.roa (hash: PY/aGBHsPhADle9n2VIOomwF7gFC740WkI2dpIvZGsA=)
                          4: gAfIx-xnDxuyj8iOJ2Abmyua-Kk.roa (hash: m6NxtFgMxKiNgV3JjoiFOYfDMzi9vOnRp52AvxW8m5o=)
                          5: z-i9O9kiMm0lM2bIPZY9Qf6ofXA.roa (hash: i/9c8Xcqo8Nl+RFYaiL1Vf7Go3dofQCxxB1irvjZlcg=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:92:88:c1:48:0d:ca:b5:f7:85:37:35:bc:9f:68:9c:46:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9ec085baa8caa7b5b934eca29c17961fc88db1b
        Validity
            Not Before: Oct 14 02:00:21 2024 GMT
            Not After : Oct 15 02:00:21 2024 GMT
        Subject: CN=05392acfc07afda8cc15561af663c68078e2c086
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:ac:8d:cb:35:6e:61:89:2a:97:3c:17:4b:9d:
                    c5:7a:75:7a:5c:d4:8f:f2:21:e7:31:61:64:68:ed:
                    a3:a5:e3:0f:57:f2:2b:40:69:72:49:e8:7d:8c:25:
                    5a:dc:a0:57:70:da:45:1c:55:c3:1b:43:6a:1b:43:
                    ac:aa:6d:3d:7b:6a:8b:3e:ce:6a:36:d3:3b:5c:a8:
                    81:f4:da:83:16:a3:fc:f5:de:b5:fc:cf:68:1c:01:
                    f1:e5:ed:68:90:30:73:bd:49:44:e7:fe:a0:5e:0e:
                    5c:b8:c1:d1:02:27:ef:8d:c2:50:dd:1e:7d:8d:5b:
                    59:b6:e9:5a:31:ef:ae:22:0e:a5:e1:f9:33:48:a1:
                    f5:59:e0:49:6b:77:f0:05:3b:72:c1:fd:14:b0:39:
                    32:a3:2a:77:02:32:cf:4f:da:a6:6a:c6:8b:ee:ba:
                    4f:5e:4f:18:34:b9:8f:a9:06:9d:29:6e:72:11:4e:
                    c9:48:89:53:e1:d3:4d:63:68:9b:72:3e:28:3a:05:
                    9e:9a:15:e8:01:27:7d:ef:d5:0b:82:18:3f:8a:f0:
                    77:94:d9:5b:ab:b4:6d:2a:b2:cb:a4:6e:36:9e:33:
                    66:da:7b:8d:a1:68:95:19:9c:59:68:59:4a:67:4d:
                    be:43:a1:22:e1:61:4e:a7:24:5c:da:24:db:52:54:
                    c8:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:39:2A:CF:C0:7A:FD:A8:CC:15:56:1A:F6:63:C6:80:78:E2:C0:86
            X509v3 Authority Key Identifier:
                keyid:D9:EC:08:5B:AA:8C:AA:7B:5B:93:4E:CA:29:C1:79:61:FC:88:DB:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2ewIW6qMqntbk07KKcF5YfyI2xs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/2f034c-23d4-469a-a006-cbed01781fce/1/2ewIW6qMqntbk07KKcF5YfyI2xs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/02/2f034c-23d4-469a-a006-cbed01781fce/1/2ewIW6qMqntbk07KKcF5YfyI2xs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:41:41:49:91:f7:d4:f9:1f:f3:e1:ed:8e:f8:e0:c1:7b:45:
         4e:c3:c2:4b:74:c7:77:15:38:3a:68:89:9c:7e:b4:bd:50:4c:
         53:b5:0c:37:9a:16:bb:3d:33:ea:86:1b:28:37:19:5f:87:e2:
         f6:18:ab:6d:1c:04:a7:f9:1a:43:66:08:37:9b:3c:37:e6:ee:
         fe:20:8d:78:17:f8:c5:83:a4:02:d3:da:c1:55:53:c0:94:be:
         d0:2c:63:4a:c0:53:f8:6f:16:b9:75:4f:1b:08:45:0a:b3:92:
         d4:eb:35:eb:ae:d7:24:81:2d:1c:f0:0c:1b:f1:61:3e:43:53:
         cd:70:b2:c1:29:ef:fc:40:7c:93:d1:9a:fa:8c:12:2a:93:66:
         09:5b:02:c6:03:44:2f:a1:b0:20:d7:98:7d:92:b3:f9:66:03:
         fd:47:4e:21:a5:6d:cd:1f:f8:17:fd:36:86:a1:17:7f:07:48:
         32:7e:9e:7f:dc:08:85:85:74:67:c4:56:ed:e9:c6:1f:96:66:
         22:ac:1b:ba:cf:af:0d:eb:b8:6b:d3:55:c9:e3:8a:18:9f:9a:
         3f:83:2d:f1:22:01:b3:11:e6:ce:34:9d:f9:eb:c6:9d:ab:bd:
         f0:fd:3c:3c:14:41:10:96:ab:6a:45:83:75:61:8c:bf:e7:23:
         30:8d:40:9a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZKIwUgNyrX3hTc1vJ9onEavMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ5ZWMwODViYWE4Y2FhN2I1YjkzNGVjYTI5YzE3OTYxZmM4
OGRiMWIwHhcNMjQxMDE0MDIwMDIxWhcNMjQxMDE1MDIwMDIxWjAzMTEwLwYDVQQD
EygwNTM5MmFjZmMwN2FmZGE4Y2MxNTU2MWFmNjYzYzY4MDc4ZTJjMDg2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtayNyzVuYYkqlzwXS53FenV6XNSP
8iHnMWFkaO2jpeMPV/IrQGlySeh9jCVa3KBXcNpFHFXDG0NqG0Osqm09e2qLPs5q
NtM7XKiB9NqDFqP89d61/M9oHAHx5e1okDBzvUlE5/6gXg5cuMHRAifvjcJQ3R59
jVtZtulaMe+uIg6l4fkzSKH1WeBJa3fwBTtywf0UsDkyoyp3AjLPT9qmasaL7rpP
Xk8YNLmPqQadKW5yEU7JSIlT4dNNY2ibcj4oOgWemhXoASd979ULghg/ivB3lNlb
q7RtKrLLpG42njNm2nuNoWiVGZxZaFlKZ02+Q6Ei4WFOpyRc2iTbUlTIbQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAU5Ks/Aev2ozBVWGvZjxoB44sCGMB8GA1UdIwQY
MBaAFNnsCFuqjKp7W5NOyinBeWH8iNsbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMmV3SVc2cU1xbnRiazA3S0tjRjVZZnlJMnhzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi8yZjAzNGMtMjNkNC00NjlhLWEwMDYt
Y2JlZDAxNzgxZmNlLzEvMmV3SVc2cU1xbnRiazA3S0tjRjVZZnlJMnhzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMi8yZjAzNGMtMjNkNC00NjlhLWEwMDYtY2JlZDAxNzgxZmNl
LzEvMmV3SVc2cU1xbnRiazA3S0tjRjVZZnlJMnhzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACEFBSZH3
1Pkf8+HtjvjgwXtFTsPCS3THdxU4OmiJnH60vVBMU7UMN5oWuz0z6oYbKDcZX4fi
9hirbRwEp/kaQ2YIN5s8N+bu/iCNeBf4xYOkAtPawVVTwJS+0CxjSsBT+G8WuXVP
GwhFCrOS1Os1667XJIEtHPAMG/FhPkNTzXCywSnv/EB8k9Ga+owSKpNmCVsCxgNE
L6GwINeYfZKz+WYD/UdOIaVtzR/4F/02hqEXfwdIMn6ef9wIhYV0Z8RW7enGH5Zm
Iqwbus+vDeu4a9NVyeOKGJ+aP4Mt8SIBsxHmzjSd+evGnau98P08PBRBEJarakWD
dWGMv+cjMI1Amg==
-----END CERTIFICATE-----