Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/bc48d2-28e8-405d-9f9a-03897f4cb35d/1/_JYxHyB-MOBOXtGJYLMfs7pn2cw.mft
File:                     _JYxHyB-MOBOXtGJYLMfs7pn2cw.mft (raw, json)
Hash identifier:          Ec9QqDGQBaPphiRAoUUU6InJsrYvEPequ2ODOqbI0a0=
Subject key identifier:   1B:5E:36:9E:6F:B7:F7:5F:54:70:C3:AC:06:05:9E:5A:7B:02:8A:E4
Authority key identifier: FC:96:31:1F:20:7E:30:E0:4E:5E:D1:89:60:B3:1F:B3:BA:67:D9:CC
Certificate issuer:       /CN=fc96311f207e30e04e5ed18960b31fb3ba67d9cc
Certificate serial:       0195E07D86B4097619D6C8A101D35748F98D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_JYxHyB-MOBOXtGJYLMfs7pn2cw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0d/bc48d2-28e8-405d-9f9a-03897f4cb35d/1/_JYxHyB-MOBOXtGJYLMfs7pn2cw.mft
Manifest number:          14C2
Signing time:             Sat 29 Mar 2025 06:01:17 +0000
Manifest this update:     Sat 29 Mar 2025 06:01:17 +0000
Manifest next update:     Sun 30 Mar 2025 06:01:17 +0000
Files and hashes:         1: AUcUK79-20dcWVzVbs60qA_79k0.roa (hash: FTerUGKVvthiTr4P9HvWIOzRwtpT4BbcBUUyIajjaKI=)
                          2: NLujiyLDNINg7_ALKuGpNWHf90o.roa (hash: S6u8CLwoGP6KKvaV/764lqLnv660M41bJlIaV+CiIbg=)
                          3: _JYxHyB-MOBOXtGJYLMfs7pn2cw.crl (hash: dAV2P6rNie7EOsHzaU57rssmhm1D9NE3ZMj7P/0XgHU=)
                          4: nQ49DO6jLERCGih3b5vaO6Deyv4.roa (hash: ckCboVu+SkUbYcpUmTQnzPt52sUcRNCO41XKBdBSHpY=)
                          5: xG2m4O3Ec8nKtJOjwCFJQqNJGtM.roa (hash: craC+wIX6RgDFVXZJLTuVHpltgHDojNuxm0azD0e50I=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:e0:7d:86:b4:09:76:19:d6:c8:a1:01:d3:57:48:f9:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fc96311f207e30e04e5ed18960b31fb3ba67d9cc
        Validity
            Not Before: Mar 29 06:01:17 2025 GMT
            Not After : Mar 30 06:01:17 2025 GMT
        Subject: CN=1b5e369e6fb7f75f5470c3ac06059e5a7b028ae4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:56:a5:a3:ac:90:7a:19:57:f4:23:e3:01:c5:
                    ea:35:9f:f4:20:8a:2c:0b:30:eb:3c:58:46:8f:1e:
                    81:cc:57:c3:de:1a:e9:6e:2d:7c:cd:6f:6c:73:df:
                    1f:1b:4b:98:aa:5c:10:02:3b:3e:6a:78:ac:b0:63:
                    31:dd:2e:16:55:e6:36:f8:3a:bf:ef:d5:43:48:9b:
                    9b:30:8d:b9:0f:15:f0:8e:eb:32:58:5b:78:ef:69:
                    a9:cb:82:62:94:2e:43:33:fe:2c:95:0a:fc:45:28:
                    5e:1e:3f:75:00:25:3d:0c:47:4d:ea:ea:30:92:f1:
                    c9:cb:d1:1f:b2:35:a2:da:24:20:55:b6:2e:c8:d3:
                    5b:28:b0:18:1f:b2:ff:27:11:93:be:73:e0:95:8b:
                    fb:16:2b:7c:02:19:04:3d:2f:39:f0:89:c4:46:4b:
                    aa:69:2a:e6:88:f2:88:0c:ed:2e:90:cb:96:b5:5f:
                    c9:6c:f0:5d:ca:ff:11:8d:2d:11:b3:7f:d5:4d:45:
                    20:5c:2a:b4:0e:c9:50:6a:80:c4:d0:70:8f:a4:b7:
                    d4:74:1d:bb:a5:9b:8b:c8:50:6a:0e:8b:d1:d6:bd:
                    6c:af:c1:d7:20:34:c3:6c:92:4a:6e:6a:ec:cc:ec:
                    cd:19:0f:45:99:1b:fb:8f:d6:91:49:ea:79:fe:4f:
                    60:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:5E:36:9E:6F:B7:F7:5F:54:70:C3:AC:06:05:9E:5A:7B:02:8A:E4
            X509v3 Authority Key Identifier:
                keyid:FC:96:31:1F:20:7E:30:E0:4E:5E:D1:89:60:B3:1F:B3:BA:67:D9:CC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_JYxHyB-MOBOXtGJYLMfs7pn2cw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/bc48d2-28e8-405d-9f9a-03897f4cb35d/1/_JYxHyB-MOBOXtGJYLMfs7pn2cw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/bc48d2-28e8-405d-9f9a-03897f4cb35d/1/_JYxHyB-MOBOXtGJYLMfs7pn2cw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:c9:44:26:df:c7:d8:b9:42:a2:de:91:f8:be:5d:d7:e2:04:
         7e:a0:b0:a3:5d:d9:3f:0e:de:fa:47:bf:c1:47:22:a2:b7:39:
         79:c4:f0:48:1a:3b:3b:1e:48:8d:3e:8d:19:c3:4c:93:e9:8f:
         28:98:87:dd:9b:1d:40:bc:56:cb:d0:e8:ff:aa:23:b4:26:60:
         12:95:1b:36:b6:dc:39:b8:ae:a2:1e:3b:f4:c5:76:43:a1:6b:
         48:e9:b5:e1:ae:45:72:92:19:46:f0:ec:af:2c:8f:76:97:7f:
         44:02:55:27:18:bb:3c:65:51:6b:e3:a4:4b:97:69:cb:38:e0:
         39:32:62:82:76:80:98:80:86:b5:ec:ea:7b:21:9e:35:3b:19:
         ba:ba:08:52:fe:ce:4f:64:03:ac:3d:55:cc:fb:04:dc:f4:cd:
         50:7b:ef:65:49:3c:c2:ef:58:9e:b4:1b:d3:09:7a:04:68:d1:
         9d:65:0c:e9:f2:26:a6:ce:7d:2f:d6:75:67:18:41:52:3d:2e:
         a8:5e:80:c3:80:c1:0f:f1:52:e2:82:7a:62:f3:3c:62:88:4d:
         59:e7:d3:7d:f9:59:28:43:ba:f6:a7:91:93:a4:b0:58:94:7c:
         9a:15:77:b6:8a:93:37:d2:ac:f2:a3:bb:4b:5f:d5:39:fc:77:
         8e:26:9b:fd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZXgfYa0CXYZ1sihAdNXSPmNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZjOTYzMTFmMjA3ZTMwZTA0ZTVlZDE4OTYwYjMxZmIzYmE2
N2Q5Y2MwHhcNMjUwMzI5MDYwMTE3WhcNMjUwMzMwMDYwMTE3WjAzMTEwLwYDVQQD
EygxYjVlMzY5ZTZmYjdmNzVmNTQ3MGMzYWMwNjA1OWU1YTdiMDI4YWU0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqlalo6yQehlX9CPjAcXqNZ/0IIos
CzDrPFhGjx6BzFfD3hrpbi18zW9sc98fG0uYqlwQAjs+anissGMx3S4WVeY2+Dq/
79VDSJubMI25DxXwjusyWFt472mpy4JilC5DM/4slQr8RSheHj91ACU9DEdN6uow
kvHJy9EfsjWi2iQgVbYuyNNbKLAYH7L/JxGTvnPglYv7Fit8AhkEPS858InERkuq
aSrmiPKIDO0ukMuWtV/JbPBdyv8RjS0Rs3/VTUUgXCq0DslQaoDE0HCPpLfUdB27
pZuLyFBqDovR1r1sr8HXIDTDbJJKbmrszOzNGQ9FmRv7j9aRSep5/k9gPwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBteNp5vt/dfVHDDrAYFnlp7AorkMB8GA1UdIwQY
MBaAFPyWMR8gfjDgTl7RiWCzH7O6Z9nMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX0pZeEh5Qi1NT0JPWHRHSllMTWZzN3BuMmN3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZC9iYzQ4ZDItMjhlOC00MDVkLTlmOWEt
MDM4OTdmNGNiMzVkLzEvX0pZeEh5Qi1NT0JPWHRHSllMTWZzN3BuMmN3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZC9iYzQ4ZDItMjhlOC00MDVkLTlmOWEtMDM4OTdmNGNiMzVk
LzEvX0pZeEh5Qi1NT0JPWHRHSllMTWZzN3BuMmN3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeslEJt/H
2LlCot6R+L5d1+IEfqCwo13ZPw7e+ke/wUciorc5ecTwSBo7Ox5IjT6NGcNMk+mP
KJiH3ZsdQLxWy9Do/6ojtCZgEpUbNrbcObiuoh479MV2Q6FrSOm14a5FcpIZRvDs
ryyPdpd/RAJVJxi7PGVRa+OkS5dpyzjgOTJignaAmICGtezqeyGeNTsZuroIUv7O
T2QDrD1VzPsE3PTNUHvvZUk8wu9YnrQb0wl6BGjRnWUM6fImps59L9Z1ZxhBUj0u
qF6Aw4DBD/FS4oJ6YvM8YohNWefTfflZKEO69qeRk6SwWJR8mhV3toqTN9Ks8qO7
S1/VOfx3jiab/Q==
-----END CERTIFICATE-----