Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/0c7318-b348-4b24-b9e5-c6a8821adea9/1/yVDXsZdaNwOuJ7Ma0vkyrkakzJQ.mft
File:                     yVDXsZdaNwOuJ7Ma0vkyrkakzJQ.mft (raw, json)
Hash identifier:          KvAxrnNMzzVC259RtqOkQJnfpmJXocREoqTJQeh4wEQ=
Subject key identifier:   29:2B:71:65:B3:2A:EE:2A:E5:CB:24:91:B9:56:35:B8:77:C5:AF:00
Authority key identifier: C9:50:D7:B1:97:5A:37:03:AE:27:B3:1A:D2:F9:32:AE:46:A4:CC:94
Certificate issuer:       /CN=c950d7b1975a3703ae27b31ad2f932ae46a4cc94
Certificate serial:       0195E0EB4470A6271D26219B5D368E4DB2A7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yVDXsZdaNwOuJ7Ma0vkyrkakzJQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/12/0c7318-b348-4b24-b9e5-c6a8821adea9/1/yVDXsZdaNwOuJ7Ma0vkyrkakzJQ.mft
Manifest number:          1134
Signing time:             Sat 29 Mar 2025 08:01:09 +0000
Manifest this update:     Sat 29 Mar 2025 08:01:09 +0000
Manifest next update:     Sun 30 Mar 2025 08:01:09 +0000
Files and hashes:         1: VgTi5tlMVXsu097Zaw82JIsKmhI.roa (hash: yaSgz1DC1PHPNVrBtX09+Wm5+D0DsnRGuOyAfnA8DC0=)
                          2: olC5ZpSEtozZndm4qi7fm722epU.roa (hash: osI53NMsoiUBoOeQCVmzdMQWvODeVRAe3gG8Sio/M8A=)
                          3: yVDXsZdaNwOuJ7Ma0vkyrkakzJQ.crl (hash: m1vvQBzjy/aC6gNNN7yM6vxcbPpZYURY06cfpoe7zko=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:e0:eb:44:70:a6:27:1d:26:21:9b:5d:36:8e:4d:b2:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c950d7b1975a3703ae27b31ad2f932ae46a4cc94
        Validity
            Not Before: Mar 29 08:01:09 2025 GMT
            Not After : Mar 30 08:01:09 2025 GMT
        Subject: CN=292b7165b32aee2ae5cb2491b95635b877c5af00
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:93:01:9b:88:7b:40:b2:fe:78:ac:84:ce:82:
                    62:e4:c1:7c:68:f7:b9:62:71:4d:3c:e1:ef:67:13:
                    ef:4b:7e:a2:bf:15:ef:b1:e7:5d:52:38:45:1d:35:
                    04:73:de:16:15:2b:df:ba:7b:47:f6:94:64:36:6f:
                    c7:d6:a4:c5:89:23:6d:69:34:99:5a:bc:a2:c9:be:
                    f2:3e:2f:e2:a7:43:72:5f:7f:4c:dc:18:0a:98:d8:
                    22:50:bb:bd:29:b5:c5:fb:1b:fc:03:ed:90:4a:20:
                    12:45:4c:92:43:64:69:a8:f2:75:92:f5:d5:9f:dd:
                    b4:a5:ea:94:62:9c:26:1a:27:a3:d6:fc:a5:66:14:
                    62:d5:0e:3e:0e:87:73:09:a0:a9:01:1e:30:52:60:
                    dd:7c:3e:e0:ca:45:ff:ed:4c:d1:bd:2c:09:c7:cb:
                    3e:ef:a9:76:cd:dc:ea:d3:7f:13:4b:1c:10:8c:02:
                    da:fd:db:7d:87:27:ff:be:1a:3f:9a:81:d8:88:a8:
                    45:4e:82:38:b0:45:93:7d:62:f2:89:fa:9e:2e:be:
                    a9:03:6c:a9:fa:54:00:bc:5a:c6:d6:6c:11:85:59:
                    a3:8c:7d:1f:b5:a4:94:5a:12:1e:14:b5:1c:75:29:
                    d4:e8:e7:a6:21:3e:91:a0:7e:42:66:a7:82:c6:5b:
                    7d:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:2B:71:65:B3:2A:EE:2A:E5:CB:24:91:B9:56:35:B8:77:C5:AF:00
            X509v3 Authority Key Identifier:
                keyid:C9:50:D7:B1:97:5A:37:03:AE:27:B3:1A:D2:F9:32:AE:46:A4:CC:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yVDXsZdaNwOuJ7Ma0vkyrkakzJQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/0c7318-b348-4b24-b9e5-c6a8821adea9/1/yVDXsZdaNwOuJ7Ma0vkyrkakzJQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/12/0c7318-b348-4b24-b9e5-c6a8821adea9/1/yVDXsZdaNwOuJ7Ma0vkyrkakzJQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:0c:55:e4:00:2f:dd:2b:29:ee:a9:62:5e:f5:5b:8a:05:a8:
         e4:59:d8:cf:a4:e4:16:cc:81:8b:1c:37:2f:4f:69:d9:d6:2f:
         e3:7d:0b:21:53:31:e4:4a:4e:50:01:ae:fb:58:d1:2f:be:f4:
         01:88:fd:18:e4:1e:42:18:e6:18:37:7c:bf:48:2e:3c:ca:69:
         ef:c1:eb:fb:21:df:82:f2:a4:ec:c1:93:c9:a5:c8:1b:e7:49:
         ff:58:17:2d:9e:e1:39:1b:bc:97:fb:da:12:f6:4b:03:6d:cc:
         20:ef:cb:3c:05:33:ab:b1:ae:16:23:12:94:f7:ec:40:f2:56:
         22:dd:a8:cd:09:ac:9d:4b:cd:95:87:7a:34:bc:b7:e4:a1:66:
         1b:43:82:e0:fa:55:c9:ce:91:ed:31:70:b7:0b:77:20:ae:9f:
         67:b8:87:a6:5a:e6:6c:cb:4b:02:f8:8c:c8:9d:fe:7d:32:80:
         47:18:95:1f:3a:48:25:fe:55:1d:a7:91:c6:ae:3a:5a:a6:3d:
         ee:a8:44:18:f1:a9:4a:11:37:16:06:58:3f:17:c1:1e:f8:2d:
         e6:0b:0e:8a:87:7e:20:bd:3d:36:bd:22:d1:16:d3:f9:c2:af:
         a3:21:bf:68:bc:8d:d3:1d:10:d3:2e:f4:3e:06:71:f2:f3:9f:
         87:8e:a7:00
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZXg60RwpicdJiGbXTaOTbKnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM5NTBkN2IxOTc1YTM3MDNhZTI3YjMxYWQyZjkzMmFlNDZh
NGNjOTQwHhcNMjUwMzI5MDgwMTA5WhcNMjUwMzMwMDgwMTA5WjAzMTEwLwYDVQQD
EygyOTJiNzE2NWIzMmFlZTJhZTVjYjI0OTFiOTU2MzViODc3YzVhZjAwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwZMBm4h7QLL+eKyEzoJi5MF8aPe5
YnFNPOHvZxPvS36ivxXvseddUjhFHTUEc94WFSvfuntH9pRkNm/H1qTFiSNtaTSZ
Wryiyb7yPi/ip0NyX39M3BgKmNgiULu9KbXF+xv8A+2QSiASRUySQ2RpqPJ1kvXV
n920peqUYpwmGiej1vylZhRi1Q4+DodzCaCpAR4wUmDdfD7gykX/7UzRvSwJx8s+
76l2zdzq038TSxwQjALa/dt9hyf/vho/moHYiKhFToI4sEWTfWLyifqeLr6pA2yp
+lQAvFrG1mwRhVmjjH0ftaSUWhIeFLUcdSnU6OemIT6RoH5CZqeCxlt9WwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCkrcWWzKu4q5cskkblWNbh3xa8AMB8GA1UdIwQY
MBaAFMlQ17GXWjcDriezGtL5Mq5GpMyUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveVZEWHNaZGFOd091SjdNYTB2a3lya2FrekpRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi8wYzczMTgtYjM0OC00YjI0LWI5ZTUt
YzZhODgyMWFkZWE5LzEveVZEWHNaZGFOd091SjdNYTB2a3lya2FrekpRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMi8wYzczMTgtYjM0OC00YjI0LWI5ZTUtYzZhODgyMWFkZWE5
LzEveVZEWHNaZGFOd091SjdNYTB2a3lya2FrekpRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMAxV5AAv
3Ssp7qliXvVbigWo5FnYz6TkFsyBixw3L09p2dYv430LIVMx5EpOUAGu+1jRL770
AYj9GOQeQhjmGDd8v0guPMpp78Hr+yHfgvKk7MGTyaXIG+dJ/1gXLZ7hORu8l/va
EvZLA23MIO/LPAUzq7GuFiMSlPfsQPJWIt2ozQmsnUvNlYd6NLy35KFmG0OC4PpV
yc6R7TFwtwt3IK6fZ7iHplrmbMtLAviMyJ3+fTKARxiVHzpIJf5VHaeRxq46WqY9
7qhEGPGpShE3FgZYPxfBHvgt5gsOiod+IL09Nr0i0RbT+cKvoyG/aLyN0x0Q0y70
PgZx8vOfh46nAA==
-----END CERTIFICATE-----