Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/ac9af6-7fc3-4d13-a594-060a4738091d/1/U7Rqt5ufxY9dxM8p1y3FJn7D7d4.mft
File:                     U7Rqt5ufxY9dxM8p1y3FJn7D7d4.mft (raw, json)
Hash identifier:          Z05hr9AEf9aY0+EqQLEbKJaj4N/0i5LolTeQrowlu3g=
Subject key identifier:   C4:32:8F:73:61:D8:FE:7E:2A:0A:F3:CE:9B:81:B9:26:CC:12:5D:42
Authority key identifier: 53:B4:6A:B7:9B:9F:C5:8F:5D:C4:CF:29:D7:2D:C5:26:7E:C3:ED:DE
Certificate issuer:       /CN=53b46ab79b9fc58f5dc4cf29d72dc5267ec3edde
Certificate serial:       0195E0B4BC2BA8C38F079D6D37C95CCF4B05
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/U7Rqt5ufxY9dxM8p1y3FJn7D7d4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1c/ac9af6-7fc3-4d13-a594-060a4738091d/1/U7Rqt5ufxY9dxM8p1y3FJn7D7d4.mft
Manifest number:          091F
Signing time:             Sat 29 Mar 2025 07:01:35 +0000
Manifest this update:     Sat 29 Mar 2025 07:01:35 +0000
Manifest next update:     Sun 30 Mar 2025 07:01:35 +0000
Files and hashes:         1: KTYZQTlWjP9XQr0e3LhtXCLEZ_k.roa (hash: CsqMd7Sxcfm0IJ/aHqrJgqjKNt4MhZmVIfUNZE3N5tY=)
                          2: U7Rqt5ufxY9dxM8p1y3FJn7D7d4.crl (hash: sUiCIS7qhO1tb40XB3tjbtFT3JzXtQTUyFApJKOlgcc=)
                          3: bMp6LhjX_DQYqzbuh4qqh4UVOHI.roa (hash: jCA1g3hgiFCuBXGyn+3jtJrn1UnxVU+QNRS9iBmqdrs=)
                          4: kaIqrvIylKzH38yKAlXttfxPtJc.roa (hash: PlwxrbNQdnXd0tF4s7w1NH4MDh/rQaSBAh1pK6XUPBU=)
                          5: wJc546Vd9TMcAYPMIgqQji2Iy4I.roa (hash: hGmeq5PZRe6Atb7rVMBXn1UFmQB2jejPXD5/XmKxL8Q=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:e0:b4:bc:2b:a8:c3:8f:07:9d:6d:37:c9:5c:cf:4b:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=53b46ab79b9fc58f5dc4cf29d72dc5267ec3edde
        Validity
            Not Before: Mar 29 07:01:35 2025 GMT
            Not After : Mar 30 07:01:35 2025 GMT
        Subject: CN=c4328f7361d8fe7e2a0af3ce9b81b926cc125d42
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:48:4d:f6:7f:59:d3:ef:d0:42:55:52:5b:f3:
                    70:a6:e1:c6:e1:dc:11:82:6e:c3:22:d8:a9:1e:a5:
                    94:73:d7:8e:81:02:0e:51:0f:77:17:70:c9:29:d4:
                    5b:c4:1d:6d:2b:99:e2:d5:d4:ee:0d:de:f5:95:02:
                    41:f5:fc:ad:52:c8:38:ea:6e:f5:47:7d:d2:c4:2c:
                    23:a5:c2:4b:08:d7:75:57:67:07:19:41:fe:ec:b6:
                    84:70:43:a9:71:81:4e:c2:24:49:19:d2:bd:fc:34:
                    71:3b:9c:17:8d:1b:a8:64:5a:cb:46:2c:5b:6b:a4:
                    72:dd:eb:a0:02:1b:da:de:0d:0c:37:dd:c4:f1:ea:
                    fe:eb:99:9e:5c:d7:69:42:18:7b:34:47:5d:4b:6c:
                    88:74:00:77:e9:d4:56:0e:b8:04:37:96:49:f3:79:
                    1a:5e:ea:32:03:70:06:46:c1:1a:e2:e1:7b:7c:ca:
                    17:61:b0:3e:77:03:d0:8e:31:f4:a2:b6:de:f8:13:
                    fb:f4:16:9a:08:bf:63:9c:98:cf:ed:10:58:06:61:
                    19:8f:24:7e:e9:af:f3:67:9d:44:9c:cd:b8:5f:c4:
                    b8:26:5b:4f:26:ad:3d:f9:9b:b1:d6:82:b3:c7:10:
                    75:1d:a4:13:d1:15:71:dd:64:fb:25:48:d7:da:4e:
                    93:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:32:8F:73:61:D8:FE:7E:2A:0A:F3:CE:9B:81:B9:26:CC:12:5D:42
            X509v3 Authority Key Identifier:
                keyid:53:B4:6A:B7:9B:9F:C5:8F:5D:C4:CF:29:D7:2D:C5:26:7E:C3:ED:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U7Rqt5ufxY9dxM8p1y3FJn7D7d4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/ac9af6-7fc3-4d13-a594-060a4738091d/1/U7Rqt5ufxY9dxM8p1y3FJn7D7d4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/ac9af6-7fc3-4d13-a594-060a4738091d/1/U7Rqt5ufxY9dxM8p1y3FJn7D7d4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d0:72:57:a9:9f:b9:06:3a:11:1f:8b:8c:cc:e9:70:57:a3:71:
         90:3c:5f:fe:05:0a:6b:06:2c:6f:27:36:56:47:be:bc:a2:56:
         61:aa:63:e1:9e:ae:c4:3e:d5:5b:ec:a0:ff:6d:01:72:8d:a2:
         4f:66:cf:3b:43:9d:f5:bf:a6:b9:f7:07:c3:1d:92:01:64:93:
         e2:87:31:a5:1e:46:73:7d:ea:b0:90:f6:ed:84:f2:0f:27:02:
         f1:5a:fd:93:88:eb:5c:1c:0e:02:2e:1e:c9:d1:7d:5d:e5:36:
         d2:ce:b8:82:eb:b8:c0:93:90:db:12:4b:8d:cf:cd:35:7c:54:
         06:84:13:84:1e:bd:8d:f0:6f:f0:da:7e:05:33:16:8e:34:0d:
         5b:2e:63:fb:6e:3c:44:e2:cd:89:55:86:e0:50:89:ab:45:03:
         18:2a:72:f5:a3:f2:d5:5a:c8:70:4c:02:d6:cf:65:12:78:39:
         17:cf:5f:da:e7:db:7c:9a:98:d2:20:ef:2f:ac:dd:de:b0:d4:
         58:9e:06:7e:b9:e6:ae:9d:b3:17:98:8f:89:54:6a:b0:f9:f7:
         5a:b6:ab:8e:ba:30:52:ab:ab:00:0f:ea:c2:e5:0f:85:fe:ba:
         d2:5a:4b:8b:f9:b0:07:37:83:09:20:60:b5:67:ba:8c:cd:c2:
         7a:3d:c8:91
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZXgtLwrqMOPB51tN8lcz0sFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUzYjQ2YWI3OWI5ZmM1OGY1ZGM0Y2YyOWQ3MmRjNTI2N2Vj
M2VkZGUwHhcNMjUwMzI5MDcwMTM1WhcNMjUwMzMwMDcwMTM1WjAzMTEwLwYDVQQD
EyhjNDMyOGY3MzYxZDhmZTdlMmEwYWYzY2U5YjgxYjkyNmNjMTI1ZDQyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmEhN9n9Z0+/QQlVSW/NwpuHG4dwR
gm7DItipHqWUc9eOgQIOUQ93F3DJKdRbxB1tK5ni1dTuDd71lQJB9fytUsg46m71
R33SxCwjpcJLCNd1V2cHGUH+7LaEcEOpcYFOwiRJGdK9/DRxO5wXjRuoZFrLRixb
a6Ry3eugAhva3g0MN93E8er+65meXNdpQhh7NEddS2yIdAB36dRWDrgEN5ZJ83ka
XuoyA3AGRsEa4uF7fMoXYbA+dwPQjjH0orbe+BP79BaaCL9jnJjP7RBYBmEZjyR+
6a/zZ51EnM24X8S4JltPJq09+Zux1oKzxxB1HaQT0RVx3WT7JUjX2k6TDQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMQyj3Nh2P5+KgrzzpuBuSbMEl1CMB8GA1UdIwQY
MBaAFFO0arebn8WPXcTPKdctxSZ+w+3eMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVTdScXQ1dWZ4WTlkeE04cDF5M0ZKbjdEN2Q0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy9hYzlhZjYtN2ZjMy00ZDEzLWE1OTQt
MDYwYTQ3MzgwOTFkLzEvVTdScXQ1dWZ4WTlkeE04cDF5M0ZKbjdEN2Q0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYy9hYzlhZjYtN2ZjMy00ZDEzLWE1OTQtMDYwYTQ3MzgwOTFk
LzEvVTdScXQ1dWZ4WTlkeE04cDF5M0ZKbjdEN2Q0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA0HJXqZ+5
BjoRH4uMzOlwV6NxkDxf/gUKawYsbyc2Vke+vKJWYapj4Z6uxD7VW+yg/20Bco2i
T2bPO0Od9b+mufcHwx2SAWST4ocxpR5Gc33qsJD27YTyDycC8Vr9k4jrXBwOAi4e
ydF9XeU20s64guu4wJOQ2xJLjc/NNXxUBoQThB69jfBv8Np+BTMWjjQNWy5j+248
ROLNiVWG4FCJq0UDGCpy9aPy1VrIcEwC1s9lEng5F89f2ufbfJqY0iDvL6zd3rDU
WJ4Gfrnmrp2zF5iPiVRqsPn3WrarjrowUqurAA/qwuUPhf660lpLi/mwBzeDCSBg
tWe6jM3Cej3IkQ==
-----END CERTIFICATE-----