Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/b278df-ed37-4de7-a675-107a8d85bd30/1/7VprotIki8R4KsD9s8ZLlGZAsJw.mft
File:                     7VprotIki8R4KsD9s8ZLlGZAsJw.mft (raw, json)
Hash identifier:          xNgyhY7SydGMK63enogQLQtx7X4NHuhLYs6RmABkdEA=
Subject key identifier:   10:E2:F9:C4:70:D7:FE:F0:EB:3C:BA:3B:D3:D8:44:74:3B:26:EF:55
Authority key identifier: ED:5A:6B:A2:D2:24:8B:C4:78:2A:C0:FD:B3:C6:4B:94:66:40:B0:9C
Certificate issuer:       /CN=ed5a6ba2d2248bc4782ac0fdb3c64b946640b09c
Certificate serial:       0195E0EAFF84E70138ACD8BEB8213D146A91
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7VprotIki8R4KsD9s8ZLlGZAsJw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/80/b278df-ed37-4de7-a675-107a8d85bd30/1/7VprotIki8R4KsD9s8ZLlGZAsJw.mft
Manifest number:          0537
Signing time:             Sat 29 Mar 2025 08:00:51 +0000
Manifest this update:     Sat 29 Mar 2025 08:00:51 +0000
Manifest next update:     Sun 30 Mar 2025 08:00:51 +0000
Files and hashes:         1: 314MaBVE3hjtYKkC4-99ME_UBjc.roa (hash: 7UXNIyhk1ejIJ/HGQxCr8shkd1oXUhsfxNUgODxpVqQ=)
                          2: 7VprotIki8R4KsD9s8ZLlGZAsJw.crl (hash: ns0C/vaRQicuXkKwsJSucu4MGPJZRdm8oqKaWEHvlws=)
                          3: IIp94GUi2CKDAXo7hzU1qNdLWVg.roa (hash: YmRe6VqQCgI0nMfOZ9MBk1EFIvFG9HxQKfWRMtofors=)
                          4: K2cl5DfywZ2FHhGLEEiE9l1uo7M.roa (hash: ibEDhV+yzuNtZt5ET+zP4p+w29VfnTjyjguslhXO6kQ=)
                          5: tgJhHxWB9k1nD0P-uBud1SgQj9Q.roa (hash: x3MqStSpB4AHpyiqWuAgIrBK5ybLesbTtKI3yKep0ZQ=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:e0:ea:ff:84:e7:01:38:ac:d8:be:b8:21:3d:14:6a:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ed5a6ba2d2248bc4782ac0fdb3c64b946640b09c
        Validity
            Not Before: Mar 29 08:00:51 2025 GMT
            Not After : Mar 30 08:00:51 2025 GMT
        Subject: CN=10e2f9c470d7fef0eb3cba3bd3d844743b26ef55
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:77:4f:5b:f6:3a:be:ad:80:0f:eb:94:1d:1f:
                    7c:a5:a4:74:5f:92:c5:e1:10:04:c1:04:1e:e8:0a:
                    12:a8:a9:01:9c:9c:ba:9e:13:63:bd:8e:76:0b:53:
                    b3:39:a6:6b:ea:59:31:92:8e:31:f3:78:23:66:c5:
                    fb:a7:70:fc:f2:12:16:cc:2a:ca:81:63:63:77:b8:
                    9b:a9:18:fa:1e:d9:c6:8e:1a:d4:6a:08:08:2d:28:
                    ee:73:54:0c:ba:7c:60:78:f8:62:25:06:44:02:d7:
                    19:a0:4f:ac:fc:68:5b:5f:ba:25:91:2f:8d:d5:22:
                    db:8f:03:6e:f4:8f:65:c6:07:12:b8:07:cc:94:e3:
                    60:c1:bf:1f:c0:48:11:d4:05:d3:d2:83:11:4a:d5:
                    17:67:02:b9:f1:bc:88:d8:69:ea:74:6d:47:19:ef:
                    7f:bf:c5:33:70:e4:7f:f1:42:72:6b:72:2d:1d:9a:
                    e3:01:56:9b:44:f9:51:11:1b:01:bb:0e:83:ca:12:
                    c6:2a:82:78:6e:60:6b:70:ad:6b:42:e2:7d:a2:07:
                    5d:b5:07:4d:fa:54:2c:80:42:34:fa:87:3d:9d:31:
                    89:0d:ab:d5:36:7f:bf:c0:ea:54:c4:de:e6:1f:24:
                    a1:f4:87:00:37:2b:d4:57:2d:22:4d:b9:c2:36:69:
                    ab:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:E2:F9:C4:70:D7:FE:F0:EB:3C:BA:3B:D3:D8:44:74:3B:26:EF:55
            X509v3 Authority Key Identifier:
                keyid:ED:5A:6B:A2:D2:24:8B:C4:78:2A:C0:FD:B3:C6:4B:94:66:40:B0:9C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7VprotIki8R4KsD9s8ZLlGZAsJw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/b278df-ed37-4de7-a675-107a8d85bd30/1/7VprotIki8R4KsD9s8ZLlGZAsJw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/80/b278df-ed37-4de7-a675-107a8d85bd30/1/7VprotIki8R4KsD9s8ZLlGZAsJw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:16:6b:cc:87:00:bb:35:b8:5a:69:59:0d:05:bd:cb:64:24:
         40:f2:cb:7b:a3:89:a7:4f:19:e8:7b:10:a9:2f:81:30:be:75:
         0f:d4:ca:c4:28:32:90:87:8c:07:80:21:20:30:d2:96:e6:b1:
         06:a7:60:36:27:7c:69:24:0b:b4:c6:db:e0:80:b9:25:ba:4b:
         df:1c:83:67:f1:b4:26:41:0d:a4:f7:03:c4:fd:92:c0:28:48:
         ac:0d:f2:63:b4:73:41:5b:50:05:79:7c:63:b3:eb:2c:90:45:
         26:4e:95:06:e4:54:24:ab:68:a2:11:d7:d1:cf:c9:e5:66:46:
         df:d3:7c:cc:bd:55:69:4e:44:bd:60:28:1f:c1:c7:ac:56:21:
         d3:f8:e4:b6:c2:d2:e2:f2:5f:c4:ce:9e:f8:29:11:29:de:40:
         d9:64:40:50:35:f9:f7:0c:8b:24:cb:da:31:bd:d2:7d:e6:35:
         c4:c5:45:10:77:97:28:bd:a2:ac:71:da:b5:b3:8b:17:52:7c:
         48:cb:5b:86:28:7a:04:06:42:21:e0:f7:52:5e:33:ac:c4:c5:
         cf:62:57:78:8a:01:c1:cd:c6:b0:32:cd:e3:e2:7d:80:dc:86:
         cc:4e:d0:36:f4:d3:72:5f:88:b3:4a:a7:5e:26:ce:19:2d:1c:
         1b:6e:32:bb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZXg6v+E5wE4rNi+uCE9FGqRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVkNWE2YmEyZDIyNDhiYzQ3ODJhYzBmZGIzYzY0Yjk0NjY0
MGIwOWMwHhcNMjUwMzI5MDgwMDUxWhcNMjUwMzMwMDgwMDUxWjAzMTEwLwYDVQQD
EygxMGUyZjljNDcwZDdmZWYwZWIzY2JhM2JkM2Q4NDQ3NDNiMjZlZjU1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA33dPW/Y6vq2AD+uUHR98paR0X5LF
4RAEwQQe6AoSqKkBnJy6nhNjvY52C1OzOaZr6lkxko4x83gjZsX7p3D88hIWzCrK
gWNjd7ibqRj6HtnGjhrUaggILSjuc1QMunxgePhiJQZEAtcZoE+s/GhbX7olkS+N
1SLbjwNu9I9lxgcSuAfMlONgwb8fwEgR1AXT0oMRStUXZwK58byI2GnqdG1HGe9/
v8UzcOR/8UJya3ItHZrjAVabRPlRERsBuw6DyhLGKoJ4bmBrcK1rQuJ9ogddtQdN
+lQsgEI0+oc9nTGJDavVNn+/wOpUxN7mHySh9IcANyvUVy0iTbnCNmmrVwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBDi+cRw1/7w6zy6O9PYRHQ7Ju9VMB8GA1UdIwQY
MBaAFO1aa6LSJIvEeCrA/bPGS5RmQLCcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN1Zwcm90SWtpOFI0S3NEOXM4WkxsR1pBc0p3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC9iMjc4ZGYtZWQzNy00ZGU3LWE2NzUt
MTA3YThkODViZDMwLzEvN1Zwcm90SWtpOFI0S3NEOXM4WkxsR1pBc0p3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MC9iMjc4ZGYtZWQzNy00ZGU3LWE2NzUtMTA3YThkODViZDMw
LzEvN1Zwcm90SWtpOFI0S3NEOXM4WkxsR1pBc0p3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIBZrzIcA
uzW4WmlZDQW9y2QkQPLLe6OJp08Z6HsQqS+BML51D9TKxCgykIeMB4AhIDDSluax
BqdgNid8aSQLtMbb4IC5JbpL3xyDZ/G0JkENpPcDxP2SwChIrA3yY7RzQVtQBXl8
Y7PrLJBFJk6VBuRUJKtoohHX0c/J5WZG39N8zL1VaU5EvWAoH8HHrFYh0/jktsLS
4vJfxM6e+CkRKd5A2WRAUDX59wyLJMvaMb3SfeY1xMVFEHeXKL2irHHatbOLF1J8
SMtbhih6BAZCIeD3Ul4zrMTFz2JXeIoBwc3GsDLN4+J9gNyGzE7QNvTTcl+Is0qn
XibOGS0cG24yuw==
-----END CERTIFICATE-----