Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/30d4e8-e090-4bf2-8185-3687c818ede5/1/oxbHZZrx1WvHGPr2FPCSdY9e3H8.mft
File:                     oxbHZZrx1WvHGPr2FPCSdY9e3H8.mft (raw, json)
Hash identifier:          q+HbUFBlNRuiZr9hM91oOxdwGnC+o2CV5ZRbFDM5rcA=
Subject key identifier:   1F:8F:37:2E:20:2F:45:41:F2:43:88:8E:BA:CB:26:C7:2F:C0:95:02
Authority key identifier: A3:16:C7:65:9A:F1:D5:6B:C7:18:FA:F6:14:F0:92:75:8F:5E:DC:7F
Certificate issuer:       /CN=a316c7659af1d56bc718faf614f092758f5edc7f
Certificate serial:       0195E1906C25B041DB3CD22DD19146487B3F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/oxbHZZrx1WvHGPr2FPCSdY9e3H8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cc/30d4e8-e090-4bf2-8185-3687c818ede5/1/oxbHZZrx1WvHGPr2FPCSdY9e3H8.mft
Manifest number:          0E9E
Signing time:             Sat 29 Mar 2025 11:01:33 +0000
Manifest this update:     Sat 29 Mar 2025 11:01:33 +0000
Manifest next update:     Sun 30 Mar 2025 11:01:33 +0000
Files and hashes:         1: 2E5B6hTQ8FYt2qCEddzv6E09HfU.roa (hash: YU3JzyaYxmpBfxew9K/2XcID/FBkgDQAWKRh4zEO3iM=)
                          2: KPfJAcgx7L3A0aFCbGFayqyF-FY.roa (hash: xJj+dDH+N/nG56pXNQf9GMw4+lIOhhZqTxulM01CFMg=)
                          3: Qx409Qk6GX6Nwcvw3Y5aDCAHJk0.roa (hash: OCq3Y6pgPMMrp5TWkQ0F3uKjszaciJXmNLT1MDQryyA=)
                          4: iK9udSOii6eVubAybBf08kgqr4w.roa (hash: ec+Jzg/u7sS5r/6pUZL1GtKcTt/c/Wl3ArbZF1Qkfkk=)
                          5: oxbHZZrx1WvHGPr2FPCSdY9e3H8.crl (hash: +39fFQVLAGiUCb9Es6j8IebJc700NW7nfqeOa+3KQvM=)
                          6: yFU0STDV72MqU-sRM_Kr-cA_ycU.roa (hash: 5zjLZ1D73ucyALUkDp0UIe5Nzvw4GxQzx2gLau7CgqA=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:e1:90:6c:25:b0:41:db:3c:d2:2d:d1:91:46:48:7b:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a316c7659af1d56bc718faf614f092758f5edc7f
        Validity
            Not Before: Mar 29 11:01:33 2025 GMT
            Not After : Mar 30 11:01:33 2025 GMT
        Subject: CN=1f8f372e202f4541f243888ebacb26c72fc09502
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:b9:76:d9:1a:70:ac:7e:43:1e:ed:9b:6f:76:
                    df:7a:10:5a:88:58:80:18:e7:90:8a:3f:c9:5f:59:
                    97:c0:e6:f0:df:66:2e:89:3e:17:1b:06:a7:32:a7:
                    f9:53:52:2c:64:1b:9a:99:c8:04:21:e9:28:a1:be:
                    a9:54:91:6e:76:95:d6:f7:fa:7b:89:64:32:dc:a6:
                    48:54:82:cf:c1:68:00:7b:18:57:fc:0b:0c:67:92:
                    0e:5c:b7:3f:d2:2e:39:a2:db:7f:55:97:e1:8d:5c:
                    43:86:63:66:c8:26:d6:6a:93:3c:c8:b9:db:e6:10:
                    79:e2:fc:8a:6f:b6:90:41:3d:cb:7b:cb:88:1e:21:
                    77:3e:11:c1:f3:3d:e2:64:2a:e8:eb:b6:38:77:60:
                    ac:b1:cf:44:0c:8f:08:f8:57:18:13:bf:25:ee:8d:
                    5c:24:0c:04:c5:60:50:cb:c7:8a:aa:07:8e:9a:62:
                    d1:72:a4:c2:7f:f2:b7:65:a7:01:e8:99:d6:90:85:
                    ab:d3:87:8b:fa:0d:ba:1b:b5:ac:50:c3:21:9a:8d:
                    46:a7:0a:9f:23:fc:03:ee:dc:de:c0:ba:47:63:a4:
                    70:21:61:3f:3f:1a:c4:08:40:85:d2:2e:5c:f4:2f:
                    2d:9e:59:05:3e:45:2d:ee:ee:c0:62:8f:c1:1e:23:
                    3e:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:8F:37:2E:20:2F:45:41:F2:43:88:8E:BA:CB:26:C7:2F:C0:95:02
            X509v3 Authority Key Identifier:
                keyid:A3:16:C7:65:9A:F1:D5:6B:C7:18:FA:F6:14:F0:92:75:8F:5E:DC:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oxbHZZrx1WvHGPr2FPCSdY9e3H8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/30d4e8-e090-4bf2-8185-3687c818ede5/1/oxbHZZrx1WvHGPr2FPCSdY9e3H8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/30d4e8-e090-4bf2-8185-3687c818ede5/1/oxbHZZrx1WvHGPr2FPCSdY9e3H8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:21:ab:9b:fb:77:07:0e:40:58:48:46:03:f4:63:76:ea:76:
         80:59:12:eb:27:7e:d9:7c:ea:de:91:ce:3c:56:62:70:e3:b8:
         cc:0d:f9:61:20:84:10:46:c8:53:9d:9c:77:5a:56:04:ca:d6:
         ad:80:be:31:03:4b:42:01:5e:8c:d8:75:cf:5f:b2:c6:43:bc:
         01:f4:39:d5:bb:b3:7d:44:df:b3:d7:25:19:f5:a0:b1:d0:90:
         88:1c:48:fc:97:3b:8c:57:49:19:65:f8:a4:c3:4e:b4:ad:69:
         cd:29:2e:be:66:a7:6e:c0:0e:b6:72:f8:b8:1e:62:1e:7b:70:
         c0:78:49:c0:03:e5:bb:e9:c3:16:f5:c0:37:0c:39:7a:e9:63:
         d4:74:5d:19:fd:6b:0f:42:57:bf:ec:7c:20:ba:e9:82:17:42:
         27:25:e2:6c:7c:cc:17:1d:5f:89:c3:18:f5:b7:4c:48:08:8a:
         06:ce:6a:61:98:50:c9:d1:c0:b0:dd:03:0e:d3:c5:18:3a:97:
         43:a1:39:19:b3:ff:74:b7:ce:ab:d8:33:15:20:c9:df:ff:64:
         56:cb:ca:52:a2:92:60:e6:c3:42:4d:39:3b:38:ec:98:7d:73:
         c2:a8:7a:ce:95:69:58:60:77:01:fe:5d:b4:93:a3:b6:76:c3:
         31:fc:ab:32
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZXhkGwlsEHbPNIt0ZFGSHs/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEzMTZjNzY1OWFmMWQ1NmJjNzE4ZmFmNjE0ZjA5Mjc1OGY1
ZWRjN2YwHhcNMjUwMzI5MTEwMTMzWhcNMjUwMzMwMTEwMTMzWjAzMTEwLwYDVQQD
EygxZjhmMzcyZTIwMmY0NTQxZjI0Mzg4OGViYWNiMjZjNzJmYzA5NTAyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5Ll22RpwrH5DHu2bb3bfehBaiFiA
GOeQij/JX1mXwObw32YuiT4XGwanMqf5U1IsZBuamcgEIekoob6pVJFudpXW9/p7
iWQy3KZIVILPwWgAexhX/AsMZ5IOXLc/0i45ott/VZfhjVxDhmNmyCbWapM8yLnb
5hB54vyKb7aQQT3Le8uIHiF3PhHB8z3iZCro67Y4d2Cssc9EDI8I+FcYE78l7o1c
JAwExWBQy8eKqgeOmmLRcqTCf/K3ZacB6JnWkIWr04eL+g26G7WsUMMhmo1Gpwqf
I/wD7tzewLpHY6RwIWE/PxrECECF0i5c9C8tnlkFPkUt7u7AYo/BHiM+hwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB+PNy4gL0VB8kOIjrrLJscvwJUCMB8GA1UdIwQY
MBaAFKMWx2Wa8dVrxxj69hTwknWPXtx/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb3hiSFpacngxV3ZIR1ByMkZQQ1NkWTllM0g4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy8zMGQ0ZTgtZTA5MC00YmYyLTgxODUt
MzY4N2M4MThlZGU1LzEvb3hiSFpacngxV3ZIR1ByMkZQQ1NkWTllM0g4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYy8zMGQ0ZTgtZTA5MC00YmYyLTgxODUtMzY4N2M4MThlZGU1
LzEvb3hiSFpacngxV3ZIR1ByMkZQQ1NkWTllM0g4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeSGrm/t3
Bw5AWEhGA/Rjdup2gFkS6yd+2Xzq3pHOPFZicOO4zA35YSCEEEbIU52cd1pWBMrW
rYC+MQNLQgFejNh1z1+yxkO8AfQ51buzfUTfs9clGfWgsdCQiBxI/Jc7jFdJGWX4
pMNOtK1pzSkuvmanbsAOtnL4uB5iHntwwHhJwAPlu+nDFvXANww5eulj1HRdGf1r
D0JXv+x8ILrpghdCJyXibHzMFx1ficMY9bdMSAiKBs5qYZhQydHAsN0DDtPFGDqX
Q6E5GbP/dLfOq9gzFSDJ3/9kVsvKUqKSYObDQk05OzjsmH1zwqh6zpVpWGB3Af5d
tJOjtnbDMfyrMg==
-----END CERTIFICATE-----