Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/d5da0c-9cf3-4f8b-a562-cb11bc5b2f1b/1/syycJt98zYrTjYm9XUk4C5Ox4Ak.mft
File:                     syycJt98zYrTjYm9XUk4C5Ox4Ak.mft (raw, json)
Hash identifier:          XcmGRc4r/tBmtwgtkEy4P/G3PSUvHTNsJw2ZYtRAhuQ=
Subject key identifier:   10:C2:9C:36:80:56:BE:37:F2:3A:A0:B4:0F:B2:35:94:BB:93:13:6E
Authority key identifier: B3:2C:9C:26:DF:7C:CD:8A:D3:8D:89:BD:5D:49:38:0B:93:B1:E0:09
Certificate issuer:       /CN=b32c9c26df7ccd8ad38d89bd5d49380b93b1e009
Certificate serial:       0195E19005F4715A89A7C51AB54699D6E0E1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/syycJt98zYrTjYm9XUk4C5Ox4Ak.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cd/d5da0c-9cf3-4f8b-a562-cb11bc5b2f1b/1/syycJt98zYrTjYm9XUk4C5Ox4Ak.mft
Manifest number:          1206
Signing time:             Sat 29 Mar 2025 11:01:07 +0000
Manifest this update:     Sat 29 Mar 2025 11:01:07 +0000
Manifest next update:     Sun 30 Mar 2025 11:01:07 +0000
Files and hashes:         1: 48xH5tEXWZ2vsePNnUQpi1Rtp9M.roa (hash: WHr/LpVgK5v2vj342g/pLR9Q+sJ3hUKQeA6ICsPwqVA=)
                          2: ETntAp8qWJdvAD1JKZJVCJAE9wA.roa (hash: hfJtS+VPVR6qaIkwB60e9Ssm1Fsvf2mGWUvaOy9P8yY=)
                          3: alVgOiGQaygKKfRiNXMQm1ojUWU.roa (hash: aOJQStyVH2msGIdBHorM0kl3RBtrxvSgZcDUWInDqNM=)
                          4: q3J9TtOoI-IBP0Qit4nrBm2KIQ8.roa (hash: 6P7QPyce2/pI9ok7uG9x267locOdLMrJCvEmCKSQLwA=)
                          5: syycJt98zYrTjYm9XUk4C5Ox4Ak.crl (hash: 0Hp0mz1VlJnSLjZqtgLskWkHgBfg+p0xA66Uf+IyOLc=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:e1:90:05:f4:71:5a:89:a7:c5:1a:b5:46:99:d6:e0:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b32c9c26df7ccd8ad38d89bd5d49380b93b1e009
        Validity
            Not Before: Mar 29 11:01:07 2025 GMT
            Not After : Mar 30 11:01:07 2025 GMT
        Subject: CN=10c29c368056be37f23aa0b40fb23594bb93136e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:de:af:07:fc:46:6b:25:f5:de:7c:a9:09:ca:
                    e2:a8:32:8a:1f:3a:b8:69:d7:6d:f9:81:b1:c4:36:
                    12:74:59:e5:fa:85:16:36:07:c6:15:29:8a:a6:17:
                    5a:d2:4e:82:ad:43:06:f5:c4:80:d9:57:57:fd:e3:
                    d6:c7:c0:4a:e8:06:73:f9:cc:4d:b4:7e:1c:5a:e2:
                    6e:b8:dd:74:f7:03:8b:99:b7:b2:4e:c1:f7:5b:50:
                    1f:8e:a4:ad:00:92:15:fd:1c:e3:e5:eb:cd:9e:3b:
                    4c:53:d3:cb:7d:8e:4b:42:f6:7d:66:82:a6:25:d4:
                    63:8e:49:da:80:fc:6d:b1:3b:d4:e8:01:e7:ef:7d:
                    10:6f:c3:2f:05:c6:89:ee:81:28:34:15:83:5d:79:
                    bd:d9:8d:54:a8:d3:23:eb:37:a6:57:fa:eb:26:48:
                    29:7c:0e:5a:39:dc:7d:bb:a2:6d:7b:99:ef:ff:ed:
                    24:f1:5b:cf:44:e4:a0:96:d0:e1:e5:93:29:96:e3:
                    b2:d3:aa:44:fc:bc:6c:97:cb:25:30:14:7f:d6:a1:
                    4c:bc:75:1b:31:c8:d3:a8:eb:a8:e4:ce:41:fa:2e:
                    3c:07:21:28:fa:4a:96:db:49:ef:d8:8e:30:d9:f6:
                    f6:99:f6:5d:75:98:95:54:cf:7a:9d:89:53:b6:d4:
                    0c:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:C2:9C:36:80:56:BE:37:F2:3A:A0:B4:0F:B2:35:94:BB:93:13:6E
            X509v3 Authority Key Identifier:
                keyid:B3:2C:9C:26:DF:7C:CD:8A:D3:8D:89:BD:5D:49:38:0B:93:B1:E0:09

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/syycJt98zYrTjYm9XUk4C5Ox4Ak.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/d5da0c-9cf3-4f8b-a562-cb11bc5b2f1b/1/syycJt98zYrTjYm9XUk4C5Ox4Ak.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/d5da0c-9cf3-4f8b-a562-cb11bc5b2f1b/1/syycJt98zYrTjYm9XUk4C5Ox4Ak.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:6b:6b:91:a0:d9:63:49:7e:b0:68:a3:ab:15:bf:b9:25:94:
         ce:63:24:b8:f3:c1:cf:63:d2:f8:66:70:b0:c1:ed:ab:43:e3:
         1c:c4:ce:f8:32:eb:5c:7c:90:b9:03:83:2a:7f:54:49:eb:1f:
         59:36:3a:9a:80:ac:fa:26:92:63:90:ed:63:b3:e9:1d:cf:25:
         df:b6:fd:63:14:0f:e7:3b:07:44:6c:f4:2c:44:64:7a:b3:04:
         b4:db:93:1e:df:6d:f4:f7:7c:52:11:ea:15:fa:1b:63:98:56:
         55:b7:1d:51:23:a0:c8:f8:9c:dd:6d:5d:5d:5c:14:bf:f6:8e:
         99:53:8f:d8:01:b6:25:53:1b:1f:1d:46:fd:18:1d:19:50:05:
         8e:7c:93:18:7c:7e:52:b1:54:7f:69:1c:01:d3:ac:1e:c8:e0:
         2e:78:a3:f8:c0:03:54:f2:78:94:91:ba:47:d0:af:f5:f2:d3:
         84:2c:58:71:53:67:72:5b:70:0a:f2:7a:57:4b:ff:fb:4b:4b:
         47:38:9e:94:56:66:49:9c:5d:5d:50:23:bf:88:eb:5e:64:52:
         9b:8c:c9:0d:4c:8c:32:8e:ad:7b:58:ea:01:be:ac:40:d8:fc:
         43:7c:74:78:83:e5:63:0b:50:5b:07:1b:54:46:bb:83:9b:99:
         f6:92:3c:00
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZXhkAX0cVqJp8UatUaZ1uDhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIzMmM5YzI2ZGY3Y2NkOGFkMzhkODliZDVkNDkzODBiOTNi
MWUwMDkwHhcNMjUwMzI5MTEwMTA3WhcNMjUwMzMwMTEwMTA3WjAzMTEwLwYDVQQD
EygxMGMyOWMzNjgwNTZiZTM3ZjIzYWEwYjQwZmIyMzU5NGJiOTMxMzZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAud6vB/xGayX13nypCcriqDKKHzq4
addt+YGxxDYSdFnl+oUWNgfGFSmKphda0k6CrUMG9cSA2VdX/ePWx8BK6AZz+cxN
tH4cWuJuuN109wOLmbeyTsH3W1AfjqStAJIV/Rzj5evNnjtMU9PLfY5LQvZ9ZoKm
JdRjjknagPxtsTvU6AHn730Qb8MvBcaJ7oEoNBWDXXm92Y1UqNMj6zemV/rrJkgp
fA5aOdx9u6Jte5nv/+0k8VvPROSgltDh5ZMpluOy06pE/Lxsl8slMBR/1qFMvHUb
McjTqOuo5M5B+i48ByEo+kqW20nv2I4w2fb2mfZddZiVVM96nYlTttQM6QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBDCnDaAVr438jqgtA+yNZS7kxNuMB8GA1UdIwQY
MBaAFLMsnCbffM2K042JvV1JOAuTseAJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc3l5Y0p0OTh6WXJUalltOVhVazRDNU94NEFrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZC9kNWRhMGMtOWNmMy00ZjhiLWE1NjIt
Y2IxMWJjNWIyZjFiLzEvc3l5Y0p0OTh6WXJUalltOVhVazRDNU94NEFrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZC9kNWRhMGMtOWNmMy00ZjhiLWE1NjItY2IxMWJjNWIyZjFi
LzEvc3l5Y0p0OTh6WXJUalltOVhVazRDNU94NEFrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACmtrkaDZ
Y0l+sGijqxW/uSWUzmMkuPPBz2PS+GZwsMHtq0PjHMTO+DLrXHyQuQODKn9USesf
WTY6moCs+iaSY5DtY7PpHc8l37b9YxQP5zsHRGz0LERkerMEtNuTHt9t9Pd8UhHq
FfobY5hWVbcdUSOgyPic3W1dXVwUv/aOmVOP2AG2JVMbHx1G/RgdGVAFjnyTGHx+
UrFUf2kcAdOsHsjgLnij+MADVPJ4lJG6R9Cv9fLThCxYcVNncltwCvJ6V0v/+0tL
RzielFZmSZxdXVAjv4jrXmRSm4zJDUyMMo6te1jqAb6sQNj8Q3x0eIPlYwtQWwcb
VEa7g5uZ9pI8AA==
-----END CERTIFICATE-----