Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/2ff98e-6ff9-4233-b9f1-227e21e691e7/1/po_5Ip79jRK0Jz80b4xkVOpYfsw.mft
File:                     po_5Ip79jRK0Jz80b4xkVOpYfsw.mft (raw, json)
Hash identifier:          C5+VGQGZoBUphCbN4XjxlPHVqqUC56JegyInVb4iBuA=
Subject key identifier:   9A:EE:BB:C5:45:2F:4D:8E:E6:AD:64:45:AD:D7:97:86:90:31:AA:F0
Authority key identifier: A6:8F:F9:22:9E:FD:8D:12:B4:27:3F:34:6F:8C:64:54:EA:58:7E:CC
Certificate issuer:       /CN=a68ff9229efd8d12b4273f346f8c6454ea587ecc
Certificate serial:       0195E07D7890940D57AB852E6F3338B51EEC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/po_5Ip79jRK0Jz80b4xkVOpYfsw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/da/2ff98e-6ff9-4233-b9f1-227e21e691e7/1/po_5Ip79jRK0Jz80b4xkVOpYfsw.mft
Manifest number:          14C5
Signing time:             Sat 29 Mar 2025 06:01:13 +0000
Manifest this update:     Sat 29 Mar 2025 06:01:13 +0000
Manifest next update:     Sun 30 Mar 2025 06:01:13 +0000
Files and hashes:         1: NvB3sbtKygBuV_bHy4ubiaP6jUc.roa (hash: QHR99wgFE0npSuCrsPzML6fCQB1JMr/5JCdaknSW7aY=)
                          2: mkpPO0iUB-Trjc2yot_MhVuYzeI.roa (hash: bl4jbnOxpRldBgzWUbIAjtNRBkTTSgb/YiMXDC223qY=)
                          3: po_5Ip79jRK0Jz80b4xkVOpYfsw.crl (hash: 0xRRaMMUSCYdWkbnjy5N28ftnLlMDs1RbPcDpM0nvSk=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:e0:7d:78:90:94:0d:57:ab:85:2e:6f:33:38:b5:1e:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a68ff9229efd8d12b4273f346f8c6454ea587ecc
        Validity
            Not Before: Mar 29 06:01:13 2025 GMT
            Not After : Mar 30 06:01:13 2025 GMT
        Subject: CN=9aeebbc5452f4d8ee6ad6445add797869031aaf0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:3e:ff:4d:70:2e:71:06:22:b1:0e:06:e9:6d:
                    c0:32:e6:80:09:84:6c:1e:88:b0:ac:7d:be:2c:8b:
                    be:a8:43:88:4a:bd:82:eb:a7:25:b7:c2:25:7b:13:
                    b3:05:e7:d3:97:ef:c1:bd:ee:f3:0e:ca:61:a2:57:
                    e3:7b:5e:7f:2a:dc:2e:79:30:b5:c5:22:bd:3e:a1:
                    a8:d8:ef:01:40:87:0c:00:79:75:fb:27:b5:02:c3:
                    00:a0:5e:7b:ba:06:85:2e:42:b5:47:77:74:c6:05:
                    cb:1a:68:53:18:87:9e:e2:26:86:64:29:a8:e5:e0:
                    7e:65:a6:ad:02:fc:db:9d:11:fa:cd:94:de:9a:54:
                    99:8b:82:73:c6:86:7a:d7:ce:eb:9a:10:ea:66:f4:
                    a6:9c:d6:b9:76:48:19:a4:75:ca:26:8c:17:3c:62:
                    17:35:42:d2:e1:5e:0e:85:11:e9:1e:d9:ae:44:2a:
                    d4:0e:b3:3d:ee:1d:d3:c2:05:73:10:e5:0f:8e:74:
                    4a:5f:b7:7a:ef:60:6a:91:ea:cb:9f:ec:92:2d:56:
                    2d:81:b7:c3:6e:9d:a3:89:ff:88:1b:69:9f:00:46:
                    30:ce:63:71:b8:80:f4:c5:40:28:75:41:18:fb:43:
                    5e:de:23:df:91:3f:bf:e5:02:4e:22:34:64:45:23:
                    2d:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:EE:BB:C5:45:2F:4D:8E:E6:AD:64:45:AD:D7:97:86:90:31:AA:F0
            X509v3 Authority Key Identifier:
                keyid:A6:8F:F9:22:9E:FD:8D:12:B4:27:3F:34:6F:8C:64:54:EA:58:7E:CC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/po_5Ip79jRK0Jz80b4xkVOpYfsw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/2ff98e-6ff9-4233-b9f1-227e21e691e7/1/po_5Ip79jRK0Jz80b4xkVOpYfsw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/da/2ff98e-6ff9-4233-b9f1-227e21e691e7/1/po_5Ip79jRK0Jz80b4xkVOpYfsw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:e0:85:86:55:29:76:84:12:9e:a8:63:87:3d:62:7f:4f:67:
         0a:26:c4:3f:2f:6d:b4:80:77:60:0d:ec:23:e3:1a:7e:c8:62:
         49:31:15:b4:38:12:b0:98:10:f5:da:4b:f4:33:62:b0:1d:2b:
         f2:1b:79:c4:49:9b:5b:07:b6:cc:62:3f:6d:3b:e0:06:a1:17:
         10:93:fb:a3:3b:f5:2e:9b:a4:18:dc:ad:55:33:97:ad:11:04:
         0b:06:b0:f8:63:53:15:84:82:12:fc:e7:6c:3c:07:9b:24:3e:
         98:35:bf:d4:77:71:5b:4e:ba:30:aa:42:1a:87:a9:8a:66:fe:
         57:31:f7:ea:4e:05:ff:58:b0:cd:85:01:82:77:ee:59:4b:bb:
         c7:e0:97:85:de:fd:e4:9b:68:3e:d5:8b:44:96:f1:03:43:9e:
         b8:37:69:93:5f:21:c5:5e:7f:bf:82:1b:84:23:4a:35:1b:74:
         58:14:8b:ec:c6:73:3d:a0:aa:bf:aa:0a:77:9c:3f:5c:19:2f:
         8a:7b:81:09:93:59:fb:21:ca:9d:32:85:ea:c0:e5:64:d4:14:
         20:77:77:e5:4e:bb:44:03:89:a7:72:38:18:65:49:a2:2c:68:
         bb:4f:ff:42:ee:65:b6:c1:c3:88:78:12:89:3f:3f:dd:b1:82:
         1b:ff:fe:58
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZXgfXiQlA1Xq4UubzM4tR7sMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE2OGZmOTIyOWVmZDhkMTJiNDI3M2YzNDZmOGM2NDU0ZWE1
ODdlY2MwHhcNMjUwMzI5MDYwMTEzWhcNMjUwMzMwMDYwMTEzWjAzMTEwLwYDVQQD
Eyg5YWVlYmJjNTQ1MmY0ZDhlZTZhZDY0NDVhZGQ3OTc4NjkwMzFhYWYwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwj7/TXAucQYisQ4G6W3AMuaACYRs
HoiwrH2+LIu+qEOISr2C66clt8IlexOzBefTl+/Bve7zDspholfje15/KtwueTC1
xSK9PqGo2O8BQIcMAHl1+ye1AsMAoF57ugaFLkK1R3d0xgXLGmhTGIee4iaGZCmo
5eB+ZaatAvzbnRH6zZTemlSZi4JzxoZ6187rmhDqZvSmnNa5dkgZpHXKJowXPGIX
NULS4V4OhRHpHtmuRCrUDrM97h3TwgVzEOUPjnRKX7d672BqkerLn+ySLVYtgbfD
bp2jif+IG2mfAEYwzmNxuID0xUAodUEY+0Ne3iPfkT+/5QJOIjRkRSMttwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJruu8VFL02O5q1kRa3Xl4aQMarwMB8GA1UdIwQY
MBaAFKaP+SKe/Y0StCc/NG+MZFTqWH7MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcG9fNUlwNzlqUkswSno4MGI0eGtWT3BZZnN3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYS8yZmY5OGUtNmZmOS00MjMzLWI5ZjEt
MjI3ZTIxZTY5MWU3LzEvcG9fNUlwNzlqUkswSno4MGI0eGtWT3BZZnN3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYS8yZmY5OGUtNmZmOS00MjMzLWI5ZjEtMjI3ZTIxZTY5MWU3
LzEvcG9fNUlwNzlqUkswSno4MGI0eGtWT3BZZnN3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADuCFhlUp
doQSnqhjhz1if09nCibEPy9ttIB3YA3sI+MafshiSTEVtDgSsJgQ9dpL9DNisB0r
8ht5xEmbWwe2zGI/bTvgBqEXEJP7ozv1LpukGNytVTOXrREECwaw+GNTFYSCEvzn
bDwHmyQ+mDW/1HdxW066MKpCGoepimb+VzH36k4F/1iwzYUBgnfuWUu7x+CXhd79
5JtoPtWLRJbxA0OeuDdpk18hxV5/v4IbhCNKNRt0WBSL7MZzPaCqv6oKd5w/XBkv
inuBCZNZ+yHKnTKF6sDlZNQUIHd35U67RAOJp3I4GGVJoixou0//Qu5ltsHDiHgS
iT8/3bGCG//+WA==
-----END CERTIFICATE-----