Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/bd0d13-e983-4ff9-b507-5e656f1b4876/1/vkn7GQ9L0PWBWo5XnzZq1Y1dQfk.mft
File:                     vkn7GQ9L0PWBWo5XnzZq1Y1dQfk.mft (raw, json)
Hash identifier:          GsJ5kLkeJ7QlN5napM1d4TgOS/zjFGOMixrlT3WS0Sk=
Subject key identifier:   A4:41:CA:69:79:37:F0:05:D0:99:E3:1E:02:F8:BD:36:5D:D4:C1:94
Authority key identifier: BE:49:FB:19:0F:4B:D0:F5:81:5A:8E:57:9F:36:6A:D5:8D:5D:41:F9
Certificate issuer:       /CN=be49fb190f4bd0f5815a8e579f366ad58d5d41f9
Certificate serial:       0195E0B48F390AB886C16F3796FDA3F45640
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vkn7GQ9L0PWBWo5XnzZq1Y1dQfk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e6/bd0d13-e983-4ff9-b507-5e656f1b4876/1/vkn7GQ9L0PWBWo5XnzZq1Y1dQfk.mft
Manifest number:          12DF
Signing time:             Sat 29 Mar 2025 07:01:24 +0000
Manifest this update:     Sat 29 Mar 2025 07:01:24 +0000
Manifest next update:     Sun 30 Mar 2025 07:01:24 +0000
Files and hashes:         1: Ghw61h9q0dZx9p33fCHZwLJ--4g.roa (hash: XENiDzusC8HHdBPr6eoujfkQa5XCC/wJpP0SovK6s5s=)
                          2: W-gPHpmpBiVpNwoTM89LZF-6eKQ.roa (hash: 1KJlUjxdJ+ruVUfDwdtSoFOvk+NECBzB6oYJ432Oeqo=)
                          3: gNsZz63lZz-xYYJApJes6zZtWTc.roa (hash: oq/U8u4Y8U1JtfeAS0wF/F6M4QBJJs7QTcA9o7FJ9go=)
                          4: l-fA27baArnfz8uDdDUN4TrASTU.roa (hash: mDdwZSps/Tm3oeaUYl4v4D4Q07yFttXjrmZKf1wuoqE=)
                          5: uPPM1c3qaDPcgQcMOMUY1UnD8bw.roa (hash: TZFGaoE1GRn/2zGm9yP4VVapPA1t9azRKGFIQqjd5T4=)
                          6: vkn7GQ9L0PWBWo5XnzZq1Y1dQfk.crl (hash: xGfOGRzN5CTDaTBQi1YjniIy8qYZRMrngWZ7zJMlU6Q=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:e0:b4:8f:39:0a:b8:86:c1:6f:37:96:fd:a3:f4:56:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=be49fb190f4bd0f5815a8e579f366ad58d5d41f9
        Validity
            Not Before: Mar 29 07:01:24 2025 GMT
            Not After : Mar 30 07:01:24 2025 GMT
        Subject: CN=a441ca697937f005d099e31e02f8bd365dd4c194
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:0c:30:04:67:37:3a:61:3f:07:2f:d3:76:9d:
                    2b:88:30:b9:0d:9f:40:c3:85:b2:fe:c2:1e:96:1b:
                    42:f0:31:6a:38:6e:a5:5a:fd:08:da:76:3b:a8:59:
                    54:b4:32:be:70:17:b6:31:d3:ea:8f:ee:40:3c:d2:
                    a2:cc:1e:80:52:27:6e:07:45:77:02:af:d2:68:8a:
                    9d:57:1a:9c:f3:4f:79:9a:d3:7b:64:32:10:dc:95:
                    ae:60:f0:b9:ea:47:af:e0:49:c7:e0:2f:81:6e:4c:
                    24:16:9d:d4:fe:c8:cd:24:35:d2:fc:4a:32:01:9f:
                    81:80:b3:9c:8d:3a:88:66:dc:b1:01:d2:76:37:de:
                    e0:09:ac:ff:79:14:af:0a:06:d4:3d:eb:ce:44:cc:
                    8a:33:fb:85:8c:04:49:a2:ff:e8:8d:c9:00:7f:ae:
                    9e:ef:3b:02:04:4f:c6:1b:3c:be:e4:e0:9a:51:1d:
                    1b:c3:e5:da:fb:45:77:0c:93:ac:b6:ae:07:58:ab:
                    5d:0a:98:37:22:79:3f:6c:e4:92:ce:1f:a1:91:e9:
                    f7:77:50:29:bf:4a:c4:c8:4a:03:6d:51:fe:32:d5:
                    b1:25:bf:66:15:c4:f2:51:87:f8:fd:ed:ce:27:b3:
                    09:df:e4:11:15:50:d8:4d:86:08:2a:c3:89:09:c4:
                    de:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:41:CA:69:79:37:F0:05:D0:99:E3:1E:02:F8:BD:36:5D:D4:C1:94
            X509v3 Authority Key Identifier:
                keyid:BE:49:FB:19:0F:4B:D0:F5:81:5A:8E:57:9F:36:6A:D5:8D:5D:41:F9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vkn7GQ9L0PWBWo5XnzZq1Y1dQfk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/bd0d13-e983-4ff9-b507-5e656f1b4876/1/vkn7GQ9L0PWBWo5XnzZq1Y1dQfk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/bd0d13-e983-4ff9-b507-5e656f1b4876/1/vkn7GQ9L0PWBWo5XnzZq1Y1dQfk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:c5:fa:06:b0:31:ce:bd:d6:b7:6b:98:18:a0:81:ad:59:53:
         65:f2:e7:f0:6a:45:7d:01:83:5c:52:de:19:bd:07:b0:fb:27:
         76:50:d7:a4:e2:d2:60:b8:00:5b:3d:67:af:f3:5f:9b:10:03:
         5b:54:2b:a3:cb:29:82:8b:42:3e:94:19:11:88:59:2f:2f:4c:
         aa:ca:7d:ed:08:0e:29:e4:5b:9d:d2:34:05:42:51:d5:1f:7a:
         50:9b:d9:2b:16:fe:7a:01:73:74:fc:47:42:12:ff:7b:f2:71:
         96:6a:09:14:7b:f2:1b:45:e2:7b:29:f7:1d:67:d0:11:1a:21:
         55:4b:48:f9:cc:a1:4b:7d:1c:64:fd:b5:ca:ff:a6:53:10:a0:
         2d:00:54:d1:9a:db:c7:b8:eb:70:17:40:58:9f:67:ce:7d:e9:
         5b:33:97:d8:34:f1:ed:9e:94:f8:5b:e3:69:47:00:a6:94:2f:
         69:71:de:e6:2e:9a:e8:97:d1:6a:e1:7f:95:3f:f8:b0:37:6b:
         05:42:85:df:76:81:91:dd:ff:f8:f8:6f:00:9b:33:85:b2:40:
         a9:b7:de:f8:02:65:5e:5a:35:25:53:ec:e3:ac:aa:65:95:d8:
         3a:b8:57:e5:23:58:cd:5a:90:5c:d2:0c:a5:a4:78:44:d6:6b:
         be:00:7f:26
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZXgtI85CriGwW83lv2j9FZAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJlNDlmYjE5MGY0YmQwZjU4MTVhOGU1NzlmMzY2YWQ1OGQ1
ZDQxZjkwHhcNMjUwMzI5MDcwMTI0WhcNMjUwMzMwMDcwMTI0WjAzMTEwLwYDVQQD
EyhhNDQxY2E2OTc5MzdmMDA1ZDA5OWUzMWUwMmY4YmQzNjVkZDRjMTk0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtQwwBGc3OmE/By/Tdp0riDC5DZ9A
w4Wy/sIelhtC8DFqOG6lWv0I2nY7qFlUtDK+cBe2MdPqj+5APNKizB6AUiduB0V3
Aq/SaIqdVxqc8095mtN7ZDIQ3JWuYPC56kev4EnH4C+BbkwkFp3U/sjNJDXS/Eoy
AZ+BgLOcjTqIZtyxAdJ2N97gCaz/eRSvCgbUPevORMyKM/uFjARJov/ojckAf66e
7zsCBE/GGzy+5OCaUR0bw+Xa+0V3DJOstq4HWKtdCpg3Ink/bOSSzh+hken3d1Ap
v0rEyEoDbVH+MtWxJb9mFcTyUYf4/e3OJ7MJ3+QRFVDYTYYIKsOJCcTe6QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKRByml5N/AF0JnjHgL4vTZd1MGUMB8GA1UdIwQY
MBaAFL5J+xkPS9D1gVqOV582atWNXUH5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdmtuN0dROUwwUFdCV281WG56WnExWTFkUWZrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNi9iZDBkMTMtZTk4My00ZmY5LWI1MDct
NWU2NTZmMWI0ODc2LzEvdmtuN0dROUwwUFdCV281WG56WnExWTFkUWZrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNi9iZDBkMTMtZTk4My00ZmY5LWI1MDctNWU2NTZmMWI0ODc2
LzEvdmtuN0dROUwwUFdCV281WG56WnExWTFkUWZrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAR8X6BrAx
zr3Wt2uYGKCBrVlTZfLn8GpFfQGDXFLeGb0HsPsndlDXpOLSYLgAWz1nr/NfmxAD
W1Qro8spgotCPpQZEYhZLy9Mqsp97QgOKeRbndI0BUJR1R96UJvZKxb+egFzdPxH
QhL/e/JxlmoJFHvyG0Xieyn3HWfQERohVUtI+cyhS30cZP21yv+mUxCgLQBU0Zrb
x7jrcBdAWJ9nzn3pWzOX2DTx7Z6U+FvjaUcAppQvaXHe5i6a6JfRauF/lT/4sDdr
BUKF33aBkd3/+PhvAJszhbJAqbfe+AJlXlo1JVPs46yqZZXYOrhX5SNYzVqQXNIM
paR4RNZrvgB/Jg==
-----END CERTIFICATE-----