Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/68d16a-82e5-4f4a-8730-27d03e393fb7/1/B52QU3F6FqdsEK6Dj1YlBVvgSB8.mft
File:                     B52QU3F6FqdsEK6Dj1YlBVvgSB8.mft (raw, json)
Hash identifier:          b2c5QBJDDcuSwBfw5O+nJSCDUNwWFmMG8fSxcDbg8tk=
Subject key identifier:   18:B1:73:ED:90:96:8C:D4:F6:68:7C:F7:70:47:75:D7:45:BB:0B:08
Authority key identifier: 07:9D:90:53:71:7A:16:A7:6C:10:AE:83:8F:56:25:05:5B:E0:48:1F
Certificate issuer:       /CN=079d9053717a16a76c10ae838f5625055be0481f
Certificate serial:       0195E19059BDC215D6A0208E527C8E2F408B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/B52QU3F6FqdsEK6Dj1YlBVvgSB8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f5/68d16a-82e5-4f4a-8730-27d03e393fb7/1/B52QU3F6FqdsEK6Dj1YlBVvgSB8.mft
Manifest number:          1132
Signing time:             Sat 29 Mar 2025 11:01:28 +0000
Manifest this update:     Sat 29 Mar 2025 11:01:28 +0000
Manifest next update:     Sun 30 Mar 2025 11:01:28 +0000
Files and hashes:         1: B52QU3F6FqdsEK6Dj1YlBVvgSB8.crl (hash: m2h+nKgbOxdvXiC2/RasalFTanDXgwtve1xdy1byjyk=)
                          2: U-t6muEZr7pNFroiZDAmj1SwdlM.roa (hash: Q/H0JPhez1qYtzjdS0HazxdGlKUwOr6kovdCBLCRjsA=)
                          3: US2iZbOrWCL2cayiZwxakKtP05c.roa (hash: 52YhQk2tAw/4PeSZdk7kK5Ee58QSFkl7S17es1QKE9c=)
                          4: aobLXTmPd_6Ukp1ManNdqX-3DQA.roa (hash: pfQSQLiXOyjEu0hp6NuVLx8Gd5m02zdqAnm2pyHFZ88=)
                          5: g7F_Fvh3ZgbyaeuUtwVluPjR9fc.roa (hash: SoRDaEmpe54M6I618oM5fpeVkP6ZI2X6WhkQ5L0HHos=)
                          6: oqk7vyXZrC-D5_5cpZHpWjEfCJw.roa (hash: Iyl0VEv5gWpgZiq6xlIMrOhBw5qUY0Z75JnVHakz9ZQ=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:e1:90:59:bd:c2:15:d6:a0:20:8e:52:7c:8e:2f:40:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=079d9053717a16a76c10ae838f5625055be0481f
        Validity
            Not Before: Mar 29 11:01:28 2025 GMT
            Not After : Mar 30 11:01:28 2025 GMT
        Subject: CN=18b173ed90968cd4f6687cf7704775d745bb0b08
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:ff:73:9d:cc:c9:05:9c:96:ec:9a:83:7f:8b:
                    0d:45:12:7b:63:4e:7f:53:3d:ca:5c:e8:94:91:35:
                    27:e3:05:6c:2f:d5:bd:b4:24:42:77:52:82:b5:a7:
                    d7:c2:17:6e:88:17:9a:2c:3e:7a:07:64:f7:9b:a0:
                    16:45:d3:84:0d:93:d6:f6:a6:fe:90:84:3c:f5:a4:
                    25:5e:a6:24:4e:5a:62:80:0d:19:d7:33:3c:b5:ee:
                    fa:db:28:2d:a4:62:ff:36:24:d0:97:63:67:f8:0b:
                    ed:2b:15:69:ba:89:72:4d:b5:3c:eb:f3:4f:85:e5:
                    6b:03:a9:40:d1:ef:08:a3:8c:f5:42:f9:f5:cc:4f:
                    20:bd:5a:4b:fb:da:d5:51:bc:17:bc:77:6d:3b:96:
                    fb:b8:ed:15:d0:bf:cf:ee:47:6c:aa:5c:7f:e6:45:
                    b9:1c:37:ed:e0:e6:10:4c:3b:a8:17:c8:7b:d3:28:
                    43:d0:97:dd:b9:ac:f9:2c:17:8a:a6:ac:ba:11:5f:
                    e0:67:79:d0:49:4b:ab:02:98:1f:8a:80:94:65:7f:
                    3c:15:81:6b:cd:ae:7e:ba:a8:69:f1:91:02:6d:59:
                    23:73:a5:4d:c3:8e:11:e0:e1:9a:75:08:e7:99:18:
                    2b:24:fa:17:bd:54:08:40:ee:c0:0e:f8:24:b5:e4:
                    79:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:B1:73:ED:90:96:8C:D4:F6:68:7C:F7:70:47:75:D7:45:BB:0B:08
            X509v3 Authority Key Identifier:
                keyid:07:9D:90:53:71:7A:16:A7:6C:10:AE:83:8F:56:25:05:5B:E0:48:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B52QU3F6FqdsEK6Dj1YlBVvgSB8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/68d16a-82e5-4f4a-8730-27d03e393fb7/1/B52QU3F6FqdsEK6Dj1YlBVvgSB8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/68d16a-82e5-4f4a-8730-27d03e393fb7/1/B52QU3F6FqdsEK6Dj1YlBVvgSB8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:cf:99:7f:ad:ff:7a:77:5f:78:9f:78:3f:bb:b8:b8:59:6a:
         2c:01:d4:1e:51:13:6a:cb:5d:af:6e:2c:1c:43:fe:ea:43:27:
         08:8a:eb:4a:a2:ec:7a:58:98:e7:63:88:0a:ca:b2:8c:29:13:
         7c:b8:e0:0a:d4:aa:92:87:8a:e2:b7:fc:ed:25:b1:ec:20:b3:
         50:ce:02:e7:17:34:a0:1d:79:cf:ab:f8:56:ac:f6:bc:15:50:
         43:56:56:90:bf:1a:dc:28:2c:df:7c:2b:79:7c:88:f9:9f:78:
         dd:79:8d:5a:74:cd:18:6a:60:0f:4b:57:9a:23:f2:e4:99:a5:
         ba:83:d7:bd:b4:24:9b:19:88:c8:19:6b:de:34:f5:25:18:39:
         44:c1:3e:80:2f:22:ae:68:55:b5:b6:0e:1d:1d:8b:e2:7e:6a:
         57:62:5c:be:cb:7a:e3:6d:2b:45:c1:68:91:21:23:3c:9c:94:
         2f:ae:af:15:a4:20:36:ce:cd:ab:ff:36:20:53:77:34:6c:16:
         3c:35:19:b2:e2:8c:f0:40:b2:db:7e:8f:59:1c:7d:bb:f2:55:
         36:e4:7f:a0:ce:81:da:58:8f:81:07:8d:5b:96:62:2e:a2:b0:
         07:b6:37:06:bb:3a:5b:54:d0:37:04:4d:4d:fa:f1:4c:b6:fa:
         10:e3:54:8c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZXhkFm9whXWoCCOUnyOL0CLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA3OWQ5MDUzNzE3YTE2YTc2YzEwYWU4MzhmNTYyNTA1NWJl
MDQ4MWYwHhcNMjUwMzI5MTEwMTI4WhcNMjUwMzMwMTEwMTI4WjAzMTEwLwYDVQQD
EygxOGIxNzNlZDkwOTY4Y2Q0ZjY2ODdjZjc3MDQ3NzVkNzQ1YmIwYjA4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmP9znczJBZyW7JqDf4sNRRJ7Y05/
Uz3KXOiUkTUn4wVsL9W9tCRCd1KCtafXwhduiBeaLD56B2T3m6AWRdOEDZPW9qb+
kIQ89aQlXqYkTlpigA0Z1zM8te762ygtpGL/NiTQl2Nn+AvtKxVpuolyTbU86/NP
heVrA6lA0e8Io4z1Qvn1zE8gvVpL+9rVUbwXvHdtO5b7uO0V0L/P7kdsqlx/5kW5
HDft4OYQTDuoF8h70yhD0Jfduaz5LBeKpqy6EV/gZ3nQSUurApgfioCUZX88FYFr
za5+uqhp8ZECbVkjc6VNw44R4OGadQjnmRgrJPoXvVQIQO7ADvgkteR5OwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBixc+2QlozU9mh893BHdddFuwsIMB8GA1UdIwQY
MBaAFAedkFNxehanbBCug49WJQVb4EgfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQjUyUVUzRjZGcWRzRUs2RGoxWWxCVnZnU0I4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNS82OGQxNmEtODJlNS00ZjRhLTg3MzAt
MjdkMDNlMzkzZmI3LzEvQjUyUVUzRjZGcWRzRUs2RGoxWWxCVnZnU0I4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNS82OGQxNmEtODJlNS00ZjRhLTg3MzAtMjdkMDNlMzkzZmI3
LzEvQjUyUVUzRjZGcWRzRUs2RGoxWWxCVnZnU0I4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYs+Zf63/
endfeJ94P7u4uFlqLAHUHlETastdr24sHEP+6kMnCIrrSqLseliY52OICsqyjCkT
fLjgCtSqkoeK4rf87SWx7CCzUM4C5xc0oB15z6v4Vqz2vBVQQ1ZWkL8a3Cgs33wr
eXyI+Z943XmNWnTNGGpgD0tXmiPy5JmluoPXvbQkmxmIyBlr3jT1JRg5RME+gC8i
rmhVtbYOHR2L4n5qV2Jcvst6420rRcFokSEjPJyUL66vFaQgNs7Nq/82IFN3NGwW
PDUZsuKM8ECy236PWRx9u/JVNuR/oM6B2liPgQeNW5ZiLqKwB7Y3Brs6W1TQNwRN
TfrxTLb6EONUjA==
-----END CERTIFICATE-----