Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/c3c5b7-fe57-474c-8ae3-de18510ea50a/1/XTAFa8TiA5Om_r9ldrORLH6laaY.mft
File:                     XTAFa8TiA5Om_r9ldrORLH6laaY.mft (raw, json)
Hash identifier:          2XgnQELrlxDhaumpgiWXx0l3wamcnWu0Y54pPOZQdBg=
Subject key identifier:   A6:95:AC:C4:17:E6:7E:11:D6:11:8E:40:FE:E9:CC:57:1E:FD:F4:C2
Authority key identifier: 5D:30:05:6B:C4:E2:03:93:A6:FE:BF:65:76:B3:91:2C:7E:A5:69:A6
Certificate issuer:       /CN=5d30056bc4e20393a6febf6576b3912c7ea569a6
Certificate serial:       01948F63F425D45AECAADB75A3656F7EA9C8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XTAFa8TiA5Om_r9ldrORLH6laaY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cb/c3c5b7-fe57-474c-8ae3-de18510ea50a/1/XTAFa8TiA5Om_r9ldrORLH6laaY.mft
Manifest number:          0280
Signing time:             Wed 22 Jan 2025 19:01:19 +0000
Manifest this update:     Wed 22 Jan 2025 19:01:19 +0000
Manifest next update:     Thu 23 Jan 2025 19:01:19 +0000
Files and hashes:         1: 2Th08CsGcph52DOySFf8avd11s0.roa (hash: WgaVVlF9ZBAWiPJHuR7pDrCRfi4rbJHfsc6PSI0qP/M=)
                          2: JHjtR6dPHZXFBsIOZw0u6xWP-BA.roa (hash: PHwjXpxNa4Nxa9fqZhKBs8iq8segIku/HFSGGt3kNbU=)
                          3: XTAFa8TiA5Om_r9ldrORLH6laaY.crl (hash: GNdPUXj3uMOvtE3JvyVUKyAl2Emc61Py5c1EsFlVv2A=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:8f:63:f4:25:d4:5a:ec:aa:db:75:a3:65:6f:7e:a9:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d30056bc4e20393a6febf6576b3912c7ea569a6
        Validity
            Not Before: Jan 22 19:01:19 2025 GMT
            Not After : Jan 23 19:01:19 2025 GMT
        Subject: CN=a695acc417e67e11d6118e40fee9cc571efdf4c2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:7a:51:ef:08:e9:12:da:cc:40:8b:c7:76:c9:
                    f5:c9:31:5e:cb:43:d0:df:bb:c3:1f:9d:e4:81:6d:
                    ee:22:74:36:e7:5a:0e:09:3b:ae:27:71:f1:be:68:
                    ac:c5:6a:af:4a:cb:0c:d9:0c:81:24:41:3c:0c:60:
                    1c:10:d8:a8:13:82:e9:e4:25:7f:b5:27:42:6e:98:
                    42:2c:48:4c:70:a7:fa:d6:8e:b6:23:6e:fa:fd:be:
                    2d:be:7d:ea:9e:4f:ad:75:7d:0d:31:56:5b:f5:7c:
                    c7:a7:f2:1b:5c:42:8e:71:6e:1c:7c:e2:27:18:88:
                    e4:d6:fb:43:c4:98:7c:b5:b3:96:43:ce:d8:be:38:
                    98:7e:3b:8b:f5:c7:c8:08:69:3b:7f:92:11:a8:d2:
                    95:82:9e:95:bc:eb:ef:4d:ab:96:1a:04:33:d4:ec:
                    9f:5d:e3:8a:84:a9:9f:24:76:e8:82:cd:14:c9:44:
                    6c:67:99:63:c6:fe:b6:65:02:cd:60:31:eb:1d:17:
                    07:27:0e:77:90:b1:d9:0b:12:d8:a4:9b:fe:a4:00:
                    e9:e9:15:44:ff:81:5d:2d:62:e6:ed:22:aa:ed:04:
                    c5:8a:2d:a4:42:a9:32:da:bd:5e:e1:ae:40:e3:32:
                    7f:1d:d6:0a:5f:ef:3f:16:d8:b5:55:a9:87:21:85:
                    33:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:95:AC:C4:17:E6:7E:11:D6:11:8E:40:FE:E9:CC:57:1E:FD:F4:C2
            X509v3 Authority Key Identifier:
                keyid:5D:30:05:6B:C4:E2:03:93:A6:FE:BF:65:76:B3:91:2C:7E:A5:69:A6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XTAFa8TiA5Om_r9ldrORLH6laaY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/c3c5b7-fe57-474c-8ae3-de18510ea50a/1/XTAFa8TiA5Om_r9ldrORLH6laaY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/c3c5b7-fe57-474c-8ae3-de18510ea50a/1/XTAFa8TiA5Om_r9ldrORLH6laaY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:2d:fa:87:46:39:f9:c3:28:a3:7b:f0:2b:e6:26:4b:dc:0f:
         c0:bf:29:50:e3:bc:06:b9:61:4d:6f:a9:f4:e9:72:7c:c0:44:
         84:d3:6a:36:cc:81:9a:e2:66:75:e7:bd:9e:65:09:da:17:0d:
         54:7f:57:9f:c2:cf:76:a0:07:49:50:73:5a:8e:d0:31:0b:78:
         60:9e:2e:f8:79:f0:e2:b5:c3:3c:bf:0f:d8:27:68:2d:23:d4:
         77:0e:54:66:9a:1f:20:63:cd:a7:00:b8:f1:79:cc:42:f7:8d:
         3e:0f:b1:4e:f5:a9:5a:69:5e:e7:72:43:0f:9f:4c:d8:c8:45:
         ac:11:12:d3:c3:92:88:c7:f8:4b:e1:f1:ed:86:c6:ea:ee:f3:
         81:f5:55:9b:8a:5c:a1:f6:fb:6b:75:99:d2:50:2a:ef:84:c3:
         19:27:f9:99:3b:ab:64:a1:b2:fc:4b:f4:b3:b9:bf:49:bf:01:
         3f:6d:39:fa:a4:7a:33:06:60:34:f6:9b:a0:19:ac:d1:09:13:
         35:52:07:2a:05:c4:e6:ba:ff:d7:2b:97:7c:a9:14:29:d7:5f:
         f8:60:43:b6:ad:76:15:1f:67:34:1f:5d:34:59:2a:27:7a:79:
         c0:b7:89:59:f9:2a:5d:08:86:ed:cf:7f:40:ab:b7:b8:17:12:
         ce:c6:5c:89
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZSPY/Ql1Frsqtt1o2VvfqnIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVkMzAwNTZiYzRlMjAzOTNhNmZlYmY2NTc2YjM5MTJjN2Vh
NTY5YTYwHhcNMjUwMTIyMTkwMTE5WhcNMjUwMTIzMTkwMTE5WjAzMTEwLwYDVQQD
EyhhNjk1YWNjNDE3ZTY3ZTExZDYxMThlNDBmZWU5Y2M1NzFlZmRmNGMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAonpR7wjpEtrMQIvHdsn1yTFey0PQ
37vDH53kgW3uInQ251oOCTuuJ3HxvmisxWqvSssM2QyBJEE8DGAcENioE4Lp5CV/
tSdCbphCLEhMcKf61o62I276/b4tvn3qnk+tdX0NMVZb9XzHp/IbXEKOcW4cfOIn
GIjk1vtDxJh8tbOWQ87YvjiYfjuL9cfICGk7f5IRqNKVgp6VvOvvTauWGgQz1Oyf
XeOKhKmfJHbogs0UyURsZ5ljxv62ZQLNYDHrHRcHJw53kLHZCxLYpJv+pADp6RVE
/4FdLWLm7SKq7QTFii2kQqky2r1e4a5A4zJ/HdYKX+8/Fti1VamHIYUzNQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKaVrMQX5n4R1hGOQP7pzFce/fTCMB8GA1UdIwQY
MBaAFF0wBWvE4gOTpv6/ZXazkSx+pWmmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWFRBRmE4VGlBNU9tX3I5bGRyT1JMSDZsYWFZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYi9jM2M1YjctZmU1Ny00NzRjLThhZTMt
ZGUxODUxMGVhNTBhLzEvWFRBRmE4VGlBNU9tX3I5bGRyT1JMSDZsYWFZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYi9jM2M1YjctZmU1Ny00NzRjLThhZTMtZGUxODUxMGVhNTBh
LzEvWFRBRmE4VGlBNU9tX3I5bGRyT1JMSDZsYWFZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIC36h0Y5
+cMoo3vwK+YmS9wPwL8pUOO8BrlhTW+p9OlyfMBEhNNqNsyBmuJmdee9nmUJ2hcN
VH9Xn8LPdqAHSVBzWo7QMQt4YJ4u+Hnw4rXDPL8P2CdoLSPUdw5UZpofIGPNpwC4
8XnMQveNPg+xTvWpWmle53JDD59M2MhFrBES08OSiMf4S+Hx7YbG6u7zgfVVm4pc
ofb7a3WZ0lAq74TDGSf5mTurZKGy/Ev0s7m/Sb8BP205+qR6MwZgNPaboBms0QkT
NVIHKgXE5rr/1yuXfKkUKddf+GBDtq12FR9nNB9dNFkqJ3p5wLeJWfkqXQiG7c9/
QKu3uBcSzsZciQ==
-----END CERTIFICATE-----