Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/d5bbce-4220-4ec4-8af5-2c1a7730bd25/1/ExnwUryecoSIgHQ5DJ0LwSdgZpI.mft
File:                     ExnwUryecoSIgHQ5DJ0LwSdgZpI.mft (raw, json)
Hash identifier:          oh1j5wVtXy2uqqLGRKdMiLlhfyQVd8hLNk/5pxnKk0U=
Subject key identifier:   C0:E4:DE:41:83:09:49:2A:5C:7D:D4:07:5C:B2:04:E5:03:35:EC:57
Authority key identifier: 13:19:F0:52:BC:9E:72:84:88:80:74:39:0C:9D:0B:C1:27:60:66:92
Certificate issuer:       /CN=1319f052bc9e7284888074390c9d0bc127606692
Certificate serial:       0194BCAA0676F484E6433F287980A7F35BC8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ExnwUryecoSIgHQ5DJ0LwSdgZpI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/29/d5bbce-4220-4ec4-8af5-2c1a7730bd25/1/ExnwUryecoSIgHQ5DJ0LwSdgZpI.mft
Manifest number:          1464
Signing time:             Fri 31 Jan 2025 14:00:46 +0000
Manifest this update:     Fri 31 Jan 2025 14:00:46 +0000
Manifest next update:     Sat 01 Feb 2025 14:00:46 +0000
Files and hashes:         1: 6TknrlKhj_raOY5i61r4APdWgi8.roa (hash: Azh2w6lu1iMwNp36BaIHM3fgEc2SSAdGdIuaWOlC4bU=)
                          2: 6kgMCA_yg3nxvdWkonLmiL8us10.roa (hash: Rw/PVOBSR56XgIYCXH0ZrGAd8VZfvOELoAhjhJknHmg=)
                          3: 9Jn3Ao8kD2UL0UBy8f0i2zzE-8o.roa (hash: x5aIy8suItwCsXcwC1xvM9N3xbkHkVnj8Bi3Hjm0x2A=)
                          4: ExnwUryecoSIgHQ5DJ0LwSdgZpI.crl (hash: SEoJ76yLB1LB9mYM6JdDZobvcmdxBu2CnG0WCcTcUwk=)
                          5: HTGaeGMP8CdzPiu4Kdvv1i2tT0s.roa (hash: fsIzfA72TKkiu+lQEzJHOVfbq74I+G15Uri9KTlcXHM=)
                          6: L01JaFs6upvCxukuRpNJVKLONEM.roa (hash: RD22oITNNi+VkpKpvsFNn1oAsq5Be0nqy5KSTok7hqU=)
                          7: fRuZqnM9bu9aFuMAbNUnnejAy3E.roa (hash: 0Pw20JeeLvEf3W3rAxbHJOJ0+O4OMpDfQqbFAkyf380=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:aa:06:76:f4:84:e6:43:3f:28:79:80:a7:f3:5b:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1319f052bc9e7284888074390c9d0bc127606692
        Validity
            Not Before: Jan 31 14:00:46 2025 GMT
            Not After : Feb  1 14:00:46 2025 GMT
        Subject: CN=c0e4de418309492a5c7dd4075cb204e50335ec57
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:41:d0:f6:91:bd:13:53:ba:df:37:86:a8:f3:
                    78:b2:c6:59:17:80:b2:d3:5f:56:bc:de:fc:43:79:
                    8d:95:3b:1a:7f:58:b5:0a:fc:ab:12:27:48:ef:59:
                    54:40:df:26:c9:7e:41:b2:97:c4:74:8b:e2:5f:40:
                    cc:4a:e5:c7:24:21:79:1d:c1:fd:3a:d9:08:10:63:
                    39:d8:c9:d5:3c:2d:76:c5:0f:d4:c0:72:d0:48:12:
                    f9:52:15:a3:82:06:d1:18:0e:61:b4:2a:89:92:ec:
                    96:fb:68:24:60:4d:26:a7:8a:a8:76:c8:da:67:ca:
                    80:3b:2e:6e:84:6a:49:24:59:a7:24:94:27:66:52:
                    3e:93:f5:39:1d:26:c7:9a:39:4d:c5:4b:65:28:9b:
                    d2:3a:ef:2a:9c:cb:56:52:4d:56:b3:81:e7:ab:15:
                    df:c0:31:92:28:9e:9a:ec:42:54:d7:68:29:3a:1d:
                    10:9e:14:d5:8f:93:f0:58:d6:9c:86:0e:88:11:91:
                    71:6a:8d:c3:e6:75:52:58:d3:34:dd:1e:5a:96:23:
                    da:55:f2:e0:37:d8:4a:f2:15:3c:70:2e:2e:de:20:
                    92:0f:0b:88:23:1e:02:48:55:4e:8b:00:24:89:b3:
                    15:77:28:89:b9:e6:e9:e1:cc:7e:a7:91:9a:85:7f:
                    04:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:E4:DE:41:83:09:49:2A:5C:7D:D4:07:5C:B2:04:E5:03:35:EC:57
            X509v3 Authority Key Identifier:
                keyid:13:19:F0:52:BC:9E:72:84:88:80:74:39:0C:9D:0B:C1:27:60:66:92

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ExnwUryecoSIgHQ5DJ0LwSdgZpI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/d5bbce-4220-4ec4-8af5-2c1a7730bd25/1/ExnwUryecoSIgHQ5DJ0LwSdgZpI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/29/d5bbce-4220-4ec4-8af5-2c1a7730bd25/1/ExnwUryecoSIgHQ5DJ0LwSdgZpI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:3f:68:80:74:43:f9:ee:13:e0:83:86:8a:fd:f0:3a:94:a0:
         37:4b:78:25:cd:97:95:8f:78:d5:25:d8:9f:2a:84:5a:7f:b0:
         d7:9c:8d:81:0d:d1:f8:40:99:a8:d8:e6:ed:80:2f:cc:5b:9f:
         7c:89:9f:9d:25:20:f2:3c:af:a8:c9:8b:a3:1f:a6:f3:7b:0d:
         8d:82:94:e3:ed:e8:c5:ba:ed:60:60:98:30:ca:58:24:90:e0:
         1f:85:e5:96:fa:6c:9c:7f:a9:20:6e:36:0c:00:0a:51:c6:b5:
         21:f0:35:8c:a3:8d:74:56:42:31:e3:ba:da:c0:09:57:e1:c7:
         5d:f5:59:62:46:55:ca:cd:5d:fe:34:01:a0:47:0e:e4:99:c9:
         5a:3c:df:4e:c2:59:ae:a7:5d:66:08:4c:92:83:ce:69:a6:1a:
         aa:3b:5e:40:0e:01:0a:8a:9f:a8:2f:d7:cc:c2:f6:18:4e:27:
         87:23:f8:49:be:ba:76:1e:52:54:54:c4:79:3c:d0:72:94:93:
         d6:5c:0d:b5:aa:c7:3b:46:a1:69:cc:33:7d:93:00:db:94:aa:
         9a:d6:8e:b6:e5:0b:73:9d:86:9c:79:d6:66:24:b5:e0:ec:e8:
         66:ea:bb:93:bf:4c:84:91:75:54:96:42:8a:e7:90:ec:9e:7f:
         d9:93:da:93
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8qgZ29ITmQz8oeYCn81vIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEzMTlmMDUyYmM5ZTcyODQ4ODgwNzQzOTBjOWQwYmMxMjc2
MDY2OTIwHhcNMjUwMTMxMTQwMDQ2WhcNMjUwMjAxMTQwMDQ2WjAzMTEwLwYDVQQD
EyhjMGU0ZGU0MTgzMDk0OTJhNWM3ZGQ0MDc1Y2IyMDRlNTAzMzVlYzU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvUHQ9pG9E1O63zeGqPN4ssZZF4Cy
019WvN78Q3mNlTsaf1i1CvyrEidI71lUQN8myX5BspfEdIviX0DMSuXHJCF5HcH9
OtkIEGM52MnVPC12xQ/UwHLQSBL5UhWjggbRGA5htCqJkuyW+2gkYE0mp4qodsja
Z8qAOy5uhGpJJFmnJJQnZlI+k/U5HSbHmjlNxUtlKJvSOu8qnMtWUk1Ws4HnqxXf
wDGSKJ6a7EJU12gpOh0QnhTVj5PwWNachg6IEZFxao3D5nVSWNM03R5aliPaVfLg
N9hK8hU8cC4u3iCSDwuIIx4CSFVOiwAkibMVdyiJuebp4cx+p5GahX8EzwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMDk3kGDCUkqXH3UB1yyBOUDNexXMB8GA1UdIwQY
MBaAFBMZ8FK8nnKEiIB0OQydC8EnYGaSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRXhud1VyeWVjb1NJZ0hRNURKMEx3U2RnWnBJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS9kNWJiY2UtNDIyMC00ZWM0LThhZjUt
MmMxYTc3MzBiZDI1LzEvRXhud1VyeWVjb1NJZ0hRNURKMEx3U2RnWnBJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOS9kNWJiY2UtNDIyMC00ZWM0LThhZjUtMmMxYTc3MzBiZDI1
LzEvRXhud1VyeWVjb1NJZ0hRNURKMEx3U2RnWnBJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMj9ogHRD
+e4T4IOGiv3wOpSgN0t4Jc2XlY941SXYnyqEWn+w15yNgQ3R+ECZqNjm7YAvzFuf
fImfnSUg8jyvqMmLox+m83sNjYKU4+3oxbrtYGCYMMpYJJDgH4XllvpsnH+pIG42
DAAKUca1IfA1jKONdFZCMeO62sAJV+HHXfVZYkZVys1d/jQBoEcO5JnJWjzfTsJZ
rqddZghMkoPOaaYaqjteQA4BCoqfqC/XzML2GE4nhyP4Sb66dh5SVFTEeTzQcpST
1lwNtarHO0ahacwzfZMA25SqmtaOtuULc52GnHnWZiS14OzoZuq7k79MhJF1VJZC
iueQ7J5/2ZPakw==
-----END CERTIFICATE-----