Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/058509-2fe7-486b-b4ad-8c74f9dd67fc/1/itkoGq_vyDda2LS35gSJlVWVIjc.mft
File:                     itkoGq_vyDda2LS35gSJlVWVIjc.mft (raw, json)
Hash identifier:          yfctGH0Qu2I6nur+sGO0ewSAp+3934LgxhJvPpyjq/c=
Subject key identifier:   29:46:9F:5A:82:55:83:36:F0:D0:D6:77:EE:07:66:49:36:A6:BD:89
Authority key identifier: 8A:D9:28:1A:AF:EF:C8:37:5A:D8:B4:B7:E6:04:89:95:55:95:22:37
Certificate issuer:       /CN=8ad9281aafefc8375ad8b4b7e604899555952237
Certificate serial:       0194BD85419A329A5F70EF4AB6C17AB4C526
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/itkoGq_vyDda2LS35gSJlVWVIjc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/44/058509-2fe7-486b-b4ad-8c74f9dd67fc/1/itkoGq_vyDda2LS35gSJlVWVIjc.mft
Manifest number:          142B
Signing time:             Fri 31 Jan 2025 18:00:14 +0000
Manifest this update:     Fri 31 Jan 2025 18:00:14 +0000
Manifest next update:     Sat 01 Feb 2025 18:00:14 +0000
Files and hashes:         1: S5poUcmm58bh9LYHwgnRXNYgnoA.roa (hash: lYdAfaTYBlu17YVjsaWJtgDfvkSUWB0Kx0isvQs/8cw=)
                          2: UH7ERX2uEAwiuiu2EIP73IUUkwI.roa (hash: 71rfZI37bB6WKWLPGXn68iFKAbS6rOx+kOHCTWBrP9Q=)
                          3: cFWMX2o_ui2JzGo_3BwtmNDE6Xg.roa (hash: XCpyD2PZhsa33O69EMpxJ6xZIifq0UTk39opm80d+zI=)
                          4: itkoGq_vyDda2LS35gSJlVWVIjc.crl (hash: DhntDB3oqC2rO0vSDdWqvh3sjS2Rdavzrqiqypghh4M=)
                          5: sShD_q4ceLwxQ66Q2G4C6NLHOns.roa (hash: BiX0Ojf2DbZMT20uSZBtFAbZP4As97iO/AHVcU+bzqI=)
                          6: tk3p5E2XBBz_gCKcQbPuR2gwU6g.roa (hash: /uRgiUmwXV30g9CXl0HkFIaUTifbBZ9DvHMj/iIVKLM=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bd:85:41:9a:32:9a:5f:70:ef:4a:b6:c1:7a:b4:c5:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8ad9281aafefc8375ad8b4b7e604899555952237
        Validity
            Not Before: Jan 31 18:00:14 2025 GMT
            Not After : Feb  1 18:00:14 2025 GMT
        Subject: CN=29469f5a82558336f0d0d677ee07664936a6bd89
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:d1:80:d5:5f:1e:e9:49:d5:23:ba:8a:54:43:
                    fc:a4:e0:8e:e5:e0:c7:cc:b0:72:57:9a:44:1f:fa:
                    d3:32:70:60:3d:01:05:72:f7:43:0c:a2:3a:7a:33:
                    4b:8b:ee:83:c7:66:cf:f8:74:0f:81:73:13:ea:23:
                    a7:a1:2a:37:e7:72:6e:ca:1b:bd:4c:da:a2:c4:9d:
                    75:b0:18:1c:26:74:67:e9:63:1f:2b:24:48:ad:9d:
                    1e:6e:4c:f4:7a:4c:9a:44:5a:14:b0:0f:27:23:f9:
                    30:a9:33:94:65:89:fd:98:c9:36:7d:61:02:78:81:
                    80:8b:d0:7a:4b:f7:bf:96:42:37:d2:f0:d7:3f:6a:
                    a7:8a:7c:b4:7e:b0:32:c5:09:5a:06:19:0a:38:fd:
                    23:aa:52:f5:b0:cd:35:42:3a:9b:8c:bb:5d:48:f2:
                    23:c1:6f:2c:31:be:a7:98:a8:cf:8c:50:e1:c8:96:
                    24:54:eb:40:c5:da:22:79:eb:9d:8a:63:72:7d:a3:
                    a5:c3:8f:51:ff:8a:aa:35:c0:a5:4a:06:6e:f3:3c:
                    a6:b0:15:a2:fd:1b:bb:a5:f5:99:03:e2:90:d6:f4:
                    e2:2a:86:e9:29:7d:f7:74:ec:80:0c:f1:62:d7:9a:
                    a9:fe:32:30:bf:3a:e3:48:99:84:9f:d1:62:f5:78:
                    f5:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:46:9F:5A:82:55:83:36:F0:D0:D6:77:EE:07:66:49:36:A6:BD:89
            X509v3 Authority Key Identifier:
                keyid:8A:D9:28:1A:AF:EF:C8:37:5A:D8:B4:B7:E6:04:89:95:55:95:22:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/itkoGq_vyDda2LS35gSJlVWVIjc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/058509-2fe7-486b-b4ad-8c74f9dd67fc/1/itkoGq_vyDda2LS35gSJlVWVIjc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/44/058509-2fe7-486b-b4ad-8c74f9dd67fc/1/itkoGq_vyDda2LS35gSJlVWVIjc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c6:a9:f8:e0:b1:07:5e:83:0e:ec:ef:ca:80:34:f1:46:70:5f:
         d8:5d:be:1b:c6:df:2f:1d:cd:41:a6:ba:f6:8a:f1:09:21:3a:
         1a:0f:e5:71:f9:ab:a7:0f:02:29:07:63:ed:8d:11:d6:e0:c5:
         49:8c:47:ce:ad:22:01:2c:70:dd:29:2b:ea:66:05:f9:28:c6:
         f7:08:be:59:50:64:bf:6f:1e:ce:71:47:df:f3:a6:d0:28:72:
         44:da:4f:f9:eb:12:d6:11:b6:f5:ed:9a:cc:15:93:2a:e8:43:
         59:11:02:de:0a:ec:01:86:10:fa:aa:48:a8:06:ec:a3:ec:d3:
         7e:14:47:7f:cf:e0:d1:ca:55:21:62:e0:e3:f2:80:f7:ef:22:
         8c:37:6e:52:94:1e:71:d1:17:5d:f8:73:86:99:91:af:b2:99:
         a8:3a:85:08:78:9a:fa:a3:77:04:09:6d:3e:ce:ee:09:df:6f:
         00:f4:c3:bf:eb:20:a8:de:2f:7c:95:be:c3:24:c8:2b:63:96:
         5f:b3:05:fb:57:1a:7e:62:7a:61:84:0a:ef:8b:c7:b2:e9:66:
         f6:6d:0b:97:e7:2c:97:c8:32:68:97:85:a3:18:67:a3:4c:47:
         29:e8:9c:89:23:24:21:d7:bc:f3:3e:94:3a:29:0f:6f:83:5e:
         40:35:1b:7c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9hUGaMppfcO9KtsF6tMUmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhhZDkyODFhYWZlZmM4Mzc1YWQ4YjRiN2U2MDQ4OTk1NTU5
NTIyMzcwHhcNMjUwMTMxMTgwMDE0WhcNMjUwMjAxMTgwMDE0WjAzMTEwLwYDVQQD
EygyOTQ2OWY1YTgyNTU4MzM2ZjBkMGQ2NzdlZTA3NjY0OTM2YTZiZDg5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAodGA1V8e6UnVI7qKVEP8pOCO5eDH
zLByV5pEH/rTMnBgPQEFcvdDDKI6ejNLi+6Dx2bP+HQPgXMT6iOnoSo353Juyhu9
TNqixJ11sBgcJnRn6WMfKyRIrZ0ebkz0ekyaRFoUsA8nI/kwqTOUZYn9mMk2fWEC
eIGAi9B6S/e/lkI30vDXP2qniny0frAyxQlaBhkKOP0jqlL1sM01QjqbjLtdSPIj
wW8sMb6nmKjPjFDhyJYkVOtAxdoieeudimNyfaOlw49R/4qqNcClSgZu8zymsBWi
/Ru7pfWZA+KQ1vTiKobpKX33dOyADPFi15qp/jIwvzrjSJmEn9Fi9Xj1zwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFClGn1qCVYM28NDWd+4HZkk2pr2JMB8GA1UdIwQY
MBaAFIrZKBqv78g3Wti0t+YEiZVVlSI3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaXRrb0dxX3Z5RGRhMkxTMzVnU0psVldWSWpjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NC8wNTg1MDktMmZlNy00ODZiLWI0YWQt
OGM3NGY5ZGQ2N2ZjLzEvaXRrb0dxX3Z5RGRhMkxTMzVnU0psVldWSWpjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NC8wNTg1MDktMmZlNy00ODZiLWI0YWQtOGM3NGY5ZGQ2N2Zj
LzEvaXRrb0dxX3Z5RGRhMkxTMzVnU0psVldWSWpjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAxqn44LEH
XoMO7O/KgDTxRnBf2F2+G8bfLx3NQaa69orxCSE6Gg/lcfmrpw8CKQdj7Y0R1uDF
SYxHzq0iASxw3Skr6mYF+SjG9wi+WVBkv28eznFH3/Om0ChyRNpP+esS1hG29e2a
zBWTKuhDWREC3grsAYYQ+qpIqAbso+zTfhRHf8/g0cpVIWLg4/KA9+8ijDduUpQe
cdEXXfhzhpmRr7KZqDqFCHia+qN3BAltPs7uCd9vAPTDv+sgqN4vfJW+wyTIK2OW
X7MF+1cafmJ6YYQK74vHsulm9m0Ll+csl8gyaJeFoxhno0xHKeiciSMkIde88z6U
OikPb4NeQDUbfA==
-----END CERTIFICATE-----