Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/57688e-a964-4933-8631-850f34906229/1/MR1it_2fz8h9_qmHUVdnyDjiG7k.mft
File:                     MR1it_2fz8h9_qmHUVdnyDjiG7k.mft (raw, json)
Hash identifier:          QbmjQRZ6BB04K2rdCt8IU5CZpFrGTDYoUmlo0JqWdQs=
Subject key identifier:   20:3A:37:D1:0A:29:2B:73:38:47:5C:4F:B0:D0:53:2C:1E:02:F1:51
Authority key identifier: 31:1D:62:B7:FD:9F:CF:C8:7D:FE:A9:87:51:57:67:C8:38:E2:1B:B9
Certificate issuer:       /CN=311d62b7fd9fcfc87dfea987515767c838e21bb9
Certificate serial:       0194BD4E52762DC92B63322CC33F8289C870
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MR1it_2fz8h9_qmHUVdnyDjiG7k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4c/57688e-a964-4933-8631-850f34906229/1/MR1it_2fz8h9_qmHUVdnyDjiG7k.mft
Manifest number:          1433
Signing time:             Fri 31 Jan 2025 17:00:14 +0000
Manifest this update:     Fri 31 Jan 2025 17:00:14 +0000
Manifest next update:     Sat 01 Feb 2025 17:00:14 +0000
Files and hashes:         1: 2hjMikwQnrrEAN1yMmo4yNGPigk.roa (hash: va6CTRy1tpKgbw+4WXa+7xdTzdjfkhLrL6uUCxg03v4=)
                          2: 4XJYPiN1fgyY_K6wVqkzO9GGpIo.roa (hash: HslWaDijgsXRLbUJY37P5SIKUX/YCI1vBK/fp1leFRU=)
                          3: 4anNvnqS_uath7Y6EK7D7BC3YzE.roa (hash: Bnv1UeMKU1sDW+whV3TipNzoS8kdERV9WO2YiJiRQJk=)
                          4: ATev8_uhunQc5j7herGHoXGBx0s.roa (hash: raqWEdHQFWUAKbr4xna0wvj80ivdH8FgqZZk8a2xIoc=)
                          5: MR1it_2fz8h9_qmHUVdnyDjiG7k.crl (hash: 6dS/l6wns0UON6+yQr34tUgzw/GyxKgnm/2ymMY0kaI=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bd:4e:52:76:2d:c9:2b:63:32:2c:c3:3f:82:89:c8:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=311d62b7fd9fcfc87dfea987515767c838e21bb9
        Validity
            Not Before: Jan 31 17:00:14 2025 GMT
            Not After : Feb  1 17:00:14 2025 GMT
        Subject: CN=203a37d10a292b7338475c4fb0d0532c1e02f151
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:50:f4:3f:7e:84:44:9d:1a:c6:b6:02:2f:8b:
                    b4:11:0e:ea:36:e3:f2:59:fd:cc:04:41:10:15:af:
                    9d:18:99:3e:77:ee:ce:84:e8:7d:ee:11:0c:c7:9f:
                    ce:8b:4f:b9:8f:1c:fb:0a:50:71:5a:0a:66:4b:f6:
                    b0:b0:cc:9e:e9:56:f3:5b:6f:b4:b0:e9:f9:95:3b:
                    44:7e:db:9a:98:de:da:e8:3b:87:94:8b:a5:54:59:
                    11:54:d0:6c:b2:3e:d1:61:f7:25:eb:43:57:2d:c0:
                    8d:1c:3e:72:0b:0b:58:33:5c:a5:ab:a9:3a:8e:18:
                    02:d1:32:30:7b:2a:1e:2c:62:68:50:15:a7:54:eb:
                    e6:d3:69:be:27:6d:2a:51:5f:93:1c:69:63:b2:f9:
                    93:8d:09:88:1a:47:22:e1:f9:37:5c:d6:f5:77:c3:
                    09:2a:39:5f:59:77:9a:5e:dc:93:99:a6:5e:df:cd:
                    ee:ac:50:c2:53:ea:96:32:70:a6:d5:3c:c0:47:52:
                    1f:72:e0:c9:fe:94:2d:90:f8:bd:e8:d4:c9:ec:2d:
                    3e:41:b4:2a:a2:e0:f3:12:36:3b:28:79:99:9c:1a:
                    4e:48:c2:8d:2f:c4:e2:5b:34:ee:34:51:6c:19:69:
                    af:cb:b1:06:b7:43:30:59:bb:40:ee:db:48:23:35:
                    22:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:3A:37:D1:0A:29:2B:73:38:47:5C:4F:B0:D0:53:2C:1E:02:F1:51
            X509v3 Authority Key Identifier:
                keyid:31:1D:62:B7:FD:9F:CF:C8:7D:FE:A9:87:51:57:67:C8:38:E2:1B:B9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MR1it_2fz8h9_qmHUVdnyDjiG7k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/57688e-a964-4933-8631-850f34906229/1/MR1it_2fz8h9_qmHUVdnyDjiG7k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/57688e-a964-4933-8631-850f34906229/1/MR1it_2fz8h9_qmHUVdnyDjiG7k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:99:b9:c9:80:d2:64:66:21:7b:f6:64:77:af:92:10:93:d9:
         ce:cb:d5:98:b0:ec:b0:2a:27:db:e9:15:7b:62:2e:79:a0:75:
         dc:29:4a:e8:4e:cd:5f:16:56:e0:6c:30:d2:8c:c2:5a:12:0d:
         6a:1b:28:ef:67:86:be:b6:84:08:59:20:92:03:c4:12:f4:c1:
         e4:ad:b0:40:e7:c4:2f:d4:d3:7a:8f:68:b2:17:0c:3b:b2:b8:
         f6:be:99:bb:06:04:10:35:2b:f8:60:b6:19:3b:d5:60:29:2d:
         30:30:e2:0c:fd:4f:a6:11:bc:8d:25:73:de:3b:15:31:2f:48:
         53:92:27:44:27:aa:01:af:8a:11:75:05:19:39:a6:63:c4:dd:
         db:fa:45:d6:96:f0:67:6f:ea:d7:c9:a3:cc:4d:6f:42:c0:29:
         18:b2:33:b7:cc:02:f6:61:4b:72:93:e3:27:48:50:9c:2e:f3:
         d9:f8:12:04:19:a5:41:ff:ea:4f:ba:b9:0c:eb:75:35:32:ca:
         e1:ae:21:d4:82:dd:43:94:3d:5b:55:b9:d2:71:66:2a:93:41:
         b2:ea:9d:aa:8e:d9:b2:92:11:30:9a:ed:91:a8:59:70:19:a1:
         75:2e:56:ed:2e:c0:34:2b:32:20:fc:92:68:35:01:67:75:9a:
         d6:97:19:51
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9TlJ2LckrYzIswz+CichwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMxMWQ2MmI3ZmQ5ZmNmYzg3ZGZlYTk4NzUxNTc2N2M4Mzhl
MjFiYjkwHhcNMjUwMTMxMTcwMDE0WhcNMjUwMjAxMTcwMDE0WjAzMTEwLwYDVQQD
EygyMDNhMzdkMTBhMjkyYjczMzg0NzVjNGZiMGQwNTMyYzFlMDJmMTUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApVD0P36ERJ0axrYCL4u0EQ7qNuPy
Wf3MBEEQFa+dGJk+d+7OhOh97hEMx5/Oi0+5jxz7ClBxWgpmS/awsMye6VbzW2+0
sOn5lTtEftuamN7a6DuHlIulVFkRVNBssj7RYfcl60NXLcCNHD5yCwtYM1ylq6k6
jhgC0TIweyoeLGJoUBWnVOvm02m+J20qUV+THGljsvmTjQmIGkci4fk3XNb1d8MJ
KjlfWXeaXtyTmaZe383urFDCU+qWMnCm1TzAR1IfcuDJ/pQtkPi96NTJ7C0+QbQq
ouDzEjY7KHmZnBpOSMKNL8TiWzTuNFFsGWmvy7EGt0MwWbtA7ttIIzUiiwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCA6N9EKKStzOEdcT7DQUyweAvFRMB8GA1UdIwQY
MBaAFDEdYrf9n8/Iff6ph1FXZ8g44hu5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTVIxaXRfMmZ6OGg5X3FtSFVWZG55RGppRzdrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy81NzY4OGUtYTk2NC00OTMzLTg2MzEt
ODUwZjM0OTA2MjI5LzEvTVIxaXRfMmZ6OGg5X3FtSFVWZG55RGppRzdrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yy81NzY4OGUtYTk2NC00OTMzLTg2MzEtODUwZjM0OTA2MjI5
LzEvTVIxaXRfMmZ6OGg5X3FtSFVWZG55RGppRzdrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYJm5yYDS
ZGYhe/Zkd6+SEJPZzsvVmLDssCon2+kVe2IueaB13ClK6E7NXxZW4Gww0ozCWhIN
ahso72eGvraECFkgkgPEEvTB5K2wQOfEL9TTeo9oshcMO7K49r6ZuwYEEDUr+GC2
GTvVYCktMDDiDP1PphG8jSVz3jsVMS9IU5InRCeqAa+KEXUFGTmmY8Td2/pF1pbw
Z2/q18mjzE1vQsApGLIzt8wC9mFLcpPjJ0hQnC7z2fgSBBmlQf/qT7q5DOt1NTLK
4a4h1ILdQ5Q9W1W50nFmKpNBsuqdqo7ZspIRMJrtkahZcBmhdS5W7S7ANCsyIPyS
aDUBZ3Wa1pcZUQ==
-----END CERTIFICATE-----