Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/621941-f53c-448f-bd30-42b3d68b5676/1/uNJRxL_VJtoGLUzir1a25G6SURc.mft
File:                     uNJRxL_VJtoGLUzir1a25G6SURc.mft (raw, json)
Hash identifier:          CkI+Ptmtnld1dYyfxJxT6UfmKOYyghIGRqCxN2ZIEZY=
Subject key identifier:   A7:82:2C:F6:06:FC:F3:8C:C9:97:52:D9:92:3D:3A:19:04:B2:28:67
Authority key identifier: B8:D2:51:C4:BF:D5:26:DA:06:2D:4C:E2:AF:56:B6:E4:6E:92:51:17
Certificate issuer:       /CN=b8d251c4bfd526da062d4ce2af56b6e46e925117
Certificate serial:       0194BCA988667C41560171A5DB12D3E936D7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uNJRxL_VJtoGLUzir1a25G6SURc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/52/621941-f53c-448f-bd30-42b3d68b5676/1/uNJRxL_VJtoGLUzir1a25G6SURc.mft
Manifest number:          142D
Signing time:             Fri 31 Jan 2025 14:00:14 +0000
Manifest this update:     Fri 31 Jan 2025 14:00:14 +0000
Manifest next update:     Sat 01 Feb 2025 14:00:14 +0000
Files and hashes:         1: 4NKq_KYwCh8_wTbK61NtPt76P8I.roa (hash: mmA3nOgLzhGsU/7y4XASj7EI9JkBDcrnGGIkqWDOAYQ=)
                          2: 5NknPZb2YFjtunQlHWI_QMzdlKY.roa (hash: MgsBbLyiXdRHwov9hAncLGKeKv45suA9La+rVSC/C8U=)
                          3: EcXVeLZGF2isDVGR_npcyvVHtis.roa (hash: 74ii2z9H6EyEbd8UKPQgliXQbUTkT7bMVv5HyoTjEoI=)
                          4: MLMSeUg0Tn5acuTuB6POUwHtMC4.roa (hash: xJIvGvJF+baBBCFPe1lEWA46OVhv1WXXfc/yQpkBx7I=)
                          5: uNJRxL_VJtoGLUzir1a25G6SURc.crl (hash: dy2WrgarLRunODBcd5PKO5pWvFABFQ8eBKihz/cM1oM=)
                          6: vRCQ2oYv0pMSuRkskFBqpNokNQc.roa (hash: nfgafPbA1oV5746o00z5NyxG0STOqD8qAdDbAN/fIQ0=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:a9:88:66:7c:41:56:01:71:a5:db:12:d3:e9:36:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8d251c4bfd526da062d4ce2af56b6e46e925117
        Validity
            Not Before: Jan 31 14:00:14 2025 GMT
            Not After : Feb  1 14:00:14 2025 GMT
        Subject: CN=a7822cf606fcf38cc99752d9923d3a1904b22867
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:cd:4b:ae:fa:3e:bd:c1:a5:f5:c5:e0:06:1f:
                    f0:c4:47:8f:65:a3:2f:60:01:62:33:65:8c:f8:3e:
                    0a:2e:95:d6:fb:8b:83:10:de:14:a3:da:b0:12:e4:
                    4a:c1:fe:28:cb:08:c0:b6:59:a5:87:da:c9:46:ec:
                    bd:47:12:5e:85:a9:2a:70:04:56:62:22:69:72:b7:
                    77:01:91:cb:2a:64:da:b0:cb:b3:78:f6:0e:a3:70:
                    3e:18:6c:a4:97:be:b8:ef:52:83:d1:83:88:03:00:
                    c0:31:7a:23:92:ce:fd:73:e2:65:2a:07:34:83:2d:
                    9d:9c:db:fe:69:14:ee:52:cf:92:68:f0:a6:27:c1:
                    9f:6c:a6:9c:fc:26:93:93:9c:18:9e:bf:48:58:76:
                    c9:56:1c:0d:4c:c6:fc:a4:f9:ab:14:ba:30:32:53:
                    9d:dd:9b:46:4b:b3:b6:38:f7:da:e0:3a:70:02:7e:
                    79:77:01:da:fe:ec:db:e5:fd:d5:05:e8:89:af:a2:
                    86:79:3e:a4:8a:e5:e5:c5:a9:eb:af:bb:b4:6c:bc:
                    9a:fe:3d:20:93:df:f1:88:6e:10:42:31:d8:de:b9:
                    35:74:49:e5:03:1d:fc:e1:e4:26:f1:f9:20:6e:c8:
                    a4:c9:e5:8a:02:bb:c4:e3:41:55:f1:02:64:86:0a:
                    cb:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:82:2C:F6:06:FC:F3:8C:C9:97:52:D9:92:3D:3A:19:04:B2:28:67
            X509v3 Authority Key Identifier:
                keyid:B8:D2:51:C4:BF:D5:26:DA:06:2D:4C:E2:AF:56:B6:E4:6E:92:51:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uNJRxL_VJtoGLUzir1a25G6SURc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/621941-f53c-448f-bd30-42b3d68b5676/1/uNJRxL_VJtoGLUzir1a25G6SURc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/52/621941-f53c-448f-bd30-42b3d68b5676/1/uNJRxL_VJtoGLUzir1a25G6SURc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:c9:36:e0:25:bf:0e:48:fb:a9:a6:ad:6f:86:d2:5a:56:28:
         3a:81:28:68:d7:85:1e:ec:76:19:16:bb:4e:3f:15:08:7f:e0:
         cd:89:66:78:92:94:f0:35:a5:f1:79:a5:6a:46:58:92:c1:db:
         97:c6:d7:2a:57:35:13:07:10:25:9f:9b:06:2d:26:47:93:b3:
         2c:2e:b2:50:1a:54:e7:70:4c:62:c4:4b:5d:f2:08:41:46:65:
         bc:b7:69:90:17:ef:26:8b:73:b4:5f:b7:2f:a1:c7:b2:d8:96:
         52:1e:5d:ad:d0:e1:3d:0e:29:86:e6:d6:4d:4e:86:29:d7:d3:
         f6:a9:80:9c:31:08:55:c5:db:0b:c0:31:d2:db:19:d9:1a:af:
         45:42:24:d8:ba:45:ea:2e:cf:c5:1e:59:03:16:03:7f:6d:12:
         8b:3a:4d:7c:5b:7c:1d:6e:b9:7b:7f:0b:40:e0:52:31:d1:ab:
         5e:48:a6:a9:ba:ed:b2:53:7c:3b:35:2c:17:de:7b:52:7b:d2:
         c2:79:07:0b:27:00:61:62:f3:2d:57:15:1d:68:56:25:e7:c4:
         72:b2:5c:ab:b9:45:45:37:62:11:7e:f0:ce:fa:29:4d:82:48:
         c2:ea:48:92:e8:6c:a5:40:0c:07:1d:cc:9a:a3:55:83:25:e4:
         55:31:78:b4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8qYhmfEFWAXGl2xLT6TbXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI4ZDI1MWM0YmZkNTI2ZGEwNjJkNGNlMmFmNTZiNmU0NmU5
MjUxMTcwHhcNMjUwMTMxMTQwMDE0WhcNMjUwMjAxMTQwMDE0WjAzMTEwLwYDVQQD
EyhhNzgyMmNmNjA2ZmNmMzhjYzk5NzUyZDk5MjNkM2ExOTA0YjIyODY3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyc1Lrvo+vcGl9cXgBh/wxEePZaMv
YAFiM2WM+D4KLpXW+4uDEN4Uo9qwEuRKwf4oywjAtlmlh9rJRuy9RxJehakqcARW
YiJpcrd3AZHLKmTasMuzePYOo3A+GGykl76471KD0YOIAwDAMXojks79c+JlKgc0
gy2dnNv+aRTuUs+SaPCmJ8GfbKac/CaTk5wYnr9IWHbJVhwNTMb8pPmrFLowMlOd
3ZtGS7O2OPfa4DpwAn55dwHa/uzb5f3VBeiJr6KGeT6kiuXlxanrr7u0bLya/j0g
k9/xiG4QQjHY3rk1dEnlAx384eQm8fkgbsikyeWKArvE40FV8QJkhgrLRQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKeCLPYG/POMyZdS2ZI9OhkEsihnMB8GA1UdIwQY
MBaAFLjSUcS/1SbaBi1M4q9WtuRuklEXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdU5KUnhMX1ZKdG9HTFV6aXIxYTI1RzZTVVJjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Mi82MjE5NDEtZjUzYy00NDhmLWJkMzAt
NDJiM2Q2OGI1Njc2LzEvdU5KUnhMX1ZKdG9HTFV6aXIxYTI1RzZTVVJjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Mi82MjE5NDEtZjUzYy00NDhmLWJkMzAtNDJiM2Q2OGI1Njc2
LzEvdU5KUnhMX1ZKdG9HTFV6aXIxYTI1RzZTVVJjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAU8k24CW/
Dkj7qaatb4bSWlYoOoEoaNeFHux2GRa7Tj8VCH/gzYlmeJKU8DWl8XmlakZYksHb
l8bXKlc1EwcQJZ+bBi0mR5OzLC6yUBpU53BMYsRLXfIIQUZlvLdpkBfvJotztF+3
L6HHstiWUh5drdDhPQ4phubWTU6GKdfT9qmAnDEIVcXbC8Ax0tsZ2RqvRUIk2LpF
6i7PxR5ZAxYDf20SizpNfFt8HW65e38LQOBSMdGrXkimqbrtslN8OzUsF957UnvS
wnkHCycAYWLzLVcVHWhWJefEcrJcq7lFRTdiEX7wzvopTYJIwupIkuhspUAMBx3M
mqNVgyXkVTF4tA==
-----END CERTIFICATE-----