Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/810599-731a-486a-b23f-47537eb644f5/1/4SOGDiDNss_fLO-zdToVuCKCkmY.mft
File:                     4SOGDiDNss_fLO-zdToVuCKCkmY.mft (raw, json)
Hash identifier:          2kJ/LhBFbqgpEQnH/K2vuEkZiIp6+qJfGlh0hj52O+s=
Subject key identifier:   76:A1:47:DD:3D:83:72:C3:2E:97:8F:42:40:D6:65:6E:D1:CE:3C:D2
Authority key identifier: E1:23:86:0E:20:CD:B2:CF:DF:2C:EF:B3:75:3A:15:B8:22:82:92:66
Certificate issuer:       /CN=e123860e20cdb2cfdf2cefb3753a15b822829266
Certificate serial:       0194BCA9F21E53A821DEB987D05C79E1241B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4SOGDiDNss_fLO-zdToVuCKCkmY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/54/810599-731a-486a-b23f-47537eb644f5/1/4SOGDiDNss_fLO-zdToVuCKCkmY.mft
Manifest number:          143C
Signing time:             Fri 31 Jan 2025 14:00:41 +0000
Manifest this update:     Fri 31 Jan 2025 14:00:41 +0000
Manifest next update:     Sat 01 Feb 2025 14:00:41 +0000
Files and hashes:         1: 4SOGDiDNss_fLO-zdToVuCKCkmY.crl (hash: m2fV4ZGMgHKu5DiqI7NIQk0/A2Gcm/xIfFv3kG85JT8=)
                          2: C_WwagoxlETCmC3xgCtnJTSTiFU.roa (hash: DG+d+a6FZH6p2em3ravozO37hhn38lEfqxBjBjLqEHk=)
                          3: egQwRHU5AE-klzoLV3_Sw_tkXYo.roa (hash: Nr/ciMVzEFBT/2eRIx3/XPFBkeS8bONzVMg9DvriCrs=)
                          4: p0iloktOu4HrQp8Fbazd0VMW18A.roa (hash: WuG4K1BU3enI1jODi4UBhPWn6TyCLQBuQYRFhQ0mg6s=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:a9:f2:1e:53:a8:21:de:b9:87:d0:5c:79:e1:24:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e123860e20cdb2cfdf2cefb3753a15b822829266
        Validity
            Not Before: Jan 31 14:00:41 2025 GMT
            Not After : Feb  1 14:00:41 2025 GMT
        Subject: CN=76a147dd3d8372c32e978f4240d6656ed1ce3cd2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:19:21:89:8d:63:27:00:28:a0:5f:7a:be:52:
                    5d:3e:d6:7e:ac:87:ff:0a:86:a1:a4:50:11:27:f4:
                    f7:1b:9d:f9:7f:2a:c0:06:1b:97:8b:ac:d5:33:4a:
                    de:4d:26:48:5f:5a:06:8c:bf:23:46:5e:f2:90:81:
                    e0:c2:46:53:da:ad:f0:89:b9:88:11:26:f8:bc:00:
                    42:4d:4a:d3:e5:20:e6:90:4e:85:96:0b:4d:05:84:
                    2f:c4:40:d6:d1:2c:8d:70:77:fe:41:20:c8:5e:0f:
                    54:39:5d:50:64:82:9f:a5:aa:5e:98:1b:6a:69:66:
                    8a:0c:69:a0:b6:d5:1c:15:0e:68:aa:8a:9c:08:97:
                    6d:c1:52:98:4f:fc:fc:40:da:2d:0e:dc:52:5d:c5:
                    66:b9:19:bd:b9:56:50:81:55:bd:1f:bd:c9:3d:9a:
                    5a:0b:08:54:f8:5e:de:cb:3e:63:07:c1:e4:95:a0:
                    d6:3b:e3:43:05:e5:48:73:1b:df:79:76:5b:59:e5:
                    48:74:c1:77:0e:32:03:a3:86:21:11:24:69:3e:95:
                    b0:42:04:0b:bf:71:6b:16:06:a5:13:1b:13:3e:2b:
                    80:92:0d:b6:6e:64:63:67:db:62:bc:56:c6:ed:70:
                    f3:df:f2:19:eb:6a:66:52:1f:ca:0d:61:04:19:09:
                    15:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:A1:47:DD:3D:83:72:C3:2E:97:8F:42:40:D6:65:6E:D1:CE:3C:D2
            X509v3 Authority Key Identifier:
                keyid:E1:23:86:0E:20:CD:B2:CF:DF:2C:EF:B3:75:3A:15:B8:22:82:92:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4SOGDiDNss_fLO-zdToVuCKCkmY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/810599-731a-486a-b23f-47537eb644f5/1/4SOGDiDNss_fLO-zdToVuCKCkmY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/54/810599-731a-486a-b23f-47537eb644f5/1/4SOGDiDNss_fLO-zdToVuCKCkmY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:c5:eb:7e:38:20:0f:c0:02:b0:1f:e8:e1:59:59:49:e1:05:
         ea:ee:d1:48:c7:b4:89:7d:0d:b8:a1:ff:2e:c9:ce:a8:66:68:
         77:47:11:12:11:89:bb:61:2d:ef:18:39:1f:ea:39:1a:1e:05:
         28:b6:57:e8:0d:5f:51:66:c3:82:a0:17:88:dd:38:25:9e:4c:
         48:c6:eb:35:4e:70:2f:fb:dd:55:d2:03:e2:5f:bf:31:b9:1b:
         19:92:88:05:c1:4e:16:b6:47:91:0f:c9:77:88:5b:c3:87:c9:
         68:e5:34:20:63:8a:1a:cd:9f:be:a1:7e:fd:f7:e6:38:42:35:
         a5:9a:4c:72:6b:ab:70:cd:d2:c6:e6:cd:5a:73:33:e2:51:b2:
         0b:b3:4c:16:61:55:f5:de:44:2f:1e:1d:2f:96:3e:ed:a6:30:
         3f:55:e2:38:a2:2b:1f:9d:08:6b:1c:08:fa:67:7b:bc:ce:fb:
         64:50:89:1a:30:4f:5f:a3:78:6d:75:9c:41:50:60:7b:be:c4:
         29:33:c9:f6:14:12:59:72:d0:8f:22:cc:2f:0b:6b:fa:58:f7:
         b4:8b:9a:fc:b2:c8:20:80:74:de:d5:68:f0:54:ec:dc:b0:ae:
         5d:f2:3d:49:4f:04:fb:9c:21:31:82:0f:9c:52:1d:20:74:53:
         80:fe:71:51
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8qfIeU6gh3rmH0Fx54SQbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUxMjM4NjBlMjBjZGIyY2ZkZjJjZWZiMzc1M2ExNWI4MjI4
MjkyNjYwHhcNMjUwMTMxMTQwMDQxWhcNMjUwMjAxMTQwMDQxWjAzMTEwLwYDVQQD
Eyg3NmExNDdkZDNkODM3MmMzMmU5NzhmNDI0MGQ2NjU2ZWQxY2UzY2QyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5BkhiY1jJwAooF96vlJdPtZ+rIf/
CoahpFARJ/T3G535fyrABhuXi6zVM0reTSZIX1oGjL8jRl7ykIHgwkZT2q3wibmI
ESb4vABCTUrT5SDmkE6FlgtNBYQvxEDW0SyNcHf+QSDIXg9UOV1QZIKfpapemBtq
aWaKDGmgttUcFQ5oqoqcCJdtwVKYT/z8QNotDtxSXcVmuRm9uVZQgVW9H73JPZpa
CwhU+F7eyz5jB8HklaDWO+NDBeVIcxvfeXZbWeVIdMF3DjIDo4YhESRpPpWwQgQL
v3FrFgalExsTPiuAkg22bmRjZ9tivFbG7XDz3/IZ62pmUh/KDWEEGQkV/wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHahR909g3LDLpePQkDWZW7RzjzSMB8GA1UdIwQY
MBaAFOEjhg4gzbLP3yzvs3U6FbgigpJmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNFNPR0RpRE5zc19mTE8temRUb1Z1Q0tDa21ZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NC84MTA1OTktNzMxYS00ODZhLWIyM2Yt
NDc1MzdlYjY0NGY1LzEvNFNPR0RpRE5zc19mTE8temRUb1Z1Q0tDa21ZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NC84MTA1OTktNzMxYS00ODZhLWIyM2YtNDc1MzdlYjY0NGY1
LzEvNFNPR0RpRE5zc19mTE8temRUb1Z1Q0tDa21ZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZcXrfjgg
D8ACsB/o4VlZSeEF6u7RSMe0iX0NuKH/LsnOqGZod0cREhGJu2Et7xg5H+o5Gh4F
KLZX6A1fUWbDgqAXiN04JZ5MSMbrNU5wL/vdVdID4l+/MbkbGZKIBcFOFrZHkQ/J
d4hbw4fJaOU0IGOKGs2fvqF+/ffmOEI1pZpMcmurcM3SxubNWnMz4lGyC7NMFmFV
9d5ELx4dL5Y+7aYwP1XiOKIrH50IaxwI+md7vM77ZFCJGjBPX6N4bXWcQVBge77E
KTPJ9hQSWXLQjyLMLwtr+lj3tIua/LLIIIB03tVo8FTs3LCuXfI9SU8E+5whMYIP
nFIdIHRTgP5xUQ==
-----END CERTIFICATE-----