Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/ec25bd-219e-4d02-a532-0799a52a6387/1/ahfeGIf8-pJEuTHZbagmeMAUdmM.mft
File:                     ahfeGIf8-pJEuTHZbagmeMAUdmM.mft (raw, json)
Hash identifier:          F/ddg81RWr1NqKdKAcgWC6aUV/mt+rnt0IgSxp3IGKM=
Subject key identifier:   9A:9A:B7:25:22:17:8A:1D:9F:42:DD:AB:C6:A1:2A:84:AC:7B:5F:79
Authority key identifier: 6A:17:DE:18:87:FC:FA:92:44:B9:31:D9:6D:A8:26:78:C0:14:76:63
Certificate issuer:       /CN=6a17de1887fcfa9244b931d96da82678c0147663
Certificate serial:       0194BC0526E78314E42346A34CEF3F4557C4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ahfeGIf8-pJEuTHZbagmeMAUdmM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/54/ec25bd-219e-4d02-a532-0799a52a6387/1/ahfeGIf8-pJEuTHZbagmeMAUdmM.mft
Manifest number:          142A
Signing time:             Fri 31 Jan 2025 11:00:41 +0000
Manifest this update:     Fri 31 Jan 2025 11:00:41 +0000
Manifest next update:     Sat 01 Feb 2025 11:00:41 +0000
Files and hashes:         1: BX5R5amdcio3WuT_y5iUpVj2ums.roa (hash: pwGrkwLGbzotd2slolQ5A3oax/Mg/fo6nb/3FvvTnt0=)
                          2: KfO5I4Cw1MaFsOF7zxOfQ4tIIJA.roa (hash: 4CuGd2v/2n5Lf/n++Esai12zLsblsU9sM0Lw5FSyTzA=)
                          3: SaXO2k_RD79NU2l7XYSpiLJj45Y.roa (hash: dDxX4ZRGdILDnfmTeHjmX1mfXPW3FoR3IByWvO/xwLc=)
                          4: ahfeGIf8-pJEuTHZbagmeMAUdmM.crl (hash: 87aYlsiiEgWsWXulf7akMbN4ivZnmwZMBj6DmvXTgNo=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:05:26:e7:83:14:e4:23:46:a3:4c:ef:3f:45:57:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6a17de1887fcfa9244b931d96da82678c0147663
        Validity
            Not Before: Jan 31 11:00:41 2025 GMT
            Not After : Feb  1 11:00:41 2025 GMT
        Subject: CN=9a9ab72522178a1d9f42ddabc6a12a84ac7b5f79
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:23:eb:28:da:ed:3f:c9:41:17:0c:0e:65:4c:
                    b6:84:60:07:14:cf:c8:85:9a:56:4f:0f:f7:66:cf:
                    f0:2e:94:25:f1:27:2a:6d:6b:d9:52:9a:f9:e6:8d:
                    31:e4:32:05:a7:4e:f0:f3:d2:18:4e:ee:8e:d5:5f:
                    e8:7e:db:21:5f:f5:0b:a8:9a:9c:fb:d9:b8:c4:ef:
                    25:ab:5c:de:ae:ba:61:f3:c4:26:ca:c7:9a:2f:16:
                    de:ef:05:06:2a:80:ae:85:fd:f1:41:e9:5c:48:20:
                    07:df:a9:10:4e:c2:7d:ab:5a:50:0c:36:bb:5c:c0:
                    7f:ca:eb:2c:e9:2e:f3:40:60:18:4a:3b:86:a2:b1:
                    03:48:aa:f1:ff:c6:73:6a:86:83:2d:17:c2:73:37:
                    10:60:43:c4:31:80:0c:a1:b0:34:44:be:21:c5:18:
                    77:9b:c4:ff:e0:08:f5:11:24:69:4a:90:c9:f6:c2:
                    4c:40:82:a6:8e:4d:fa:a9:3b:c1:e6:c2:d4:8e:53:
                    d4:4f:e1:55:d5:2b:8b:1f:d0:80:22:af:4a:d9:6d:
                    c2:7b:f1:e7:c7:98:60:f8:14:3f:6f:bd:2c:c0:6c:
                    66:3f:5f:88:59:77:1e:3a:fb:ff:fe:9a:09:dc:a6:
                    a7:5c:c7:b7:8e:9d:12:27:33:88:d1:10:12:d7:30:
                    7b:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:9A:B7:25:22:17:8A:1D:9F:42:DD:AB:C6:A1:2A:84:AC:7B:5F:79
            X509v3 Authority Key Identifier:
                keyid:6A:17:DE:18:87:FC:FA:92:44:B9:31:D9:6D:A8:26:78:C0:14:76:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ahfeGIf8-pJEuTHZbagmeMAUdmM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/ec25bd-219e-4d02-a532-0799a52a6387/1/ahfeGIf8-pJEuTHZbagmeMAUdmM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/54/ec25bd-219e-4d02-a532-0799a52a6387/1/ahfeGIf8-pJEuTHZbagmeMAUdmM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:4c:97:e2:e3:e6:35:d4:2d:6e:9a:71:7d:36:6b:b3:75:03:
         7f:33:40:ce:d3:89:14:3a:84:85:31:0f:88:48:da:c6:0f:6b:
         8b:3f:1c:ac:73:9d:6d:c8:c9:1c:00:d2:f1:53:bb:ca:b7:42:
         fa:8d:e6:ed:fb:83:23:b8:a6:47:97:51:4d:07:24:d2:22:6a:
         41:0f:54:62:0a:fd:ec:c1:ef:7f:ea:04:a0:5e:e0:7f:fb:dd:
         77:38:df:6d:26:8c:4b:b8:bf:1d:b0:3b:e1:50:71:1a:d4:05:
         e1:ac:ba:a7:7d:dd:cb:c6:bc:60:77:be:99:a3:31:1d:bf:ae:
         16:f5:9a:88:93:c0:92:36:35:33:c1:e6:ac:b3:69:14:f7:1d:
         b2:3a:88:a3:0f:52:08:d2:46:10:38:57:a2:12:e5:87:f0:30:
         88:d0:1e:90:56:2f:db:73:d8:e7:76:63:56:f4:40:89:7a:86:
         b3:51:5c:54:b8:3a:04:42:31:c4:89:2e:39:0e:54:56:f2:70:
         36:f8:92:7c:02:bd:c8:4f:40:f6:37:80:93:27:e4:48:8f:89:
         dd:77:66:02:c2:e1:bd:8f:82:6e:30:5f:1f:57:28:07:d0:e3:
         ea:6d:66:63:31:23:f9:ef:b7:e9:88:5c:ab:af:d2:01:6a:e4:
         64:62:8e:2a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8BSbngxTkI0ajTO8/RVfEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZhMTdkZTE4ODdmY2ZhOTI0NGI5MzFkOTZkYTgyNjc4YzAx
NDc2NjMwHhcNMjUwMTMxMTEwMDQxWhcNMjUwMjAxMTEwMDQxWjAzMTEwLwYDVQQD
Eyg5YTlhYjcyNTIyMTc4YTFkOWY0MmRkYWJjNmExMmE4NGFjN2I1Zjc5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkCPrKNrtP8lBFwwOZUy2hGAHFM/I
hZpWTw/3Zs/wLpQl8ScqbWvZUpr55o0x5DIFp07w89IYTu6O1V/oftshX/ULqJqc
+9m4xO8lq1zerrph88QmyseaLxbe7wUGKoCuhf3xQelcSCAH36kQTsJ9q1pQDDa7
XMB/yuss6S7zQGAYSjuGorEDSKrx/8ZzaoaDLRfCczcQYEPEMYAMobA0RL4hxRh3
m8T/4Aj1ESRpSpDJ9sJMQIKmjk36qTvB5sLUjlPUT+FV1SuLH9CAIq9K2W3Ce/Hn
x5hg+BQ/b70swGxmP1+IWXceOvv//poJ3KanXMe3jp0SJzOI0RAS1zB7cQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJqatyUiF4odn0Ldq8ahKoSse195MB8GA1UdIwQY
MBaAFGoX3hiH/PqSRLkx2W2oJnjAFHZjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYWhmZUdJZjgtcEpFdVRIWmJhZ21lTUFVZG1NLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NC9lYzI1YmQtMjE5ZS00ZDAyLWE1MzIt
MDc5OWE1MmE2Mzg3LzEvYWhmZUdJZjgtcEpFdVRIWmJhZ21lTUFVZG1NLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NC9lYzI1YmQtMjE5ZS00ZDAyLWE1MzItMDc5OWE1MmE2Mzg3
LzEvYWhmZUdJZjgtcEpFdVRIWmJhZ21lTUFVZG1NLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjEyX4uPm
NdQtbppxfTZrs3UDfzNAztOJFDqEhTEPiEjaxg9riz8crHOdbcjJHADS8VO7yrdC
+o3m7fuDI7imR5dRTQck0iJqQQ9UYgr97MHvf+oEoF7gf/vddzjfbSaMS7i/HbA7
4VBxGtQF4ay6p33dy8a8YHe+maMxHb+uFvWaiJPAkjY1M8HmrLNpFPcdsjqIow9S
CNJGEDhXohLlh/AwiNAekFYv23PY53ZjVvRAiXqGs1FcVLg6BEIxxIkuOQ5UVvJw
NviSfAK9yE9A9jeAkyfkSI+J3XdmAsLhvY+CbjBfH1coB9Dj6m1mYzEj+e+36Yhc
q6/SAWrkZGKOKg==
-----END CERTIFICATE-----