Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/9952c8-2d40-41e2-ba70-61bc7ecc485c/1/hKvwyYFwGrqX5PzQvtTkzbhpIEc.mft
File:                     hKvwyYFwGrqX5PzQvtTkzbhpIEc.mft (raw, json)
Hash identifier:          Q3vtq3xKt+/FEU8I2vrzBDoG78WFhO+kEGGBeDltO/Y=
Subject key identifier:   43:80:4C:2E:D8:AA:00:31:3C:7E:21:68:1D:6A:86:9E:78:84:7F:F4
Authority key identifier: 84:AB:F0:C9:81:70:1A:BA:97:E4:FC:D0:BE:D4:E4:CD:B8:69:20:47
Certificate issuer:       /CN=84abf0c981701aba97e4fcd0bed4e4cdb8692047
Certificate serial:       0194BBCED5B0676044118E6EF9FCFFD7B435
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hKvwyYFwGrqX5PzQvtTkzbhpIEc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/74/9952c8-2d40-41e2-ba70-61bc7ecc485c/1/hKvwyYFwGrqX5PzQvtTkzbhpIEc.mft
Manifest number:          142C
Signing time:             Fri 31 Jan 2025 10:01:22 +0000
Manifest this update:     Fri 31 Jan 2025 10:01:22 +0000
Manifest next update:     Sat 01 Feb 2025 10:01:22 +0000
Files and hashes:         1: TYsIS3O-zzJUM31FOE8V5LwUjck.roa (hash: PgdOwzc5CsTmGlgxhk4B6gx5Y87krg/eEL18bNqE8Rk=)
                          2: Zqcute0EJxNZqsLIYM5IZaAu0eA.roa (hash: Ka5B3hGdb3O+/SiQ/oll6eB0Rldz6LRmTl/iQ6A8Wb8=)
                          3: hKvwyYFwGrqX5PzQvtTkzbhpIEc.crl (hash: bNtzNdaFMEvHUs2QPGhQ2BEcwh87bOlsqZnsoJxEY4s=)
                          4: pruyBDp_cEEXKvqRx1kQTDgs6oI.roa (hash: noTc5adRBPeIH3/LBjn/ftfA3EYuQEQb7IQr66+/vn8=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bb:ce:d5:b0:67:60:44:11:8e:6e:f9:fc:ff:d7:b4:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=84abf0c981701aba97e4fcd0bed4e4cdb8692047
        Validity
            Not Before: Jan 31 10:01:22 2025 GMT
            Not After : Feb  1 10:01:22 2025 GMT
        Subject: CN=43804c2ed8aa00313c7e21681d6a869e78847ff4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:39:30:fe:0b:74:6a:4e:4d:02:02:31:44:e7:
                    2f:33:e0:e8:1a:ff:a9:29:15:94:5f:e9:d5:be:ef:
                    e6:60:83:51:05:cc:ba:28:72:b4:7d:2c:42:6c:3e:
                    7d:2b:70:7b:5b:f2:55:e9:e3:a4:e5:94:53:f4:73:
                    fe:fb:47:d9:03:3d:65:8a:f0:3a:ee:b0:85:61:2c:
                    c7:e9:5e:37:5d:18:26:fd:67:9e:8f:c6:cd:84:fd:
                    c0:29:8d:30:e3:58:d4:b4:13:6d:35:03:87:8f:9c:
                    f6:a0:9f:9d:53:f9:a0:90:00:39:7e:c4:6d:e3:f4:
                    a2:14:da:dc:b0:33:63:70:5c:4f:54:34:aa:7f:05:
                    81:16:73:58:16:02:54:8e:1a:96:ab:a7:c6:8d:14:
                    77:72:fe:b7:a4:bd:b8:51:b6:02:fd:48:73:ad:73:
                    d3:96:0d:82:8b:16:f3:80:ec:77:be:9f:57:e4:1b:
                    fc:f8:d3:d4:89:63:11:a2:5a:87:74:3a:da:3d:76:
                    05:dd:fd:6a:a0:c8:fe:a1:c7:c4:c5:2b:6e:88:1e:
                    50:d4:12:dd:05:79:5e:7b:32:49:2c:c1:34:df:54:
                    cc:e6:52:ec:1b:bc:e4:1b:92:76:df:18:03:c5:2e:
                    b3:02:b3:18:ea:e9:11:98:0b:c2:b7:84:f8:b0:be:
                    27:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:80:4C:2E:D8:AA:00:31:3C:7E:21:68:1D:6A:86:9E:78:84:7F:F4
            X509v3 Authority Key Identifier:
                keyid:84:AB:F0:C9:81:70:1A:BA:97:E4:FC:D0:BE:D4:E4:CD:B8:69:20:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hKvwyYFwGrqX5PzQvtTkzbhpIEc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/9952c8-2d40-41e2-ba70-61bc7ecc485c/1/hKvwyYFwGrqX5PzQvtTkzbhpIEc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/74/9952c8-2d40-41e2-ba70-61bc7ecc485c/1/hKvwyYFwGrqX5PzQvtTkzbhpIEc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:fb:f9:a9:b1:8f:3b:9e:7f:0d:70:74:1d:fb:fd:ce:45:e4:
         bb:d0:f8:b4:5c:2c:d3:d3:f8:43:02:bf:73:39:ee:3d:c8:36:
         22:e3:58:e3:b6:4e:f6:61:14:f1:e2:79:ed:80:b9:d9:1d:6d:
         dd:81:a9:df:f6:53:42:96:d1:52:ad:f7:ec:88:7d:c1:b2:17:
         b0:37:fe:83:60:c2:40:e8:77:f5:38:e2:fe:48:a4:d5:32:1b:
         e1:25:50:d0:6e:32:84:58:e0:46:40:65:84:d2:d6:ce:0c:28:
         12:88:a1:92:ae:2b:12:4c:0f:a9:2b:b1:9a:e0:ec:3c:a7:39:
         e8:07:b8:d2:1d:b0:4c:27:39:2d:97:cd:9c:f5:e9:bb:f2:26:
         60:39:93:f3:d3:fe:50:ea:fb:bf:65:9c:b1:38:49:9a:bb:05:
         c3:22:3f:d9:27:2c:cf:59:66:ed:de:ab:02:c3:9c:6a:2a:b7:
         58:66:f6:8c:e2:15:ab:d7:2a:22:34:cb:8f:97:6e:a0:9f:12:
         97:8a:66:e4:2e:a8:ce:f6:1f:f1:43:8d:4b:fb:52:9e:f5:a6:
         1e:d2:0c:a8:47:6e:5e:e7:19:ed:18:df:b0:1a:9e:d0:11:e6:
         b1:44:a2:49:3a:60:75:9d:fb:ca:88:85:3f:f3:17:16:f7:22:
         2a:7e:c4:5d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS7ztWwZ2BEEY5u+fz/17Q1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg0YWJmMGM5ODE3MDFhYmE5N2U0ZmNkMGJlZDRlNGNkYjg2
OTIwNDcwHhcNMjUwMTMxMTAwMTIyWhcNMjUwMjAxMTAwMTIyWjAzMTEwLwYDVQQD
Eyg0MzgwNGMyZWQ4YWEwMDMxM2M3ZTIxNjgxZDZhODY5ZTc4ODQ3ZmY0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1Dkw/gt0ak5NAgIxROcvM+DoGv+p
KRWUX+nVvu/mYINRBcy6KHK0fSxCbD59K3B7W/JV6eOk5ZRT9HP++0fZAz1livA6
7rCFYSzH6V43XRgm/Weej8bNhP3AKY0w41jUtBNtNQOHj5z2oJ+dU/mgkAA5fsRt
4/SiFNrcsDNjcFxPVDSqfwWBFnNYFgJUjhqWq6fGjRR3cv63pL24UbYC/UhzrXPT
lg2CixbzgOx3vp9X5Bv8+NPUiWMRolqHdDraPXYF3f1qoMj+ocfExStuiB5Q1BLd
BXleezJJLME031TM5lLsG7zkG5J23xgDxS6zArMY6ukRmAvCt4T4sL4nrQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEOATC7YqgAxPH4haB1qhp54hH/0MB8GA1UdIwQY
MBaAFISr8MmBcBq6l+T80L7U5M24aSBHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaEt2d3lZRndHcnFYNVB6UXZ0VGt6YmhwSUVjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NC85OTUyYzgtMmQ0MC00MWUyLWJhNzAt
NjFiYzdlY2M0ODVjLzEvaEt2d3lZRndHcnFYNVB6UXZ0VGt6YmhwSUVjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83NC85OTUyYzgtMmQ0MC00MWUyLWJhNzAtNjFiYzdlY2M0ODVj
LzEvaEt2d3lZRndHcnFYNVB6UXZ0VGt6YmhwSUVjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEvv5qbGP
O55/DXB0Hfv9zkXku9D4tFws09P4QwK/cznuPcg2IuNY47ZO9mEU8eJ57YC52R1t
3YGp3/ZTQpbRUq337Ih9wbIXsDf+g2DCQOh39Tji/kik1TIb4SVQ0G4yhFjgRkBl
hNLWzgwoEoihkq4rEkwPqSuxmuDsPKc56Ae40h2wTCc5LZfNnPXpu/ImYDmT89P+
UOr7v2WcsThJmrsFwyI/2Scsz1lm7d6rAsOcaiq3WGb2jOIVq9cqIjTLj5duoJ8S
l4pm5C6ozvYf8UONS/tSnvWmHtIMqEduXucZ7RjfsBqe0BHmsUSiSTpgdZ37yoiF
P/MXFvciKn7EXQ==
-----END CERTIFICATE-----