Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/be4909-745f-4d0c-bfab-dee76860013d/1/KX75vv0afiTAzJcpmH_AZda3Ey8.mft
File:                     KX75vv0afiTAzJcpmH_AZda3Ey8.mft (raw, json)
Hash identifier:          a5jBp5aSGS74ORLXNugqCCycUPoyCqaLr0wgXTVFruc=
Subject key identifier:   7B:35:94:10:08:05:78:97:30:DA:D1:27:74:CA:FD:A5:AE:50:6B:74
Authority key identifier: 29:7E:F9:BE:FD:1A:7E:24:C0:CC:97:29:98:7F:C0:65:D6:B7:13:2F
Certificate issuer:       /CN=297ef9befd1a7e24c0cc9729987fc065d6b7132f
Certificate serial:       0194BC3BDEBA522FBB1ACD34903ED3E32D1B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KX75vv0afiTAzJcpmH_AZda3Ey8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7a/be4909-745f-4d0c-bfab-dee76860013d/1/KX75vv0afiTAzJcpmH_AZda3Ey8.mft
Manifest number:          03B7
Signing time:             Fri 31 Jan 2025 12:00:27 +0000
Manifest this update:     Fri 31 Jan 2025 12:00:27 +0000
Manifest next update:     Sat 01 Feb 2025 12:00:27 +0000
Files and hashes:         1: 1CmW0NTvJxAjDfe5bmpIeIYQYMM.roa (hash: l6VSG52nyMYopo/j2CoaULghqRp0DR0MWhThBYqLf0Q=)
                          2: 1vVRQHdXkIXBHfo0qhoHppx77DU.roa (hash: cm+iyEp227tHWE3KsZsxqgzIc5VF/7+/NsYZAZfG+aw=)
                          3: KX75vv0afiTAzJcpmH_AZda3Ey8.crl (hash: WextCRfMgjSjX3BvvLivY9t2VSMGvES/X/t9s6nBikE=)
                          4: V0aRJCOG2a9twiI1SK4HfmRChII.roa (hash: xPnpahcVRHcbxfnhq7t0F7epLdK24cqdjPN51uTlfmE=)
                          5: loy5Snyw-iUVPzzHRVWXXXo15_o.roa (hash: HapHLXp4oAYGR81r+nU701ZcjYxsNP2uFcUwMFCofYE=)
                          6: ws65NnH7cc5LX3ZtkutF5lwgOTo.roa (hash: 3tggzgIge6V0BsIfvy+BLekh4WUZ+47Y39glMLBsTTE=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:3b:de:ba:52:2f:bb:1a:cd:34:90:3e:d3:e3:2d:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=297ef9befd1a7e24c0cc9729987fc065d6b7132f
        Validity
            Not Before: Jan 31 12:00:27 2025 GMT
            Not After : Feb  1 12:00:27 2025 GMT
        Subject: CN=7b3594100805789730dad12774cafda5ae506b74
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:1b:0e:22:24:12:06:e9:b9:68:9e:e5:29:02:
                    33:e8:15:47:8b:e0:d4:a4:c5:08:01:8d:64:8b:f2:
                    79:2f:1a:53:e8:56:9b:82:f2:52:19:18:d2:21:95:
                    e4:80:b5:9a:fc:2a:5c:66:d8:25:b7:66:92:70:9a:
                    e8:43:15:0b:2c:9d:1f:61:4a:16:99:6f:d5:22:8a:
                    ce:a0:43:4a:a7:48:2d:c1:19:38:5f:a1:3f:fb:cd:
                    be:11:5f:bd:54:22:fe:dd:4e:10:81:6c:0e:b5:bb:
                    2f:e9:d7:5d:64:1d:c9:b5:f9:d5:48:78:0a:83:3a:
                    de:d5:4d:74:f7:16:55:7a:ec:e3:80:8a:be:d8:65:
                    dd:7b:ef:2c:e1:cb:34:25:f9:d8:f1:7f:04:3d:43:
                    14:06:0f:32:b1:d3:a4:53:93:b3:3b:0e:6f:db:e6:
                    3e:35:0c:d9:49:c4:92:c8:05:5c:dc:1e:c5:e7:eb:
                    86:eb:63:da:9a:b5:30:0d:5a:c9:16:22:ac:34:50:
                    29:f5:42:ea:83:f1:8e:ee:6a:11:c7:b1:b0:20:98:
                    78:53:e5:1f:25:35:0e:d9:f3:b9:31:c5:a7:68:db:
                    d7:ae:00:26:02:70:79:91:64:07:af:30:89:8e:8e:
                    0f:01:ff:18:39:94:47:db:e2:04:d3:f0:08:cb:c2:
                    d7:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:35:94:10:08:05:78:97:30:DA:D1:27:74:CA:FD:A5:AE:50:6B:74
            X509v3 Authority Key Identifier:
                keyid:29:7E:F9:BE:FD:1A:7E:24:C0:CC:97:29:98:7F:C0:65:D6:B7:13:2F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KX75vv0afiTAzJcpmH_AZda3Ey8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/be4909-745f-4d0c-bfab-dee76860013d/1/KX75vv0afiTAzJcpmH_AZda3Ey8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/be4909-745f-4d0c-bfab-dee76860013d/1/KX75vv0afiTAzJcpmH_AZda3Ey8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:64:1f:61:a0:a2:73:fe:45:d8:84:c3:c1:66:67:67:2b:6c:
         92:ae:01:63:93:c6:af:45:7d:34:c0:9f:ef:96:c2:55:49:8b:
         58:c2:16:4b:a4:a1:6f:1f:b5:c4:52:f9:11:e2:21:68:37:19:
         c4:df:dc:af:19:a3:28:3e:68:81:cd:c7:62:e7:ee:c5:16:77:
         b4:28:ea:51:d4:6c:c2:8d:f7:18:eb:01:ea:4c:25:79:11:aa:
         ad:7b:11:50:55:d9:40:c6:ff:c0:52:30:8e:34:5b:e0:d1:89:
         dc:d2:23:43:b7:5c:cf:64:ca:e4:1d:30:e3:09:5e:48:5f:81:
         9b:1a:31:5e:6e:c6:de:5c:17:41:78:a5:fd:cd:d3:5c:6c:09:
         a7:75:60:b1:86:a9:d6:13:05:49:61:74:f2:1e:81:cd:20:7b:
         ab:f4:e0:7f:d6:b6:16:5e:b0:92:6b:06:5e:c0:ca:22:74:51:
         94:8d:b3:0a:c0:e9:03:98:60:8c:56:c3:db:ea:bc:04:52:d0:
         ee:73:20:5f:fd:0a:cc:89:e7:8d:53:b3:fe:e9:33:74:2b:ff:
         f2:24:ea:d7:e9:1e:2c:78:45:a6:ff:98:83:41:05:fe:a0:a0:
         16:07:c0:45:91:e6:bb:9f:0c:e9:1a:35:d5:c0:5c:f5:fb:f7:
         aa:1a:6b:61
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8O966Ui+7Gs00kD7T4y0bMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI5N2VmOWJlZmQxYTdlMjRjMGNjOTcyOTk4N2ZjMDY1ZDZi
NzEzMmYwHhcNMjUwMTMxMTIwMDI3WhcNMjUwMjAxMTIwMDI3WjAzMTEwLwYDVQQD
Eyg3YjM1OTQxMDA4MDU3ODk3MzBkYWQxMjc3NGNhZmRhNWFlNTA2Yjc0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqBsOIiQSBum5aJ7lKQIz6BVHi+DU
pMUIAY1ki/J5LxpT6FabgvJSGRjSIZXkgLWa/CpcZtglt2aScJroQxULLJ0fYUoW
mW/VIorOoENKp0gtwRk4X6E/+82+EV+9VCL+3U4QgWwOtbsv6dddZB3JtfnVSHgK
gzre1U109xZVeuzjgIq+2GXde+8s4cs0JfnY8X8EPUMUBg8ysdOkU5OzOw5v2+Y+
NQzZScSSyAVc3B7F5+uG62PamrUwDVrJFiKsNFAp9ULqg/GO7moRx7GwIJh4U+Uf
JTUO2fO5McWnaNvXrgAmAnB5kWQHrzCJjo4PAf8YOZRH2+IE0/AIy8LXYwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHs1lBAIBXiXMNrRJ3TK/aWuUGt0MB8GA1UdIwQY
MBaAFCl++b79Gn4kwMyXKZh/wGXWtxMvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS1g3NXZ2MGFmaVRBekpjcG1IX0FaZGEzRXk4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83YS9iZTQ5MDktNzQ1Zi00ZDBjLWJmYWIt
ZGVlNzY4NjAwMTNkLzEvS1g3NXZ2MGFmaVRBekpjcG1IX0FaZGEzRXk4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83YS9iZTQ5MDktNzQ1Zi00ZDBjLWJmYWItZGVlNzY4NjAwMTNk
LzEvS1g3NXZ2MGFmaVRBekpjcG1IX0FaZGEzRXk4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADWQfYaCi
c/5F2ITDwWZnZytskq4BY5PGr0V9NMCf75bCVUmLWMIWS6Shbx+1xFL5EeIhaDcZ
xN/crxmjKD5ogc3HYufuxRZ3tCjqUdRswo33GOsB6kwleRGqrXsRUFXZQMb/wFIw
jjRb4NGJ3NIjQ7dcz2TK5B0w4wleSF+BmxoxXm7G3lwXQXil/c3TXGwJp3VgsYap
1hMFSWF08h6BzSB7q/Tgf9a2Fl6wkmsGXsDKInRRlI2zCsDpA5hgjFbD2+q8BFLQ
7nMgX/0KzInnjVOz/ukzdCv/8iTq1+keLHhFpv+Yg0EF/qCgFgfARZHmu58M6Ro1
1cBc9fv3qhprYQ==
-----END CERTIFICATE-----