Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/5eaaa7-3107-4268-aad6-6fd9789205ba/1/q1T-gxtqcZ9C5shIb9A7VQvnYfs.mft
File:                     q1T-gxtqcZ9C5shIb9A7VQvnYfs.mft (raw, json)
Hash identifier:          a2EuLgwDiD1tPGOwWkGrG2i2fx0DJIXvzWTA7EoM7vo=
Subject key identifier:   1C:87:D9:86:FE:45:F0:4F:D0:CD:1D:CB:69:75:D6:8B:8B:87:1F:68
Authority key identifier: AB:54:FE:83:1B:6A:71:9F:42:E6:C8:48:6F:D0:3B:55:0B:E7:61:FB
Certificate issuer:       /CN=ab54fe831b6a719f42e6c8486fd03b550be761fb
Certificate serial:       0194BBCE221C0BDC7139EF3020A75F88F666
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/q1T-gxtqcZ9C5shIb9A7VQvnYfs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8a/5eaaa7-3107-4268-aad6-6fd9789205ba/1/q1T-gxtqcZ9C5shIb9A7VQvnYfs.mft
Manifest number:          1447
Signing time:             Fri 31 Jan 2025 10:00:36 +0000
Manifest this update:     Fri 31 Jan 2025 10:00:36 +0000
Manifest next update:     Sat 01 Feb 2025 10:00:36 +0000
Files and hashes:         1: F9Xe_7jgOYvdTNT9YC7uc1m7clw.roa (hash: dbf14IPOhGmAOgdUCZzI8fhPd/ppi3DXyc8q1YDOSJo=)
                          2: HncO7o0Hx6kmO3BNCUVPbF42-m8.roa (hash: /pA5z2SwqwvGDpyWUHOM2Fy+nufCkYimVU2as7hvZq8=)
                          3: NiqjOlNTXM20fr7bb_Hu7fNVpnk.roa (hash: WMjXZpt8cy+IOzVtTivSuKAcQFZieAhNSlute/PEdJQ=)
                          4: VUze8_1n74uVa_uD6F7A6AioYKM.roa (hash: ugq/e8QeF0wIWa9W8bf0Wvpu26TSdCjGX0yCM4f1o1k=)
                          5: _PaUGjvJShI2nma6rn1q_5nZsbw.roa (hash: IISCWbKH8fVMYSEIH2kdkWijGfyVlaENW4tYYQwgOus=)
                          6: f7reVcrHhHE-i0os8pjDmr_KSH4.roa (hash: jXh5JkKzxulogW8DJqArisPnpXo5ZeSQOy/vsvzYL7E=)
                          7: jJkmu95ExwTShGBJvsJR7aBhoPU.roa (hash: nz14VG6Wmam+OFYqgavV7ACmkDO4KpLptIyk8PePgL8=)
                          8: q1T-gxtqcZ9C5shIb9A7VQvnYfs.crl (hash: ihv6hspMUp7OF/QxBoF+u6qgFhbMSiCQouJSGQJYmoM=)
                          9: vJ-NNcH9s58i_6pVtY2137W58sA.roa (hash: gaXJVcSt6ugw0X061/2eBl5dxytqTi7AFjDEgazcu8g=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bb:ce:22:1c:0b:dc:71:39:ef:30:20:a7:5f:88:f6:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ab54fe831b6a719f42e6c8486fd03b550be761fb
        Validity
            Not Before: Jan 31 10:00:36 2025 GMT
            Not After : Feb  1 10:00:36 2025 GMT
        Subject: CN=1c87d986fe45f04fd0cd1dcb6975d68b8b871f68
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:19:43:2f:c3:4e:0d:1a:77:91:fd:ff:9e:0a:
                    b8:d0:d3:72:30:7f:23:56:17:14:41:a4:29:72:8c:
                    3e:6d:30:ac:07:3e:e2:6d:1a:14:0b:45:06:3e:1e:
                    5f:51:6e:6b:fa:1e:d7:42:d9:3a:0b:03:e3:06:e2:
                    48:74:93:88:d7:e4:c6:98:c1:c5:01:ac:12:80:3e:
                    10:b2:1e:a2:d8:57:58:a7:4c:80:74:a1:21:58:86:
                    80:bb:eb:a5:93:d1:d6:6e:83:ec:07:8e:03:9e:6c:
                    91:40:0d:1b:f9:f5:a3:f3:e5:ae:8f:e7:e2:2c:5e:
                    28:3b:c9:aa:95:59:c8:d3:a5:3d:57:64:47:c7:a1:
                    28:66:3d:ea:d2:0d:c3:81:3d:74:1d:56:33:21:52:
                    ab:8f:0c:18:d7:f0:9d:c1:d6:5f:27:fe:6f:29:42:
                    14:8d:8c:35:11:e9:5d:a0:3a:6c:62:af:2d:16:0d:
                    74:5f:7b:87:c5:91:b1:3e:a8:12:cd:31:06:a9:ec:
                    68:57:bd:70:d8:a6:c3:af:bc:95:68:74:52:c6:1d:
                    77:29:97:4b:63:5b:e9:ff:83:f1:eb:0e:c3:bf:e0:
                    2c:7b:6b:13:03:4d:2d:eb:35:d9:ef:7a:6c:3a:d7:
                    31:f4:12:7e:ef:50:e5:f0:3d:cd:a9:25:f5:52:c3:
                    fd:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:87:D9:86:FE:45:F0:4F:D0:CD:1D:CB:69:75:D6:8B:8B:87:1F:68
            X509v3 Authority Key Identifier:
                keyid:AB:54:FE:83:1B:6A:71:9F:42:E6:C8:48:6F:D0:3B:55:0B:E7:61:FB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q1T-gxtqcZ9C5shIb9A7VQvnYfs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/5eaaa7-3107-4268-aad6-6fd9789205ba/1/q1T-gxtqcZ9C5shIb9A7VQvnYfs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/5eaaa7-3107-4268-aad6-6fd9789205ba/1/q1T-gxtqcZ9C5shIb9A7VQvnYfs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:2d:d9:30:6d:07:58:fe:8c:99:4e:6e:e9:41:e3:6b:68:cb:
         1d:55:e0:3b:32:00:e2:ae:99:2d:2e:e7:10:e7:1d:49:16:48:
         e6:a9:a2:23:b1:1f:45:1f:83:30:73:42:e7:99:42:91:07:67:
         04:cf:1c:1c:e1:c6:16:6c:4c:75:dc:fc:f3:d9:73:b1:cf:c4:
         f2:e2:9a:c2:64:d4:4a:d0:6a:a6:23:a9:c0:17:61:a9:9f:fe:
         dc:ac:1f:42:ef:ac:60:73:04:bb:28:9f:60:62:7c:ff:cf:06:
         97:e7:0e:52:60:ad:cb:57:4b:ac:c1:ca:85:d8:fa:10:ba:06:
         72:69:93:c3:a7:81:d3:35:67:b7:2a:da:f4:02:8a:53:ba:b6:
         08:4a:20:e4:ee:af:20:26:31:03:fd:51:82:4b:01:c5:12:03:
         83:9d:7f:38:bc:76:80:25:e9:6f:72:26:2c:33:96:d9:f8:e1:
         9a:d5:06:e6:92:e4:11:de:2e:71:d4:56:9d:49:37:d2:2d:39:
         09:a3:a2:d0:bb:ab:af:8c:11:51:ff:eb:f3:2d:ea:cd:82:62:
         60:65:47:0e:a2:cd:e1:53:c7:74:1b:18:4d:23:4b:da:76:c5:
         7f:2f:30:07:2e:cb:3d:6e:9f:0c:3d:e4:2e:13:72:b1:f7:01:
         29:ee:50:36
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS7ziIcC9xxOe8wIKdfiPZmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFiNTRmZTgzMWI2YTcxOWY0MmU2Yzg0ODZmZDAzYjU1MGJl
NzYxZmIwHhcNMjUwMTMxMTAwMDM2WhcNMjUwMjAxMTAwMDM2WjAzMTEwLwYDVQQD
EygxYzg3ZDk4NmZlNDVmMDRmZDBjZDFkY2I2OTc1ZDY4YjhiODcxZjY4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxxlDL8NODRp3kf3/ngq40NNyMH8j
VhcUQaQpcow+bTCsBz7ibRoUC0UGPh5fUW5r+h7XQtk6CwPjBuJIdJOI1+TGmMHF
AawSgD4Qsh6i2FdYp0yAdKEhWIaAu+ulk9HWboPsB44DnmyRQA0b+fWj8+Wuj+fi
LF4oO8mqlVnI06U9V2RHx6EoZj3q0g3DgT10HVYzIVKrjwwY1/CdwdZfJ/5vKUIU
jYw1EeldoDpsYq8tFg10X3uHxZGxPqgSzTEGqexoV71w2KbDr7yVaHRSxh13KZdL
Y1vp/4Px6w7Dv+Ase2sTA00t6zXZ73psOtcx9BJ+71Dl8D3NqSX1UsP94wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFByH2Yb+RfBP0M0dy2l11ouLhx9oMB8GA1UdIwQY
MBaAFKtU/oMbanGfQubISG/QO1UL52H7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcTFULWd4dHFjWjlDNXNoSWI5QTdWUXZuWWZzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS81ZWFhYTctMzEwNy00MjY4LWFhZDYt
NmZkOTc4OTIwNWJhLzEvcTFULWd4dHFjWjlDNXNoSWI5QTdWUXZuWWZzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84YS81ZWFhYTctMzEwNy00MjY4LWFhZDYtNmZkOTc4OTIwNWJh
LzEvcTFULWd4dHFjWjlDNXNoSWI5QTdWUXZuWWZzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATC3ZMG0H
WP6MmU5u6UHja2jLHVXgOzIA4q6ZLS7nEOcdSRZI5qmiI7EfRR+DMHNC55lCkQdn
BM8cHOHGFmxMddz889lzsc/E8uKawmTUStBqpiOpwBdhqZ/+3KwfQu+sYHMEuyif
YGJ8/88Gl+cOUmCty1dLrMHKhdj6ELoGcmmTw6eB0zVntyra9AKKU7q2CEog5O6v
ICYxA/1RgksBxRIDg51/OLx2gCXpb3ImLDOW2fjhmtUG5pLkEd4ucdRWnUk30i05
CaOi0Lurr4wRUf/r8y3qzYJiYGVHDqLN4VPHdBsYTSNL2nbFfy8wBy7LPW6fDD3k
LhNysfcBKe5QNg==
-----END CERTIFICATE-----