Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/c94c65-ea02-405a-bba7-ca0474adf373/1/eCa2BPb4wD_p32yY5h856u11VaU.mft
File:                     eCa2BPb4wD_p32yY5h856u11VaU.mft (raw, json)
Hash identifier:          q+7FmJYdTYOhiL+jFdH63DX8HEx3UoI1xLDZGVyYzaE=
Subject key identifier:   89:6C:58:42:A2:64:A2:B2:28:8E:E2:FB:BB:9C:D0:E0:BA:47:DB:5F
Authority key identifier: 78:26:B6:04:F6:F8:C0:3F:E9:DF:6C:98:E6:1F:39:EA:ED:75:55:A5
Certificate issuer:       /CN=7826b604f6f8c03fe9df6c98e61f39eaed7555a5
Certificate serial:       0194BBCEE9F51690BFF6C980C777EE47629F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eCa2BPb4wD_p32yY5h856u11VaU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/94/c94c65-ea02-405a-bba7-ca0474adf373/1/eCa2BPb4wD_p32yY5h856u11VaU.mft
Manifest number:          142B
Signing time:             Fri 31 Jan 2025 10:01:27 +0000
Manifest this update:     Fri 31 Jan 2025 10:01:27 +0000
Manifest next update:     Sat 01 Feb 2025 10:01:27 +0000
Files and hashes:         1: 842mFfTvhpMCx5O_VlnhbyC5DPc.roa (hash: Y0uuEcHUMVeKlkZHSWT3ejEG3c8HH3MwGXKgGUvrUyI=)
                          2: W8WjY9YYv8iljwDY45MThfbAk84.roa (hash: dxrwQI2i6fKiTUhyw6w33TI4PVDbBCXq3QCNhLROPGc=)
                          3: eCa2BPb4wD_p32yY5h856u11VaU.crl (hash: SGGiI7XktX6AkItUvRfvjBK3vsw5Ls9pVYAH4pardmU=)
                          4: vkWj2nsjhackefLzTv92x4E_mxA.roa (hash: WehOyXDU50Ry7h0fUSMpd4vK4omZPxG7KTOejPEntu0=)
                          5: zHyi0zO0aepoCj3YfwkO2CsuHDk.roa (hash: 64jkIZP0sVFKnl22gW7SzeQyLPkea22pOG/lfDbS5eU=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bb:ce:e9:f5:16:90:bf:f6:c9:80:c7:77:ee:47:62:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7826b604f6f8c03fe9df6c98e61f39eaed7555a5
        Validity
            Not Before: Jan 31 10:01:27 2025 GMT
            Not After : Feb  1 10:01:27 2025 GMT
        Subject: CN=896c5842a264a2b2288ee2fbbb9cd0e0ba47db5f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:5a:bf:9b:4b:7d:ea:58:14:1c:14:be:8d:41:
                    92:cb:89:25:6b:35:40:9d:87:c4:ee:13:d7:04:1a:
                    82:5b:85:56:09:7e:45:1e:c7:63:49:81:9a:54:06:
                    85:b6:e3:e4:a2:90:21:fc:8e:d4:18:7a:32:13:df:
                    a8:2b:50:85:4f:97:84:d9:45:96:90:8c:82:81:f5:
                    d5:19:bc:35:9d:66:c8:f5:5a:1e:4c:cf:fa:df:85:
                    95:14:e2:ea:13:78:35:f9:96:16:8c:ab:1f:91:2d:
                    5e:97:6f:a2:14:e6:76:b6:3e:f6:29:11:27:2b:bc:
                    5a:24:06:28:57:02:df:29:47:ac:da:d5:22:db:90:
                    2b:34:8c:76:ef:3e:e8:f2:03:06:6e:67:09:c9:b1:
                    e2:77:cb:62:0b:5c:ee:c3:a1:26:ea:26:d1:7f:42:
                    23:cc:69:1f:93:0d:5b:68:9d:66:7d:8c:31:d0:f1:
                    dd:48:0f:2f:67:34:1b:e1:2b:69:23:3e:4a:74:79:
                    0f:45:4a:6e:1b:e6:fe:7c:35:85:57:a6:af:74:06:
                    9a:f8:62:ba:27:7c:e8:8d:5e:8f:bf:f1:0e:22:60:
                    f7:1c:52:8d:74:1e:13:2f:dd:66:15:4b:71:35:fb:
                    9c:b9:06:ee:81:a9:f8:41:68:5a:da:2f:09:4a:4b:
                    54:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:6C:58:42:A2:64:A2:B2:28:8E:E2:FB:BB:9C:D0:E0:BA:47:DB:5F
            X509v3 Authority Key Identifier:
                keyid:78:26:B6:04:F6:F8:C0:3F:E9:DF:6C:98:E6:1F:39:EA:ED:75:55:A5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eCa2BPb4wD_p32yY5h856u11VaU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/c94c65-ea02-405a-bba7-ca0474adf373/1/eCa2BPb4wD_p32yY5h856u11VaU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/94/c94c65-ea02-405a-bba7-ca0474adf373/1/eCa2BPb4wD_p32yY5h856u11VaU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b9:8d:a8:09:50:e8:6a:b8:53:99:48:73:08:2e:5b:a8:50:c0:
         ff:41:34:72:b5:03:a2:76:7b:1b:b7:a5:85:7f:a5:80:5c:fb:
         53:3d:4d:1c:4a:68:97:51:09:cb:09:5d:2c:d0:a4:95:de:74:
         0c:6c:77:25:d1:f6:a9:28:58:53:fc:48:5b:b8:8a:9f:01:31:
         aa:24:4e:dc:99:8b:17:f7:2f:e2:38:bc:00:2f:88:3a:23:72:
         5b:48:97:44:40:2f:d8:f8:74:ab:48:f3:e8:89:aa:56:5c:04:
         f8:c8:ef:b0:0e:47:89:d8:31:2f:6f:40:95:67:a9:90:17:36:
         5d:f3:22:c7:a6:76:58:d9:7e:4a:4e:0b:8d:4a:08:36:88:f0:
         01:d7:b4:9e:23:a2:59:43:d5:de:46:1a:ae:2e:1c:69:1a:a7:
         71:30:b3:c9:62:7c:26:11:5f:ba:9d:16:35:11:45:6a:b6:79:
         bd:1e:40:6b:e9:19:1f:d3:0d:8d:b8:a7:3f:73:7f:3b:45:ea:
         2a:20:4f:68:e9:e7:79:54:98:51:ec:e6:c8:d3:f1:bd:7a:d2:
         b8:ce:95:f1:ad:c7:c3:04:65:d7:78:bf:79:18:6a:31:b0:c9:
         6a:4b:e1:ad:18:98:19:2c:8a:a9:15:16:32:30:90:16:7e:a4:
         cf:7c:5d:59
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS7zun1FpC/9smAx3fuR2KfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc4MjZiNjA0ZjZmOGMwM2ZlOWRmNmM5OGU2MWYzOWVhZWQ3
NTU1YTUwHhcNMjUwMTMxMTAwMTI3WhcNMjUwMjAxMTAwMTI3WjAzMTEwLwYDVQQD
Eyg4OTZjNTg0MmEyNjRhMmIyMjg4ZWUyZmJiYjljZDBlMGJhNDdkYjVmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArFq/m0t96lgUHBS+jUGSy4klazVA
nYfE7hPXBBqCW4VWCX5FHsdjSYGaVAaFtuPkopAh/I7UGHoyE9+oK1CFT5eE2UWW
kIyCgfXVGbw1nWbI9VoeTM/634WVFOLqE3g1+ZYWjKsfkS1el2+iFOZ2tj72KREn
K7xaJAYoVwLfKUes2tUi25ArNIx27z7o8gMGbmcJybHid8tiC1zuw6Em6ibRf0Ij
zGkfkw1baJ1mfYwx0PHdSA8vZzQb4StpIz5KdHkPRUpuG+b+fDWFV6avdAaa+GK6
J3zojV6Pv/EOImD3HFKNdB4TL91mFUtxNfucuQbugan4QWha2i8JSktUnQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIlsWEKiZKKyKI7i+7uc0OC6R9tfMB8GA1UdIwQY
MBaAFHgmtgT2+MA/6d9smOYfOertdVWlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZUNhMkJQYjR3RF9wMzJ5WTVoODU2dTExVmFVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NC9jOTRjNjUtZWEwMi00MDVhLWJiYTct
Y2EwNDc0YWRmMzczLzEvZUNhMkJQYjR3RF9wMzJ5WTVoODU2dTExVmFVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85NC9jOTRjNjUtZWEwMi00MDVhLWJiYTctY2EwNDc0YWRmMzcz
LzEvZUNhMkJQYjR3RF9wMzJ5WTVoODU2dTExVmFVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuY2oCVDo
arhTmUhzCC5bqFDA/0E0crUDonZ7G7elhX+lgFz7Uz1NHEpol1EJywldLNCkld50
DGx3JdH2qShYU/xIW7iKnwExqiRO3JmLF/cv4ji8AC+IOiNyW0iXREAv2Ph0q0jz
6ImqVlwE+MjvsA5HidgxL29AlWepkBc2XfMix6Z2WNl+Sk4LjUoINojwAde0niOi
WUPV3kYari4caRqncTCzyWJ8JhFfup0WNRFFarZ5vR5Aa+kZH9MNjbinP3N/O0Xq
KiBPaOnneVSYUezmyNPxvXrSuM6V8a3HwwRl13i/eRhqMbDJakvhrRiYGSyKqRUW
MjCQFn6kz3xdWQ==
-----END CERTIFICATE-----