Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/fb7a7d-0655-4587-8af9-7700e25ff769/1/qkTrCRs6M6h7644ASrFe8Xj7qgA.mft
File:                     qkTrCRs6M6h7644ASrFe8Xj7qgA.mft (raw, json)
Hash identifier:          3lzy/DN3LDyjjlN8A6WpPB0RnCA99qxscW8RDXjq9C4=
Subject key identifier:   12:8A:67:56:60:97:5F:B9:6A:C4:E8:B4:97:0C:04:61:0B:2E:FC:91
Authority key identifier: AA:44:EB:09:1B:3A:33:A8:7B:EB:8E:00:4A:B1:5E:F1:78:FB:AA:00
Certificate issuer:       /CN=aa44eb091b3a33a87beb8e004ab15ef178fbaa00
Certificate serial:       0194BC3C6BD700649F1B9F92467056679093
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qkTrCRs6M6h7644ASrFe8Xj7qgA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/97/fb7a7d-0655-4587-8af9-7700e25ff769/1/qkTrCRs6M6h7644ASrFe8Xj7qgA.mft
Manifest number:          0EA3
Signing time:             Fri 31 Jan 2025 12:01:03 +0000
Manifest this update:     Fri 31 Jan 2025 12:01:03 +0000
Manifest next update:     Sat 01 Feb 2025 12:01:03 +0000
Files and hashes:         1: FeP6ktHBNaRwft0H-_e4k3vqEEI.roa (hash: x0ixEBGos8NpJoIqdvMzUdlrdo9lEdaYvD23JVoVtb8=)
                          2: X_mEYYeWr9-8-K3hPb_xZPAlhyU.roa (hash: 6DNXGEiBb6ULQJ057yIjE1b50LAb3WIwVPg+KL0u4Kc=)
                          3: gr0cSL9Z20uNppJqsYayd8a1gu4.roa (hash: wqIhk/QGRclb/eyqHZ1XVvBzFk7hoCkYPXEVOlH8doQ=)
                          4: qkTrCRs6M6h7644ASrFe8Xj7qgA.crl (hash: POjb0054hWa5oWpSdK8PnSoEUUzjpAlY5A2GO0zHWkc=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:3c:6b:d7:00:64:9f:1b:9f:92:46:70:56:67:90:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aa44eb091b3a33a87beb8e004ab15ef178fbaa00
        Validity
            Not Before: Jan 31 12:01:03 2025 GMT
            Not After : Feb  1 12:01:03 2025 GMT
        Subject: CN=128a675660975fb96ac4e8b4970c04610b2efc91
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:11:7e:ad:3a:f9:dd:bb:1d:95:39:1d:40:8d:
                    55:23:3f:30:4f:1f:4d:a1:0b:10:3f:8e:92:75:f3:
                    27:31:23:69:17:a4:a6:32:d4:58:66:11:ae:60:60:
                    ea:39:ca:84:1c:2d:6a:c2:28:96:2d:72:ad:6c:63:
                    dd:c8:7a:3e:df:d4:15:f9:b6:88:e7:a5:5b:b3:1d:
                    6f:b4:d3:24:d5:9c:4f:36:43:ac:88:c1:fd:4c:62:
                    a2:ec:f3:f6:ca:96:8d:a1:01:dc:32:bf:45:48:19:
                    db:53:7f:aa:bd:2f:ff:9d:c0:f8:f3:88:b9:33:40:
                    95:c1:9b:3d:1d:e6:aa:04:6d:80:05:b5:50:48:fd:
                    42:8b:7a:5d:62:ff:75:7b:d3:d9:b6:c9:49:b0:92:
                    37:ce:bb:d0:98:06:92:0f:53:0a:40:3a:ad:c6:bf:
                    dc:cd:db:9a:2a:26:c9:4e:c3:6a:f0:8a:b5:cf:ea:
                    5a:e2:dc:1c:1c:3e:aa:5e:ee:6c:94:ce:c2:b8:a1:
                    c9:4f:50:b8:c9:74:3f:d0:67:e0:94:d0:ce:af:c7:
                    02:95:ed:ac:74:0f:4c:c1:07:d7:af:7d:30:36:8c:
                    a6:f9:eb:a3:cd:d2:ff:bc:71:96:06:17:f5:3b:dd:
                    e8:82:c4:87:87:bf:84:44:bb:58:e3:68:ce:35:48:
                    89:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:8A:67:56:60:97:5F:B9:6A:C4:E8:B4:97:0C:04:61:0B:2E:FC:91
            X509v3 Authority Key Identifier:
                keyid:AA:44:EB:09:1B:3A:33:A8:7B:EB:8E:00:4A:B1:5E:F1:78:FB:AA:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qkTrCRs6M6h7644ASrFe8Xj7qgA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/fb7a7d-0655-4587-8af9-7700e25ff769/1/qkTrCRs6M6h7644ASrFe8Xj7qgA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/97/fb7a7d-0655-4587-8af9-7700e25ff769/1/qkTrCRs6M6h7644ASrFe8Xj7qgA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:d6:d1:b5:f6:d5:b5:8c:3a:0f:c5:cb:9b:e1:49:33:eb:3b:
         8c:91:a4:6a:ec:ec:aa:86:ab:a3:fa:94:74:ff:64:73:cc:1d:
         37:16:89:00:4a:ad:38:c4:9d:bf:ea:4d:4d:6a:a2:fa:69:c2:
         b9:19:37:01:14:0c:96:48:a8:e9:b0:5d:76:a2:43:95:55:14:
         36:fb:8a:26:35:00:de:d1:f2:3f:2c:e4:f7:dc:ee:f4:29:6b:
         0c:98:57:38:8f:c0:56:e3:7a:e0:aa:0f:7a:03:2e:f5:0d:6f:
         bc:ae:b1:88:d8:62:5c:9d:98:8f:d5:db:cb:7e:53:bf:b1:ac:
         6b:14:4e:34:11:15:bd:88:0a:11:3f:40:57:da:42:d6:37:ce:
         ab:ed:9e:47:bd:e7:fe:5d:7a:d7:f5:87:61:63:11:15:a4:ec:
         54:c9:21:02:72:22:2a:d1:17:26:c8:53:39:10:29:e1:d9:21:
         5e:dd:7e:55:e3:2b:e9:32:e0:06:77:67:c4:82:56:c9:60:ff:
         79:14:00:0c:19:22:b7:4f:91:68:ab:ef:89:77:4c:20:6b:eb:
         cc:c4:07:49:61:91:c5:37:a0:09:a8:bb:4d:d1:53:e8:de:b4:
         b8:dc:80:53:05:44:fb:0c:e8:db:b4:e0:9e:40:d6:40:c0:bd:
         87:b3:61:1a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8PGvXAGSfG5+SRnBWZ5CTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFhNDRlYjA5MWIzYTMzYTg3YmViOGUwMDRhYjE1ZWYxNzhm
YmFhMDAwHhcNMjUwMTMxMTIwMTAzWhcNMjUwMjAxMTIwMTAzWjAzMTEwLwYDVQQD
EygxMjhhNjc1NjYwOTc1ZmI5NmFjNGU4YjQ5NzBjMDQ2MTBiMmVmYzkxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsRF+rTr53bsdlTkdQI1VIz8wTx9N
oQsQP46SdfMnMSNpF6SmMtRYZhGuYGDqOcqEHC1qwiiWLXKtbGPdyHo+39QV+baI
56Vbsx1vtNMk1ZxPNkOsiMH9TGKi7PP2ypaNoQHcMr9FSBnbU3+qvS//ncD484i5
M0CVwZs9HeaqBG2ABbVQSP1Ci3pdYv91e9PZtslJsJI3zrvQmAaSD1MKQDqtxr/c
zduaKibJTsNq8Iq1z+pa4twcHD6qXu5slM7CuKHJT1C4yXQ/0GfglNDOr8cCle2s
dA9MwQfXr30wNoym+eujzdL/vHGWBhf1O93ogsSHh7+ERLtY42jONUiJiwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBKKZ1Zgl1+5asTotJcMBGELLvyRMB8GA1UdIwQY
MBaAFKpE6wkbOjOoe+uOAEqxXvF4+6oAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcWtUckNSczZNNmg3NjQ0QVNyRmU4WGo3cWdBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ny9mYjdhN2QtMDY1NS00NTg3LThhZjkt
NzcwMGUyNWZmNzY5LzEvcWtUckNSczZNNmg3NjQ0QVNyRmU4WGo3cWdBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Ny9mYjdhN2QtMDY1NS00NTg3LThhZjktNzcwMGUyNWZmNzY5
LzEvcWtUckNSczZNNmg3NjQ0QVNyRmU4WGo3cWdBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYNbRtfbV
tYw6D8XLm+FJM+s7jJGkauzsqoaro/qUdP9kc8wdNxaJAEqtOMSdv+pNTWqi+mnC
uRk3ARQMlkio6bBddqJDlVUUNvuKJjUA3tHyPyzk99zu9ClrDJhXOI/AVuN64KoP
egMu9Q1vvK6xiNhiXJ2Yj9Xby35Tv7GsaxRONBEVvYgKET9AV9pC1jfOq+2eR73n
/l161/WHYWMRFaTsVMkhAnIiKtEXJshTORAp4dkhXt1+VeMr6TLgBndnxIJWyWD/
eRQADBkit0+RaKvviXdMIGvrzMQHSWGRxTegCai7TdFT6N60uNyAUwVE+wzo27Tg
nkDWQMC9h7NhGg==
-----END CERTIFICATE-----