Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/1bcb2d-f58b-4e44-b133-dfcbdf3b1058/1/odAxU3OwmwYapZ8SnVkuq_ezqu8.mft
File:                     odAxU3OwmwYapZ8SnVkuq_ezqu8.mft (raw, json)
Hash identifier:          ygzDgw0ZJfhY+Fc2zAUBsPZLFtYyEVb2sNrtrokHKR4=
Subject key identifier:   CD:07:E5:30:0C:0A:8B:E2:2A:78:98:06:B7:EC:AF:DE:0D:A6:92:0F
Authority key identifier: A1:D0:31:53:73:B0:9B:06:1A:A5:9F:12:9D:59:2E:AB:F7:B3:AA:EF
Certificate issuer:       /CN=a1d0315373b09b061aa59f129d592eabf7b3aaef
Certificate serial:       0194BCA985846AA4F84FF8BAA9C8D332E606
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/odAxU3OwmwYapZ8SnVkuq_ezqu8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ac/1bcb2d-f58b-4e44-b133-dfcbdf3b1058/1/odAxU3OwmwYapZ8SnVkuq_ezqu8.mft
Manifest number:          143B
Signing time:             Fri 31 Jan 2025 14:00:13 +0000
Manifest this update:     Fri 31 Jan 2025 14:00:13 +0000
Manifest next update:     Sat 01 Feb 2025 14:00:13 +0000
Files and hashes:         1: H4Im8Swj1FSuJyYqN8JPK7UpVDU.roa (hash: jQUdvjp+XMu9RhMc9HBGBO2BWt37hObPuG6tYSQQ2Vc=)
                          2: NqcS3iBK8U8flvef0Nqw2TVfi60.roa (hash: j8yFbIlyMimvTa7T3CseeI21D35WgrPORHectZm7+m8=)
                          3: RoGTylsAvJ0kfUqQmOGMGPl4lMw.roa (hash: M6AyczLNwaE/pwZJ9qp9kSzxL5JgaMLnNyyEPKCm858=)
                          4: odAxU3OwmwYapZ8SnVkuq_ezqu8.crl (hash: 7mkcltndgTXF+cLRA8EFmHhA/ueT/kOB+1/CvAgAdL0=)
                          5: vzGcID_N34zQFrVI3nMugUoVewA.roa (hash: s5waq9wx34dg2rh+ta7n4AjQKU2ote6EQ3de9ofeRpo=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:a9:85:84:6a:a4:f8:4f:f8:ba:a9:c8:d3:32:e6:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a1d0315373b09b061aa59f129d592eabf7b3aaef
        Validity
            Not Before: Jan 31 14:00:13 2025 GMT
            Not After : Feb  1 14:00:13 2025 GMT
        Subject: CN=cd07e5300c0a8be22a789806b7ecafde0da6920f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:ea:08:57:c9:cd:05:2f:93:99:a2:37:ae:72:
                    79:0a:31:fd:03:93:7a:e0:c0:0b:b7:de:e2:64:d1:
                    c4:55:d8:1c:49:20:28:0f:52:c6:65:ed:42:28:93:
                    40:b0:f8:1f:58:1c:31:69:1b:4a:ba:fa:ad:8a:4d:
                    3c:b2:12:98:9e:c9:35:f8:bb:87:03:2e:0d:2e:16:
                    ce:1b:8e:89:76:5c:d7:45:77:68:e1:af:c8:bc:f0:
                    42:68:c7:2b:d7:c1:7c:86:2a:78:77:20:82:c6:f5:
                    75:eb:c5:fb:34:a9:5c:f6:24:0a:52:24:a2:75:26:
                    9f:52:49:be:80:a7:d3:f0:36:b5:91:1b:29:f4:10:
                    29:38:1a:0c:dc:4c:90:49:9d:bc:a4:73:30:c7:01:
                    96:88:7f:96:bf:10:9e:f7:b3:a9:fb:17:7f:93:fd:
                    cb:a3:ae:8b:26:0f:0a:d7:2e:14:3a:cc:dc:9e:63:
                    a5:e2:df:36:03:68:83:26:42:44:1f:b6:18:83:48:
                    85:4b:ab:87:5b:86:86:da:d4:92:52:91:44:97:bc:
                    f7:1b:18:52:71:da:19:5e:e8:f2:ed:68:85:5b:6e:
                    9b:f6:43:61:95:b9:1e:1f:5c:f0:22:24:6b:b0:8a:
                    14:48:7f:ab:06:1f:42:51:14:0b:42:8e:37:5e:01:
                    3c:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:07:E5:30:0C:0A:8B:E2:2A:78:98:06:B7:EC:AF:DE:0D:A6:92:0F
            X509v3 Authority Key Identifier:
                keyid:A1:D0:31:53:73:B0:9B:06:1A:A5:9F:12:9D:59:2E:AB:F7:B3:AA:EF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/odAxU3OwmwYapZ8SnVkuq_ezqu8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/1bcb2d-f58b-4e44-b133-dfcbdf3b1058/1/odAxU3OwmwYapZ8SnVkuq_ezqu8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/1bcb2d-f58b-4e44-b133-dfcbdf3b1058/1/odAxU3OwmwYapZ8SnVkuq_ezqu8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:51:9f:56:68:fd:69:c8:d5:db:b4:ec:11:ad:bb:cc:4e:81:
         11:5e:03:0d:a6:ac:9e:a9:72:db:9d:26:8e:55:79:eb:21:d0:
         68:21:b6:f4:97:64:98:e9:3c:96:c0:5d:d7:38:bd:2a:a3:55:
         18:19:af:d6:31:ec:71:82:e0:8e:6f:e7:4a:c3:a1:45:9a:33:
         e0:56:4e:1b:35:c0:b4:10:d4:67:46:2b:82:3a:14:0e:95:f8:
         b3:a8:8d:eb:ad:f3:a9:39:2f:fe:e6:9a:4b:29:42:e5:f4:d5:
         d2:85:8a:22:ae:50:a3:fe:0a:71:38:da:bd:91:b7:87:14:5c:
         60:0a:02:45:87:ac:59:7c:97:2c:cc:e6:3c:d2:4e:a2:67:12:
         17:66:9e:8d:d5:71:94:d1:6d:57:3b:ef:05:54:8e:b4:36:1c:
         d8:f5:fa:11:6b:ab:6a:28:c7:79:0d:cd:8c:93:13:d0:6e:29:
         0e:44:e3:6f:4a:b8:ad:fd:8e:fa:7d:d2:96:72:f5:57:82:a8:
         57:81:ec:e7:2e:45:98:bd:3b:54:82:6e:e7:21:7d:73:cd:cd:
         b7:f2:85:f5:a3:e2:cb:b1:eb:f9:f9:f7:12:d9:3a:ab:8c:b4:
         d9:71:e0:5e:bb:1a:87:a0:ae:72:9e:84:02:51:88:bc:45:82:
         78:2c:66:86
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8qYWEaqT4T/i6qcjTMuYGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGExZDAzMTUzNzNiMDliMDYxYWE1OWYxMjlkNTkyZWFiZjdi
M2FhZWYwHhcNMjUwMTMxMTQwMDEzWhcNMjUwMjAxMTQwMDEzWjAzMTEwLwYDVQQD
EyhjZDA3ZTUzMDBjMGE4YmUyMmE3ODk4MDZiN2VjYWZkZTBkYTY5MjBmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxuoIV8nNBS+TmaI3rnJ5CjH9A5N6
4MALt97iZNHEVdgcSSAoD1LGZe1CKJNAsPgfWBwxaRtKuvqtik08shKYnsk1+LuH
Ay4NLhbOG46JdlzXRXdo4a/IvPBCaMcr18F8hip4dyCCxvV168X7NKlc9iQKUiSi
dSafUkm+gKfT8Da1kRsp9BApOBoM3EyQSZ28pHMwxwGWiH+WvxCe97Op+xd/k/3L
o66LJg8K1y4UOszcnmOl4t82A2iDJkJEH7YYg0iFS6uHW4aG2tSSUpFEl7z3GxhS
cdoZXujy7WiFW26b9kNhlbkeH1zwIiRrsIoUSH+rBh9CURQLQo43XgE81wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM0H5TAMCoviKniYBrfsr94NppIPMB8GA1UdIwQY
MBaAFKHQMVNzsJsGGqWfEp1ZLqv3s6rvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb2RBeFUzT3dtd1lhcFo4U25Wa3VxX2V6cXU4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYy8xYmNiMmQtZjU4Yi00ZTQ0LWIxMzMt
ZGZjYmRmM2IxMDU4LzEvb2RBeFUzT3dtd1lhcFo4U25Wa3VxX2V6cXU4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYy8xYmNiMmQtZjU4Yi00ZTQ0LWIxMzMtZGZjYmRmM2IxMDU4
LzEvb2RBeFUzT3dtd1lhcFo4U25Wa3VxX2V6cXU4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAS1GfVmj9
acjV27TsEa27zE6BEV4DDaasnqly250mjlV56yHQaCG29JdkmOk8lsBd1zi9KqNV
GBmv1jHscYLgjm/nSsOhRZoz4FZOGzXAtBDUZ0YrgjoUDpX4s6iN663zqTkv/uaa
SylC5fTV0oWKIq5Qo/4KcTjavZG3hxRcYAoCRYesWXyXLMzmPNJOomcSF2aejdVx
lNFtVzvvBVSOtDYc2PX6EWuraijHeQ3NjJMT0G4pDkTjb0q4rf2O+n3SlnL1V4Ko
V4Hs5y5FmL07VIJu5yF9c83Nt/KF9aPiy7Hr+fn3Etk6q4y02XHgXrsah6Cucp6E
AlGIvEWCeCxmhg==
-----END CERTIFICATE-----