Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/89f0f6-a5ac-467b-a4ad-be218cef4a11/1/RtcTrajavPd2gcDKQtmWnkR8jqc.mft
File:                     RtcTrajavPd2gcDKQtmWnkR8jqc.mft (raw, json)
Hash identifier:          Or0nXpH1tbonuEr9BCAION5GdHZlDyMTEL2Pi481fIA=
Subject key identifier:   27:3B:B5:C4:EF:30:32:56:39:32:F4:A2:81:C0:5F:4F:CC:29:96:70
Authority key identifier: 46:D7:13:AD:A8:DA:BC:F7:76:81:C0:CA:42:D9:96:9E:44:7C:8E:A7
Certificate issuer:       /CN=46d713ada8dabcf77681c0ca42d9969e447c8ea7
Certificate serial:       0194BCA981047F7C8C1B227D00C719416107
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RtcTrajavPd2gcDKQtmWnkR8jqc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ae/89f0f6-a5ac-467b-a4ad-be218cef4a11/1/RtcTrajavPd2gcDKQtmWnkR8jqc.mft
Manifest number:          1387
Signing time:             Fri 31 Jan 2025 14:00:12 +0000
Manifest this update:     Fri 31 Jan 2025 14:00:12 +0000
Manifest next update:     Sat 01 Feb 2025 14:00:12 +0000
Files and hashes:         1: 902A4ToiQzymYMcD3pXbf2e5yrc.roa (hash: DVG/ZgXFiaBo9LhWew3HuJ5AKLyMJe+chV57zXPxO+Y=)
                          2: F1m4ItJzd-e1pj7aIf2HCC8j59k.roa (hash: 9mt8xPLKl7xW4ptMPyOkwbZXhHAWeX39Lhx9gbts5O4=)
                          3: RtcTrajavPd2gcDKQtmWnkR8jqc.crl (hash: Lvq1imSccyC87xDSQnRxEU/y4WUQ9BKGXnMrDu04w/8=)
                          4: Y1CJ8gQEZfHleCGAhAaSSFR1x2I.roa (hash: rwDRLxU8OCI+s0z0CHOKYx00giDxVe3hy3cA/grmm50=)
                          5: ofhPTdJYyOtReXz73tD2xI7Nenw.roa (hash: FCZ0fnzEh8Pc6cPMxzRA6YANmllcrSQpN4x9Jhf/aSk=)
                          6: tGJE2d6hM7PTPSCvgtk22KbU7b4.roa (hash: TkB6MrgZCPcmJeaD/5NEZFHetmMOK3giH9sW5hRUisM=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:a9:81:04:7f:7c:8c:1b:22:7d:00:c7:19:41:61:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=46d713ada8dabcf77681c0ca42d9969e447c8ea7
        Validity
            Not Before: Jan 31 14:00:12 2025 GMT
            Not After : Feb  1 14:00:12 2025 GMT
        Subject: CN=273bb5c4ef3032563932f4a281c05f4fcc299670
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:c8:15:ab:33:5b:4f:51:56:0c:46:f8:ad:ca:
                    ab:d7:ec:f8:85:62:4d:90:5f:b4:07:c5:69:77:01:
                    41:a6:ee:d9:a8:ca:ae:d1:c2:ff:00:f2:86:42:19:
                    cb:c1:7d:37:80:e9:0c:d7:75:dc:72:a6:9d:cd:1d:
                    d9:72:c4:fb:d0:ec:ad:0f:30:59:ab:fa:99:6c:6f:
                    f3:95:01:34:03:2e:b4:5d:9a:30:95:b1:c2:70:c8:
                    22:69:a4:b4:54:b5:18:dd:5c:3e:b8:9f:d2:09:1e:
                    4c:d1:61:96:6f:06:d7:9f:79:00:1d:f7:d3:f7:7a:
                    07:8b:2e:7e:ac:e5:6c:5a:a0:4c:37:d3:7a:b9:c0:
                    4f:a5:b8:f0:d9:ad:1c:43:94:df:30:07:7f:f6:7d:
                    e3:28:47:5b:02:33:dc:54:e3:15:45:6b:18:f0:3b:
                    c2:9e:1d:8a:d7:2c:bc:fe:e7:49:d2:47:56:4d:4f:
                    9c:65:34:4c:d5:b2:9b:fa:64:63:24:6f:d8:98:c1:
                    5d:31:99:6c:33:d1:24:3d:c1:ea:6e:97:30:d1:82:
                    3f:19:d8:34:68:76:ef:b2:4d:24:3e:b3:90:5a:e8:
                    63:a0:bd:e1:28:31:81:b7:ea:e3:fa:37:01:90:30:
                    05:7c:3d:a4:ca:6c:f1:2a:53:b8:e0:7a:e8:3a:40:
                    1b:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:3B:B5:C4:EF:30:32:56:39:32:F4:A2:81:C0:5F:4F:CC:29:96:70
            X509v3 Authority Key Identifier:
                keyid:46:D7:13:AD:A8:DA:BC:F7:76:81:C0:CA:42:D9:96:9E:44:7C:8E:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RtcTrajavPd2gcDKQtmWnkR8jqc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/89f0f6-a5ac-467b-a4ad-be218cef4a11/1/RtcTrajavPd2gcDKQtmWnkR8jqc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/89f0f6-a5ac-467b-a4ad-be218cef4a11/1/RtcTrajavPd2gcDKQtmWnkR8jqc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:48:75:15:3b:28:27:91:fa:d6:ce:9f:49:52:82:3e:00:b1:
         a9:ae:43:3f:02:d0:6d:2d:17:a3:01:49:7d:d6:b5:d4:b2:de:
         9e:68:d1:39:9c:86:c0:90:2c:1b:15:9c:06:b2:1f:a7:b6:c2:
         99:de:b7:6d:69:a3:69:dc:9b:f6:0f:f5:f2:03:6f:cb:a3:83:
         6a:e6:9d:65:e4:11:6c:ff:8e:87:9a:ee:5a:f4:60:7f:c5:c6:
         e9:32:44:52:bd:ff:04:5a:75:bd:3a:5c:f6:65:ba:d2:69:20:
         a0:50:b7:6f:25:35:a3:fa:8c:de:34:4f:76:f8:20:ed:99:c2:
         f3:0a:5a:9f:10:f7:44:51:bd:4d:5e:84:40:09:92:23:1a:b6:
         76:eb:63:48:a9:74:ee:2f:16:1f:db:aa:3c:06:2b:99:f8:29:
         a4:b2:81:e7:ef:a2:dc:3e:23:d9:ae:46:dd:d6:16:4c:b4:bd:
         0c:23:65:99:54:5b:c5:7b:c4:b3:75:33:60:b1:8b:58:16:39:
         07:5f:c6:91:73:50:a6:4e:1a:9e:0e:92:73:e2:4c:c7:74:fa:
         54:a8:dc:34:e7:a4:92:e4:23:1b:ad:d9:ca:20:7a:b6:a4:fd:
         c9:8d:70:b9:17:79:9e:4c:6c:79:22:e8:3f:3b:b7:ec:b3:af:
         2e:fd:3a:60
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8qYEEf3yMGyJ9AMcZQWEHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ2ZDcxM2FkYThkYWJjZjc3NjgxYzBjYTQyZDk5NjllNDQ3
YzhlYTcwHhcNMjUwMTMxMTQwMDEyWhcNMjUwMjAxMTQwMDEyWjAzMTEwLwYDVQQD
EygyNzNiYjVjNGVmMzAzMjU2MzkzMmY0YTI4MWMwNWY0ZmNjMjk5NjcwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1MgVqzNbT1FWDEb4rcqr1+z4hWJN
kF+0B8VpdwFBpu7ZqMqu0cL/APKGQhnLwX03gOkM13XccqadzR3ZcsT70OytDzBZ
q/qZbG/zlQE0Ay60XZowlbHCcMgiaaS0VLUY3Vw+uJ/SCR5M0WGWbwbXn3kAHffT
93oHiy5+rOVsWqBMN9N6ucBPpbjw2a0cQ5TfMAd/9n3jKEdbAjPcVOMVRWsY8DvC
nh2K1yy8/udJ0kdWTU+cZTRM1bKb+mRjJG/YmMFdMZlsM9EkPcHqbpcw0YI/Gdg0
aHbvsk0kPrOQWuhjoL3hKDGBt+rj+jcBkDAFfD2kymzxKlO44HroOkAb6wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCc7tcTvMDJWOTL0ooHAX0/MKZZwMB8GA1UdIwQY
MBaAFEbXE62o2rz3doHAykLZlp5EfI6nMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUnRjVHJhamF2UGQyZ2NES1F0bVdua1I4anFjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZS84OWYwZjYtYTVhYy00NjdiLWE0YWQt
YmUyMThjZWY0YTExLzEvUnRjVHJhamF2UGQyZ2NES1F0bVdua1I4anFjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZS84OWYwZjYtYTVhYy00NjdiLWE0YWQtYmUyMThjZWY0YTEx
LzEvUnRjVHJhamF2UGQyZ2NES1F0bVdua1I4anFjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAO0h1FTso
J5H61s6fSVKCPgCxqa5DPwLQbS0XowFJfda11LLenmjROZyGwJAsGxWcBrIfp7bC
md63bWmjadyb9g/18gNvy6ODauadZeQRbP+Oh5ruWvRgf8XG6TJEUr3/BFp1vTpc
9mW60mkgoFC3byU1o/qM3jRPdvgg7ZnC8wpanxD3RFG9TV6EQAmSIxq2dutjSKl0
7i8WH9uqPAYrmfgppLKB5++i3D4j2a5G3dYWTLS9DCNlmVRbxXvEs3UzYLGLWBY5
B1/GkXNQpk4ang6Sc+JMx3T6VKjcNOekkuQjG63ZyiB6tqT9yY1wuRd5nkxseSLo
Pzu37LOvLv06YA==
-----END CERTIFICATE-----