Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/41e90c-61cc-470c-a388-6d1c9b153cf0/1/AAdTTrd8qoNvjxGGMBZOAjbl_oY.mft
File:                     AAdTTrd8qoNvjxGGMBZOAjbl_oY.mft (raw, json)
Hash identifier:          /gWvOlAuXOTg5yNjNm9xy5Sf9fcADoR+/pT+1T77gjo=
Subject key identifier:   AA:B8:70:CC:EE:B1:EF:56:2F:50:5A:8D:CB:CF:9C:CC:FD:01:4A:C2
Authority key identifier: 00:07:53:4E:B7:7C:AA:83:6F:8F:11:86:30:16:4E:02:36:E5:FE:86
Certificate issuer:       /CN=0007534eb77caa836f8f118630164e0236e5fe86
Certificate serial:       0194BC3C53C299DA6AC23991C6B864AFA0F7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AAdTTrd8qoNvjxGGMBZOAjbl_oY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b2/41e90c-61cc-470c-a388-6d1c9b153cf0/1/AAdTTrd8qoNvjxGGMBZOAjbl_oY.mft
Manifest number:          0958
Signing time:             Fri 31 Jan 2025 12:00:57 +0000
Manifest this update:     Fri 31 Jan 2025 12:00:57 +0000
Manifest next update:     Sat 01 Feb 2025 12:00:57 +0000
Files and hashes:         1: 7elRG4gqnvY-kvee5EC-ljUx8zc.roa (hash: EBapcQW4LSNex4n/3b9OtP2KhuUXB5IUoQf2KZKkJ6Q=)
                          2: AAdTTrd8qoNvjxGGMBZOAjbl_oY.crl (hash: 7cBe9zpsR2Jjh9SASuNWTQ4gazidxpF6g1my89/FMEU=)
                          3: GAzN8JgljKfA3A30CpTpB9I-ljg.roa (hash: rKanLHq74yk8hIMHAP3lf3yTM47zrxq0k/XrA6g5TqI=)
                          4: KlGeCuL83ckpFDxEzckjMn7_6RE.roa (hash: sQSDNJGP0PRAc42NznmCEsFt8+XssPeUkQMlKcFGyeg=)
                          5: cI0Z3sLe1xjrCwyg19NbzVWgf58.roa (hash: RgqBJJ2OAbbh0xonFH0+36oQyNXiwKW4rTJMbCMMDzs=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:3c:53:c2:99:da:6a:c2:39:91:c6:b8:64:af:a0:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0007534eb77caa836f8f118630164e0236e5fe86
        Validity
            Not Before: Jan 31 12:00:57 2025 GMT
            Not After : Feb  1 12:00:57 2025 GMT
        Subject: CN=aab870cceeb1ef562f505a8dcbcf9cccfd014ac2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:69:74:5a:87:31:4c:b3:51:2d:a3:3d:30:95:
                    01:47:da:b5:0c:35:99:b6:b4:f1:3e:a1:c7:aa:11:
                    cb:c3:58:ad:07:6e:c5:19:9b:e9:36:14:d3:eb:51:
                    0a:a5:1b:81:0f:40:47:99:b5:8f:f3:91:c5:cc:d2:
                    2d:bd:d3:dd:ff:4b:a6:8a:97:fd:d1:67:56:ca:8c:
                    9b:03:18:34:7b:66:20:20:c3:37:48:aa:34:6a:06:
                    50:8b:fc:81:ae:1b:53:60:3b:16:e9:41:65:fb:da:
                    a0:71:69:67:2a:39:f9:9b:34:55:ec:bd:a7:62:fe:
                    6a:66:13:4b:90:54:93:90:30:77:00:4f:b2:33:6e:
                    60:7f:42:db:8f:46:93:f4:c0:d7:d6:22:a9:7f:6e:
                    24:3b:97:b9:74:18:f0:54:96:22:d8:8c:29:1a:f6:
                    9a:90:a0:6b:d9:2b:74:c9:0a:f4:60:be:f2:a3:d3:
                    e0:3f:9c:b8:ba:c7:6c:47:33:de:18:26:af:14:16:
                    0e:e0:cc:12:cf:98:92:05:c2:cf:1b:ea:3a:2c:e6:
                    21:4d:bc:ac:fd:0e:28:f9:1d:c2:78:c4:00:88:eb:
                    d3:3c:df:d7:a0:e8:cd:ec:c2:76:0c:86:be:1d:9c:
                    15:f9:ed:5b:3a:4c:c5:59:9a:18:36:b6:03:e2:ca:
                    4a:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:B8:70:CC:EE:B1:EF:56:2F:50:5A:8D:CB:CF:9C:CC:FD:01:4A:C2
            X509v3 Authority Key Identifier:
                keyid:00:07:53:4E:B7:7C:AA:83:6F:8F:11:86:30:16:4E:02:36:E5:FE:86

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AAdTTrd8qoNvjxGGMBZOAjbl_oY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/41e90c-61cc-470c-a388-6d1c9b153cf0/1/AAdTTrd8qoNvjxGGMBZOAjbl_oY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/41e90c-61cc-470c-a388-6d1c9b153cf0/1/AAdTTrd8qoNvjxGGMBZOAjbl_oY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c4:eb:ee:82:fa:8f:3e:87:a6:a7:08:53:a5:4b:c7:ea:44:14:
         50:a4:65:f1:f9:9d:93:95:c2:8b:e4:e4:68:9c:4b:d2:9e:c8:
         6c:48:8f:2f:21:f5:5e:73:8a:25:f9:6b:4e:86:e5:f6:ae:67:
         e9:54:25:ec:61:7a:1a:52:a0:0d:30:cc:a5:f0:ec:0f:f7:c7:
         07:b9:96:86:93:09:8d:f1:f9:63:ac:cd:5a:aa:c7:73:b8:6c:
         bb:b1:1b:91:9c:73:07:74:d1:de:c4:10:56:de:39:af:a7:89:
         57:47:e0:89:d5:3f:c1:cd:2c:94:94:94:b7:ce:8c:c8:16:24:
         91:bb:c2:1f:72:88:ce:5a:26:31:88:83:43:f5:d1:55:81:30:
         58:32:64:61:d6:f6:a0:1a:52:bd:98:2b:3c:69:b8:ea:b8:13:
         c7:c4:28:36:5e:ca:7c:da:05:05:b5:f6:4c:38:5b:c0:c6:d0:
         5b:ef:32:75:c4:88:69:55:fe:f1:fa:c9:bf:f2:43:7d:93:8a:
         ae:1e:54:b0:6a:38:9e:fc:58:c6:dd:d7:83:af:b2:7b:84:5c:
         0d:ff:6d:9b:25:9d:72:ab:e1:6d:18:1b:14:2c:21:12:03:f3:
         14:ce:69:67:e3:ee:bc:78:5a:b1:e9:d2:cd:7a:e1:3e:4e:95:
         bf:8a:f3:30
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8PFPCmdpqwjmRxrhkr6D3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAwMDc1MzRlYjc3Y2FhODM2ZjhmMTE4NjMwMTY0ZTAyMzZl
NWZlODYwHhcNMjUwMTMxMTIwMDU3WhcNMjUwMjAxMTIwMDU3WjAzMTEwLwYDVQQD
EyhhYWI4NzBjY2VlYjFlZjU2MmY1MDVhOGRjYmNmOWNjY2ZkMDE0YWMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy2l0WocxTLNRLaM9MJUBR9q1DDWZ
trTxPqHHqhHLw1itB27FGZvpNhTT61EKpRuBD0BHmbWP85HFzNItvdPd/0umipf9
0WdWyoybAxg0e2YgIMM3SKo0agZQi/yBrhtTYDsW6UFl+9qgcWlnKjn5mzRV7L2n
Yv5qZhNLkFSTkDB3AE+yM25gf0Lbj0aT9MDX1iKpf24kO5e5dBjwVJYi2IwpGvaa
kKBr2St0yQr0YL7yo9PgP5y4usdsRzPeGCavFBYO4MwSz5iSBcLPG+o6LOYhTbys
/Q4o+R3CeMQAiOvTPN/XoOjN7MJ2DIa+HZwV+e1bOkzFWZoYNrYD4spKDwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKq4cMzuse9WL1BajcvPnMz9AUrCMB8GA1UdIwQY
MBaAFAAHU063fKqDb48RhjAWTgI25f6GMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQUFkVFRyZDhxb052anhHR01CWk9BamJsX29ZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMi80MWU5MGMtNjFjYy00NzBjLWEzODgt
NmQxYzliMTUzY2YwLzEvQUFkVFRyZDhxb052anhHR01CWk9BamJsX29ZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMi80MWU5MGMtNjFjYy00NzBjLWEzODgtNmQxYzliMTUzY2Yw
LzEvQUFkVFRyZDhxb052anhHR01CWk9BamJsX29ZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAxOvugvqP
PoempwhTpUvH6kQUUKRl8fmdk5XCi+TkaJxL0p7IbEiPLyH1XnOKJflrTobl9q5n
6VQl7GF6GlKgDTDMpfDsD/fHB7mWhpMJjfH5Y6zNWqrHc7hsu7EbkZxzB3TR3sQQ
Vt45r6eJV0fgidU/wc0slJSUt86MyBYkkbvCH3KIzlomMYiDQ/XRVYEwWDJkYdb2
oBpSvZgrPGm46rgTx8QoNl7KfNoFBbX2TDhbwMbQW+8ydcSIaVX+8frJv/JDfZOK
rh5UsGo4nvxYxt3Xg6+ye4RcDf9tmyWdcqvhbRgbFCwhEgPzFM5pZ+PuvHhasenS
zXrhPk6Vv4rzMA==
-----END CERTIFICATE-----