Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/563afc-b194-41fb-a7a1-6aeae63ed8fe/1/44qr6o7im_fJFbw-8Luswn0Ozt4.mft
File:                     44qr6o7im_fJFbw-8Luswn0Ozt4.mft (raw, json)
Hash identifier:          AY2XIUc6jhk1/gYu6oaQ7Tj5zC7HMtVQoX5spaf6HA4=
Subject key identifier:   49:2E:4B:E4:F8:CC:07:5E:B4:08:08:D8:5F:93:5A:DD:43:D7:4B:B3
Authority key identifier: E3:8A:AB:EA:8E:E2:9B:F7:C9:15:BC:3E:F0:BB:AC:C2:7D:0E:CE:DE
Certificate issuer:       /CN=e38aabea8ee29bf7c915bc3ef0bbacc27d0ecede
Certificate serial:       0194BD17896C6514993D604D81A7AA3687E3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/44qr6o7im_fJFbw-8Luswn0Ozt4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b2/563afc-b194-41fb-a7a1-6aeae63ed8fe/1/44qr6o7im_fJFbw-8Luswn0Ozt4.mft
Manifest number:          10D7
Signing time:             Fri 31 Jan 2025 16:00:23 +0000
Manifest this update:     Fri 31 Jan 2025 16:00:23 +0000
Manifest next update:     Sat 01 Feb 2025 16:00:23 +0000
Files and hashes:         1: 44qr6o7im_fJFbw-8Luswn0Ozt4.crl (hash: FBts0tbDkfy8ZRR3+HuB2VB/gyuTrmD8mcQc/cvfL34=)
                          2: lZ_8Gy-p9dJBOR2jnQXGL1gKT24.roa (hash: gojO/FGnNBUfGiI8/IbdnMShaLKaR6WR/+GNSoRF7Bk=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bd:17:89:6c:65:14:99:3d:60:4d:81:a7:aa:36:87:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e38aabea8ee29bf7c915bc3ef0bbacc27d0ecede
        Validity
            Not Before: Jan 31 16:00:23 2025 GMT
            Not After : Feb  1 16:00:23 2025 GMT
        Subject: CN=492e4be4f8cc075eb40808d85f935add43d74bb3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:71:f7:30:01:fa:ce:3e:32:09:63:58:3c:76:
                    72:d6:dc:a4:7e:86:60:60:69:c5:fc:99:5b:ad:f7:
                    32:cd:3d:67:9d:81:96:f1:d3:7e:7d:c0:c5:1c:de:
                    4e:2c:fb:65:82:da:9d:9d:2d:c7:80:44:2e:64:33:
                    e7:b6:3f:c5:20:47:73:06:d5:c7:f4:f6:54:fa:7c:
                    9d:d3:ba:7d:42:b9:64:40:f0:bf:a1:fa:ab:88:0e:
                    68:b3:07:bc:a5:02:a8:52:4a:ed:f9:5d:9e:03:84:
                    79:0d:f6:c8:26:5e:7d:05:48:4c:72:fb:70:ca:28:
                    6d:63:8f:b1:d0:f8:1b:96:5e:1e:9e:42:5c:b2:5f:
                    1c:a7:49:61:2b:5c:d0:e5:1d:68:9b:ea:80:b3:4f:
                    26:92:31:16:d0:cf:3d:b7:48:8d:f4:7c:df:66:7c:
                    bf:03:ca:5f:7d:76:de:49:ce:f0:13:4c:8c:7c:b8:
                    b2:50:d1:ec:5f:47:5b:2b:f5:c1:08:da:77:82:ba:
                    01:38:0a:49:88:31:95:3a:10:5a:3b:66:52:b5:87:
                    57:d4:a2:99:92:3f:0d:01:85:f5:33:8c:5b:7b:4c:
                    06:24:6a:56:c9:10:5e:ba:ac:21:a8:b6:b3:02:3f:
                    63:1e:4e:10:75:5d:e0:62:cb:3e:32:d1:15:db:64:
                    ab:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:2E:4B:E4:F8:CC:07:5E:B4:08:08:D8:5F:93:5A:DD:43:D7:4B:B3
            X509v3 Authority Key Identifier:
                keyid:E3:8A:AB:EA:8E:E2:9B:F7:C9:15:BC:3E:F0:BB:AC:C2:7D:0E:CE:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/44qr6o7im_fJFbw-8Luswn0Ozt4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/563afc-b194-41fb-a7a1-6aeae63ed8fe/1/44qr6o7im_fJFbw-8Luswn0Ozt4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/563afc-b194-41fb-a7a1-6aeae63ed8fe/1/44qr6o7im_fJFbw-8Luswn0Ozt4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:48:d8:8f:d6:e7:f1:c4:ee:ca:09:fc:e7:bd:6b:13:90:19:
         06:ff:21:2b:71:35:cd:b5:85:3d:bf:5c:e3:5f:ad:97:95:13:
         dd:30:0b:33:45:1b:9e:d8:d7:88:f1:60:0a:70:8a:75:ab:1d:
         33:76:4c:87:f6:66:1f:ea:79:b7:bc:40:d0:e9:f6:3b:d4:6c:
         07:f3:e3:39:62:64:f4:16:aa:d5:80:e1:98:06:c8:f6:b0:b7:
         0e:3f:35:d2:85:3a:b0:ab:66:34:88:73:b2:a0:e4:1e:37:18:
         fb:8a:9f:79:70:ce:75:73:f4:7e:91:61:7d:e9:46:01:6a:74:
         5e:3e:34:da:ea:e6:f8:77:fd:90:b0:cc:fe:f6:e8:13:75:f7:
         43:c7:8d:3d:6c:13:93:16:8c:ee:96:63:d4:ff:01:34:4f:5f:
         29:1f:d0:4c:a9:dd:f0:d2:6a:b1:10:bc:55:f9:a1:cf:8b:2a:
         8a:e0:d9:c6:c4:64:63:67:97:fc:03:21:1f:aa:a3:16:e7:8b:
         7a:67:6a:17:f9:b5:dd:18:2a:e2:39:e9:d6:0e:cc:d4:ef:e3:
         d7:e3:aa:95:47:c8:2b:ef:08:e3:c5:30:2b:d2:bf:11:60:1f:
         3e:9b:e5:ae:8f:7d:b4:72:6a:35:31:3c:1d:42:52:8e:0b:da:
         31:52:3c:df
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9F4lsZRSZPWBNgaeqNofjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUzOGFhYmVhOGVlMjliZjdjOTE1YmMzZWYwYmJhY2MyN2Qw
ZWNlZGUwHhcNMjUwMTMxMTYwMDIzWhcNMjUwMjAxMTYwMDIzWjAzMTEwLwYDVQQD
Eyg0OTJlNGJlNGY4Y2MwNzVlYjQwODA4ZDg1ZjkzNWFkZDQzZDc0YmIzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlHH3MAH6zj4yCWNYPHZy1tykfoZg
YGnF/JlbrfcyzT1nnYGW8dN+fcDFHN5OLPtlgtqdnS3HgEQuZDPntj/FIEdzBtXH
9PZU+nyd07p9QrlkQPC/ofqriA5oswe8pQKoUkrt+V2eA4R5DfbIJl59BUhMcvtw
yihtY4+x0Pgbll4enkJcsl8cp0lhK1zQ5R1om+qAs08mkjEW0M89t0iN9HzfZny/
A8pffXbeSc7wE0yMfLiyUNHsX0dbK/XBCNp3groBOApJiDGVOhBaO2ZStYdX1KKZ
kj8NAYX1M4xbe0wGJGpWyRBeuqwhqLazAj9jHk4QdV3gYss+MtEV22SrEQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEkuS+T4zAdetAgI2F+TWt1D10uzMB8GA1UdIwQY
MBaAFOOKq+qO4pv3yRW8PvC7rMJ9Ds7eMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNDRxcjZvN2ltX2ZKRmJ3LThMdXN3bjBPenQ0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMi81NjNhZmMtYjE5NC00MWZiLWE3YTEt
NmFlYWU2M2VkOGZlLzEvNDRxcjZvN2ltX2ZKRmJ3LThMdXN3bjBPenQ0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMi81NjNhZmMtYjE5NC00MWZiLWE3YTEtNmFlYWU2M2VkOGZl
LzEvNDRxcjZvN2ltX2ZKRmJ3LThMdXN3bjBPenQ0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATkjYj9bn
8cTuygn8571rE5AZBv8hK3E1zbWFPb9c41+tl5UT3TALM0UbntjXiPFgCnCKdasd
M3ZMh/ZmH+p5t7xA0On2O9RsB/PjOWJk9Baq1YDhmAbI9rC3Dj810oU6sKtmNIhz
sqDkHjcY+4qfeXDOdXP0fpFhfelGAWp0Xj402urm+Hf9kLDM/vboE3X3Q8eNPWwT
kxaM7pZj1P8BNE9fKR/QTKnd8NJqsRC8Vfmhz4sqiuDZxsRkY2eX/AMhH6qjFueL
emdqF/m13Rgq4jnp1g7M1O/j1+OqlUfIK+8I48UwK9K/EWAfPpvlro99tHJqNTE8
HUJSjgvaMVI83w==
-----END CERTIFICATE-----