Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/b61add-32f0-42f4-a301-7818a89456cb/1/p-LOMQlICu57P9KEbsj4ZGiFzbo.mft
File:                     p-LOMQlICu57P9KEbsj4ZGiFzbo.mft (raw, json)
Hash identifier:          8JcgLvZGQy8K5a2rkavr0nAAO3NsENW4QaBZLbwc2jo=
Subject key identifier:   E7:BA:76:7F:8E:BE:12:A2:D0:B7:78:6B:B8:49:ED:3B:D5:20:97:E7
Authority key identifier: A7:E2:CE:31:09:48:0A:EE:7B:3F:D2:84:6E:C8:F8:64:68:85:CD:BA
Certificate issuer:       /CN=a7e2ce3109480aee7b3fd2846ec8f8646885cdba
Certificate serial:       0194BD853F4F3F1027C924B83FE5AA0811BF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/p-LOMQlICu57P9KEbsj4ZGiFzbo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b2/b61add-32f0-42f4-a301-7818a89456cb/1/p-LOMQlICu57P9KEbsj4ZGiFzbo.mft
Manifest number:          143E
Signing time:             Fri 31 Jan 2025 18:00:13 +0000
Manifest this update:     Fri 31 Jan 2025 18:00:13 +0000
Manifest next update:     Sat 01 Feb 2025 18:00:13 +0000
Files and hashes:         1: 26Ql46wwxTj7VjacCW6urnh7gz4.roa (hash: 6pqobnvwdQtNKJHj/tFh8rbFEN8SHTGBGJP56mhCWI4=)
                          2: 6NUzhdPLOTimUoPxeMPLM0W-THw.roa (hash: c/vX6BdXl9BfZEsyAn4O1uep2mCiqK8iQj3UiTI5j9s=)
                          3: 9UQ3bjYFxbuQ6WDKQ2z12cmzNp4.roa (hash: utvXFHGbNyh5QD6WYroUVLQ+dfrlJs+U1O2AiYH3XWs=)
                          4: LLcjVKn9VpDoaDhdqIR6mgFTZtI.roa (hash: DoEtx/xv7eVuPlv74sp5O1oZZhlzZhNTbGR1DN0rf7U=)
                          5: UjFHvunES4zB1buoYQwOJAvtic4.roa (hash: 8JRnvC2WvvUD8xqaEPafciSNs/2Jt6gLe7JRKtz6ghA=)
                          6: d89-qB2QBcTVzoJ5lziZ1XEpvhw.roa (hash: EUMPFkB+dCQSnV1N7RK25hIL5dm4q/R7TQ9vyaSumYE=)
                          7: p-LOMQlICu57P9KEbsj4ZGiFzbo.crl (hash: a+qIvosjaeCGhDCF86/TXYmZfBAW5McfCdC7rgF3ZvI=)
                          8: zaZapovTGaF9alzwHwbdxdednYo.roa (hash: HZ5qODN4P+SD3nJrNEx9yaYaCo/O8Qs+NfZMPkwo3JI=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bd:85:3f:4f:3f:10:27:c9:24:b8:3f:e5:aa:08:11:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a7e2ce3109480aee7b3fd2846ec8f8646885cdba
        Validity
            Not Before: Jan 31 18:00:13 2025 GMT
            Not After : Feb  1 18:00:13 2025 GMT
        Subject: CN=e7ba767f8ebe12a2d0b7786bb849ed3bd52097e7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:d5:d5:2f:de:65:f3:ba:dc:0f:08:50:2c:7a:
                    a1:41:8b:b0:32:5f:05:f7:23:f3:2e:a3:ef:15:85:
                    fa:cd:5f:4e:b8:e4:04:2f:b0:10:aa:ca:5f:c9:c6:
                    da:3b:27:03:8e:a2:d7:0d:13:98:7c:f0:1b:33:04:
                    59:d6:19:f9:43:b3:3b:31:05:d1:0b:9b:7f:7c:03:
                    08:95:e3:cd:e6:cf:be:50:47:fa:14:83:35:92:02:
                    e0:bd:73:e0:02:82:f6:42:6b:f0:7f:4b:a2:b7:f6:
                    3b:e7:c7:38:a2:25:0f:b9:b1:73:a8:b1:f4:24:fa:
                    a7:b0:38:ea:08:72:88:ac:d9:4a:22:61:f1:14:f1:
                    d7:28:45:99:89:19:6a:04:2a:0f:23:d5:47:36:dd:
                    bb:89:d9:11:0d:bc:74:c0:1f:ae:b5:68:7d:af:70:
                    b2:45:9e:18:93:70:8f:8c:a7:23:6e:18:3d:37:93:
                    01:c5:3d:a8:f3:aa:a1:dd:ad:17:d5:fb:51:3b:60:
                    77:69:9d:34:76:aa:4f:f9:9e:e0:5b:96:be:b6:a2:
                    82:e4:59:8e:ea:d6:3e:07:6c:2a:48:f5:bd:91:33:
                    b8:a2:51:65:ee:6d:37:f6:62:82:95:a0:f1:39:91:
                    c6:a8:af:bf:8e:49:37:17:37:2e:07:6d:51:2b:67:
                    04:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:BA:76:7F:8E:BE:12:A2:D0:B7:78:6B:B8:49:ED:3B:D5:20:97:E7
            X509v3 Authority Key Identifier:
                keyid:A7:E2:CE:31:09:48:0A:EE:7B:3F:D2:84:6E:C8:F8:64:68:85:CD:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p-LOMQlICu57P9KEbsj4ZGiFzbo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/b61add-32f0-42f4-a301-7818a89456cb/1/p-LOMQlICu57P9KEbsj4ZGiFzbo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/b61add-32f0-42f4-a301-7818a89456cb/1/p-LOMQlICu57P9KEbsj4ZGiFzbo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:67:4f:e1:20:59:69:95:42:36:48:dc:a1:0d:94:b6:05:22:
         2a:0d:b3:99:cc:36:bc:87:b1:4c:49:44:d0:8a:92:52:ff:98:
         88:b9:19:e7:af:ae:db:57:f9:e2:eb:79:29:90:85:cc:44:17:
         93:a8:36:d9:c5:3b:90:bb:87:0c:2f:e1:ea:ff:c9:8c:a7:3e:
         fe:d2:02:55:72:f5:19:17:e8:91:af:3a:a8:91:92:bb:80:72:
         ea:8c:de:73:38:c9:6a:59:a8:96:f5:c9:28:e0:43:0a:68:8c:
         5e:93:a4:94:a2:c5:b9:b3:ea:da:b1:d8:c9:ea:c2:82:f0:61:
         cc:ee:5a:2b:0d:d4:e3:4a:7e:74:00:dd:7e:58:b7:c8:5d:5d:
         cb:d7:eb:e7:ee:58:59:b6:d9:7e:02:d5:5f:25:5d:87:61:2d:
         72:3c:54:06:55:00:24:aa:67:ed:11:75:da:77:05:67:a6:54:
         e5:b3:ba:aa:4d:c8:3b:f8:c7:2f:05:2d:98:db:d8:da:c9:7d:
         34:f3:9d:d7:ba:4d:5b:30:5f:06:a9:8b:d5:dc:18:55:a8:b3:
         75:8e:d9:b1:b9:b7:25:a9:76:81:f8:ef:91:ba:57:d5:d0:25:
         eb:4c:ac:c5:ef:a6:70:62:c0:3b:3e:47:5b:fc:fb:20:d9:e9:
         d9:2d:c5:67
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9hT9PPxAnySS4P+WqCBG/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE3ZTJjZTMxMDk0ODBhZWU3YjNmZDI4NDZlYzhmODY0Njg4
NWNkYmEwHhcNMjUwMTMxMTgwMDEzWhcNMjUwMjAxMTgwMDEzWjAzMTEwLwYDVQQD
EyhlN2JhNzY3ZjhlYmUxMmEyZDBiNzc4NmJiODQ5ZWQzYmQ1MjA5N2U3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuNXVL95l87rcDwhQLHqhQYuwMl8F
9yPzLqPvFYX6zV9OuOQEL7AQqspfycbaOycDjqLXDROYfPAbMwRZ1hn5Q7M7MQXR
C5t/fAMIlePN5s++UEf6FIM1kgLgvXPgAoL2Qmvwf0uit/Y758c4oiUPubFzqLH0
JPqnsDjqCHKIrNlKImHxFPHXKEWZiRlqBCoPI9VHNt27idkRDbx0wB+utWh9r3Cy
RZ4Yk3CPjKcjbhg9N5MBxT2o86qh3a0X1ftRO2B3aZ00dqpP+Z7gW5a+tqKC5FmO
6tY+B2wqSPW9kTO4olFl7m039mKClaDxOZHGqK+/jkk3FzcuB21RK2cESQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOe6dn+OvhKi0Ld4a7hJ7TvVIJfnMB8GA1UdIwQY
MBaAFKfizjEJSAruez/ShG7I+GRohc26MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcC1MT01RbElDdTU3UDlLRWJzajRaR2lGemJvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMi9iNjFhZGQtMzJmMC00MmY0LWEzMDEt
NzgxOGE4OTQ1NmNiLzEvcC1MT01RbElDdTU3UDlLRWJzajRaR2lGemJvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMi9iNjFhZGQtMzJmMC00MmY0LWEzMDEtNzgxOGE4OTQ1NmNi
LzEvcC1MT01RbElDdTU3UDlLRWJzajRaR2lGemJvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAS2dP4SBZ
aZVCNkjcoQ2UtgUiKg2zmcw2vIexTElE0IqSUv+YiLkZ56+u21f54ut5KZCFzEQX
k6g22cU7kLuHDC/h6v/JjKc+/tICVXL1GRfoka86qJGSu4By6ozeczjJalmolvXJ
KOBDCmiMXpOklKLFubPq2rHYyerCgvBhzO5aKw3U40p+dADdfli3yF1dy9fr5+5Y
WbbZfgLVXyVdh2EtcjxUBlUAJKpn7RF12ncFZ6ZU5bO6qk3IO/jHLwUtmNvY2sl9
NPOd17pNWzBfBqmL1dwYVaizdY7Zsbm3Jal2gfjvkbpX1dAl60ysxe+mcGLAOz5H
W/z7INnp2S3FZw==
-----END CERTIFICATE-----