Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/ac9aba-9735-4b9d-8eae-19bc7bdccbc1/1/AGQrYHuUoUP_QcVUyRO9WmUfjAU.mft
File:                     AGQrYHuUoUP_QcVUyRO9WmUfjAU.mft (raw, json)
Hash identifier:          mKmWCPp1+kHDDZmUMqwTKCYqCLGGQEd/2tttc+/lslU=
Subject key identifier:   41:44:E5:3B:9B:7E:D5:E1:F5:A5:A1:47:CE:C1:05:89:5C:68:D5:34
Authority key identifier: 00:64:2B:60:7B:94:A1:43:FF:41:C5:54:C9:13:BD:5A:65:1F:8C:05
Certificate issuer:       /CN=00642b607b94a143ff41c554c913bd5a651f8c05
Certificate serial:       0194BD17F1738A5C5ABC3CB7609568E95D48
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AGQrYHuUoUP_QcVUyRO9WmUfjAU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b5/ac9aba-9735-4b9d-8eae-19bc7bdccbc1/1/AGQrYHuUoUP_QcVUyRO9WmUfjAU.mft
Manifest number:          142F
Signing time:             Fri 31 Jan 2025 16:00:50 +0000
Manifest this update:     Fri 31 Jan 2025 16:00:50 +0000
Manifest next update:     Sat 01 Feb 2025 16:00:50 +0000
Files and hashes:         1: 1-BqPUmwLhiY4Yhx0LfgUMnThGxA.roa (hash: K4n04vrpGIt/U+DsbhlaysS9N4rLWgryrsGr6i9waUc=)
                          2: 1nS0uX-20m5q3S5s2ax-hzltY7M.roa (hash: fPbs3orCk/9uH211HxlkX/O3dh9FAzUrv0hFLfs7bIc=)
                          3: 2MWwWUq-nPd7Gzhb6Z0417winfw.roa (hash: JU/lw4BXm/KV3NT2WmLhKrIC3zR0XBpPPnNeGokCO90=)
                          4: AGQrYHuUoUP_QcVUyRO9WmUfjAU.crl (hash: 8lNY9MwSIq/yBwHc2K3WqSlAGCMiKZFwhQbgiXN6IkI=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bd:17:f1:73:8a:5c:5a:bc:3c:b7:60:95:68:e9:5d:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=00642b607b94a143ff41c554c913bd5a651f8c05
        Validity
            Not Before: Jan 31 16:00:50 2025 GMT
            Not After : Feb  1 16:00:50 2025 GMT
        Subject: CN=4144e53b9b7ed5e1f5a5a147cec105895c68d534
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:2d:53:32:af:76:e1:c9:30:97:6b:94:0b:d1:
                    43:78:90:6b:54:51:63:9d:76:c1:23:93:79:32:53:
                    9e:74:93:b0:0b:72:3e:ba:8d:4b:3d:d0:b6:5b:4e:
                    f5:14:f3:ba:60:74:b2:d0:48:08:0f:e7:dc:56:2a:
                    07:75:31:17:ca:d6:42:5f:b7:e1:c1:39:3f:a4:d8:
                    dc:14:2d:85:36:49:f7:5f:75:48:6e:25:2b:4f:85:
                    12:ff:03:41:f6:ed:6d:83:e7:86:9e:00:b0:67:8f:
                    5c:ac:c6:eb:60:8d:fe:73:6d:8f:c4:d2:60:6e:cb:
                    e1:8f:a2:ff:09:27:d2:87:e6:c2:00:16:c3:45:82:
                    e5:6d:b7:83:fd:8f:d5:e3:24:e2:f0:0c:04:80:72:
                    3e:d4:89:ec:1d:ff:a5:7b:4f:2e:29:95:74:cb:62:
                    1e:79:27:5f:ee:c0:4f:99:e4:2e:92:29:17:93:c9:
                    60:3a:5b:9b:72:42:58:4b:01:9f:42:b4:b7:eb:56:
                    52:03:85:21:57:46:55:3f:69:01:67:7c:a2:d0:69:
                    a1:38:ca:dd:48:20:bd:e7:45:51:4d:31:33:bb:ac:
                    74:c5:97:ca:f2:5f:98:c3:3f:e7:f7:26:d7:09:c8:
                    91:84:8f:54:33:f7:99:30:a2:44:c2:84:64:f9:96:
                    7b:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:44:E5:3B:9B:7E:D5:E1:F5:A5:A1:47:CE:C1:05:89:5C:68:D5:34
            X509v3 Authority Key Identifier:
                keyid:00:64:2B:60:7B:94:A1:43:FF:41:C5:54:C9:13:BD:5A:65:1F:8C:05

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AGQrYHuUoUP_QcVUyRO9WmUfjAU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/ac9aba-9735-4b9d-8eae-19bc7bdccbc1/1/AGQrYHuUoUP_QcVUyRO9WmUfjAU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/ac9aba-9735-4b9d-8eae-19bc7bdccbc1/1/AGQrYHuUoUP_QcVUyRO9WmUfjAU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:74:01:f1:b3:88:ca:3c:d1:90:0b:5a:5d:f2:e6:00:61:e7:
         0e:6b:15:d8:7b:ab:13:9b:6a:e1:83:d7:5a:16:f6:44:b0:77:
         84:09:5b:4b:c0:48:69:f1:18:39:d3:f2:a8:9b:a8:01:3a:13:
         a7:6b:67:22:45:1e:e8:9b:b9:61:bc:fc:d5:4c:41:b9:2a:a7:
         82:f4:7b:f8:94:64:f9:e1:d8:96:be:f0:4b:94:c9:6d:31:67:
         81:8e:65:a2:5b:e7:34:82:0b:59:87:19:2d:96:6c:f3:db:11:
         8b:cb:a4:18:85:93:65:f0:44:cb:64:21:f4:b7:a6:b5:de:11:
         32:40:71:99:d4:f9:1b:5c:b8:f1:ed:bc:48:b9:3c:30:9e:c9:
         b5:a9:e6:6e:1a:46:62:46:4e:33:7e:84:0c:db:4c:1d:85:a8:
         1e:dd:b6:d4:b2:3d:1a:7b:d7:77:0d:6f:a9:39:75:3c:32:cb:
         ea:9b:f7:f1:6c:db:61:18:b2:18:79:97:1d:7a:97:fc:59:39:
         cd:f6:b1:5d:49:83:dc:97:43:79:0b:d4:d9:1e:af:b8:c7:b3:
         e9:3b:28:f2:5d:48:2b:26:fe:ec:f5:3e:fc:48:b3:59:cc:ad:
         24:0d:e3:05:80:1e:6c:c7:e0:a3:84:38:93:23:22:23:cf:e7:
         f9:62:18:13
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9F/FzilxavDy3YJVo6V1IMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAwNjQyYjYwN2I5NGExNDNmZjQxYzU1NGM5MTNiZDVhNjUx
ZjhjMDUwHhcNMjUwMTMxMTYwMDUwWhcNMjUwMjAxMTYwMDUwWjAzMTEwLwYDVQQD
Eyg0MTQ0ZTUzYjliN2VkNWUxZjVhNWExNDdjZWMxMDU4OTVjNjhkNTM0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoi1TMq924ckwl2uUC9FDeJBrVFFj
nXbBI5N5MlOedJOwC3I+uo1LPdC2W071FPO6YHSy0EgID+fcVioHdTEXytZCX7fh
wTk/pNjcFC2FNkn3X3VIbiUrT4US/wNB9u1tg+eGngCwZ49crMbrYI3+c22PxNJg
bsvhj6L/CSfSh+bCABbDRYLlbbeD/Y/V4yTi8AwEgHI+1InsHf+le08uKZV0y2Ie
eSdf7sBPmeQukikXk8lgOlubckJYSwGfQrS361ZSA4UhV0ZVP2kBZ3yi0GmhOMrd
SCC950VRTTEzu6x0xZfK8l+Ywz/n9ybXCciRhI9UM/eZMKJEwoRk+ZZ7qQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEFE5TubftXh9aWhR87BBYlcaNU0MB8GA1UdIwQY
MBaAFABkK2B7lKFD/0HFVMkTvVplH4wFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQUdRcllIdVVvVVBfUWNWVXlSTzlXbVVmakFVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNS9hYzlhYmEtOTczNS00YjlkLThlYWUt
MTliYzdiZGNjYmMxLzEvQUdRcllIdVVvVVBfUWNWVXlSTzlXbVVmakFVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNS9hYzlhYmEtOTczNS00YjlkLThlYWUtMTliYzdiZGNjYmMx
LzEvQUdRcllIdVVvVVBfUWNWVXlSTzlXbVVmakFVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVHQB8bOI
yjzRkAtaXfLmAGHnDmsV2HurE5tq4YPXWhb2RLB3hAlbS8BIafEYOdPyqJuoAToT
p2tnIkUe6Ju5Ybz81UxBuSqngvR7+JRk+eHYlr7wS5TJbTFngY5lolvnNIILWYcZ
LZZs89sRi8ukGIWTZfBEy2Qh9Lemtd4RMkBxmdT5G1y48e28SLk8MJ7JtanmbhpG
YkZOM36EDNtMHYWoHt221LI9GnvXdw1vqTl1PDLL6pv38WzbYRiyGHmXHXqX/Fk5
zfaxXUmD3JdDeQvU2R6vuMez6Tso8l1IKyb+7PU+/EizWcytJA3jBYAebMfgo4Q4
kyMiI8/n+WIYEw==
-----END CERTIFICATE-----