Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/a12069-a061-442e-9bfb-338bdd439ee1/1/KZWUToTcN7pqQtaLseK5pEIehKQ.mft
File:                     KZWUToTcN7pqQtaLseK5pEIehKQ.mft (raw, json)
Hash identifier:          oteYmqHkQqT5LJIeNeo7Po25C/6MTIn2KKjhCXPTIOs=
Subject key identifier:   31:6E:3F:64:07:63:9A:B3:21:A7:04:2A:76:EE:21:03:60:F3:54:A9
Authority key identifier: 29:95:94:4E:84:DC:37:BA:6A:42:D6:8B:B1:E2:B9:A4:42:1E:84:A4
Certificate issuer:       /CN=2995944e84dc37ba6a42d68bb1e2b9a4421e84a4
Certificate serial:       0194BD4E56C0FECAB4749C417E375133A209
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KZWUToTcN7pqQtaLseK5pEIehKQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c8/a12069-a061-442e-9bfb-338bdd439ee1/1/KZWUToTcN7pqQtaLseK5pEIehKQ.mft
Manifest number:          142A
Signing time:             Fri 31 Jan 2025 17:00:15 +0000
Manifest this update:     Fri 31 Jan 2025 17:00:15 +0000
Manifest next update:     Sat 01 Feb 2025 17:00:15 +0000
Files and hashes:         1: 5zGonyGbziYUvusSh8Q5DC8llVk.roa (hash: S1qJmZBpZMGg2baTrfrvnMFHCPji28boUDCTeMahmcM=)
                          2: Iy-azWAI6KWrOd6xINfWkQK0mmo.roa (hash: WW8+TBzRLpV7fj0dmKJQYyc2cjZjFlGMNCS3c3X42Q8=)
                          3: KZWUToTcN7pqQtaLseK5pEIehKQ.crl (hash: cp2KTzodSBkxbPKPt85X520gpjjZlAWCdQtnjsRe6+M=)
                          4: SkUUShcqahf4Ud48xHWiKU08GtI.roa (hash: FRMGmcPu5n4tT7AA3DByB+9obpA4BvNTbGm4L5aAqOY=)
                          5: k-lfK2Nu0bBTBeFW46-yt6JkICk.roa (hash: muqDHPsC+eweSCrdqAGPB3SXVNwkzBd2weVA2/7oxMQ=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bd:4e:56:c0:fe:ca:b4:74:9c:41:7e:37:51:33:a2:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2995944e84dc37ba6a42d68bb1e2b9a4421e84a4
        Validity
            Not Before: Jan 31 17:00:15 2025 GMT
            Not After : Feb  1 17:00:15 2025 GMT
        Subject: CN=316e3f6407639ab321a7042a76ee210360f354a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:ce:7e:3a:79:15:4d:f7:b1:9f:73:06:64:76:
                    ba:6b:0a:67:74:bf:01:cd:5b:9f:8a:fa:82:c4:9d:
                    42:cd:c2:d1:99:f2:f0:72:ed:b0:25:09:fd:3f:ef:
                    5f:c2:1f:52:c1:56:27:b0:dd:a9:74:c1:02:ab:ec:
                    e5:39:da:33:aa:67:b6:d4:92:ff:51:f4:c1:aa:90:
                    b8:b4:c7:ef:c9:3e:2c:ce:46:0b:20:20:02:d2:a6:
                    30:ff:a6:c8:a2:f0:8e:d8:95:28:2e:cf:5e:79:55:
                    ca:02:f4:f6:ce:79:aa:92:37:49:d6:be:9a:ac:9e:
                    87:9f:e5:52:35:26:c1:9d:f8:76:6a:cf:5f:59:37:
                    49:03:c8:b2:f6:36:5c:a9:28:fb:05:c4:a8:6d:7d:
                    29:d4:b5:bc:f5:25:bd:94:86:be:e3:3f:1d:54:c7:
                    19:00:d5:89:2c:e3:e9:b0:53:b0:4c:16:dd:67:f2:
                    66:19:78:d2:0e:40:a3:81:cf:24:92:ba:8a:41:38:
                    2b:c4:25:ce:95:1d:73:20:f9:a4:02:92:e6:f5:0b:
                    68:f0:fc:63:a0:94:f4:9b:3b:a2:44:73:b3:75:7a:
                    9f:74:b3:23:48:28:f4:7c:b2:db:eb:af:71:ec:c0:
                    f1:f5:d2:21:4b:e5:4c:57:fd:4a:24:c3:33:fc:42:
                    c5:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:6E:3F:64:07:63:9A:B3:21:A7:04:2A:76:EE:21:03:60:F3:54:A9
            X509v3 Authority Key Identifier:
                keyid:29:95:94:4E:84:DC:37:BA:6A:42:D6:8B:B1:E2:B9:A4:42:1E:84:A4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KZWUToTcN7pqQtaLseK5pEIehKQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a12069-a061-442e-9bfb-338bdd439ee1/1/KZWUToTcN7pqQtaLseK5pEIehKQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a12069-a061-442e-9bfb-338bdd439ee1/1/KZWUToTcN7pqQtaLseK5pEIehKQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:a9:7c:19:ec:8f:d4:25:90:9f:c3:59:10:36:d8:a5:90:bb:
         34:cb:7d:76:89:78:20:20:68:6a:48:b3:54:31:c6:28:d4:e5:
         89:59:a1:39:e5:17:9a:fe:a5:00:2c:59:a9:22:93:12:03:3c:
         1c:ef:df:de:b8:cd:e5:97:90:59:53:30:89:7b:e6:e3:77:65:
         b8:25:6e:9b:97:02:06:2a:72:cc:ee:76:71:34:09:7f:5e:98:
         2f:a3:23:43:c4:d1:38:2e:69:00:66:96:f6:1f:d8:72:a0:90:
         d3:ae:bb:9c:87:06:11:33:e4:45:a8:f6:32:8b:a4:96:9b:c8:
         ff:8a:ed:cc:bc:8c:74:70:77:13:dd:d9:af:0b:c6:8d:02:61:
         36:18:22:73:b9:9a:12:39:1b:6c:1b:cd:b8:49:97:ef:d8:35:
         5a:9b:c2:73:66:d6:e8:4b:4b:2c:15:33:bc:81:17:f7:14:33:
         43:e0:7c:4f:b8:6d:f3:74:fa:23:87:da:91:60:74:20:8c:43:
         e8:a1:39:e6:71:10:4f:76:52:f6:cc:7c:c8:92:3b:d0:5e:b0:
         dd:d8:7f:58:ae:18:ac:56:66:73:06:d2:d1:cb:be:63:10:2c:
         8b:2b:e9:46:87:d9:f9:b2:d7:cb:c9:67:b5:70:2d:d6:83:01:
         48:13:10:8c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9TlbA/sq0dJxBfjdRM6IJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI5OTU5NDRlODRkYzM3YmE2YTQyZDY4YmIxZTJiOWE0NDIx
ZTg0YTQwHhcNMjUwMTMxMTcwMDE1WhcNMjUwMjAxMTcwMDE1WjAzMTEwLwYDVQQD
EygzMTZlM2Y2NDA3NjM5YWIzMjFhNzA0MmE3NmVlMjEwMzYwZjM1NGE5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxc5+OnkVTfexn3MGZHa6awpndL8B
zVufivqCxJ1CzcLRmfLwcu2wJQn9P+9fwh9SwVYnsN2pdMECq+zlOdozqme21JL/
UfTBqpC4tMfvyT4szkYLICAC0qYw/6bIovCO2JUoLs9eeVXKAvT2znmqkjdJ1r6a
rJ6Hn+VSNSbBnfh2as9fWTdJA8iy9jZcqSj7BcSobX0p1LW89SW9lIa+4z8dVMcZ
ANWJLOPpsFOwTBbdZ/JmGXjSDkCjgc8kkrqKQTgrxCXOlR1zIPmkApLm9Qto8Pxj
oJT0mzuiRHOzdXqfdLMjSCj0fLLb669x7MDx9dIhS+VMV/1KJMMz/ELFmQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDFuP2QHY5qzIacEKnbuIQNg81SpMB8GA1UdIwQY
MBaAFCmVlE6E3De6akLWi7HiuaRCHoSkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS1pXVVRvVGNON3BxUXRhTHNlSzVwRUllaEtRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9hMTIwNjktYTA2MS00NDJlLTliZmIt
MzM4YmRkNDM5ZWUxLzEvS1pXVVRvVGNON3BxUXRhTHNlSzVwRUllaEtRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC9hMTIwNjktYTA2MS00NDJlLTliZmItMzM4YmRkNDM5ZWUx
LzEvS1pXVVRvVGNON3BxUXRhTHNlSzVwRUllaEtRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZal8GeyP
1CWQn8NZEDbYpZC7NMt9dol4ICBoakizVDHGKNTliVmhOeUXmv6lACxZqSKTEgM8
HO/f3rjN5ZeQWVMwiXvm43dluCVum5cCBipyzO52cTQJf16YL6MjQ8TROC5pAGaW
9h/YcqCQ0667nIcGETPkRaj2MouklpvI/4rtzLyMdHB3E93ZrwvGjQJhNhgic7ma
EjkbbBvNuEmX79g1WpvCc2bW6EtLLBUzvIEX9xQzQ+B8T7ht83T6I4fakWB0IIxD
6KE55nEQT3ZS9sx8yJI70F6w3dh/WK4YrFZmcwbS0cu+YxAsiyvpRofZ+bLXy8ln
tXAt1oMBSBMQjA==
-----END CERTIFICATE-----