Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/fb39ed-7c73-4478-901d-65a899a60366/1/RJsY4ylteV06nJWb4lxwqqs2UgA.mft
File:                     RJsY4ylteV06nJWb4lxwqqs2UgA.mft (raw, json)
Hash identifier:          xFax3aWXuqC+v4b8/BeRnhqJbN7/KbVfzi8hXnfvvEc=
Subject key identifier:   26:08:02:FC:9F:0C:21:23:E9:05:0E:A4:BD:63:A6:26:10:1F:59:D7
Authority key identifier: 44:9B:18:E3:29:6D:79:5D:3A:9C:95:9B:E2:5C:70:AA:AB:36:52:00
Certificate issuer:       /CN=449b18e3296d795d3a9c959be25c70aaab365200
Certificate serial:       0194BD177F22078FB3A5561793927A9482CD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RJsY4ylteV06nJWb4lxwqqs2UgA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e0/fb39ed-7c73-4478-901d-65a899a60366/1/RJsY4ylteV06nJWb4lxwqqs2UgA.mft
Manifest number:          142D
Signing time:             Fri 31 Jan 2025 16:00:21 +0000
Manifest this update:     Fri 31 Jan 2025 16:00:21 +0000
Manifest next update:     Sat 01 Feb 2025 16:00:21 +0000
Files and hashes:         1: J8QjZax-mkvPxfZhhHMPCwubpys.roa (hash: rmal6rcTiDBRBlMMyLquXrrXQpuz0JgUekU0ozpEKqs=)
                          2: RJsY4ylteV06nJWb4lxwqqs2UgA.crl (hash: RO7JK0H0cNUI4iO2T9MviOhv4YwLNtAehNuq4ngLljU=)
                          3: SoB8_0B4GOtYomyJQxt0uZ0Oeww.roa (hash: OQVaFQPCwhrwCF+WYF+druX/sOmGI/9eo2Z2LvF9GLs=)
                          4: leAAH4rGishsnZoufTD0XzRz9UE.roa (hash: XYLINiTCGoUfisGhej9/jS2otE2Loul2nvXuv/CwfdM=)
                          5: x0AcTRasjy0qWZOIGUnT1Kbz4uk.roa (hash: zaM3VnNG9RVFofm3T8ZoNUTLDhK3X/kEUyA6UhvyMf0=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bd:17:7f:22:07:8f:b3:a5:56:17:93:92:7a:94:82:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=449b18e3296d795d3a9c959be25c70aaab365200
        Validity
            Not Before: Jan 31 16:00:21 2025 GMT
            Not After : Feb  1 16:00:21 2025 GMT
        Subject: CN=260802fc9f0c2123e9050ea4bd63a626101f59d7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:62:89:48:3c:72:ce:c5:6c:a0:0a:c6:dd:f3:
                    67:6a:99:24:92:53:61:96:b4:ad:33:76:c2:f1:8a:
                    ce:9e:f9:c0:a8:b0:c5:ae:c6:c9:da:c2:a6:78:1c:
                    12:27:7a:a4:5b:34:38:49:78:35:5f:97:55:c6:50:
                    77:50:04:13:ba:15:0c:3e:0f:a8:08:b1:bb:d8:c5:
                    29:53:cc:9f:ec:4f:fe:fd:b5:e9:b9:dd:c4:d0:fe:
                    fe:4f:4d:b8:af:74:7c:d7:0c:30:c6:2a:49:b0:f7:
                    40:bc:cc:4b:56:62:2b:eb:21:42:be:86:96:b2:8d:
                    c7:05:e6:0d:d2:79:d8:5c:23:67:85:da:35:bd:db:
                    29:7f:6c:c7:1b:d7:1d:c1:21:e0:bc:dd:d7:10:11:
                    19:15:1f:76:ab:ad:99:73:3c:36:f8:ab:7f:35:fb:
                    30:5d:79:5f:8c:2d:e1:d0:2b:c7:42:a9:45:9a:57:
                    c0:3e:65:fa:a6:eb:61:c6:e7:31:24:6e:ef:90:f2:
                    20:5b:4d:d3:44:4f:91:7a:78:e9:b6:6a:d6:91:5e:
                    02:6e:f1:29:87:e9:7c:e6:32:ae:25:90:d6:8d:1a:
                    cf:8d:c4:e5:ec:43:0f:d1:0e:fd:5e:4e:ce:2a:1f:
                    e3:14:0e:3e:c4:0b:35:17:e5:a1:d8:0d:7d:15:43:
                    ff:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:08:02:FC:9F:0C:21:23:E9:05:0E:A4:BD:63:A6:26:10:1F:59:D7
            X509v3 Authority Key Identifier:
                keyid:44:9B:18:E3:29:6D:79:5D:3A:9C:95:9B:E2:5C:70:AA:AB:36:52:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RJsY4ylteV06nJWb4lxwqqs2UgA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/fb39ed-7c73-4478-901d-65a899a60366/1/RJsY4ylteV06nJWb4lxwqqs2UgA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/fb39ed-7c73-4478-901d-65a899a60366/1/RJsY4ylteV06nJWb4lxwqqs2UgA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bc:05:48:e1:f9:cb:00:4a:66:34:95:61:c4:05:13:94:4b:02:
         20:31:df:89:12:1a:d1:d4:92:ae:e1:28:e3:b2:cc:c6:4f:e9:
         2a:16:72:59:f7:b2:ab:9f:bc:c2:ff:fd:20:12:d6:c3:91:a6:
         e9:02:5b:1e:f8:12:a2:19:ba:59:fa:b8:59:f0:36:10:23:3a:
         0d:d9:c2:dd:28:58:77:51:ae:46:0c:fd:6e:84:a9:9f:12:3c:
         99:f1:d4:99:83:71:89:c0:d5:c8:f8:55:5d:91:9d:4c:ad:58:
         32:88:7b:7e:41:75:bf:fe:a8:8d:55:21:04:f0:31:e4:68:6f:
         02:2a:18:36:5e:4e:3b:1c:c4:6e:e6:e5:3e:78:a3:d2:1d:9c:
         ea:a3:44:05:42:ef:40:fd:fb:dd:39:f7:8b:68:88:64:c7:bb:
         30:46:e1:be:3b:f7:66:c0:d3:c7:0c:6e:1e:39:c6:be:4b:53:
         bd:97:e3:a0:29:10:a2:97:d0:8f:ca:f9:52:62:22:45:96:03:
         a4:e8:52:51:6b:44:47:34:81:d5:4f:0a:d3:a0:3c:93:ba:81:
         c7:0e:03:f2:90:74:98:6c:cb:f5:96:16:f3:e8:73:ec:2a:6d:
         1b:6f:bf:b9:31:98:56:fb:6b:78:06:d9:96:75:e9:e6:10:a2:
         31:de:98:70
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9F38iB4+zpVYXk5J6lILNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ0OWIxOGUzMjk2ZDc5NWQzYTljOTU5YmUyNWM3MGFhYWIz
NjUyMDAwHhcNMjUwMTMxMTYwMDIxWhcNMjUwMjAxMTYwMDIxWjAzMTEwLwYDVQQD
EygyNjA4MDJmYzlmMGMyMTIzZTkwNTBlYTRiZDYzYTYyNjEwMWY1OWQ3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0WKJSDxyzsVsoArG3fNnapkkklNh
lrStM3bC8YrOnvnAqLDFrsbJ2sKmeBwSJ3qkWzQ4SXg1X5dVxlB3UAQTuhUMPg+o
CLG72MUpU8yf7E/+/bXpud3E0P7+T024r3R81wwwxipJsPdAvMxLVmIr6yFCvoaW
so3HBeYN0nnYXCNnhdo1vdspf2zHG9cdwSHgvN3XEBEZFR92q62Zczw2+Kt/Nfsw
XXlfjC3h0CvHQqlFmlfAPmX6puthxucxJG7vkPIgW03TRE+RenjptmrWkV4CbvEp
h+l85jKuJZDWjRrPjcTl7EMP0Q79Xk7OKh/jFA4+xAs1F+Wh2A19FUP/DQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCYIAvyfDCEj6QUOpL1jpiYQH1nXMB8GA1UdIwQY
MBaAFESbGOMpbXldOpyVm+JccKqrNlIAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUkpzWTR5bHRlVjA2bkpXYjRseHdxcXMyVWdBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMC9mYjM5ZWQtN2M3My00NDc4LTkwMWQt
NjVhODk5YTYwMzY2LzEvUkpzWTR5bHRlVjA2bkpXYjRseHdxcXMyVWdBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMC9mYjM5ZWQtN2M3My00NDc4LTkwMWQtNjVhODk5YTYwMzY2
LzEvUkpzWTR5bHRlVjA2bkpXYjRseHdxcXMyVWdBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvAVI4fnL
AEpmNJVhxAUTlEsCIDHfiRIa0dSSruEo47LMxk/pKhZyWfeyq5+8wv/9IBLWw5Gm
6QJbHvgSohm6Wfq4WfA2ECM6DdnC3ShYd1GuRgz9boSpnxI8mfHUmYNxicDVyPhV
XZGdTK1YMoh7fkF1v/6ojVUhBPAx5GhvAioYNl5OOxzEbublPnij0h2c6qNEBULv
QP373Tn3i2iIZMe7MEbhvjv3ZsDTxwxuHjnGvktTvZfjoCkQopfQj8r5UmIiRZYD
pOhSUWtERzSB1U8K06A8k7qBxw4D8pB0mGzL9ZYW8+hz7CptG2+/uTGYVvtreAbZ
lnXp5hCiMd6YcA==
-----END CERTIFICATE-----