Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/ad6b73-0e8c-4a45-b6bb-42281f5518a9/1/fRXP7bmuq0K_isWyTLGu7CpmCUM.mft
File:                     fRXP7bmuq0K_isWyTLGu7CpmCUM.mft (raw, json)
Hash identifier:          fc4rqV3bF3B+wRxUYhbWJwWUBgqbyXmMphsafVAuYV4=
Subject key identifier:   46:A5:BA:AC:AD:09:89:18:8E:0F:C3:FE:A9:02:A4:F6:96:C8:DB:81
Authority key identifier: 7D:15:CF:ED:B9:AE:AB:42:BF:8A:C5:B2:4C:B1:AE:EC:2A:66:09:43
Certificate issuer:       /CN=7d15cfedb9aeab42bf8ac5b24cb1aeec2a660943
Certificate serial:       0194BC727B01CEA0A647F642162E5544A12C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fRXP7bmuq0K_isWyTLGu7CpmCUM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e3/ad6b73-0e8c-4a45-b6bb-42281f5518a9/1/fRXP7bmuq0K_isWyTLGu7CpmCUM.mft
Manifest number:          142E
Signing time:             Fri 31 Jan 2025 13:00:06 +0000
Manifest this update:     Fri 31 Jan 2025 13:00:06 +0000
Manifest next update:     Sat 01 Feb 2025 13:00:06 +0000
Files and hashes:         1: 18p7Ci3FYRjnSUuSYvylnzylknA.roa (hash: LM1mefgxf5Tx5qZdCUkPbNfosOkCVxVYnJvV3BXzWRQ=)
                          2: 8-EPTUsDjeAH_oGWToF2RmGQ2Ao.roa (hash: Hjs8x+QhSfvnsc7tXcv3jbPzkHdOQHTSEP+phSCJM3Q=)
                          3: KcbbqyI61Dpc-ygL7AHKa_usOSo.roa (hash: kkFxtw4PwJG2Z7JLMkiTQPzGH8OwxuhglTuN4vJkL+8=)
                          4: ThOatuG7DEKApY2ssZ-kj1K_JSM.roa (hash: Gai3qW8Lb72lyPydHw5tn1ETPx20cKnkfT9hC4FZkCM=)
                          5: fRXP7bmuq0K_isWyTLGu7CpmCUM.crl (hash: cS4s7KcxiZZ7h+017jqyZ1lnFjf7xB1uQdFy2QKL3qM=)
                          6: wZlxL67WLzX5pGa8n1agszoK1xc.roa (hash: 1WuGE1PhCylMEcbcrsL7MtSG58/ynaMg5R26KIeDkyk=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:72:7b:01:ce:a0:a6:47:f6:42:16:2e:55:44:a1:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7d15cfedb9aeab42bf8ac5b24cb1aeec2a660943
        Validity
            Not Before: Jan 31 13:00:06 2025 GMT
            Not After : Feb  1 13:00:06 2025 GMT
        Subject: CN=46a5baacad0989188e0fc3fea902a4f696c8db81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:c1:2c:df:3b:94:ae:8d:52:23:ce:e3:06:fd:
                    cc:91:39:88:91:91:cf:b7:37:6a:0b:11:c8:1c:b5:
                    55:01:87:2e:a9:ce:58:80:ce:b3:20:8b:8e:7f:2f:
                    ca:6d:37:5b:3d:91:06:2e:fc:fe:bc:69:3b:a6:df:
                    9f:f1:a5:6b:c5:4f:6c:37:4c:5d:eb:52:81:c7:d7:
                    fc:70:0a:7e:3f:95:45:bb:81:02:06:22:47:80:c5:
                    03:54:41:57:f1:fb:1a:08:03:dc:76:81:78:ca:0d:
                    f5:17:79:04:58:79:1b:32:f5:0c:0a:3b:5c:06:34:
                    93:db:f6:88:ca:f3:92:3d:73:6d:18:03:c1:d4:48:
                    42:7c:b7:49:75:81:0a:fb:93:60:42:b7:31:4d:31:
                    71:9d:65:68:33:54:04:d9:c0:4e:1e:f2:5e:99:5d:
                    aa:78:be:c8:60:eb:a3:5c:16:f7:af:c3:76:04:a9:
                    07:0e:ae:41:a6:5d:3a:bc:cc:cc:a2:48:ae:a4:a3:
                    15:85:cf:d5:aa:27:c2:7b:a8:1d:2a:d2:f4:3a:91:
                    a2:8e:2d:3c:8c:52:4f:bc:b8:12:ce:e9:82:05:18:
                    ee:67:15:ba:ea:2f:07:a9:60:9d:93:7d:d9:29:bb:
                    9f:34:6b:f0:47:5d:19:f2:5b:f9:23:90:5d:ef:81:
                    23:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:A5:BA:AC:AD:09:89:18:8E:0F:C3:FE:A9:02:A4:F6:96:C8:DB:81
            X509v3 Authority Key Identifier:
                keyid:7D:15:CF:ED:B9:AE:AB:42:BF:8A:C5:B2:4C:B1:AE:EC:2A:66:09:43

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fRXP7bmuq0K_isWyTLGu7CpmCUM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/ad6b73-0e8c-4a45-b6bb-42281f5518a9/1/fRXP7bmuq0K_isWyTLGu7CpmCUM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/ad6b73-0e8c-4a45-b6bb-42281f5518a9/1/fRXP7bmuq0K_isWyTLGu7CpmCUM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:c8:3c:6f:08:65:ca:6a:25:04:f1:28:02:6f:e8:3c:cb:52:
         24:ab:f2:03:14:0d:c3:63:15:22:22:b4:bc:cb:cb:ea:6a:98:
         7f:24:1b:de:ee:d7:40:f9:6f:f9:28:77:90:bf:55:fd:97:45:
         75:66:82:13:5e:db:62:45:18:51:43:a0:2f:80:93:0b:03:7f:
         29:79:dc:5f:cf:79:d0:33:18:d6:7e:15:d8:3a:cb:22:58:29:
         3f:22:a0:ed:5d:d0:da:e4:01:65:37:99:ff:2b:02:29:21:e6:
         5a:20:14:62:e6:8a:b2:63:c0:ba:23:7c:a7:78:fe:5e:94:6d:
         59:1c:71:7c:04:e1:87:06:84:db:bf:b3:ff:df:fa:f2:f9:04:
         cd:fb:a7:31:cc:b8:3e:82:0f:d5:52:36:a8:39:21:d3:7f:4f:
         4d:a5:67:32:85:aa:1b:41:31:70:ab:a4:83:28:58:36:58:d2:
         1e:65:85:ac:c3:c0:3d:c8:1a:05:f5:2f:67:15:98:11:94:c8:
         6a:0c:d3:b2:f5:f3:7a:c9:8d:cc:f8:b0:6a:09:b0:10:c8:ee:
         51:17:2e:52:65:10:43:a3:f0:89:00:c0:0a:d0:39:7d:c1:34:
         ca:72:29:80:95:47:5a:c7:a0:60:fd:3e:84:2c:92:de:78:06:
         a8:33:02:e9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8cnsBzqCmR/ZCFi5VRKEsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkMTVjZmVkYjlhZWFiNDJiZjhhYzViMjRjYjFhZWVjMmE2
NjA5NDMwHhcNMjUwMTMxMTMwMDA2WhcNMjUwMjAxMTMwMDA2WjAzMTEwLwYDVQQD
Eyg0NmE1YmFhY2FkMDk4OTE4OGUwZmMzZmVhOTAyYTRmNjk2YzhkYjgxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjMEs3zuUro1SI87jBv3MkTmIkZHP
tzdqCxHIHLVVAYcuqc5YgM6zIIuOfy/KbTdbPZEGLvz+vGk7pt+f8aVrxU9sN0xd
61KBx9f8cAp+P5VFu4ECBiJHgMUDVEFX8fsaCAPcdoF4yg31F3kEWHkbMvUMCjtc
BjST2/aIyvOSPXNtGAPB1EhCfLdJdYEK+5NgQrcxTTFxnWVoM1QE2cBOHvJemV2q
eL7IYOujXBb3r8N2BKkHDq5Bpl06vMzMokiupKMVhc/VqifCe6gdKtL0OpGiji08
jFJPvLgSzumCBRjuZxW66i8HqWCdk33ZKbufNGvwR10Z8lv5I5Bd74EjewIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEaluqytCYkYjg/D/qkCpPaWyNuBMB8GA1UdIwQY
MBaAFH0Vz+25rqtCv4rFskyxruwqZglDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZlJYUDdibXVxMEtfaXNXeVRMR3U3Q3BtQ1VNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMy9hZDZiNzMtMGU4Yy00YTQ1LWI2YmIt
NDIyODFmNTUxOGE5LzEvZlJYUDdibXVxMEtfaXNXeVRMR3U3Q3BtQ1VNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMy9hZDZiNzMtMGU4Yy00YTQ1LWI2YmItNDIyODFmNTUxOGE5
LzEvZlJYUDdibXVxMEtfaXNXeVRMR3U3Q3BtQ1VNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAO8g8bwhl
ymolBPEoAm/oPMtSJKvyAxQNw2MVIiK0vMvL6mqYfyQb3u7XQPlv+Sh3kL9V/ZdF
dWaCE17bYkUYUUOgL4CTCwN/KXncX8950DMY1n4V2DrLIlgpPyKg7V3Q2uQBZTeZ
/ysCKSHmWiAUYuaKsmPAuiN8p3j+XpRtWRxxfAThhwaE27+z/9/68vkEzfunMcy4
PoIP1VI2qDkh039PTaVnMoWqG0ExcKukgyhYNljSHmWFrMPAPcgaBfUvZxWYEZTI
agzTsvXzesmNzPiwagmwEMjuURcuUmUQQ6PwiQDACtA5fcE0ynIpgJVHWsegYP0+
hCyS3ngGqDMC6Q==
-----END CERTIFICATE-----