Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/205275-2ced-4a4e-b900-4f3e5b2e0c56/1/HQhx_C6ZiS6hEVowITjh0ypiGCw.mft
File:                     HQhx_C6ZiS6hEVowITjh0ypiGCw.mft (raw, json)
Hash identifier:          o8xNIKkrI0vKa4NeEbXpdwQSoTqcUPAOpoAHzg1O24s=
Subject key identifier:   2B:83:98:75:88:A7:AB:E7:13:6F:51:DF:8E:EE:03:56:B2:23:2D:5A
Authority key identifier: 1D:08:71:FC:2E:99:89:2E:A1:11:5A:30:21:38:E1:D3:2A:62:18:2C
Certificate issuer:       /CN=1d0871fc2e99892ea1115a302138e1d32a62182c
Certificate serial:       0194BC3C98EAF3F758877697753D49FEFCDA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HQhx_C6ZiS6hEVowITjh0ypiGCw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f7/205275-2ced-4a4e-b900-4f3e5b2e0c56/1/HQhx_C6ZiS6hEVowITjh0ypiGCw.mft
Manifest number:          142E
Signing time:             Fri 31 Jan 2025 12:01:15 +0000
Manifest this update:     Fri 31 Jan 2025 12:01:15 +0000
Manifest next update:     Sat 01 Feb 2025 12:01:15 +0000
Files and hashes:         1: HQhx_C6ZiS6hEVowITjh0ypiGCw.crl (hash: MpQHzePj0aXPTGie2DxZQEMjbALj/HxRq2tB9EqYbGI=)
                          2: LO1uxLKiirgi4DTjiceFUqHnZ_Q.roa (hash: Jtc+IuVms0/thPHj5bGPRIMsxU7hFLPzHKxvZdogizk=)
                          3: aWalfbOeEBKlHFJV-ENu8MAsZo4.roa (hash: EdxjZs6zvCXnFCAeiNpfiVYwCGvEbmMbWMZx7J9tRCc=)
                          4: ucuU-Uq0Xb62o4XqDQOup7WMShY.roa (hash: bTCTTFwhaYZdJywJ5h4MOhDury0ZGVdUw5QGOuUV0Sc=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:3c:98:ea:f3:f7:58:87:76:97:75:3d:49:fe:fc:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1d0871fc2e99892ea1115a302138e1d32a62182c
        Validity
            Not Before: Jan 31 12:01:15 2025 GMT
            Not After : Feb  1 12:01:15 2025 GMT
        Subject: CN=2b83987588a7abe7136f51df8eee0356b2232d5a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:01:cd:08:0c:82:ba:6f:38:64:41:98:b4:52:
                    27:f1:ed:b0:8d:7a:47:c5:32:d5:e2:6d:19:f6:d4:
                    66:ab:16:78:19:b9:ce:63:e2:ce:ff:b3:b4:ee:e5:
                    01:09:f3:64:83:41:da:b0:e4:a3:93:b1:2e:c5:74:
                    7f:4f:de:6b:64:f1:79:e8:70:05:4b:f9:1a:eb:f0:
                    d0:bf:dd:40:e7:1a:b7:f4:7f:6a:e6:67:87:ec:36:
                    b7:a9:2d:39:cb:9e:63:94:f4:5e:8f:71:82:06:c3:
                    40:8a:bf:41:f6:84:cb:68:22:52:7c:dd:78:f8:ef:
                    6a:50:ff:2e:e3:42:36:4f:a1:5f:54:25:e8:15:d4:
                    c6:11:db:73:2a:ae:d4:19:b2:59:e8:dd:56:7c:eb:
                    be:9e:db:9b:d1:d3:18:e7:74:86:15:68:de:31:10:
                    92:68:8f:71:99:d3:ba:45:da:a8:ad:4b:38:e8:9c:
                    96:76:e2:44:9d:86:c9:d1:77:0b:09:7a:16:83:cd:
                    58:df:1f:c2:0c:89:6c:27:c5:d9:df:56:df:7c:29:
                    19:83:29:73:6d:f8:11:66:6e:a6:4a:48:c7:5b:7b:
                    dc:e1:ac:6e:16:57:bb:69:bd:18:dd:2a:f0:c0:be:
                    8c:00:4a:f7:ab:76:90:35:8c:f0:ad:fb:15:25:e3:
                    34:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:83:98:75:88:A7:AB:E7:13:6F:51:DF:8E:EE:03:56:B2:23:2D:5A
            X509v3 Authority Key Identifier:
                keyid:1D:08:71:FC:2E:99:89:2E:A1:11:5A:30:21:38:E1:D3:2A:62:18:2C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HQhx_C6ZiS6hEVowITjh0ypiGCw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/205275-2ced-4a4e-b900-4f3e5b2e0c56/1/HQhx_C6ZiS6hEVowITjh0ypiGCw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/205275-2ced-4a4e-b900-4f3e5b2e0c56/1/HQhx_C6ZiS6hEVowITjh0ypiGCw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:1e:ae:38:59:9b:07:f3:4d:f8:f3:4e:66:74:d1:e2:f9:fb:
         9e:e3:9b:ee:5b:09:ec:d6:3b:6b:aa:4c:89:da:45:68:fc:26:
         67:46:31:71:b0:42:ff:7e:e6:74:de:d0:92:c2:31:ec:4c:b0:
         60:ad:8a:f7:70:17:d8:8d:03:25:ce:2b:27:a2:68:a0:e5:7a:
         ce:af:ce:4f:00:80:c6:b3:63:21:71:f8:ca:16:b3:6e:57:a7:
         df:b4:58:10:ff:89:d1:be:57:fb:ec:38:f2:8c:25:4b:98:1e:
         cd:39:1c:80:89:e0:64:b0:1f:9d:6b:ac:de:91:79:7a:4f:ed:
         c7:e6:cf:12:a1:ed:65:02:26:92:29:a7:54:48:f0:92:30:4f:
         ad:95:a3:c5:1e:d8:a8:49:58:18:4b:ec:97:16:b0:c3:23:09:
         85:03:fa:3a:b1:96:cb:27:64:16:d4:a3:44:d8:24:85:0b:89:
         ad:8c:7e:6b:13:b3:25:90:6c:f4:a5:20:7e:54:2f:75:82:6c:
         cf:da:b9:a2:48:b4:be:97:de:77:9c:a7:64:1e:24:e0:eb:a9:
         bf:58:ee:81:5b:43:37:91:5c:5f:e8:87:96:9c:99:a2:87:4f:
         b0:27:ea:37:48:1e:77:a6:dd:a0:76:b1:87:9e:89:c6:b3:50:
         62:8f:61:77
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8PJjq8/dYh3aXdT1J/vzaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFkMDg3MWZjMmU5OTg5MmVhMTExNWEzMDIxMzhlMWQzMmE2
MjE4MmMwHhcNMjUwMTMxMTIwMTE1WhcNMjUwMjAxMTIwMTE1WjAzMTEwLwYDVQQD
EygyYjgzOTg3NTg4YTdhYmU3MTM2ZjUxZGY4ZWVlMDM1NmIyMjMyZDVhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqwHNCAyCum84ZEGYtFIn8e2wjXpH
xTLV4m0Z9tRmqxZ4GbnOY+LO/7O07uUBCfNkg0HasOSjk7EuxXR/T95rZPF56HAF
S/ka6/DQv91A5xq39H9q5meH7Da3qS05y55jlPRej3GCBsNAir9B9oTLaCJSfN14
+O9qUP8u40I2T6FfVCXoFdTGEdtzKq7UGbJZ6N1WfOu+ntub0dMY53SGFWjeMRCS
aI9xmdO6RdqorUs46JyWduJEnYbJ0XcLCXoWg81Y3x/CDIlsJ8XZ31bffCkZgylz
bfgRZm6mSkjHW3vc4axuFle7ab0Y3SrwwL6MAEr3q3aQNYzwrfsVJeM0swIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCuDmHWIp6vnE29R347uA1ayIy1aMB8GA1UdIwQY
MBaAFB0IcfwumYkuoRFaMCE44dMqYhgsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSFFoeF9DNlppUzZoRVZvd0lUamgweXBpR0N3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNy8yMDUyNzUtMmNlZC00YTRlLWI5MDAt
NGYzZTViMmUwYzU2LzEvSFFoeF9DNlppUzZoRVZvd0lUamgweXBpR0N3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNy8yMDUyNzUtMmNlZC00YTRlLWI5MDAtNGYzZTViMmUwYzU2
LzEvSFFoeF9DNlppUzZoRVZvd0lUamgweXBpR0N3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYh6uOFmb
B/NN+PNOZnTR4vn7nuOb7lsJ7NY7a6pMidpFaPwmZ0YxcbBC/37mdN7QksIx7Eyw
YK2K93AX2I0DJc4rJ6JooOV6zq/OTwCAxrNjIXH4yhazblen37RYEP+J0b5X++w4
8owlS5gezTkcgIngZLAfnWus3pF5ek/tx+bPEqHtZQImkimnVEjwkjBPrZWjxR7Y
qElYGEvslxawwyMJhQP6OrGWyydkFtSjRNgkhQuJrYx+axOzJZBs9KUgflQvdYJs
z9q5oki0vpfed5ynZB4k4Oupv1jugVtDN5FcX+iHlpyZoodPsCfqN0ged6bdoHax
h56JxrNQYo9hdw==
-----END CERTIFICATE-----