Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/cb2151-05ca-4a76-859f-4f5ec0a7e006/1/sof_KnM-M76vU0lKkO7BUrvHWLw.mft
File:                     sof_KnM-M76vU0lKkO7BUrvHWLw.mft (raw, json)
Hash identifier:          n72pi+5fd6bAAk3S5tAefE3Oiq1jv0bZQtNbWlLrfoo=
Subject key identifier:   1F:CD:43:9B:26:C1:E0:48:DB:E1:EF:BC:25:15:D1:63:C8:13:58:A7
Authority key identifier: B2:87:FF:2A:73:3E:33:BE:AF:53:49:4A:90:EE:C1:52:BB:C7:58:BC
Certificate issuer:       /CN=b287ff2a733e33beaf53494a90eec152bbc758bc
Certificate serial:       019376B8EE36F6392CBF19D761BC5C492F8D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sof_KnM-M76vU0lKkO7BUrvHWLw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7c/cb2151-05ca-4a76-859f-4f5ec0a7e006/1/sof_KnM-M76vU0lKkO7BUrvHWLw.mft
Manifest number:          12A1
Signing time:             Fri 29 Nov 2024 07:00:51 +0000
Manifest this update:     Fri 29 Nov 2024 07:00:51 +0000
Manifest next update:     Sat 30 Nov 2024 07:00:51 +0000
Files and hashes:         1: 0kW1TDfI9q6fxVYuKR51Kvqsmjk.roa (hash: BWFM+1Rz4lxzOiEU1vKhEB1GQDsmewa6ZTWhGeddIa0=)
                          2: sof_KnM-M76vU0lKkO7BUrvHWLw.crl (hash: j/HkVp8ygcCwQeVSSpoVBGpO5DF3eu44aGI0gkAdFus=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:76:b8:ee:36:f6:39:2c:bf:19:d7:61:bc:5c:49:2f:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b287ff2a733e33beaf53494a90eec152bbc758bc
        Validity
            Not Before: Nov 29 07:00:51 2024 GMT
            Not After : Nov 30 07:00:51 2024 GMT
        Subject: CN=1fcd439b26c1e048dbe1efbc2515d163c81358a7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:9e:f4:be:61:39:8b:2e:70:12:20:81:d2:bd:
                    40:9c:41:34:75:1f:d5:c6:4e:11:f3:30:9a:fa:66:
                    98:88:98:44:0b:72:8e:84:1d:9d:8e:b1:73:f7:41:
                    68:55:ee:b9:72:1f:0f:93:8a:8c:d2:4b:5e:d3:cb:
                    01:f5:97:b0:40:6e:f0:14:c0:a4:37:79:78:05:db:
                    87:4b:43:4e:bc:9f:5a:8c:0f:57:3c:80:24:25:d8:
                    08:5f:d9:fe:28:32:4b:6d:ba:c4:43:b9:24:66:1f:
                    14:e5:fd:11:13:a3:85:59:2b:ff:00:67:e7:26:c2:
                    b4:ff:0d:de:de:0d:78:1e:7f:b2:7c:74:83:d1:25:
                    5c:91:d1:12:e8:d8:8d:a0:73:e0:15:0b:f0:58:e3:
                    3d:7e:1a:87:a6:8b:3d:1e:6e:e2:5d:06:99:e1:50:
                    0a:f0:9e:fd:5e:66:40:82:b1:42:8b:b7:f6:ba:19:
                    eb:0d:55:e9:fb:68:c7:10:1c:b2:8a:99:4e:08:85:
                    f1:c5:68:62:45:fa:7d:25:15:d9:39:84:b5:8e:40:
                    d8:f4:f9:da:34:23:5a:f6:03:ec:ca:1a:d2:d6:23:
                    a1:20:17:ff:e0:93:fe:a5:59:61:41:77:ba:cb:b9:
                    e6:f0:35:2d:16:65:a7:2e:b3:6b:a7:0d:a2:9e:dd:
                    50:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:CD:43:9B:26:C1:E0:48:DB:E1:EF:BC:25:15:D1:63:C8:13:58:A7
            X509v3 Authority Key Identifier:
                keyid:B2:87:FF:2A:73:3E:33:BE:AF:53:49:4A:90:EE:C1:52:BB:C7:58:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sof_KnM-M76vU0lKkO7BUrvHWLw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/cb2151-05ca-4a76-859f-4f5ec0a7e006/1/sof_KnM-M76vU0lKkO7BUrvHWLw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/cb2151-05ca-4a76-859f-4f5ec0a7e006/1/sof_KnM-M76vU0lKkO7BUrvHWLw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:62:55:3f:9a:cb:90:e3:50:80:b8:c6:38:b0:b4:02:56:80:
         ce:a6:5a:61:3f:06:10:63:82:0a:94:a4:42:24:13:18:25:ce:
         b5:6e:36:68:c9:98:86:66:17:13:d8:01:ed:7f:84:dc:35:8e:
         10:b8:e8:33:36:cb:b9:fa:2f:05:a8:c2:33:0b:af:6d:40:42:
         e1:82:b7:f3:9f:07:e5:7b:13:4f:d8:cb:be:fb:68:b8:18:34:
         91:5a:0f:6d:4c:c0:c5:bf:de:17:bf:d5:db:2a:08:5f:c2:79:
         14:6c:7f:4f:88:fe:be:df:2e:33:f2:6e:9f:7d:ca:c6:9e:23:
         98:5c:8e:55:97:bc:98:32:37:1b:2c:2a:b5:6c:96:47:5f:6e:
         f7:d7:2d:a7:16:5d:af:87:ca:fb:94:a9:ee:9b:06:71:c6:5c:
         4a:34:19:59:58:0b:c0:cb:c9:8b:e2:95:e0:72:a3:28:7a:e3:
         52:c2:43:43:f3:6b:5e:9e:78:02:54:f7:5a:e7:4c:b0:ca:87:
         3d:ce:db:56:e9:37:50:bc:bc:a3:63:25:02:93:ab:21:2a:63:
         12:40:2a:4b:04:8f:6a:de:9a:40:ec:f3:4c:d0:19:73:b1:af:
         2a:4b:16:c8:92:05:5a:f5:83:08:c3:13:cb:16:90:02:31:7e:
         97:cc:8d:00
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZN2uO429jksvxnXYbxcSS+NMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIyODdmZjJhNzMzZTMzYmVhZjUzNDk0YTkwZWVjMTUyYmJj
NzU4YmMwHhcNMjQxMTI5MDcwMDUxWhcNMjQxMTMwMDcwMDUxWjAzMTEwLwYDVQQD
EygxZmNkNDM5YjI2YzFlMDQ4ZGJlMWVmYmMyNTE1ZDE2M2M4MTM1OGE3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArp70vmE5iy5wEiCB0r1AnEE0dR/V
xk4R8zCa+maYiJhEC3KOhB2djrFz90FoVe65ch8Pk4qM0kte08sB9ZewQG7wFMCk
N3l4BduHS0NOvJ9ajA9XPIAkJdgIX9n+KDJLbbrEQ7kkZh8U5f0RE6OFWSv/AGfn
JsK0/w3e3g14Hn+yfHSD0SVckdES6NiNoHPgFQvwWOM9fhqHpos9Hm7iXQaZ4VAK
8J79XmZAgrFCi7f2uhnrDVXp+2jHEByyiplOCIXxxWhiRfp9JRXZOYS1jkDY9Pna
NCNa9gPsyhrS1iOhIBf/4JP+pVlhQXe6y7nm8DUtFmWnLrNrpw2int1QcwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB/NQ5smweBI2+HvvCUV0WPIE1inMB8GA1UdIwQY
MBaAFLKH/ypzPjO+r1NJSpDuwVK7x1i8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc29mX0tuTS1NNzZ2VTBsS2tPN0JVcnZIV0x3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yy9jYjIxNTEtMDVjYS00YTc2LTg1OWYt
NGY1ZWMwYTdlMDA2LzEvc29mX0tuTS1NNzZ2VTBsS2tPN0JVcnZIV0x3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Yy9jYjIxNTEtMDVjYS00YTc2LTg1OWYtNGY1ZWMwYTdlMDA2
LzEvc29mX0tuTS1NNzZ2VTBsS2tPN0JVcnZIV0x3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAg2JVP5rL
kONQgLjGOLC0AlaAzqZaYT8GEGOCCpSkQiQTGCXOtW42aMmYhmYXE9gB7X+E3DWO
ELjoMzbLufovBajCMwuvbUBC4YK3858H5XsTT9jLvvtouBg0kVoPbUzAxb/eF7/V
2yoIX8J5FGx/T4j+vt8uM/Jun33Kxp4jmFyOVZe8mDI3GywqtWyWR19u99ctpxZd
r4fK+5Sp7psGccZcSjQZWVgLwMvJi+KV4HKjKHrjUsJDQ/NrXp54AlT3WudMsMqH
Pc7bVuk3ULy8o2MlApOrISpjEkAqSwSPat6aQOzzTNAZc7GvKksWyJIFWvWDCMMT
yxaQAjF+l8yNAA==
-----END CERTIFICATE-----