Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/87b267-49c2-4269-9f66-00bcd9b91c1b/1/3JDgruHswxBmy3RPin_u3vs_eTA.mft
File:                     3JDgruHswxBmy3RPin_u3vs_eTA.mft (raw, json)
Hash identifier:          2NZZi3RP04QQU5lm2eUqDQ3Z14TC70PDAwx40VddV/0=
Subject key identifier:   00:7D:4A:E4:F6:68:A0:45:63:F4:C2:B4:48:D6:AD:27:1B:F0:E9:E6
Authority key identifier: DC:90:E0:AE:E1:EC:C3:10:66:CB:74:4F:8A:7F:EE:DE:FB:3F:79:30
Certificate issuer:       /CN=dc90e0aee1ecc31066cb744f8a7feedefb3f7930
Certificate serial:       0194BC3C61DC68BE02F157EF02CB79B3CF0B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3JDgruHswxBmy3RPin_u3vs_eTA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/16/87b267-49c2-4269-9f66-00bcd9b91c1b/1/3JDgruHswxBmy3RPin_u3vs_eTA.mft
Manifest number:          1434
Signing time:             Fri 31 Jan 2025 12:01:01 +0000
Manifest this update:     Fri 31 Jan 2025 12:01:01 +0000
Manifest next update:     Sat 01 Feb 2025 12:01:01 +0000
Files and hashes:         1: 3JDgruHswxBmy3RPin_u3vs_eTA.crl (hash: CUVqR2bMN1UWFzAjyHSuvQ4+mqysJ3tRe6yNifiMUA0=)
                          2: cb_zDnKlQ9maV_mcPiyN2HwpRxo.roa (hash: rr7OeDKsSm5RUPgVy2VLBciOmsBRvc5YKTQcvs96n0U=)
                          3: k05adWa2w3LbPzFD5PPS-Y4ZXXA.roa (hash: 7eE5wXY945/zBdqk2rQqMculQCT1SLNeLpVd4m3kvgQ=)
                          4: ph2FFZ9AUAY5f8HkJbk_3g9Wk8w.roa (hash: dL+5O6eKdQJWgkq0JqtkXhyJzAf/MU7XQ0/GDtElRTc=)
                          5: qGOQ_yXUb9fqfdc0pjv8GkkFrgA.roa (hash: 833QRTQTY31+HWX8nRUFCr/VNiol8C4z2kqd75zyrgI=)
                          6: v_zn4_1KbJzxkgAXb28b5Y6q308.roa (hash: IdKfvB2y1UdAW5VnVbLA8TYDHRr9AR97K2sGFBQKq+s=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:3c:61:dc:68:be:02:f1:57:ef:02:cb:79:b3:cf:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc90e0aee1ecc31066cb744f8a7feedefb3f7930
        Validity
            Not Before: Jan 31 12:01:01 2025 GMT
            Not After : Feb  1 12:01:01 2025 GMT
        Subject: CN=007d4ae4f668a04563f4c2b448d6ad271bf0e9e6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:53:a4:eb:d3:d4:ee:cd:79:9c:f1:67:69:36:
                    ac:8a:a8:bc:69:78:80:37:88:e6:77:ea:74:cc:7a:
                    39:17:e5:ca:9d:bc:24:1f:30:26:4a:51:2a:f3:5a:
                    ee:69:68:ad:e4:70:c6:16:bc:82:ef:1a:a2:a0:e3:
                    ae:9a:d3:d2:82:ae:89:13:10:14:54:36:81:5e:76:
                    b6:fc:d9:e8:f8:15:87:0a:9c:01:c3:cd:d0:3d:dc:
                    00:dc:d1:f3:02:95:61:80:ba:97:db:48:00:8f:07:
                    0f:09:a3:c5:37:8b:2a:d4:10:63:f4:cd:50:8e:9a:
                    78:ba:de:ec:0a:86:39:89:49:7b:91:ba:02:6e:b2:
                    59:40:36:df:83:02:68:1e:19:15:02:7e:15:1e:e1:
                    54:44:64:dd:6d:bd:9d:a3:32:d2:77:62:90:b7:56:
                    4c:5d:71:ad:b5:96:66:a4:ec:87:ff:aa:94:ce:67:
                    24:c8:80:df:14:47:8e:34:13:da:85:9e:38:5e:60:
                    98:5c:0f:e2:25:64:d5:7b:94:1f:3b:62:0f:27:2c:
                    4a:44:14:f5:98:58:9d:68:9a:3c:73:9a:f1:f2:90:
                    7a:25:9f:92:5c:c7:0d:a8:de:9f:38:40:b2:d4:5e:
                    9f:34:d6:28:2e:b1:64:15:1e:58:f3:ec:28:a1:84:
                    f2:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:7D:4A:E4:F6:68:A0:45:63:F4:C2:B4:48:D6:AD:27:1B:F0:E9:E6
            X509v3 Authority Key Identifier:
                keyid:DC:90:E0:AE:E1:EC:C3:10:66:CB:74:4F:8A:7F:EE:DE:FB:3F:79:30

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3JDgruHswxBmy3RPin_u3vs_eTA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/87b267-49c2-4269-9f66-00bcd9b91c1b/1/3JDgruHswxBmy3RPin_u3vs_eTA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/16/87b267-49c2-4269-9f66-00bcd9b91c1b/1/3JDgruHswxBmy3RPin_u3vs_eTA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:dd:5e:5d:fe:fe:db:ab:ad:24:91:6e:8f:af:cf:ee:b7:66:
         fc:55:c3:16:2c:4e:53:d6:ca:51:24:01:1a:8a:83:b5:2e:aa:
         23:50:12:0e:ca:10:bd:df:51:c4:e5:96:1b:ee:45:2a:76:bd:
         95:50:8f:63:6e:92:dc:3c:12:56:13:8e:09:8b:d3:f9:6d:53:
         03:33:4b:95:e7:e9:7b:77:5a:07:3a:6a:02:6a:d9:a2:83:3d:
         2f:f2:08:3e:4b:46:a5:fa:0d:b2:1b:83:34:94:50:50:45:39:
         19:cd:fc:a2:56:c8:d2:a9:b0:a6:50:36:3f:27:55:fb:e6:46:
         a8:d4:c0:e7:15:e3:47:14:f4:39:6f:c1:cf:47:74:c1:f7:a7:
         d9:b5:59:b5:ed:95:0a:21:ba:4e:0b:27:15:ad:ff:f8:f4:e8:
         78:f0:d2:78:cc:f2:13:f8:e5:91:e7:fb:1d:9b:67:ef:a1:aa:
         12:cc:83:61:fa:2b:ae:ce:ac:3b:79:5f:59:f9:d9:a8:0d:27:
         c8:65:46:28:bf:a0:36:66:f9:e1:d6:f7:f2:75:6a:81:c7:9c:
         05:b0:9d:25:2c:45:8a:00:97:7e:12:df:21:d1:47:ea:97:9b:
         15:b1:52:0e:a4:5b:6f:2f:3d:28:f5:f1:f6:43:c1:71:46:5d:
         70:fa:55:df
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8PGHcaL4C8VfvAst5s88LMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRjOTBlMGFlZTFlY2MzMTA2NmNiNzQ0ZjhhN2ZlZWRlZmIz
Zjc5MzAwHhcNMjUwMTMxMTIwMTAxWhcNMjUwMjAxMTIwMTAxWjAzMTEwLwYDVQQD
EygwMDdkNGFlNGY2NjhhMDQ1NjNmNGMyYjQ0OGQ2YWQyNzFiZjBlOWU2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxFOk69PU7s15nPFnaTasiqi8aXiA
N4jmd+p0zHo5F+XKnbwkHzAmSlEq81ruaWit5HDGFryC7xqioOOumtPSgq6JExAU
VDaBXna2/Nno+BWHCpwBw83QPdwA3NHzApVhgLqX20gAjwcPCaPFN4sq1BBj9M1Q
jpp4ut7sCoY5iUl7kboCbrJZQDbfgwJoHhkVAn4VHuFURGTdbb2dozLSd2KQt1ZM
XXGttZZmpOyH/6qUzmckyIDfFEeONBPahZ44XmCYXA/iJWTVe5QfO2IPJyxKRBT1
mFidaJo8c5rx8pB6JZ+SXMcNqN6fOECy1F6fNNYoLrFkFR5Y8+wooYTyHQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAB9SuT2aKBFY/TCtEjWrScb8OnmMB8GA1UdIwQY
MBaAFNyQ4K7h7MMQZst0T4p/7t77P3kwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM0pEZ3J1SHN3eEJteTNSUGluX3UzdnNfZVRBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi84N2IyNjctNDljMi00MjY5LTlmNjYt
MDBiY2Q5YjkxYzFiLzEvM0pEZ3J1SHN3eEJteTNSUGluX3UzdnNfZVRBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNi84N2IyNjctNDljMi00MjY5LTlmNjYtMDBiY2Q5YjkxYzFi
LzEvM0pEZ3J1SHN3eEJteTNSUGluX3UzdnNfZVRBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAh91eXf7+
26utJJFuj6/P7rdm/FXDFixOU9bKUSQBGoqDtS6qI1ASDsoQvd9RxOWWG+5FKna9
lVCPY26S3DwSVhOOCYvT+W1TAzNLlefpe3daBzpqAmrZooM9L/IIPktGpfoNshuD
NJRQUEU5Gc38olbI0qmwplA2PydV++ZGqNTA5xXjRxT0OW/Bz0d0wfen2bVZte2V
CiG6TgsnFa3/+PToePDSeMzyE/jlkef7HZtn76GqEsyDYforrs6sO3lfWfnZqA0n
yGVGKL+gNmb54db38nVqgcecBbCdJSxFigCXfhLfIdFH6pebFbFSDqRbby89KPXx
9kPBcUZdcPpV3w==
-----END CERTIFICATE-----