Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/a27b39-8011-4142-86c2-cf83d6e40558/1/valtAqgi9GJTwq7mgEQdWsJ8PfU.mft
File:                     valtAqgi9GJTwq7mgEQdWsJ8PfU.mft (raw, json)
Hash identifier:          htP/K368TbTGvSubRqiIcfsvIwMijvLJaeuVFA2MmJ8=
Subject key identifier:   AC:CC:6E:D7:6A:FF:E8:B7:B0:D6:21:07:71:F3:E0:AA:5C:D7:51:15
Authority key identifier: BD:A9:6D:02:A8:22:F4:62:53:C2:AE:E6:80:44:1D:5A:C2:7C:3D:F5
Certificate issuer:       /CN=bda96d02a822f46253c2aee680441d5ac27c3df5
Certificate serial:       0194BC72BC5EC5A8BF1257C7BEA6CBB85B1E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/valtAqgi9GJTwq7mgEQdWsJ8PfU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/16/a27b39-8011-4142-86c2-cf83d6e40558/1/valtAqgi9GJTwq7mgEQdWsJ8PfU.mft
Manifest number:          1432
Signing time:             Fri 31 Jan 2025 13:00:23 +0000
Manifest this update:     Fri 31 Jan 2025 13:00:23 +0000
Manifest next update:     Sat 01 Feb 2025 13:00:23 +0000
Files and hashes:         1: F3mmIE5e5Y4BeSDKQ3DR2L-rAk8.roa (hash: jbee28DZuoinhmMa1MpH2LACZ/XrJT7Z3vVmbAZdw7Q=)
                          2: Mk3OCH61bD3mOm8DSaSiAzwW7fk.roa (hash: oxlH7V9EjPMbmvgDLqeKQJs9KOwBY0gM7ZfOAxvET+w=)
                          3: dRiT-c0xAt2kngbyOhm_uFIV1zw.roa (hash: Wglqc09L4EahGS8AZXe98XrHNBuQBQLDeHD0KWaBnTQ=)
                          4: fV9G8OutvawEP_xsKieVXci-tIE.roa (hash: o9Ux/+t3JTsGEZGnq53xgSqRPo9nNu5/xoSyWOejP2Q=)
                          5: jx4NNkHPAbONhfyLhU8TOxw7M1s.roa (hash: g2tq87dmJIfsiGuaezvjDvuxwyvPju47/Uw+kKdECC0=)
                          6: valtAqgi9GJTwq7mgEQdWsJ8PfU.crl (hash: J5C+FP0agaB+zjwtDuFfdgw5m9YfHEHtfmnHiCXuhSw=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:72:bc:5e:c5:a8:bf:12:57:c7:be:a6:cb:b8:5b:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bda96d02a822f46253c2aee680441d5ac27c3df5
        Validity
            Not Before: Jan 31 13:00:23 2025 GMT
            Not After : Feb  1 13:00:23 2025 GMT
        Subject: CN=accc6ed76affe8b7b0d6210771f3e0aa5cd75115
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:85:3a:02:20:c4:ba:ac:dc:d0:f7:94:e7:06:
                    14:49:ca:5c:b8:ce:1f:cd:d5:fa:1c:5c:70:5d:19:
                    00:2e:26:39:2d:af:ff:dd:a8:3f:66:e6:c1:cc:c5:
                    be:24:d8:d0:27:2c:ac:d8:0c:12:ee:83:94:11:fc:
                    f4:a5:da:88:c5:e5:e4:58:ca:04:31:40:79:7a:e0:
                    3e:63:f6:05:f3:a2:51:ca:9c:b3:0b:04:bb:65:71:
                    2d:1c:e8:dc:b2:9f:95:80:ba:ab:80:bb:cc:ef:4b:
                    6b:b6:2b:93:ef:2e:64:52:47:46:f1:8e:54:08:95:
                    a8:d5:a0:26:92:f7:7c:c2:02:37:f5:05:89:7c:a3:
                    38:60:24:98:46:6e:6c:2f:2d:dd:56:b8:94:08:19:
                    96:0d:3c:81:f5:a4:a0:7c:92:ce:0c:a0:e4:08:ab:
                    61:81:ee:38:7c:b4:d8:f7:12:02:65:ae:9a:51:48:
                    4c:c8:44:d7:d4:fb:57:1c:e6:88:03:64:9a:c4:c6:
                    28:b6:f4:c0:fc:4f:8d:39:bf:e0:a1:e4:02:8f:37:
                    1b:77:e0:d5:17:96:6a:85:f2:0d:43:2e:5f:97:cc:
                    9d:65:75:8c:05:2d:43:47:24:14:67:ed:a8:a3:3f:
                    eb:be:a5:f1:f2:d4:88:7d:6b:f1:f9:79:62:ec:fc:
                    dc:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:CC:6E:D7:6A:FF:E8:B7:B0:D6:21:07:71:F3:E0:AA:5C:D7:51:15
            X509v3 Authority Key Identifier:
                keyid:BD:A9:6D:02:A8:22:F4:62:53:C2:AE:E6:80:44:1D:5A:C2:7C:3D:F5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/valtAqgi9GJTwq7mgEQdWsJ8PfU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/a27b39-8011-4142-86c2-cf83d6e40558/1/valtAqgi9GJTwq7mgEQdWsJ8PfU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/16/a27b39-8011-4142-86c2-cf83d6e40558/1/valtAqgi9GJTwq7mgEQdWsJ8PfU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a1:61:31:34:86:6e:25:49:36:91:4f:96:9c:b2:30:52:c2:19:
         fe:f3:d3:e4:26:cb:b0:95:22:ee:d5:da:41:45:1f:de:51:be:
         9a:d4:a5:6f:b3:eb:32:67:50:07:ec:b8:32:62:02:88:a3:2a:
         d9:cf:0d:13:b6:1f:57:05:22:54:a2:9a:02:23:3e:03:73:d8:
         3a:e3:f7:90:0f:b8:96:9a:f0:63:0c:9d:65:9b:84:7a:ad:27:
         3d:ac:88:81:36:12:b7:9b:fe:43:4d:43:4f:a6:6f:78:44:c8:
         07:19:37:1a:7e:59:06:29:b7:ba:b5:1a:a8:bd:11:4a:85:1f:
         5a:59:5e:46:13:88:c8:48:ad:9c:a1:72:27:27:bc:dd:a6:18:
         68:df:de:2a:51:97:92:7a:c8:36:03:b5:4a:55:1e:cf:b1:0d:
         0f:a3:c0:4a:bd:a3:46:66:fb:fc:86:fd:60:bc:b4:8a:43:d3:
         c4:1d:ff:50:d8:5b:46:8d:6d:27:c8:31:1d:5e:10:7a:5b:8e:
         6a:26:56:0f:f9:65:8f:6f:03:9e:cb:96:26:b2:e8:78:2c:4a:
         c0:46:d9:30:9f:08:79:32:c0:00:9e:0f:37:78:a8:f1:69:31:
         67:1e:4c:41:d0:39:35:79:8a:20:22:19:9d:58:5a:92:34:b4:
         eb:0e:51:f4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8crxexai/ElfHvqbLuFseMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJkYTk2ZDAyYTgyMmY0NjI1M2MyYWVlNjgwNDQxZDVhYzI3
YzNkZjUwHhcNMjUwMTMxMTMwMDIzWhcNMjUwMjAxMTMwMDIzWjAzMTEwLwYDVQQD
EyhhY2NjNmVkNzZhZmZlOGI3YjBkNjIxMDc3MWYzZTBhYTVjZDc1MTE1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5oU6AiDEuqzc0PeU5wYUScpcuM4f
zdX6HFxwXRkALiY5La//3ag/ZubBzMW+JNjQJyys2AwS7oOUEfz0pdqIxeXkWMoE
MUB5euA+Y/YF86JRypyzCwS7ZXEtHOjcsp+VgLqrgLvM70trtiuT7y5kUkdG8Y5U
CJWo1aAmkvd8wgI39QWJfKM4YCSYRm5sLy3dVriUCBmWDTyB9aSgfJLODKDkCKth
ge44fLTY9xICZa6aUUhMyETX1PtXHOaIA2SaxMYotvTA/E+NOb/goeQCjzcbd+DV
F5ZqhfINQy5fl8ydZXWMBS1DRyQUZ+2ooz/rvqXx8tSIfWvx+Xli7PzcvwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKzMbtdq/+i3sNYhB3Hz4Kpc11EVMB8GA1UdIwQY
MBaAFL2pbQKoIvRiU8Ku5oBEHVrCfD31MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdmFsdEFxZ2k5R0pUd3E3bWdFUWRXc0o4UGZVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi9hMjdiMzktODAxMS00MTQyLTg2YzIt
Y2Y4M2Q2ZTQwNTU4LzEvdmFsdEFxZ2k5R0pUd3E3bWdFUWRXc0o4UGZVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNi9hMjdiMzktODAxMS00MTQyLTg2YzItY2Y4M2Q2ZTQwNTU4
LzEvdmFsdEFxZ2k5R0pUd3E3bWdFUWRXc0o4UGZVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoWExNIZu
JUk2kU+WnLIwUsIZ/vPT5CbLsJUi7tXaQUUf3lG+mtSlb7PrMmdQB+y4MmICiKMq
2c8NE7YfVwUiVKKaAiM+A3PYOuP3kA+4lprwYwydZZuEeq0nPayIgTYSt5v+Q01D
T6ZveETIBxk3Gn5ZBim3urUaqL0RSoUfWlleRhOIyEitnKFyJye83aYYaN/eKlGX
knrINgO1SlUez7END6PASr2jRmb7/Ib9YLy0ikPTxB3/UNhbRo1tJ8gxHV4QeluO
aiZWD/llj28DnsuWJrLoeCxKwEbZMJ8IeTLAAJ4PN3io8WkxZx5MQdA5NXmKICIZ
nVhakjS06w5R9A==
-----END CERTIFICATE-----