Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/17a712-4e5a-40c5-a3a2-12025c54f484/1/fDuId-GhMP5QOGxhDW6tVkG5e6Y.mft
File:                     fDuId-GhMP5QOGxhDW6tVkG5e6Y.mft (raw, json)
Hash identifier:          PYifRVEoQs5Hqgp7MU/ORA3xSNePrrrhi+RDIszWei8=
Subject key identifier:   BC:A1:17:1C:FF:F7:C1:E6:BD:FB:D5:F9:41:A3:8A:94:31:4C:DA:85
Authority key identifier: 7C:3B:88:77:E1:A1:30:FE:50:38:6C:61:0D:6E:AD:56:41:B9:7B:A6
Certificate issuer:       /CN=7c3b8877e1a130fe50386c610d6ead5641b97ba6
Certificate serial:       0194BD85B05809B3DCB321D7F269396216D9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fDuId-GhMP5QOGxhDW6tVkG5e6Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/df/17a712-4e5a-40c5-a3a2-12025c54f484/1/fDuId-GhMP5QOGxhDW6tVkG5e6Y.mft
Manifest number:          1432
Signing time:             Fri 31 Jan 2025 18:00:42 +0000
Manifest this update:     Fri 31 Jan 2025 18:00:42 +0000
Manifest next update:     Sat 01 Feb 2025 18:00:42 +0000
Files and hashes:         1: 1-NN7sVbgRc7-e06UCxTChEWhBGw.roa (hash: 1nkStuI6UE5AiUo/eeuy7d+ojDXercvaN8swfpqL2XQ=)
                          2: 1MIUfLSdfg2uCy1C44NmnWb0Zbk.roa (hash: M4mmUxB5iNo6mGwxNhoQc5I597ltdlyYgJJ9kmayjuo=)
                          3: FyI0FgVBR2eCZIu7-BhB5eWHjhM.roa (hash: IUL/2jO+KiUhk4ijellQkxSdiTlMw+UUQGTK5Yg/kD0=)
                          4: Gm24Jz4FAwlPLPviHhCETg5MzmE.roa (hash: UUEH5H1Pt5nW5hTKrLZcoRUOcZCQ7CH6xwXFlcJaL+E=)
                          5: aoPilv5n5CJ_hoE4hhIg-yOODEg.roa (hash: mUjFO9yZy5mYwcYcLvHaIain98TW2y4wajIxqcvRaFw=)
                          6: eIL2Vhc_JBbf85Fao8Ds4yOOopc.roa (hash: JFMGy1rBcVsHPJ9lq7mVFsLXOKO4qRE6OfGIsa0jBVE=)
                          7: fDuId-GhMP5QOGxhDW6tVkG5e6Y.crl (hash: EQJmppqABKelHZ0j/IQLiit/+e6xXo2F6f+xqy4BWME=)
                          8: nc5KXUWUdck8gbw7m_0IyKBWC5g.roa (hash: i0jN8KLoirBy04xz9xtOlV7fBEKQPtgwb2siK57WV1U=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bd:85:b0:58:09:b3:dc:b3:21:d7:f2:69:39:62:16:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7c3b8877e1a130fe50386c610d6ead5641b97ba6
        Validity
            Not Before: Jan 31 18:00:42 2025 GMT
            Not After : Feb  1 18:00:42 2025 GMT
        Subject: CN=bca1171cfff7c1e6bdfbd5f941a38a94314cda85
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:4b:c6:44:88:88:d4:c3:4c:f0:cc:6e:5b:5c:
                    17:36:ec:87:b8:e8:40:70:4f:97:0d:8d:ea:81:01:
                    9f:04:27:ef:00:3d:57:5a:a0:d1:f3:11:1f:1c:c6:
                    e6:72:a3:f3:c9:34:cb:d1:37:9d:a2:0a:f7:66:6b:
                    15:57:07:60:0e:82:4a:94:c4:70:da:e8:93:37:f7:
                    22:32:74:c9:36:50:09:cf:f4:94:c0:50:c0:55:08:
                    2a:5d:0e:48:a6:c9:6a:e7:4a:6d:a2:73:22:12:85:
                    e0:35:0b:29:f6:fc:4e:5b:25:9a:34:29:e2:99:3e:
                    ee:ba:b2:d4:82:30:94:50:a1:fb:6d:4f:7e:2b:e8:
                    cf:80:e8:db:7e:5c:e2:7d:a7:8f:02:b4:90:32:4d:
                    e2:ea:9e:4a:6c:f3:55:de:4f:64:c6:7e:15:57:33:
                    75:eb:54:8c:45:90:50:8e:00:9a:d4:9d:ed:76:e8:
                    6b:ba:3a:b9:85:bb:69:85:ba:4a:c7:22:4f:8d:6a:
                    85:82:cd:d0:05:90:d4:65:7c:ce:e7:bb:ed:27:9d:
                    37:45:b3:c9:a1:3c:8e:f4:ea:91:64:17:dd:7d:01:
                    14:d5:1f:98:5d:bc:e6:9d:d0:77:93:35:75:ef:84:
                    0c:6c:04:47:11:95:b5:53:6c:8c:29:67:b7:2d:5c:
                    d6:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:A1:17:1C:FF:F7:C1:E6:BD:FB:D5:F9:41:A3:8A:94:31:4C:DA:85
            X509v3 Authority Key Identifier:
                keyid:7C:3B:88:77:E1:A1:30:FE:50:38:6C:61:0D:6E:AD:56:41:B9:7B:A6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fDuId-GhMP5QOGxhDW6tVkG5e6Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/17a712-4e5a-40c5-a3a2-12025c54f484/1/fDuId-GhMP5QOGxhDW6tVkG5e6Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/df/17a712-4e5a-40c5-a3a2-12025c54f484/1/fDuId-GhMP5QOGxhDW6tVkG5e6Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:80:4a:01:37:fd:6e:79:12:9f:39:ba:42:38:b2:b7:bc:e1:
         57:ea:40:89:32:91:02:22:94:e1:fd:8f:18:8d:46:3b:87:e9:
         86:fe:94:98:c9:39:09:6d:26:3d:8d:ba:0b:52:01:d0:70:9a:
         92:01:33:cc:75:f6:6f:a2:1a:b5:8c:bd:84:6a:c9:02:20:a3:
         50:4d:28:8a:47:19:e3:1b:f8:f0:7b:78:e4:8f:03:b1:c1:5a:
         fc:8e:db:ec:27:fd:e8:cf:9a:6e:f8:d0:52:1e:ba:b5:7b:86:
         fd:c4:e8:8a:c0:d7:8b:bc:8a:5a:7c:76:76:ff:f7:f8:0b:cb:
         0a:c2:52:97:3b:c1:02:7f:a3:d3:eb:bd:e4:20:37:22:78:67:
         c2:ed:ea:ad:c8:d4:61:5e:e9:62:57:01:b6:05:a4:a0:86:0e:
         75:bc:2f:a8:92:b1:9b:67:bc:cf:e8:73:8f:f4:78:dd:84:c9:
         a2:20:df:9c:0f:23:6a:66:5c:55:02:2b:40:4d:43:6b:3f:3d:
         a2:e3:bb:10:8d:c9:f7:2a:a6:e9:73:1a:92:0c:5c:8b:e4:c9:
         bf:b6:28:d6:e7:e0:39:4d:4e:13:90:10:09:2b:f8:7e:d5:7a:
         e6:e6:e4:33:c9:9e:e6:d6:3f:b4:39:4e:6c:22:1e:84:bf:d7:
         49:15:b7:c0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9hbBYCbPcsyHX8mk5YhbZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdjM2I4ODc3ZTFhMTMwZmU1MDM4NmM2MTBkNmVhZDU2NDFi
OTdiYTYwHhcNMjUwMTMxMTgwMDQyWhcNMjUwMjAxMTgwMDQyWjAzMTEwLwYDVQQD
EyhiY2ExMTcxY2ZmZjdjMWU2YmRmYmQ1Zjk0MWEzOGE5NDMxNGNkYTg1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzkvGRIiI1MNM8MxuW1wXNuyHuOhA
cE+XDY3qgQGfBCfvAD1XWqDR8xEfHMbmcqPzyTTL0Tedogr3ZmsVVwdgDoJKlMRw
2uiTN/ciMnTJNlAJz/SUwFDAVQgqXQ5Ipslq50ptonMiEoXgNQsp9vxOWyWaNCni
mT7uurLUgjCUUKH7bU9+K+jPgOjbflzifaePArSQMk3i6p5KbPNV3k9kxn4VVzN1
61SMRZBQjgCa1J3tduhrujq5hbtphbpKxyJPjWqFgs3QBZDUZXzO57vtJ503RbPJ
oTyO9OqRZBfdfQEU1R+YXbzmndB3kzV174QMbARHEZW1U2yMKWe3LVzWxQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLyhFxz/98HmvfvV+UGjipQxTNqFMB8GA1UdIwQY
MBaAFHw7iHfhoTD+UDhsYQ1urVZBuXumMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZkR1SWQtR2hNUDVRT0d4aERXNnRWa0c1ZTZZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi8xN2E3MTItNGU1YS00MGM1LWEzYTIt
MTIwMjVjNTRmNDg0LzEvZkR1SWQtR2hNUDVRT0d4aERXNnRWa0c1ZTZZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZi8xN2E3MTItNGU1YS00MGM1LWEzYTItMTIwMjVjNTRmNDg0
LzEvZkR1SWQtR2hNUDVRT0d4aERXNnRWa0c1ZTZZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAloBKATf9
bnkSnzm6Qjiyt7zhV+pAiTKRAiKU4f2PGI1GO4fphv6UmMk5CW0mPY26C1IB0HCa
kgEzzHX2b6IatYy9hGrJAiCjUE0oikcZ4xv48Ht45I8DscFa/I7b7Cf96M+abvjQ
Uh66tXuG/cToisDXi7yKWnx2dv/3+AvLCsJSlzvBAn+j0+u95CA3Inhnwu3qrcjU
YV7pYlcBtgWkoIYOdbwvqJKxm2e8z+hzj/R43YTJoiDfnA8jamZcVQIrQE1Daz89
ouO7EI3J9yqm6XMakgxci+TJv7Yo1ufgOU1OE5AQCSv4ftV65ubkM8me5tY/tDlO
bCIehL/XSRW3wA==
-----END CERTIFICATE-----