Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/c861c8-c89a-4043-a02d-664f04d2a68d/1/3AKxj1iKULknT-NGn_i9ShZJ100.mft
File:                     3AKxj1iKULknT-NGn_i9ShZJ100.mft (raw, json)
Hash identifier:          6FffwzuY36JfdlIB40YwDB5nOfC96MdQRCCZqU8bJ3E=
Subject key identifier:   28:66:5C:05:DA:B9:BD:01:83:5D:6A:0A:E4:D5:10:35:9B:F7:58:F4
Authority key identifier: DC:02:B1:8F:58:8A:50:B9:27:4F:E3:46:9F:F8:BD:4A:16:49:D7:4D
Certificate issuer:       /CN=dc02b18f588a50b9274fe3469ff8bd4a1649d74d
Certificate serial:       0194BC72BB283E6D98321FF6E22A19A8AC49
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3AKxj1iKULknT-NGn_i9ShZJ100.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e5/c861c8-c89a-4043-a02d-664f04d2a68d/1/3AKxj1iKULknT-NGn_i9ShZJ100.mft
Manifest number:          1445
Signing time:             Fri 31 Jan 2025 13:00:22 +0000
Manifest this update:     Fri 31 Jan 2025 13:00:22 +0000
Manifest next update:     Sat 01 Feb 2025 13:00:22 +0000
Files and hashes:         1: 0Qls5JO9jjLXQGK9B40PajGKbpE.roa (hash: IJ0z/46nnzhP5+ihXIdT4Fm5/4uAlVBNSZ2/pLgDmrQ=)
                          2: 3AKxj1iKULknT-NGn_i9ShZJ100.crl (hash: uXtxJhQt/9NLadjghRjDzhZYxkQElope3yPTMMKHCoQ=)
                          3: SgwPvwknub36baQ9KcDiF10XVjg.roa (hash: AqBX/OOtLCRwId7Bx3Diq3oyJG6vd4oLaGxEgTaatfA=)
                          4: VajIGedTAEjBNV3b8yhI3Gm_wwY.roa (hash: zWXkCVS1+asFBr2Z3nZVK8HEU5fThFspnuVO3DjbBl4=)
                          5: goC_YpQrwJcU48WyzOg3OlsUAbY.roa (hash: OHpeanfXRy8bamPYQwO5dLykWIe4C63dtCxwNHxZdBc=)
                          6: lXMs99__wPFL_tQdoxzgPhccZK0.roa (hash: OuWROGz9NUYwdhgN+POUZ2OWYBha2GAUM0PW+Sf4wFM=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:72:bb:28:3e:6d:98:32:1f:f6:e2:2a:19:a8:ac:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc02b18f588a50b9274fe3469ff8bd4a1649d74d
        Validity
            Not Before: Jan 31 13:00:22 2025 GMT
            Not After : Feb  1 13:00:22 2025 GMT
        Subject: CN=28665c05dab9bd01835d6a0ae4d510359bf758f4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:4d:f4:18:ae:8b:0c:10:46:b6:78:cf:fd:22:
                    75:da:45:af:07:66:09:f7:dc:dc:9c:74:8d:e3:f0:
                    82:2a:2f:ec:3b:ea:dd:a4:85:38:f8:b0:44:d3:2f:
                    57:39:a1:85:40:c7:46:db:32:e6:da:22:53:71:31:
                    1e:11:89:cd:51:a3:2c:fc:af:25:e9:1d:7b:95:5c:
                    bc:d4:a9:d7:7c:bf:d4:5d:64:17:31:f5:94:f6:8d:
                    f4:68:af:d5:45:ec:c0:4b:91:21:43:ca:13:a3:19:
                    03:73:f4:5f:82:21:f4:e1:25:da:86:a4:89:6d:83:
                    7e:df:17:f7:a2:e0:90:af:eb:f0:a7:3c:cb:5a:94:
                    d1:56:3a:65:18:96:76:03:79:d4:a0:81:95:b7:e6:
                    e8:18:9b:ee:d4:da:5c:6f:51:a4:ee:84:be:df:6d:
                    15:90:72:ae:de:fd:17:d4:a4:e0:76:a2:4b:31:ba:
                    12:9f:bb:c5:56:da:fd:58:7b:d3:9b:99:5f:fe:94:
                    6c:c6:7b:95:e0:5c:6c:f7:5e:ff:3d:96:bc:33:0c:
                    6f:8b:e8:18:f0:e3:ad:33:0a:2c:b3:a5:2a:bb:79:
                    9f:e3:25:9b:6f:fd:e9:07:4e:5a:1e:28:ad:f5:37:
                    6f:c9:5c:46:01:a8:3d:59:f6:d2:b6:50:c1:4b:6a:
                    84:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:66:5C:05:DA:B9:BD:01:83:5D:6A:0A:E4:D5:10:35:9B:F7:58:F4
            X509v3 Authority Key Identifier:
                keyid:DC:02:B1:8F:58:8A:50:B9:27:4F:E3:46:9F:F8:BD:4A:16:49:D7:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3AKxj1iKULknT-NGn_i9ShZJ100.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/c861c8-c89a-4043-a02d-664f04d2a68d/1/3AKxj1iKULknT-NGn_i9ShZJ100.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/c861c8-c89a-4043-a02d-664f04d2a68d/1/3AKxj1iKULknT-NGn_i9ShZJ100.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:a6:53:c5:08:53:41:c7:72:50:d0:1f:ff:bd:09:09:00:56:
         fe:ba:ad:21:ec:d9:db:0b:06:8d:aa:4b:df:2d:5d:aa:b5:e4:
         b2:7e:44:3d:5c:f7:57:e2:68:1c:cd:1d:f7:57:b3:ad:df:9b:
         89:4c:27:9a:f8:ad:aa:0c:fa:79:57:a5:4a:a2:e1:38:af:2b:
         f3:1a:09:74:b3:65:ad:75:91:03:06:a0:c1:48:db:e6:76:5e:
         d5:a1:9d:63:15:0f:11:ae:9b:0e:78:8d:7d:31:37:6f:40:d8:
         81:9d:48:a8:39:9e:3d:bb:a2:96:d4:c6:51:3f:72:b4:64:0e:
         df:f7:6c:01:56:5e:03:ed:ec:77:a3:5c:1c:f3:a5:3e:9e:50:
         5e:12:79:f9:96:dc:b6:7e:b5:a8:e2:e1:e1:2d:e2:e8:29:71:
         af:f3:e7:1b:b8:42:6b:6a:ef:03:71:40:4a:bb:c6:27:dc:19:
         45:87:e1:a4:54:01:ba:21:88:00:19:ab:ab:1e:a9:61:32:a7:
         72:e3:6c:da:fe:78:81:3c:f0:93:5f:33:62:65:0c:0a:bb:0b:
         50:bf:b2:0a:c1:b9:61:92:79:db:76:a4:41:f9:ea:cf:f1:1c:
         37:79:1e:22:7a:3a:0b:c3:f0:fe:b2:3f:77:92:4b:85:df:f9:
         b9:43:a1:b4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8crsoPm2YMh/24ioZqKxJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRjMDJiMThmNTg4YTUwYjkyNzRmZTM0NjlmZjhiZDRhMTY0
OWQ3NGQwHhcNMjUwMTMxMTMwMDIyWhcNMjUwMjAxMTMwMDIyWjAzMTEwLwYDVQQD
EygyODY2NWMwNWRhYjliZDAxODM1ZDZhMGFlNGQ1MTAzNTliZjc1OGY0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0E30GK6LDBBGtnjP/SJ12kWvB2YJ
99zcnHSN4/CCKi/sO+rdpIU4+LBE0y9XOaGFQMdG2zLm2iJTcTEeEYnNUaMs/K8l
6R17lVy81KnXfL/UXWQXMfWU9o30aK/VRezAS5EhQ8oToxkDc/RfgiH04SXahqSJ
bYN+3xf3ouCQr+vwpzzLWpTRVjplGJZ2A3nUoIGVt+boGJvu1Npcb1Gk7oS+320V
kHKu3v0X1KTgdqJLMboSn7vFVtr9WHvTm5lf/pRsxnuV4Fxs917/PZa8Mwxvi+gY
8OOtMwoss6Uqu3mf4yWbb/3pB05aHiit9TdvyVxGAag9WfbStlDBS2qExwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFChmXAXaub0Bg11qCuTVEDWb91j0MB8GA1UdIwQY
MBaAFNwCsY9YilC5J0/jRp/4vUoWSddNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM0FLeGoxaUtVTGtuVC1OR25faTlTaFpKMTAwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNS9jODYxYzgtYzg5YS00MDQzLWEwMmQt
NjY0ZjA0ZDJhNjhkLzEvM0FLeGoxaUtVTGtuVC1OR25faTlTaFpKMTAwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNS9jODYxYzgtYzg5YS00MDQzLWEwMmQtNjY0ZjA0ZDJhNjhk
LzEvM0FLeGoxaUtVTGtuVC1OR25faTlTaFpKMTAwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAd6ZTxQhT
QcdyUNAf/70JCQBW/rqtIezZ2wsGjapL3y1dqrXksn5EPVz3V+JoHM0d91ezrd+b
iUwnmvitqgz6eVelSqLhOK8r8xoJdLNlrXWRAwagwUjb5nZe1aGdYxUPEa6bDniN
fTE3b0DYgZ1IqDmePbuiltTGUT9ytGQO3/dsAVZeA+3sd6NcHPOlPp5QXhJ5+Zbc
tn61qOLh4S3i6Clxr/PnG7hCa2rvA3FASrvGJ9wZRYfhpFQBuiGIABmrqx6pYTKn
cuNs2v54gTzwk18zYmUMCrsLUL+yCsG5YZJ523akQfnqz/EcN3keIno6C8Pw/rI/
d5JLhd/5uUOhtA==
-----END CERTIFICATE-----