Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/c861c8-c89a-4043-a02d-664f04d2a68d/1/3AKxj1iKULknT-NGn_i9ShZJ100.mft
File:                     3AKxj1iKULknT-NGn_i9ShZJ100.mft (raw, json)
Hash identifier:          jRFai9yAMG4mbdr5PQSXjeuBV5KXTM6mSB6iKWkw/q4=
Subject key identifier:   E3:F0:BE:66:17:50:EB:3F:70:4F:4A:F3:BF:C2:23:62:67:29:33:3C
Authority key identifier: DC:02:B1:8F:58:8A:50:B9:27:4F:E3:46:9F:F8:BD:4A:16:49:D7:4D
Certificate issuer:       /CN=dc02b18f588a50b9274fe3469ff8bd4a1649d74d
Certificate serial:       0195E19037420ABBCF58B36F10E4783094EB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3AKxj1iKULknT-NGn_i9ShZJ100.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e5/c861c8-c89a-4043-a02d-664f04d2a68d/1/3AKxj1iKULknT-NGn_i9ShZJ100.mft
Manifest number:          14DD
Signing time:             Sat 29 Mar 2025 11:01:19 +0000
Manifest this update:     Sat 29 Mar 2025 11:01:19 +0000
Manifest next update:     Sun 30 Mar 2025 11:01:19 +0000
Files and hashes:         1: 0Qls5JO9jjLXQGK9B40PajGKbpE.roa (hash: IJ0z/46nnzhP5+ihXIdT4Fm5/4uAlVBNSZ2/pLgDmrQ=)
                          2: 3AKxj1iKULknT-NGn_i9ShZJ100.crl (hash: limbLEey9/6mSujfNyX+2v7psoEShMWKfmkAm46Lxf4=)
                          3: 6vn0S84Of3Am641RtQSWgEcI8LQ.roa (hash: liXU+EaS34eLz4h7mt5PwqdMf8bXjU0VdoViqn9V7yA=)
                          4: SgwPvwknub36baQ9KcDiF10XVjg.roa (hash: AqBX/OOtLCRwId7Bx3Diq3oyJG6vd4oLaGxEgTaatfA=)
                          5: VajIGedTAEjBNV3b8yhI3Gm_wwY.roa (hash: zWXkCVS1+asFBr2Z3nZVK8HEU5fThFspnuVO3DjbBl4=)
                          6: goC_YpQrwJcU48WyzOg3OlsUAbY.roa (hash: OHpeanfXRy8bamPYQwO5dLykWIe4C63dtCxwNHxZdBc=)
                          7: lXMs99__wPFL_tQdoxzgPhccZK0.roa (hash: OuWROGz9NUYwdhgN+POUZ2OWYBha2GAUM0PW+Sf4wFM=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:e1:90:37:42:0a:bb:cf:58:b3:6f:10:e4:78:30:94:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc02b18f588a50b9274fe3469ff8bd4a1649d74d
        Validity
            Not Before: Mar 29 11:01:19 2025 GMT
            Not After : Mar 30 11:01:19 2025 GMT
        Subject: CN=e3f0be661750eb3f704f4af3bfc223626729333c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:4d:c2:c0:cf:55:35:ec:3e:84:b9:bd:8f:ba:
                    94:be:d0:b0:45:fe:4d:db:25:aa:11:75:6c:54:47:
                    ca:a3:0e:3e:1c:e4:cd:49:61:db:e1:d2:54:b6:5d:
                    c6:9f:93:72:28:34:06:23:e2:14:26:f9:a2:a3:1c:
                    13:4b:72:8e:39:3c:7a:0c:ce:cb:c6:20:35:f4:8e:
                    eb:99:a2:e2:89:9d:44:8d:04:3a:ce:83:eb:ab:47:
                    f8:f1:71:be:22:b4:9a:95:6f:6b:76:42:d5:aa:e1:
                    c9:4a:7f:d8:49:57:13:e5:8f:12:7a:1f:16:b1:66:
                    42:4a:ea:fd:d2:b5:32:88:f6:bc:c4:17:7c:94:94:
                    be:d4:58:f6:a3:59:42:7e:1f:0c:85:ba:0c:19:7b:
                    8a:29:d7:45:6c:71:86:5f:73:7a:06:42:0b:31:46:
                    d8:74:aa:18:3a:ad:f0:b5:6e:0f:c4:ac:e9:2b:c6:
                    57:c3:42:0d:36:4a:8a:52:fe:35:07:de:11:5e:f6:
                    fe:67:6d:aa:1d:48:5f:bc:8d:17:85:30:cb:f5:75:
                    a7:60:c3:84:20:45:bf:2c:52:7c:f1:bd:83:92:9e:
                    fc:04:f4:f8:dc:66:f3:cb:81:11:77:1b:bf:0f:bb:
                    87:68:15:f3:8c:7a:aa:1d:cf:3b:22:15:71:a6:c6:
                    b0:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:F0:BE:66:17:50:EB:3F:70:4F:4A:F3:BF:C2:23:62:67:29:33:3C
            X509v3 Authority Key Identifier:
                keyid:DC:02:B1:8F:58:8A:50:B9:27:4F:E3:46:9F:F8:BD:4A:16:49:D7:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3AKxj1iKULknT-NGn_i9ShZJ100.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/c861c8-c89a-4043-a02d-664f04d2a68d/1/3AKxj1iKULknT-NGn_i9ShZJ100.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/c861c8-c89a-4043-a02d-664f04d2a68d/1/3AKxj1iKULknT-NGn_i9ShZJ100.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:75:c5:f3:36:5a:89:e1:cc:3a:7d:1c:e1:7e:23:1f:fc:0a:
         09:5c:41:dd:2a:b3:95:1c:59:37:4f:b4:c4:85:50:8b:ac:ed:
         9e:73:00:21:20:c4:c2:57:64:3a:59:a7:97:94:7f:ad:98:14:
         4c:fb:6e:36:e3:2d:0a:3f:c0:28:eb:9e:25:ea:82:85:e1:83:
         2a:50:2c:3f:64:96:b5:9b:2b:af:85:a8:f6:81:1d:a3:17:c6:
         a1:64:40:3c:18:ab:f5:14:99:4a:bf:3a:72:1b:6b:7d:84:5d:
         6a:bf:71:90:bf:5a:b8:ed:bd:1d:53:8d:41:a6:17:9d:45:be:
         da:03:df:b6:78:9a:ee:29:c0:a5:77:69:18:4f:78:68:2a:8c:
         ce:d5:8d:67:ae:6d:73:8a:a0:ec:c4:4d:0a:2a:1d:e9:67:70:
         44:1a:cd:92:bc:e3:93:cd:fb:ed:28:82:d0:45:fa:fe:73:db:
         46:05:1e:0f:73:9a:5d:41:2e:72:f6:1a:36:23:66:05:93:f1:
         ae:94:19:ac:02:9b:68:da:09:27:13:f8:ac:33:0d:80:77:71:
         53:73:5a:bd:8a:de:1b:ce:6c:22:e1:fb:12:fb:20:5a:62:d9:
         ce:98:d8:15:1f:27:ce:b4:9a:f1:1c:da:43:a6:08:a0:2a:a5:
         3c:9e:22:95
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZXhkDdCCrvPWLNvEOR4MJTrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRjMDJiMThmNTg4YTUwYjkyNzRmZTM0NjlmZjhiZDRhMTY0
OWQ3NGQwHhcNMjUwMzI5MTEwMTE5WhcNMjUwMzMwMTEwMTE5WjAzMTEwLwYDVQQD
EyhlM2YwYmU2NjE3NTBlYjNmNzA0ZjRhZjNiZmMyMjM2MjY3MjkzMzNjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkE3CwM9VNew+hLm9j7qUvtCwRf5N
2yWqEXVsVEfKow4+HOTNSWHb4dJUtl3Gn5NyKDQGI+IUJvmioxwTS3KOOTx6DM7L
xiA19I7rmaLiiZ1EjQQ6zoPrq0f48XG+IrSalW9rdkLVquHJSn/YSVcT5Y8Seh8W
sWZCSur90rUyiPa8xBd8lJS+1Fj2o1lCfh8MhboMGXuKKddFbHGGX3N6BkILMUbY
dKoYOq3wtW4PxKzpK8ZXw0INNkqKUv41B94RXvb+Z22qHUhfvI0XhTDL9XWnYMOE
IEW/LFJ88b2Dkp78BPT43Gbzy4ERdxu/D7uHaBXzjHqqHc87IhVxpsawgQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOPwvmYXUOs/cE9K87/CI2JnKTM8MB8GA1UdIwQY
MBaAFNwCsY9YilC5J0/jRp/4vUoWSddNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM0FLeGoxaUtVTGtuVC1OR25faTlTaFpKMTAwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNS9jODYxYzgtYzg5YS00MDQzLWEwMmQt
NjY0ZjA0ZDJhNjhkLzEvM0FLeGoxaUtVTGtuVC1OR25faTlTaFpKMTAwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNS9jODYxYzgtYzg5YS00MDQzLWEwMmQtNjY0ZjA0ZDJhNjhk
LzEvM0FLeGoxaUtVTGtuVC1OR25faTlTaFpKMTAwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAnXF8zZa
ieHMOn0c4X4jH/wKCVxB3SqzlRxZN0+0xIVQi6ztnnMAISDEwldkOlmnl5R/rZgU
TPtuNuMtCj/AKOueJeqCheGDKlAsP2SWtZsrr4Wo9oEdoxfGoWRAPBir9RSZSr86
chtrfYRdar9xkL9auO29HVONQaYXnUW+2gPftnia7inApXdpGE94aCqMztWNZ65t
c4qg7MRNCiod6WdwRBrNkrzjk8377SiC0EX6/nPbRgUeD3OaXUEucvYaNiNmBZPx
rpQZrAKbaNoJJxP4rDMNgHdxU3NavYreG85sIuH7EvsgWmLZzpjYFR8nzrSa8Rza
Q6YIoCqlPJ4ilQ==
-----END CERTIFICATE-----