Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/0512df-7d0c-463b-8724-82531e9c7804/1/71VFlkWXnEE9C8b3RU8NNuQOmfk.mft
File:                     71VFlkWXnEE9C8b3RU8NNuQOmfk.mft (raw, json)
Hash identifier:          27xgapHYeIpJOg1oYpRUqrdCTUFm8BzLR4hUbiwPlEg=
Subject key identifier:   EC:4C:8F:D3:3C:33:AF:6D:86:53:4A:08:49:5B:8C:F5:50:6D:19:06
Authority key identifier: EF:55:45:96:45:97:9C:41:3D:0B:C6:F7:45:4F:0D:36:E4:0E:99:F9
Certificate issuer:       /CN=ef55459645979c413d0bc6f7454f0d36e40e99f9
Certificate serial:       0194BD17C7723AD1974B4E22E368071607CD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/71VFlkWXnEE9C8b3RU8NNuQOmfk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/10/0512df-7d0c-463b-8724-82531e9c7804/1/71VFlkWXnEE9C8b3RU8NNuQOmfk.mft
Manifest number:          0109
Signing time:             Fri 31 Jan 2025 16:00:39 +0000
Manifest this update:     Fri 31 Jan 2025 16:00:39 +0000
Manifest next update:     Sat 01 Feb 2025 16:00:39 +0000
Files and hashes:         1: 3knEzcbDHLEg7jzZiAHzI15vYqU.roa (hash: faGzeazcRwEMHKPeFx2Jm0nLyNPWwRQ8Vf0/im1GIqk=)
                          2: 71VFlkWXnEE9C8b3RU8NNuQOmfk.crl (hash: r99YUIENvIGS3LUF5Pk/U82m/df0yrOQFji7sFAcCKc=)
                          3: 7QZvBFLoSCBCtfbEa227OALZHF4.roa (hash: fLzTZARgKJF0ikOGzm1XH5DXAh8ZLWyu0Iku4TnJKPw=)
                          4: PY6tEZc2nfvVexKugs8XwtnDDss.roa (hash: y745EAaSNKqwRUJCF7mBwxX5XoPlEb2IitJeDeZn2fQ=)
                          5: _BHOiX2qTtp2JPE3ZlRibT_NtNo.roa (hash: rzG9lh+df7kWmxYCSTRNW6kfzkfXgu767c1sF+WR8q8=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bd:17:c7:72:3a:d1:97:4b:4e:22:e3:68:07:16:07:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ef55459645979c413d0bc6f7454f0d36e40e99f9
        Validity
            Not Before: Jan 31 16:00:39 2025 GMT
            Not After : Feb  1 16:00:39 2025 GMT
        Subject: CN=ec4c8fd33c33af6d86534a08495b8cf5506d1906
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:a2:ab:16:9a:3c:8c:0e:29:cd:b3:97:71:10:
                    ee:a2:eb:4d:83:58:7d:d3:1e:f8:ea:57:fc:f8:e0:
                    42:94:8f:a1:a9:ba:ac:bf:fe:f0:ac:4c:6a:f1:44:
                    80:d7:a6:ee:54:78:cb:d6:89:dd:aa:4e:0d:0a:be:
                    c7:de:9e:c5:e1:dc:4e:40:8d:28:e3:cf:59:f6:b8:
                    e6:c8:6d:c9:6a:cd:60:21:69:99:b6:7e:98:aa:fe:
                    23:8a:f5:66:52:1f:19:b6:70:e7:95:71:c8:35:45:
                    e4:d3:e0:e3:81:77:8d:cd:6e:d6:24:75:62:fb:a5:
                    6e:06:23:d1:51:24:f1:d7:eb:64:26:9c:90:d9:8d:
                    1c:50:40:70:6a:91:8c:9d:28:b2:c0:cd:f6:8a:d1:
                    f1:cb:69:06:d0:e8:d4:86:41:49:5c:e2:76:ef:b8:
                    f4:3b:e5:36:9d:3d:a3:c3:8e:ad:45:31:f1:c2:27:
                    da:1c:3d:b0:89:9a:75:50:76:e7:56:43:ca:4c:97:
                    9f:82:8f:d7:17:0c:99:bf:17:0a:9c:e2:58:1d:ec:
                    18:ab:b5:b0:8f:ff:a3:32:45:ae:93:2c:3e:af:ad:
                    c2:25:4a:1e:dd:52:02:24:a0:6e:26:41:e6:79:52:
                    28:e8:0d:20:27:4c:cd:4a:36:2a:bf:de:84:ad:da:
                    0a:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:4C:8F:D3:3C:33:AF:6D:86:53:4A:08:49:5B:8C:F5:50:6D:19:06
            X509v3 Authority Key Identifier:
                keyid:EF:55:45:96:45:97:9C:41:3D:0B:C6:F7:45:4F:0D:36:E4:0E:99:F9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/71VFlkWXnEE9C8b3RU8NNuQOmfk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/0512df-7d0c-463b-8724-82531e9c7804/1/71VFlkWXnEE9C8b3RU8NNuQOmfk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/10/0512df-7d0c-463b-8724-82531e9c7804/1/71VFlkWXnEE9C8b3RU8NNuQOmfk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         af:d9:f0:25:6d:e1:91:60:ef:ac:fa:61:83:33:e5:eb:e6:32:
         23:b2:01:64:ab:a5:80:bb:a7:fd:6b:ef:12:9d:a0:e9:09:74:
         38:74:42:76:d1:24:d7:0f:82:32:d0:19:84:03:78:ca:88:1d:
         53:9e:30:e8:a7:85:6f:a0:0d:df:80:15:27:2c:d9:c0:e4:8c:
         28:7f:fe:04:12:03:6e:b0:68:dc:c4:30:4b:e1:d3:f3:07:f5:
         21:67:32:4b:29:db:e5:c9:a5:75:56:69:f2:8d:c6:b4:c0:fe:
         bf:55:1f:05:55:21:7f:77:d3:34:e8:21:51:80:88:f3:e7:41:
         4c:8b:56:dd:3c:58:c5:26:9d:c6:88:86:d3:14:65:e3:51:3c:
         01:8d:fc:35:19:05:b8:9b:8f:de:2d:2e:80:ec:ea:79:e7:9f:
         62:85:4e:fd:ca:52:d7:c6:c8:4c:65:60:6a:c8:a0:8f:db:ac:
         7e:5b:d2:1c:c3:29:50:a5:fc:67:76:74:58:66:f1:f0:b9:4a:
         26:f2:33:0b:8e:31:b2:e3:ad:2e:22:a9:88:36:7c:44:b7:4e:
         30:63:f9:10:94:9f:d7:cf:65:1b:00:49:62:0b:d8:be:65:99:
         f4:f6:93:bb:ce:13:ca:3f:19:c8:11:99:cf:50:5c:24:02:53:
         ca:f9:31:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----