Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/8cdd49-c094-4c6a-918c-0aa463cdfca0/1/58B9uYgBM8XNzgBbyhEbVSzRTFM.mft
File:                     58B9uYgBM8XNzgBbyhEbVSzRTFM.mft (raw, json)
Hash identifier:          GW+eL1P0dHaK64VRST2RPAK29xiUXI0wBB+FqLEGB4Q=
Subject key identifier:   3E:0D:24:81:34:A0:F6:6D:10:D4:3B:11:2A:88:7E:B7:B1:E1:98:06
Authority key identifier: E7:C0:7D:B9:88:01:33:C5:CD:CE:00:5B:CA:11:1B:55:2C:D1:4C:53
Certificate issuer:       /CN=e7c07db9880133c5cdce005bca111b552cd14c53
Certificate serial:       0194BD4EAAAD379ED8410247297D9C41209A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/58B9uYgBM8XNzgBbyhEbVSzRTFM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/26/8cdd49-c094-4c6a-918c-0aa463cdfca0/1/58B9uYgBM8XNzgBbyhEbVSzRTFM.mft
Manifest number:          08E4
Signing time:             Fri 31 Jan 2025 17:00:36 +0000
Manifest this update:     Fri 31 Jan 2025 17:00:36 +0000
Manifest next update:     Sat 01 Feb 2025 17:00:36 +0000
Files and hashes:         1: 58B9uYgBM8XNzgBbyhEbVSzRTFM.crl (hash: TIK8xu5XiwH25Teg9v26hKnQxjvoaRg6pnmpGrbM9xM=)
                          2: 83jnw3_iQXavgLNpPArd0mjD8v0.roa (hash: SHfszJ5S+RcUzQDWjfFykPyoXsOFj+P+O7U1p7lsd+k=)
                          3: 9TCbC5ZMWTliQOKPmZ8VOSeIZEs.roa (hash: ladwpTnVncQtchwvagqScI9AqnIAoqG+BVd9xXCXOlU=)
                          4: _sBQ-iEtTw6n3_2GUf1kdKinw6k.roa (hash: 2pQWnwaXMMFBZzZKZwaCBzryPcNsmH6tse3213iQbEg=)
                          5: hsyRrTmHUFy-dvGlMuWHGJoh8Ws.roa (hash: uXGOwuMsPP7paFlNgchG8Ort4AQoj239eYXxGZv6OVk=)
                          6: la2dPjbXAEn7TCutV5FDNd87YgY.roa (hash: Cy/GkdDa8H/gyDAs0CMDjYPIaE/yLrgi+H+nowssrsc=)
                          7: wrGzB70sU_9SIqxlx-1pOzK4ufs.roa (hash: hctgdi4NMknx7R7SWF0OvSDThJO+cXqWTsV2GWgcQfc=)
                          8: xDf42bpWqRCsDPxTubWSXNuBqFg.roa (hash: YkhsAjaT83vQpIvIVaLxfqKkzhztD+nQzU/2yzJtmvM=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bd:4e:aa:ad:37:9e:d8:41:02:47:29:7d:9c:41:20:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7c07db9880133c5cdce005bca111b552cd14c53
        Validity
            Not Before: Jan 31 17:00:36 2025 GMT
            Not After : Feb  1 17:00:36 2025 GMT
        Subject: CN=3e0d248134a0f66d10d43b112a887eb7b1e19806
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:06:9c:56:9c:39:57:58:52:cc:a6:60:e2:29:
                    ac:62:77:0a:3d:93:03:a3:7b:08:41:06:34:27:2a:
                    5b:b1:d9:bf:ab:30:25:13:d7:f7:66:a8:82:6c:e3:
                    f4:08:1a:9d:3c:fc:15:17:0f:f7:15:7b:5f:c4:c1:
                    69:b2:9f:52:3c:14:57:c1:b9:1f:c2:f7:cf:a6:66:
                    7e:38:f1:91:44:26:91:96:ef:69:18:db:04:df:49:
                    6c:60:b3:c1:b6:7f:1b:5e:62:55:78:ea:c0:69:20:
                    02:c3:4d:34:90:a6:b9:ce:b4:e1:50:e0:39:4a:75:
                    ab:02:ce:c1:d0:51:e3:a9:3f:dd:97:31:cd:ce:95:
                    72:6f:0a:f2:c5:03:98:5c:c5:f0:13:e9:5d:52:b3:
                    02:71:5d:8e:e9:ea:75:20:dc:43:a5:b5:5a:8c:ac:
                    42:f8:ac:9f:71:5c:e6:a5:d5:36:dd:e0:3a:4c:34:
                    42:5f:e7:4b:f8:77:fb:c1:eb:32:b8:a0:42:9f:e0:
                    f0:c5:88:22:f4:a1:b6:52:41:29:28:ae:01:e9:ba:
                    ef:47:5b:dd:14:a7:7a:cc:4a:71:20:54:67:29:c3:
                    ff:53:cd:ae:a1:6f:c1:d4:ee:77:c2:eb:ac:2c:61:
                    a5:c8:d0:ae:64:2f:f2:7d:84:05:fc:ac:f4:ea:8b:
                    bb:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:0D:24:81:34:A0:F6:6D:10:D4:3B:11:2A:88:7E:B7:B1:E1:98:06
            X509v3 Authority Key Identifier:
                keyid:E7:C0:7D:B9:88:01:33:C5:CD:CE:00:5B:CA:11:1B:55:2C:D1:4C:53

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/58B9uYgBM8XNzgBbyhEbVSzRTFM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/8cdd49-c094-4c6a-918c-0aa463cdfca0/1/58B9uYgBM8XNzgBbyhEbVSzRTFM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/26/8cdd49-c094-4c6a-918c-0aa463cdfca0/1/58B9uYgBM8XNzgBbyhEbVSzRTFM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a7:f8:f6:84:67:18:1a:d5:7f:71:48:e5:e3:fc:3e:b2:e4:59:
         b6:83:33:47:b9:d0:ca:b5:ed:85:ca:38:f8:79:18:35:03:a9:
         03:7e:39:f3:34:17:81:4a:18:68:d3:11:f6:8c:b0:94:52:cb:
         1d:f4:d1:46:96:65:df:15:b5:0f:9b:88:b4:e1:34:9c:fa:80:
         c5:1e:36:21:39:70:bd:32:df:8d:ad:d9:5a:44:6e:3a:9e:d2:
         b4:89:e4:65:77:0e:4c:67:ce:c2:a7:c3:40:9d:8f:02:e3:53:
         6e:5b:58:08:b4:55:1e:16:dc:30:3c:8c:b6:4a:76:5f:8d:a9:
         9d:bf:51:59:d9:dc:ad:1f:72:17:2b:9d:ff:6d:d8:9a:d6:b9:
         6d:91:17:a6:86:bb:ae:9a:a6:5c:6f:e1:ef:86:68:48:0e:39:
         ce:b7:2d:75:06:17:5b:cf:54:50:04:db:97:95:f1:bb:18:02:
         e5:93:ab:97:2a:cc:1c:fb:ff:9a:12:b1:70:b3:95:4e:f3:a9:
         80:3b:f4:a0:f6:17:cc:80:6c:24:12:b8:db:34:55:ed:47:d4:
         fb:8f:2a:89:2d:42:bd:3a:0b:5b:96:b3:46:19:7b:0b:4f:8c:
         c3:d5:21:11:c8:11:f0:08:d9:ed:e3:ec:ef:3b:73:bc:f0:44:
         ff:55:ba:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----