Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/5ea12b-51c6-4195-aeb6-c1addd7debaa/1/7kOBzgO6piUBmYDzeP5BuytmIbk.mft
File:                     7kOBzgO6piUBmYDzeP5BuytmIbk.mft (raw, json)
Hash identifier:          YmcA8ZCA/vPQCqPPu60ofdKV+zvxSWMBe6k7oh7XdM8=
Subject key identifier:   F5:63:9B:BE:8F:17:B5:AF:A7:C1:A7:5B:1D:3A:62:58:61:0A:46:35
Authority key identifier: EE:43:81:CE:03:BA:A6:25:01:99:80:F3:78:FE:41:BB:2B:66:21:B9
Certificate issuer:       /CN=ee4381ce03baa625019980f378fe41bb2b6621b9
Certificate serial:       0194BC729FFFB312BCFFD688E03B85A4C3F9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7kOBzgO6piUBmYDzeP5BuytmIbk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/35/5ea12b-51c6-4195-aeb6-c1addd7debaa/1/7kOBzgO6piUBmYDzeP5BuytmIbk.mft
Manifest number:          143E
Signing time:             Fri 31 Jan 2025 13:00:16 +0000
Manifest this update:     Fri 31 Jan 2025 13:00:16 +0000
Manifest next update:     Sat 01 Feb 2025 13:00:16 +0000
Files and hashes:         1: 7kOBzgO6piUBmYDzeP5BuytmIbk.crl (hash: c7w3ZK4wzY1ZzJYf9BU4J47Kgq1WFGcl6XARANANjoA=)
                          2: BuLlbSCfr8m5R0bdvUy2auaVYo4.roa (hash: 5vhRJn1bAKiGFLiI67C1axUPj/VuaBvfb8oPGD+JOlw=)
                          3: MiQ5lO70RTIllrRi3q-oV9hjYQY.roa (hash: bCltxRSzrKGlzGDkjY4BpBmmHNltm/4kHnZFojNlryM=)
                          4: USr1BZseWrfiddVmQ3oagoYeVS8.roa (hash: fHK4bL/1/KZuBDBsjanJjPnUX5OQraHpiXiVTlsikY0=)
                          5: YaWraI8rZ3g7qo7uwVIGgMNHmoY.roa (hash: fh8nT5vZdM5ZHaPxQ043knM/D5f5HwhE2yBZCYzTFqQ=)
                          6: afEdQgqnbCftaot9zEVr5N_KEik.roa (hash: Lhf9vxXJqsESp4nJxNUJAzjKFEVMzT7S69LVaasmd6w=)
                          7: rELj50bmqX-dlIZz4LmRngTG7Ls.roa (hash: Dvzjy4JJ4c7OB88K3L17CIigy3BXYYRK2W4QmjOw5Z0=)
                          8: tzvqdjfI-5GkWfLXDw0rhlyGwjE.roa (hash: WRtCEE9bn80NcIoJC83Nzrz1w5Lqw7rz3krWgHW5q2o=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:72:9f:ff:b3:12:bc:ff:d6:88:e0:3b:85:a4:c3:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ee4381ce03baa625019980f378fe41bb2b6621b9
        Validity
            Not Before: Jan 31 13:00:16 2025 GMT
            Not After : Feb  1 13:00:16 2025 GMT
        Subject: CN=f5639bbe8f17b5afa7c1a75b1d3a6258610a4635
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:42:aa:64:9a:42:49:1a:ff:73:99:9b:5c:2b:
                    7c:a8:96:6d:1b:2e:15:e7:aa:0d:9f:8a:0f:40:45:
                    1b:14:bb:e2:81:71:4e:0d:f1:02:99:ae:e1:21:2c:
                    44:1d:e9:8e:c8:6e:b0:e9:94:2a:d9:e4:c6:f7:43:
                    ce:18:a8:aa:61:c8:e4:c9:b5:f9:f2:a4:d5:20:50:
                    28:a5:14:e7:68:84:b0:96:fb:db:23:4a:fd:3c:0c:
                    d6:d0:d8:32:92:2d:a8:3a:08:9a:6a:e4:c9:4b:91:
                    83:32:f8:a8:81:cc:d8:c3:ff:bb:7b:b0:2b:6b:a3:
                    c0:fe:3a:ca:55:dd:b9:15:88:20:5a:4f:97:93:fb:
                    47:eb:bb:6d:34:99:69:15:e5:54:c3:74:d3:44:33:
                    6f:0a:a1:21:bf:45:63:26:92:bc:fd:c7:85:eb:8f:
                    40:8c:f8:37:52:f7:bf:7e:73:a0:41:14:01:cc:ef:
                    10:f6:20:d8:3d:2d:8c:ef:f9:a5:f8:fd:49:05:56:
                    e5:91:1d:53:3d:01:87:8a:09:73:60:fa:9b:b3:f9:
                    a1:af:b5:f1:d7:4d:4a:09:81:f0:fb:f6:26:5a:d7:
                    72:bc:54:5d:c5:23:20:04:1c:e5:2b:fa:cb:53:47:
                    d9:5e:33:2c:12:1b:3c:38:7d:f5:1c:4c:72:09:e2:
                    4e:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:63:9B:BE:8F:17:B5:AF:A7:C1:A7:5B:1D:3A:62:58:61:0A:46:35
            X509v3 Authority Key Identifier:
                keyid:EE:43:81:CE:03:BA:A6:25:01:99:80:F3:78:FE:41:BB:2B:66:21:B9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7kOBzgO6piUBmYDzeP5BuytmIbk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/5ea12b-51c6-4195-aeb6-c1addd7debaa/1/7kOBzgO6piUBmYDzeP5BuytmIbk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/35/5ea12b-51c6-4195-aeb6-c1addd7debaa/1/7kOBzgO6piUBmYDzeP5BuytmIbk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:b6:b7:47:9f:bd:f2:f8:9a:0d:19:10:24:4a:36:5d:86:fc:
         59:83:f7:05:13:6e:4e:55:71:68:0b:8a:9c:f2:8a:12:1f:f7:
         29:44:07:e9:50:f6:da:af:1d:5f:42:68:3d:23:d5:6e:fd:b9:
         d9:e1:15:7c:77:0f:fd:dd:97:30:f8:b3:27:26:0c:a8:e9:22:
         b2:b4:a6:e9:6d:32:9f:ea:42:3e:1e:b9:e0:b5:c0:5e:4a:da:
         ad:a5:34:f6:f1:95:3b:b2:97:7b:33:b7:00:47:99:ab:14:75:
         8d:48:80:3b:b5:85:1f:a3:4a:98:85:49:1c:80:9d:48:13:ac:
         19:b3:05:46:2d:90:fb:59:bd:38:60:46:fe:ba:64:88:a0:f6:
         69:cf:a7:bd:c1:cb:28:13:73:0e:87:e7:55:8b:39:25:6a:43:
         ab:33:93:72:b3:e3:17:7d:b2:25:49:33:bf:50:30:c5:62:84:
         01:60:3a:81:b9:fb:c8:ab:4d:05:d6:0f:f0:57:2f:05:cb:55:
         52:fb:35:a2:1f:f2:af:17:ec:d1:3e:ba:35:0d:27:77:cf:07:
         45:d1:16:f2:e8:dc:e5:34:34:e6:7c:56:33:05:d3:51:db:2f:
         ee:be:f7:9f:73:ab:f2:79:2f:85:f9:65:7b:6c:1e:e3:fa:1d:
         43:30:ef:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----