Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/5edf7a-ab9a-45e7-a612-d169c088b412/1/EbabWdGfKYfknxhS1guxd3-AowE.mft
File:                     EbabWdGfKYfknxhS1guxd3-AowE.mft (raw, json)
Hash identifier:          MvEiWFylglyKzBXKZ959zddapifIn4DWmlVLHgp8XO8=
Subject key identifier:   6D:9F:20:3A:3B:9D:71:7C:28:BA:14:4A:3D:78:81:6C:20:36:A7:97
Authority key identifier: 11:B6:9B:59:D1:9F:29:87:E4:9F:18:52:D6:0B:B1:77:7F:80:A3:01
Certificate issuer:       /CN=11b69b59d19f2987e49f1852d60bb1777f80a301
Certificate serial:       0194BCCE084A63561412337A0F31DF076659
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EbabWdGfKYfknxhS1guxd3-AowE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/70/5edf7a-ab9a-45e7-a612-d169c088b412/1/EbabWdGfKYfknxhS1guxd3-AowE.mft
Manifest number:          14DC
Signing time:             Fri 31 Jan 2025 14:40:06 +0000
Manifest this update:     Fri 31 Jan 2025 14:40:06 +0000
Manifest next update:     Sat 01 Feb 2025 14:40:06 +0000
Files and hashes:         1: 1--WDAhFOBW7ncSoM8jfxu_x_aPA.roa (hash: 5hRd7iHG9OvxZkn9587WnUFx5p+RxhyhidWTwSlJ2mE=)
                          2: 9de0VEdjbWo-tUqmz8gijTg6IaE.roa (hash: f2qUpX3qXVm+Q2CbUSag5dNIyDCVc83yVIgmgfZphx0=)
                          3: EbabWdGfKYfknxhS1guxd3-AowE.crl (hash: CNYaPb4kKiH4vqCLM544ROdPk/SJM1t09qRQQsgPUXE=)
                          4: GdZRML26twHFAD1G2OP0i7faxcQ.roa (hash: uzNmm/uo+7dz6lehOPu8e8dDj2A7q2YksvhHwql7OuU=)
                          5: JIWcXiw5e-DMCtEQjl82_rCum6M.roa (hash: aum4OzbjHbjDqqRbPTuypoabo0V5INMyV5rJ/7+2kJk=)
                          6: JfYfytnPvytrAgnWdGl4VWwuQu8.roa (hash: PJQ895+ADdYzbDQ25ZZP1Bb0xkfVzmx/OUn4iJnvzMY=)
                          7: WEz0cGIk3YmjQ0yrdknf8JONckc.roa (hash: aWcb5jHZpWl1UXwytQ84UDQpza5mh8xr0Rn64szejaY=)
                          8: hh5gFEvny7iJIP363sERSCjh-rs.roa (hash: nHmDgAhsTOhkwPJGUNXsbu1PrrGNS0xivvoOwxQO9Og=)
                          9: mpiw9JhQM7LKtUVCRbcJs0dukrY.roa (hash: 6u6djeisAdzHv9sPzUqJK6BMNgw7cN5OEZXaoLYZmKY=)
                          10: v9FDIjQDiIrUZd7RONBVv2ZTE38.roa (hash: ACjeKwl85Nnu/pEWytc8zaH74Qt4iJUHODGo/LPABDY=)
                          11: xQJtsPu4XjJPpok_xM8iveF2WjU.roa (hash: uOpq92mVZM0bRt0Br5tU9GRVlZXJhQNtj23gea9OYEs=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:ce:08:4a:63:56:14:12:33:7a:0f:31:df:07:66:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11b69b59d19f2987e49f1852d60bb1777f80a301
        Validity
            Not Before: Jan 31 14:40:06 2025 GMT
            Not After : Feb  1 14:40:06 2025 GMT
        Subject: CN=6d9f203a3b9d717c28ba144a3d78816c2036a797
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:04:2b:a7:01:1d:ef:24:6f:37:47:8e:f4:46:
                    be:28:38:f4:7e:be:d6:16:1e:a4:fc:61:83:77:95:
                    d9:6f:8a:46:3d:10:d0:7a:9f:91:19:0d:99:95:43:
                    ee:0a:e7:96:1d:b3:99:ea:d2:85:45:28:d3:51:b5:
                    96:e8:eb:8a:59:73:01:77:9b:ee:61:e7:83:97:16:
                    b9:ce:08:05:34:3f:b4:a6:7d:9d:ad:ef:8e:4e:51:
                    47:f2:ae:b1:b4:55:72:3d:da:8f:20:b2:27:15:0f:
                    49:63:f8:80:27:6f:29:c6:23:c8:25:9b:a6:17:cd:
                    98:3a:fb:a1:b6:91:76:02:59:a4:43:dc:9e:d6:b8:
                    c0:f2:71:fd:11:21:a7:1a:b6:cd:bb:6c:b9:a1:80:
                    9a:b9:18:d4:23:f5:9b:d7:c2:45:03:46:5e:c5:14:
                    4e:cf:36:a6:b3:74:c1:72:7c:73:41:71:5e:5b:e9:
                    ed:f3:ed:d7:eb:3c:7c:e0:a1:3b:1e:aa:f9:02:c0:
                    6f:e8:95:9b:3c:79:2e:76:c8:27:78:f7:b5:42:7b:
                    94:ab:57:cb:4c:11:d1:0a:4c:d0:44:6d:49:a4:7e:
                    c1:b6:2f:a3:b0:53:72:3b:ba:5e:fa:26:3b:9d:0e:
                    07:3f:ac:ce:2c:3f:de:63:3a:5b:b9:76:10:68:6c:
                    5a:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:9F:20:3A:3B:9D:71:7C:28:BA:14:4A:3D:78:81:6C:20:36:A7:97
            X509v3 Authority Key Identifier:
                keyid:11:B6:9B:59:D1:9F:29:87:E4:9F:18:52:D6:0B:B1:77:7F:80:A3:01

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EbabWdGfKYfknxhS1guxd3-AowE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/5edf7a-ab9a-45e7-a612-d169c088b412/1/EbabWdGfKYfknxhS1guxd3-AowE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/70/5edf7a-ab9a-45e7-a612-d169c088b412/1/EbabWdGfKYfknxhS1guxd3-AowE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:d3:1c:17:ab:ae:92:86:da:41:de:72:e3:9d:42:85:50:ac:
         ea:b0:3f:e1:1b:6e:a5:5f:36:31:dd:49:d0:ff:ef:98:8e:0f:
         15:21:01:2a:d8:45:48:80:01:ca:be:51:41:e5:ee:8f:eb:da:
         98:0c:9c:e7:40:f0:aa:9e:bc:63:d5:05:29:b2:1f:6b:52:be:
         98:8e:36:b5:fd:3a:fd:64:46:6a:12:4c:9d:9d:c7:27:92:05:
         f5:4d:1d:e9:db:c9:8b:0d:29:af:a5:4c:23:de:41:ea:7b:57:
         44:81:b6:26:3d:ef:be:b2:5f:e1:43:5e:a8:26:42:a7:ce:8a:
         00:a2:d8:68:07:68:27:65:88:76:3e:c0:87:12:40:29:f1:f2:
         5a:05:38:a9:87:c5:9e:4e:33:ba:e4:de:0a:c6:1a:56:4e:70:
         82:8d:e9:c8:6a:7b:ef:80:98:90:eb:e7:28:a7:e6:98:0b:0d:
         2a:41:38:4d:d3:b2:2d:b5:a4:f2:37:84:27:a3:4e:23:9a:ce:
         5b:3b:54:35:95:46:17:7d:05:c8:00:23:58:6a:05:52:9f:0b:
         e5:7c:52:8a:eb:32:3b:47:0d:a5:35:7a:a7:dc:60:90:aa:7d:
         b7:62:bf:b5:0b:5c:e4:67:78:f0:62:bb:c8:37:3f:a1:32:21:
         50:20:a7:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----