Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/2a6df5-8236-412d-ad79-e29589e8964a/1/7GXTFEC_ddJcYG95FcI2ymFEZKI.mft
File:                     7GXTFEC_ddJcYG95FcI2ymFEZKI.mft (raw, json)
Hash identifier:          JSstIlJ7r5AvZwRN4nl3IzUReTnSqJsGLrK6KFxUjdU=
Subject key identifier:   A7:CF:42:B7:07:E6:31:26:FF:83:A7:12:E0:59:B5:4C:B9:3E:68:88
Authority key identifier: EC:65:D3:14:40:BF:75:D2:5C:60:6F:79:15:C2:36:CA:61:44:64:A2
Certificate issuer:       /CN=ec65d31440bf75d25c606f7915c236ca614464a2
Certificate serial:       0194BD859CCF64050BF14F3302B161EC1859
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7GXTFEC_ddJcYG95FcI2ymFEZKI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/83/2a6df5-8236-412d-ad79-e29589e8964a/1/7GXTFEC_ddJcYG95FcI2ymFEZKI.mft
Manifest number:          142C
Signing time:             Fri 31 Jan 2025 18:00:37 +0000
Manifest this update:     Fri 31 Jan 2025 18:00:37 +0000
Manifest next update:     Sat 01 Feb 2025 18:00:37 +0000
Files and hashes:         1: 0LHXRZXlT4Z5tzVCD5n3wMEK_5I.roa (hash: I8mxC60DkZg+/Z8S1/Ta7eOakDYR4IDLK8C2wNx5/L4=)
                          2: 6fX3AcGq-C5YFIqBi50as54EhPA.roa (hash: 1KbqHGJ44yLkRFe9MKFCx+SDk5i4hgNCAcTBDnuKRDc=)
                          3: 7GXTFEC_ddJcYG95FcI2ymFEZKI.crl (hash: XO1wF4jcjzw5I6kKYAwaRaf1ierHg50MoYYGTZN/idc=)
                          4: EGu7n5ptipM5eNOhCckU54k5DkQ.roa (hash: T5q/E4P5U9BLCmb7DxjfaSe8vQrSmm6xkzEcVmgP2NA=)
                          5: PJ3rrJoRRyeXmoPdL7qN8QsvEpA.roa (hash: GLnfA8SK+T7VmaJvhK7gTu86DZRC9gqxwVMFgNBn2ek=)
                          6: RxZdH8tJj14wo9lUz6xXNXqBRwA.roa (hash: 5ZzEhibv41QuiqdnfKIE7PgA9XlisOrBTAH+e4R62Ys=)
                          7: V20vcYbyilDSQD-Jtx8d2qJDtnY.roa (hash: 2USt4pmFmNQvxtA5b7+ZLT1hKFltQnZghx27ehbthpQ=)
                          8: nHLGbM1FaGgG8wvdxg9Y5XPBlQw.roa (hash: EnIVps1oa/43pm3iNHQ84rjsTR4sIc4UNGGhICjrp8U=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bd:85:9c:cf:64:05:0b:f1:4f:33:02:b1:61:ec:18:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ec65d31440bf75d25c606f7915c236ca614464a2
        Validity
            Not Before: Jan 31 18:00:37 2025 GMT
            Not After : Feb  1 18:00:37 2025 GMT
        Subject: CN=a7cf42b707e63126ff83a712e059b54cb93e6888
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:f6:6a:a0:bf:40:8e:eb:93:94:fd:32:3e:74:
                    a8:4e:1b:30:68:76:51:7a:81:1b:ad:99:c7:35:32:
                    40:75:f4:81:39:b2:e8:aa:aa:7f:f9:86:de:fa:21:
                    8c:1c:6a:85:8d:cc:a9:1b:69:17:c4:9c:21:4c:d7:
                    9f:29:42:9e:46:e6:db:da:97:61:06:54:68:99:3d:
                    a6:7d:ab:7e:ac:67:1b:90:ca:db:e1:f4:ca:a5:bd:
                    bf:b5:63:22:8a:c4:2c:10:61:48:49:16:b2:5e:70:
                    29:44:4a:ee:d6:87:39:6e:86:b4:94:53:e1:8f:a5:
                    9c:3a:16:8d:7d:8c:8b:4d:1a:00:04:b3:c3:98:e2:
                    bc:32:e8:d7:65:5b:fe:78:37:af:e9:bf:e7:a1:23:
                    8f:4c:11:9f:d6:85:6a:72:8f:56:cc:a0:90:4b:06:
                    46:69:b8:cb:64:5c:9a:2b:02:4c:29:12:62:92:f5:
                    e8:ea:a4:44:00:45:af:6a:95:0e:91:61:06:ba:b2:
                    3a:2a:c6:d3:e7:ee:5e:e1:18:11:35:95:53:ac:79:
                    07:22:35:ca:d2:06:23:f9:d4:fe:dc:e0:af:4c:7c:
                    73:73:2b:20:92:ed:22:a6:f6:4b:fc:28:a5:ed:e0:
                    05:e6:e5:86:17:35:8b:f5:69:1b:4c:bd:6d:c0:2d:
                    3a:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:CF:42:B7:07:E6:31:26:FF:83:A7:12:E0:59:B5:4C:B9:3E:68:88
            X509v3 Authority Key Identifier:
                keyid:EC:65:D3:14:40:BF:75:D2:5C:60:6F:79:15:C2:36:CA:61:44:64:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7GXTFEC_ddJcYG95FcI2ymFEZKI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/2a6df5-8236-412d-ad79-e29589e8964a/1/7GXTFEC_ddJcYG95FcI2ymFEZKI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/83/2a6df5-8236-412d-ad79-e29589e8964a/1/7GXTFEC_ddJcYG95FcI2ymFEZKI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:73:94:1b:2c:d7:1c:b6:ee:5f:9d:88:48:b0:c2:e8:b1:ca:
         79:83:e9:08:04:0b:a7:dc:8b:f5:5f:58:6d:90:53:b6:e1:1c:
         b6:c0:53:c4:ae:71:67:da:53:b3:77:f8:7d:af:5c:cf:94:d2:
         59:76:e6:3d:50:b3:b9:62:7e:10:c4:79:f7:e9:bb:95:f5:4b:
         8b:63:18:52:05:8f:04:21:e3:a2:bb:59:b8:97:f7:c5:83:45:
         32:d5:7b:63:fb:bb:f2:65:d5:fa:ac:7f:3d:60:54:d2:35:b2:
         72:4a:3a:85:94:ba:d4:5d:c2:d4:12:1a:87:0c:2b:4b:42:25:
         3e:d1:37:95:1c:d6:1e:c7:13:11:d5:3b:0c:f0:a3:a6:8c:ff:
         bc:f6:7d:96:00:57:5c:72:dc:1f:a4:c4:ea:2c:1b:a5:34:96:
         31:aa:9e:20:f1:62:67:3e:56:45:6b:9c:51:f2:f0:67:3c:65:
         e0:96:24:44:32:d3:5c:13:c4:8a:98:df:ef:3d:75:10:d7:fe:
         fb:7f:51:73:d8:59:93:40:10:fc:56:c1:28:24:a2:22:13:4a:
         ce:53:e6:3b:c8:69:4a:08:35:b2:2a:54:4b:32:b7:4c:b4:18:
         da:e1:e2:6b:34:1c:20:5f:ff:04:83:86:e9:9c:03:15:08:06:
         d4:62:53:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----