Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/6693e3-89ca-44a1-a8b6-894805289cc0/1/8DBljxbS2I00FkWS_NTeExMfFpU.mft
File:                     8DBljxbS2I00FkWS_NTeExMfFpU.mft (raw, json)
Hash identifier:          VrdAD3GK0OnyqPDl5+BGEzp82/u5mMifqn6cMqApHcY=
Subject key identifier:   F4:BC:27:28:18:4C:34:50:26:E8:8D:33:C1:BB:40:74:E2:FC:F5:DD
Authority key identifier: F0:30:65:8F:16:D2:D8:8D:34:16:45:92:FC:D4:DE:13:13:1F:16:95
Certificate issuer:       /CN=f030658f16d2d88d34164592fcd4de13131f1695
Certificate serial:       0194BC7305EE617C9A74D3377547F720AACB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8DBljxbS2I00FkWS_NTeExMfFpU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a6/6693e3-89ca-44a1-a8b6-894805289cc0/1/8DBljxbS2I00FkWS_NTeExMfFpU.mft
Manifest number:          09EE
Signing time:             Fri 31 Jan 2025 13:00:42 +0000
Manifest this update:     Fri 31 Jan 2025 13:00:42 +0000
Manifest next update:     Sat 01 Feb 2025 13:00:42 +0000
Files and hashes:         1: 7__iS0PC1sPpziieUf7cPR0483I.roa (hash: WMdPgkVAgvH1xgF/iLZlNWqwQWtXShkyRu4TdlhutJM=)
                          2: 8DBljxbS2I00FkWS_NTeExMfFpU.crl (hash: +HPRONk0exkdrRF8IJ8XQ/2DtvBjBgGc31fNihZTits=)
                          3: F7yuxB3rSQXv2e3QR7lP2VYZOl4.roa (hash: Hb0YQdZj2T1tpCI4BSwoqOiW5xXUYr05ZCOvDEHOELk=)
                          4: N9l24h9HyK6kAtkXD09UL27Eum0.roa (hash: Xv+8Dv2RI7WnHgqmAi/VbFX+HLMpAXUADpkW2PUX/hM=)
                          5: TACuL0mRuuSZ00EUuEDQYYgL9nY.roa (hash: EEbhhtJ6TUNmkVK+nqQofMESLsYodUnzqvKr3ODtYdA=)
                          6: VfIfHSOH3SCeUfrhFn1L_hvFJbY.roa (hash: CBZdmBcpW3D2s2ojYTVUu4c3VrFFohZiC/xV/LxLkmU=)
                          7: f0YSDbM5Fp4SqEnB7Svlvk1Cg-M.roa (hash: 3R84lvwDdPg0KG2eSA0cCdxuOFb1Dl8Y/DbEXSQVXcw=)
                          8: gz7229OR-UwSeE8Mrmip6_lWRzM.roa (hash: HqILwLXjV1tcVlx0sNjeuEAQfPHai/C6EYXvfZ4gHY4=)
                          9: rvglM1D2OTp8FQe06Pw08v-6aMA.roa (hash: k7myqeDi+UyhgqVPrQeAPWPAH20cvWbKWm6bY/IGRmc=)
                          10: v2HXLCZWsI0s9KIXOuBOD4NKWbo.roa (hash: /mndx1AHWJXPlNn93oMmIR/duKvVFpLSwcZoOaPa0GM=)
                          11: xenniu8cPLTU12iFdsueiz3fG4I.roa (hash: rroZ3Bhqnl2W+JPUt0ibsStuzFq+3s34BPOmdHnV7mo=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:73:05:ee:61:7c:9a:74:d3:37:75:47:f7:20:aa:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f030658f16d2d88d34164592fcd4de13131f1695
        Validity
            Not Before: Jan 31 13:00:42 2025 GMT
            Not After : Feb  1 13:00:42 2025 GMT
        Subject: CN=f4bc2728184c345026e88d33c1bb4074e2fcf5dd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:04:64:0e:26:a3:e7:b0:10:9c:53:33:96:e2:
                    d0:61:90:12:76:58:d6:53:5f:39:78:9b:fc:65:49:
                    e0:03:63:dd:3c:07:5e:52:73:f4:5a:54:e1:c1:e2:
                    69:df:e9:4c:e0:3b:89:cf:f9:76:08:42:3c:89:b1:
                    4b:b0:6a:89:fb:bb:71:91:7d:c4:01:95:25:5e:c4:
                    79:a7:f5:a1:7d:43:a6:e7:04:e0:0c:f2:61:90:86:
                    50:db:ac:64:f7:8d:77:e6:c9:3e:20:7d:68:cb:3d:
                    b0:7e:fc:39:e0:b6:e3:29:0b:be:38:cd:f8:76:e1:
                    5a:17:79:10:44:f8:e9:fb:d3:94:0f:5b:1e:f1:14:
                    34:16:8a:5c:1d:06:84:97:73:c2:0c:aa:ff:59:6c:
                    ac:a9:dd:c1:c3:4a:02:2e:7a:b5:2e:eb:df:f3:91:
                    fb:c8:9a:78:bf:d2:c2:c1:4c:69:83:c0:9e:70:27:
                    18:4f:4b:9c:08:df:37:9d:0e:a9:20:a9:5d:06:12:
                    8c:36:54:03:c0:02:f4:c0:4f:e9:4d:14:06:ce:63:
                    d1:97:11:6b:e7:1b:0d:a7:7d:99:d9:5c:1f:3b:46:
                    bf:52:b3:6b:70:41:e7:43:58:3d:34:ab:1f:25:4d:
                    6e:c7:60:9e:fb:4e:a2:9c:b7:65:24:59:df:8f:1e:
                    27:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:BC:27:28:18:4C:34:50:26:E8:8D:33:C1:BB:40:74:E2:FC:F5:DD
            X509v3 Authority Key Identifier:
                keyid:F0:30:65:8F:16:D2:D8:8D:34:16:45:92:FC:D4:DE:13:13:1F:16:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8DBljxbS2I00FkWS_NTeExMfFpU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/6693e3-89ca-44a1-a8b6-894805289cc0/1/8DBljxbS2I00FkWS_NTeExMfFpU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/6693e3-89ca-44a1-a8b6-894805289cc0/1/8DBljxbS2I00FkWS_NTeExMfFpU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:72:47:be:6f:00:24:43:26:e5:ac:7f:22:07:19:03:ec:62:
         9f:8b:ba:c2:9a:c2:e9:ff:f7:cf:97:d9:dd:de:11:02:8d:de:
         20:7f:2d:65:37:09:47:a3:8e:d4:2c:36:ff:81:28:0d:f7:c2:
         6b:08:ce:57:8a:d4:ab:3e:b3:55:d5:d3:10:9c:83:ec:10:e1:
         aa:a6:9c:90:17:38:65:4d:04:e1:d7:8e:c7:a3:1a:f4:56:6f:
         fa:e1:19:58:ef:ec:fd:b0:f6:f6:9c:e2:18:97:79:ef:3d:be:
         93:73:46:dc:d3:1d:eb:ee:a2:30:d9:0b:d1:8f:97:cf:91:10:
         9d:ed:55:b9:fa:25:c7:33:e5:56:f5:be:c6:cb:c0:d8:71:61:
         f5:e2:c7:8c:35:25:73:2f:91:62:af:8f:c7:4c:de:ab:d8:05:
         a3:4d:05:09:28:97:ec:32:2d:fd:d8:f0:e4:53:c7:5b:0c:40:
         c3:c5:66:a0:b3:3a:dc:37:6c:c8:5f:9c:d2:2f:03:db:de:f5:
         f1:01:d1:69:71:35:c9:6f:3e:de:fe:6c:7b:51:00:6c:f3:71:
         65:cb:37:5a:55:37:f6:f3:24:c8:ff:2d:d3:c6:46:53:2b:bf:
         a2:ea:29:1d:c2:3e:0d:e1:72:b7:85:5e:7f:ed:bf:43:c2:71:
         fe:da:7e:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----