Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/0e4976-e750-4568-8583-de6ef7c95526/1/x6Lk65_TzNG6RKNi92-Ym3tE1fI.mft
File:                     x6Lk65_TzNG6RKNi92-Ym3tE1fI.mft (raw, json)
Hash identifier:          mT+xjoWi+Xg0yhimb37tPCm200S+a2uirMfFTmny0NU=
Subject key identifier:   71:EC:DD:E5:F7:86:76:43:29:EF:F8:8E:7B:DA:73:01:40:C6:69:A5
Authority key identifier: C7:A2:E4:EB:9F:D3:CC:D1:BA:44:A3:62:F7:6F:98:9B:7B:44:D5:F2
Certificate issuer:       /CN=c7a2e4eb9fd3ccd1ba44a362f76f989b7b44d5f2
Certificate serial:       0194BBCE89D0484E6BC0AA84D5EE9BBA8552
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/x6Lk65_TzNG6RKNi92-Ym3tE1fI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ac/0e4976-e750-4568-8583-de6ef7c95526/1/x6Lk65_TzNG6RKNi92-Ym3tE1fI.mft
Manifest number:          0D7C
Signing time:             Fri 31 Jan 2025 10:01:02 +0000
Manifest this update:     Fri 31 Jan 2025 10:01:02 +0000
Manifest next update:     Sat 01 Feb 2025 10:01:02 +0000
Files and hashes:         1: JqQax9sv0vRADwA78DtmjWkQLEE.roa (hash: Yj45NvtpL9PKcZ/9PbAe7wPZg60kGlm36nNetlLSWMc=)
                          2: QeY7vGKOe5WJwx2PdFZMhuvqcrM.roa (hash: iFsqZE7xTmoV7CGhuU56miv5nf81Wm5pGm3tJX+o8Gg=)
                          3: dSov7w2eyIME-dLmYE5huJUu4Yg.roa (hash: ZBbSGs3xtCwiRVVA/WAQV08kD/BTL0iXtgfJYGFBfeY=)
                          4: x6Lk65_TzNG6RKNi92-Ym3tE1fI.crl (hash: 4HyU2J74w/P5vaFNl2CVIPsgFJcfp5fszP/degJ/7X0=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bb:ce:89:d0:48:4e:6b:c0:aa:84:d5:ee:9b:ba:85:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c7a2e4eb9fd3ccd1ba44a362f76f989b7b44d5f2
        Validity
            Not Before: Jan 31 10:01:02 2025 GMT
            Not After : Feb  1 10:01:02 2025 GMT
        Subject: CN=71ecdde5f786764329eff88e7bda730140c669a5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:ab:c8:7f:76:1b:cb:40:3b:91:6a:c3:ac:d7:
                    65:6d:ea:65:42:1f:35:50:cf:43:48:05:6d:8b:00:
                    fd:6a:f9:4d:f7:a7:b3:f5:5f:dc:66:db:06:9a:09:
                    8e:69:94:da:08:43:6a:36:86:3b:41:c1:ae:96:f3:
                    a7:fd:76:e0:ca:fc:6b:d5:97:8e:5a:b3:46:ee:1a:
                    da:e3:42:05:fc:41:97:fb:59:ff:db:e1:90:f3:28:
                    b9:58:e4:74:68:4e:40:0b:fd:f8:5f:98:3a:80:6b:
                    0d:28:d1:d7:45:dc:19:12:8a:64:26:08:91:1e:24:
                    2f:97:88:af:74:d9:3b:66:f8:ac:9c:2c:40:bb:06:
                    10:a1:d5:b0:12:3b:39:77:9d:be:c8:2c:a7:44:c5:
                    d7:5e:7e:79:28:77:09:e0:b7:d6:c9:fc:29:6d:c9:
                    10:a6:b3:fc:ce:19:5d:57:f3:9b:ac:fa:05:b5:ba:
                    8e:12:e6:a1:ed:89:ca:0f:28:2a:c5:d5:a3:32:e3:
                    84:61:43:25:85:40:48:c2:52:95:01:ca:ca:ec:9c:
                    d6:38:44:a4:1a:a4:b0:b1:2f:f7:dc:e6:70:01:af:
                    63:50:4d:61:43:45:36:94:6b:cb:af:cd:69:44:5e:
                    ff:76:dd:1f:ab:2f:07:d0:15:db:d0:1a:23:d4:aa:
                    58:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:EC:DD:E5:F7:86:76:43:29:EF:F8:8E:7B:DA:73:01:40:C6:69:A5
            X509v3 Authority Key Identifier:
                keyid:C7:A2:E4:EB:9F:D3:CC:D1:BA:44:A3:62:F7:6F:98:9B:7B:44:D5:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x6Lk65_TzNG6RKNi92-Ym3tE1fI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/0e4976-e750-4568-8583-de6ef7c95526/1/x6Lk65_TzNG6RKNi92-Ym3tE1fI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/0e4976-e750-4568-8583-de6ef7c95526/1/x6Lk65_TzNG6RKNi92-Ym3tE1fI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:9d:20:5d:0a:7d:86:29:ed:d5:b7:98:de:04:ed:a0:1a:0a:
         cf:d3:f9:a6:7f:ac:ea:f6:da:01:6a:68:9d:9d:8e:84:e9:59:
         08:a1:9f:7a:f0:27:44:ac:75:06:ea:e1:3e:d9:74:14:b1:fa:
         44:b5:9d:51:0c:d3:b6:1e:8e:1c:f6:45:78:74:29:f6:92:01:
         01:72:a4:bd:4b:15:75:a8:89:34:b0:82:0e:6e:cb:fb:a4:85:
         2f:94:96:74:22:a6:84:8d:c8:74:97:32:50:ac:ae:61:98:0c:
         d2:f4:6c:d6:c6:b6:06:ab:84:d9:00:6f:85:7c:ff:46:82:71:
         5b:14:d9:17:20:37:e9:40:02:02:e6:d5:79:f2:7a:40:2d:00:
         34:73:b9:d6:de:9e:2b:fc:ec:fc:3d:7c:f3:da:e4:cd:23:25:
         55:8c:24:fe:7f:81:e9:fd:b5:cd:c9:41:54:2c:41:00:d1:de:
         5b:b7:8a:d0:5e:36:9e:33:f2:65:ad:e9:b9:ee:36:e6:68:83:
         13:b6:4e:26:22:13:7a:8a:20:fd:d1:4f:20:e2:79:61:e8:cb:
         d4:9f:fc:63:b2:7c:51:0b:9c:f4:7c:37:f1:e1:61:77:bd:69:
         38:75:34:75:96:f8:00:2d:5b:a3:65:d0:15:3c:63:5a:5b:3f:
         37:96:ec:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----