Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/eb013f-5774-4e06-a5d4-ed5d6ce8d7e8/1/x8JN6ZEB-v33S8opP9bZUGDVCmM.mft
File:                     x8JN6ZEB-v33S8opP9bZUGDVCmM.mft (raw, json)
Hash identifier:          cuGZsJzHqJkbICG2z3cy2cdopY04aPLOFu6dCURgS5w=
Subject key identifier:   D8:DD:10:95:F0:28:9E:EC:6E:04:E9:14:C8:06:DB:D1:53:85:4B:29
Authority key identifier: C7:C2:4D:E9:91:01:FA:FD:F7:4B:CA:29:3F:D6:D9:50:60:D5:0A:63
Certificate issuer:       /CN=c7c24de99101fafdf74bca293fd6d95060d50a63
Certificate serial:       0194BCA9FDC35E653458C1993DD59DA09C78
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/x8JN6ZEB-v33S8opP9bZUGDVCmM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bb/eb013f-5774-4e06-a5d4-ed5d6ce8d7e8/1/x8JN6ZEB-v33S8opP9bZUGDVCmM.mft
Manifest number:          0F3F
Signing time:             Fri 31 Jan 2025 14:00:44 +0000
Manifest this update:     Fri 31 Jan 2025 14:00:44 +0000
Manifest next update:     Sat 01 Feb 2025 14:00:44 +0000
Files and hashes:         1: 6Cj8H-p47dvCNhMHuB2pJCnFujI.roa (hash: etPYOFcz4B7xl7Yvi1fe6awoP2aM1hrkcXjgzl1XW2c=)
                          2: iNe91R6y78p-QSDXxoxxAjDA_Og.roa (hash: HR8YO++Y/qB7B+dcbqN5/SgR3c8dd7aULLQGyyrd4j8=)
                          3: tK6dqORitjCE9QSeqzn0Dd8QVZY.roa (hash: d9AZ6zPbtFV6hygn8HjICm+c22UNHE83e16IdW/3Zl4=)
                          4: uHPtlU3qdVrOCAD4M6mdiGrDzqE.roa (hash: AeMGCTul+AJixElOuUQNIP59RKHExeTwQIkWiWRzSzs=)
                          5: x8JN6ZEB-v33S8opP9bZUGDVCmM.crl (hash: ixB7W7OcoCoyR0w4cTqKK5cKUQQfnSbaYdiSDn3u8Wk=)
                          6: ydG33gjsDAOMifL-LMV8iBUmj5I.roa (hash: mGme2Sxc1/UzWWlnkXXzLuxU/TszYoE3oiJl3a+U4Tg=)
                          7: z131uKF1Jpc6EpB3kAHYRRM7XIQ.roa (hash: Z5tMUZHaMA8Bu87tPX511k88Z6BiQWZ5tSalbDOuIEw=)
                          8: zbII4RxH17JoDR9ukyJuiEde7IM.roa (hash: xBWfldiZFP31dGe7bTsuSEU+4Mx9LEr9W5jDRfUDGfA=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:a9:fd:c3:5e:65:34:58:c1:99:3d:d5:9d:a0:9c:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c7c24de99101fafdf74bca293fd6d95060d50a63
        Validity
            Not Before: Jan 31 14:00:44 2025 GMT
            Not After : Feb  1 14:00:44 2025 GMT
        Subject: CN=d8dd1095f0289eec6e04e914c806dbd153854b29
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:f6:40:96:a6:18:09:00:9c:d1:87:a3:f7:1a:
                    ce:07:94:55:c1:ab:86:9f:63:0d:fa:0a:b3:da:ae:
                    96:77:7e:e7:79:2d:d5:bb:ed:d7:46:d6:2c:f1:5a:
                    3a:ab:0b:e1:d7:2b:6e:0b:49:c0:69:dc:fe:a5:c9:
                    90:8b:09:fe:eb:2a:cc:3d:f0:87:47:a0:23:30:cc:
                    1e:af:49:96:5d:9f:37:54:02:cc:0b:b0:be:e5:27:
                    85:70:26:36:cc:fb:10:e8:81:33:61:02:a3:f7:1f:
                    15:4d:2c:e0:0a:c7:4e:f3:7b:b2:ab:d4:6a:0f:a2:
                    a0:be:51:03:bf:6a:6c:f6:38:ee:a1:4c:ff:c2:56:
                    6d:6f:06:9f:8b:1e:0a:04:42:16:ee:25:07:b8:fd:
                    1a:95:ff:b9:42:f8:a8:03:a2:79:35:2a:e7:bb:48:
                    ee:a3:4e:d3:00:50:ab:d3:51:f6:14:9e:6b:5a:d4:
                    cd:f8:bb:a9:12:61:e6:fe:6e:6e:40:b0:e1:4b:04:
                    73:6b:75:1a:95:70:72:44:58:0d:45:70:af:e7:37:
                    d3:75:f8:2d:3b:48:19:76:3b:d0:33:c7:6c:08:29:
                    54:c8:60:df:28:24:63:0b:b0:2d:09:7e:0f:62:22:
                    21:b5:95:c2:71:e8:dd:19:62:6e:8c:af:2d:ca:6e:
                    63:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:DD:10:95:F0:28:9E:EC:6E:04:E9:14:C8:06:DB:D1:53:85:4B:29
            X509v3 Authority Key Identifier:
                keyid:C7:C2:4D:E9:91:01:FA:FD:F7:4B:CA:29:3F:D6:D9:50:60:D5:0A:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x8JN6ZEB-v33S8opP9bZUGDVCmM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/eb013f-5774-4e06-a5d4-ed5d6ce8d7e8/1/x8JN6ZEB-v33S8opP9bZUGDVCmM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/eb013f-5774-4e06-a5d4-ed5d6ce8d7e8/1/x8JN6ZEB-v33S8opP9bZUGDVCmM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:93:74:1e:6d:c7:b9:48:da:2f:29:e5:bc:a0:db:07:74:ca:
         d1:88:90:1b:cd:e3:38:e0:c8:80:c7:65:ea:71:00:42:aa:17:
         5d:d9:d9:32:8d:66:10:ee:ab:fc:b8:f9:3b:46:7d:c0:83:51:
         00:a8:dc:d4:b5:0b:04:b7:06:3b:71:56:98:4d:cc:28:a0:29:
         16:f2:14:ea:34:09:73:e2:15:91:e6:c8:ef:b6:b6:06:a9:e2:
         dc:a9:05:e6:b7:b0:d1:33:61:20:31:75:de:17:d4:b0:3e:0f:
         26:8b:ab:29:a4:72:71:df:db:2d:63:b0:80:56:29:ff:97:fb:
         c9:ed:06:10:fe:e7:e6:96:ff:28:db:6c:da:49:47:49:8c:93:
         e8:b8:ee:49:05:45:75:44:84:e5:0d:4d:22:88:0a:f8:7b:58:
         bd:71:3a:7c:b7:0d:73:cc:66:07:35:79:8b:35:47:fe:df:9c:
         94:e2:a0:71:11:da:6c:93:df:85:35:88:9e:29:51:8b:22:8b:
         17:41:9c:57:e9:7c:7f:e3:e4:03:7e:8a:a1:c9:1a:16:56:cb:
         17:c1:3d:ec:1f:4f:d9:2f:0f:b5:0a:1a:c3:fc:fd:39:b2:e3:
         cd:6b:2f:98:92:ba:a7:12:b1:fa:4f:65:8d:65:98:94:15:93:
         8c:77:19:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----