Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/63509c-5676-4eaf-99d4-eecd28e28e35/1/7ouogkxcjSBzJqSjq4k-u49Qlq0.mft
File:                     7ouogkxcjSBzJqSjq4k-u49Qlq0.mft (raw, json)
Hash identifier:          bPc36k2UThv/SDIU72ttpk2dCfKBFWNHnWadtGTDr1A=
Subject key identifier:   76:BF:E6:C5:31:B1:BC:D8:F7:E1:BE:CD:59:20:C7:7A:BA:E6:66:D2
Authority key identifier: EE:8B:A8:82:4C:5C:8D:20:73:26:A4:A3:AB:89:3E:BB:8F:50:96:AD
Certificate issuer:       /CN=ee8ba8824c5c8d207326a4a3ab893ebb8f5096ad
Certificate serial:       0194BD17D93F10F5A3078F594382DE0C0510
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7ouogkxcjSBzJqSjq4k-u49Qlq0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bd/63509c-5676-4eaf-99d4-eecd28e28e35/1/7ouogkxcjSBzJqSjq4k-u49Qlq0.mft
Manifest number:          14E1
Signing time:             Fri 31 Jan 2025 16:00:44 +0000
Manifest this update:     Fri 31 Jan 2025 16:00:44 +0000
Manifest next update:     Sat 01 Feb 2025 16:00:44 +0000
Files and hashes:         1: 2sRit1HkpegSVZ93lQZh_r4sGH8.roa (hash: WjR0xWj31dChbabct4M4jjr+gsq2p4cJ6G9KZptb3BE=)
                          2: 7ouogkxcjSBzJqSjq4k-u49Qlq0.crl (hash: Ai8arjP31RkteckL4y3w9O4h1CzcIDxcQjCqFRQeM70=)
                          3: Brvr1CF-0Fs0WqR1xwoWI7Gwwv0.roa (hash: TMm0q8bW2Ex1DI3++vtZ3RA2Bbwen2MKN/MZcAZNdBY=)
                          4: VSEL2iQWB7y3te4btwgqQzATX5A.roa (hash: 79Tuaq+JTT2My5Dv4Q6xrae9R7vcxQ2hnGbV3yFOdeI=)
                          5: p1JXjb2LczYltKrE1SbLNgCFh1Y.roa (hash: JZ2SLRHUBb7DNCppha0qhaA/9Yund2DleZbSFcq4A2U=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bd:17:d9:3f:10:f5:a3:07:8f:59:43:82:de:0c:05:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ee8ba8824c5c8d207326a4a3ab893ebb8f5096ad
        Validity
            Not Before: Jan 31 16:00:44 2025 GMT
            Not After : Feb  1 16:00:44 2025 GMT
        Subject: CN=76bfe6c531b1bcd8f7e1becd5920c77abae666d2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:2e:ec:e3:13:51:d9:ea:2a:88:8d:2c:83:e9:
                    20:cf:1e:11:4a:81:6d:48:b7:98:6b:6e:06:66:88:
                    63:47:45:ef:cf:75:47:31:98:55:12:3f:ec:56:f4:
                    3e:58:60:d7:28:11:b1:a3:d5:68:00:18:0a:82:fc:
                    49:c7:2e:55:bf:54:c8:d4:06:c7:67:f3:02:c1:d3:
                    a5:77:21:c4:94:ac:40:8f:b0:a2:59:ae:cd:04:59:
                    7a:c9:86:ee:f9:02:e1:8b:7b:db:8f:68:7d:75:36:
                    5d:59:6f:19:a4:de:61:f4:c0:9b:e1:1c:df:6e:b5:
                    99:b0:f9:7d:00:a7:7e:c7:36:fe:80:cf:a1:94:ae:
                    07:53:0c:dd:ae:15:77:66:cc:c0:81:ab:32:b0:ce:
                    e8:2f:08:3a:09:62:49:bd:22:54:cb:96:6b:93:e9:
                    cd:a1:f7:1e:64:ee:9c:f5:30:34:ab:fb:43:a0:d5:
                    42:43:49:f4:69:b4:69:d8:99:79:b3:d0:ed:49:3f:
                    75:1c:c4:b1:59:65:da:f9:1c:6f:a3:90:8b:17:45:
                    e7:7a:2b:c7:ce:7f:83:6f:8f:ec:a6:42:2f:d8:0d:
                    9d:d0:26:5b:15:ab:78:a1:de:22:99:fb:13:76:51:
                    d0:78:16:83:b7:0f:d2:b9:3c:4e:90:07:43:2f:9f:
                    40:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:BF:E6:C5:31:B1:BC:D8:F7:E1:BE:CD:59:20:C7:7A:BA:E6:66:D2
            X509v3 Authority Key Identifier:
                keyid:EE:8B:A8:82:4C:5C:8D:20:73:26:A4:A3:AB:89:3E:BB:8F:50:96:AD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7ouogkxcjSBzJqSjq4k-u49Qlq0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/63509c-5676-4eaf-99d4-eecd28e28e35/1/7ouogkxcjSBzJqSjq4k-u49Qlq0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/63509c-5676-4eaf-99d4-eecd28e28e35/1/7ouogkxcjSBzJqSjq4k-u49Qlq0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:88:ab:1c:65:6b:21:c6:bd:31:a0:52:b5:02:60:12:cf:c7:
         ac:70:30:a6:06:95:84:c7:25:f7:1d:33:ff:ed:c3:71:46:9d:
         95:5a:de:f7:d1:6e:77:87:83:c3:45:38:f3:53:78:23:f9:74:
         5b:f6:1b:aa:d9:de:a0:da:c0:e2:4c:09:44:42:e5:41:23:08:
         26:38:c9:6c:ee:76:f3:08:cc:db:6b:ad:7d:ee:2f:1f:51:ba:
         76:e1:a7:02:85:7e:e8:29:ca:50:bb:0a:6a:df:5d:a0:85:40:
         07:e3:bf:d2:de:7e:e6:17:98:ce:ee:9e:c1:69:58:85:c9:36:
         4c:bb:5e:5c:ef:14:8c:a5:8f:da:dc:37:90:a1:d9:80:b0:9c:
         98:5c:a6:b6:d3:38:13:70:dc:e8:92:23:ad:fe:93:9e:50:16:
         6b:d5:67:ac:0d:f8:0a:5c:13:05:16:0c:18:7b:96:40:87:80:
         6b:5d:7c:ae:69:54:4a:d4:31:c5:fa:03:a2:6a:68:23:2a:f8:
         bb:97:07:ce:b8:2f:2b:22:c5:17:09:68:5b:71:d9:11:65:8d:
         51:76:6e:6a:ab:57:8e:01:54:22:c0:c4:d2:6c:e7:cf:ea:d7:
         67:a3:da:60:b3:e4:2b:42:2c:10:26:35:0c:2a:df:35:21:6d:
         2e:a1:28:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----