Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/ee66fb-5dc0-4122-9bc7-b27d8730a270/1/gafOi6y-zusW9gC2B9G_0IAzswI.mft
File:                     gafOi6y-zusW9gC2B9G_0IAzswI.mft (raw, json)
Hash identifier:          /vroWpOETonC2r4rwYfb8TpCcBOFC3BJjg3FDs07e+I=
Subject key identifier:   3D:1E:FB:13:61:A7:94:65:4D:61:DF:93:8B:C2:24:FA:29:20:D1:FC
Authority key identifier: 81:A7:CE:8B:AC:BE:CE:EB:16:F6:00:B6:07:D1:BF:D0:80:33:B3:02
Certificate issuer:       /CN=81a7ce8bacbeceeb16f600b607d1bfd08033b302
Certificate serial:       0194BD1765D532FA1957897B115D1FFA5843
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gafOi6y-zusW9gC2B9G_0IAzswI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d0/ee66fb-5dc0-4122-9bc7-b27d8730a270/1/gafOi6y-zusW9gC2B9G_0IAzswI.mft
Manifest number:          07E7
Signing time:             Fri 31 Jan 2025 16:00:14 +0000
Manifest this update:     Fri 31 Jan 2025 16:00:14 +0000
Manifest next update:     Sat 01 Feb 2025 16:00:14 +0000
Files and hashes:         1: 0x8juoo7AM8ugf31uQycejLtims.roa (hash: sJQg/bbbZFsef+zbbHa9OzqRT4fumHdl0Xl81Is/6E0=)
                          2: Nzh8YLpNUF4cU0rzBjfGCERDcYE.roa (hash: i2B2OXXjCTbw2kGS650IvMFo0E46R+ycXmvCyPDbizQ=)
                          3: foz-XGD-1ugjMs0Fiq2Vqd2Q6oA.roa (hash: ck4+NfPkU8wvZrU6NwgK2YYCM2pv6EA8TqrJialxWbg=)
                          4: gafOi6y-zusW9gC2B9G_0IAzswI.crl (hash: GFk6sFN/nNzKFuJcDfks6zNcVnDobbnwNsRVrMqK5gw=)
                          5: i4pBlijYu7sjz616Su8j6sEp0KM.roa (hash: uHKnyOrHeN8Niu67x/4Qi3vMRGo0ABBXAuttwGbGRuk=)
                          6: ln-K5Ow9TejgLd4PysWSoQKqiZ4.roa (hash: 6WaUskC8pwU9MAQIbeJthvJXrFOJkM+1fup3ku3957c=)
                          7: sizZNRJeMyfvZoIYAB6UC-zVc7U.roa (hash: Hn9xitBE6shoqbTIVL8aOgZmfrDePFpERxPmyPyqVEs=)
                          8: vywQrYyohPA7HiVpUnZvxi_OkIw.roa (hash: 9ddLtzX64XyzhFvBqGsy3QFMWw7/oarf8SrkFQVzpQI=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bd:17:65:d5:32:fa:19:57:89:7b:11:5d:1f:fa:58:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=81a7ce8bacbeceeb16f600b607d1bfd08033b302
        Validity
            Not Before: Jan 31 16:00:14 2025 GMT
            Not After : Feb  1 16:00:14 2025 GMT
        Subject: CN=3d1efb1361a794654d61df938bc224fa2920d1fc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:4d:61:2a:c9:98:72:58:6d:3d:81:d1:5a:f0:
                    2a:6e:6b:01:37:99:51:51:4b:1a:63:db:34:2c:72:
                    eb:2c:94:29:46:27:8f:6b:dc:e9:14:77:0d:8f:0d:
                    a9:20:f7:bb:16:1b:15:3e:c6:f6:ac:99:50:84:50:
                    92:15:d2:17:97:9c:2e:bd:5c:12:4e:2a:e5:cf:3b:
                    c3:ba:14:11:a5:bb:13:2b:4f:7e:c4:43:1f:54:d6:
                    6c:f6:ee:ad:67:ff:3a:31:80:b7:d2:01:8d:9b:fa:
                    3e:f9:e7:da:80:b2:5f:45:1e:e6:cb:b4:e1:fa:1f:
                    a1:64:10:3f:65:3f:f5:4c:83:27:4d:9b:b9:61:38:
                    c4:52:7b:9b:58:fb:b1:03:b2:b5:c2:f7:02:c4:4b:
                    15:0c:c2:c4:96:c2:16:3b:7d:4f:3b:91:3c:fa:0d:
                    a8:7d:a3:ae:f3:c6:5a:d9:37:63:c7:8e:fc:89:12:
                    c5:f9:85:af:27:63:bb:22:bf:b6:a7:8a:7c:60:99:
                    4a:b8:5f:95:5f:d9:f7:95:39:b4:de:22:ba:42:8e:
                    9f:04:76:1e:ec:e4:5f:a8:f0:91:0d:78:cd:b1:16:
                    68:e0:b9:93:c6:2b:4e:b7:45:69:33:32:12:16:b6:
                    d4:55:86:ee:d3:be:ae:ae:84:7b:fa:5b:8c:79:a6:
                    fd:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:1E:FB:13:61:A7:94:65:4D:61:DF:93:8B:C2:24:FA:29:20:D1:FC
            X509v3 Authority Key Identifier:
                keyid:81:A7:CE:8B:AC:BE:CE:EB:16:F6:00:B6:07:D1:BF:D0:80:33:B3:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gafOi6y-zusW9gC2B9G_0IAzswI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/ee66fb-5dc0-4122-9bc7-b27d8730a270/1/gafOi6y-zusW9gC2B9G_0IAzswI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/ee66fb-5dc0-4122-9bc7-b27d8730a270/1/gafOi6y-zusW9gC2B9G_0IAzswI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:59:23:d6:b2:aa:32:bf:ea:6d:41:d9:28:4c:97:84:df:c1:
         46:b2:4e:3d:fc:38:07:6b:2d:3d:50:5b:95:4c:5b:86:0f:ca:
         fa:b2:12:a0:ee:8e:d3:1a:cb:70:b5:06:c8:a5:34:eb:c4:c2:
         3b:51:fb:ec:93:25:5e:41:56:6b:7e:1d:bb:e2:d5:f8:89:dc:
         ed:9d:ab:d9:fb:d6:db:d1:f7:99:ff:83:3b:75:5c:c2:df:b9:
         f4:eb:67:31:c7:d0:0a:c7:9e:de:5d:f4:8f:57:f8:1f:f1:cc:
         04:9e:87:c1:f3:58:c5:72:0b:98:7a:fd:11:a3:c3:4c:74:7f:
         7a:52:6b:d5:c6:51:38:84:4d:53:6f:74:fc:b8:65:d8:a0:ca:
         b3:aa:57:28:77:ee:03:c1:54:b4:2c:eb:4c:50:79:fd:cd:9a:
         86:a9:9a:5a:b4:fe:c2:70:95:73:a2:8c:45:c6:9f:18:ed:e9:
         42:1f:ef:4e:b0:6c:84:c0:e9:6c:89:5d:f0:d6:88:3f:5e:d6:
         77:dd:7f:75:4f:75:32:30:91:cd:b5:44:9a:ce:0f:aa:cd:4e:
         cf:f3:f2:37:43:58:34:fc:c0:d2:df:42:10:49:26:77:dd:c0:
         c5:48:72:a1:34:34:49:fa:37:f6:46:d1:d9:ab:20:7f:7a:7a:
         6f:b3:a0:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----