Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/dbb22b-2a1a-4762-a0f7-32f5a9507731/1/fZZeprOcIq7CrS1NTAo6MT3x3vo.mft
File:                     fZZeprOcIq7CrS1NTAo6MT3x3vo.mft (raw, json)
Hash identifier:          g2KxrSFNBAaMaBc+5GJxe1KZOx/9oYv2LazAYNzLNzc=
Subject key identifier:   73:3B:28:1F:0B:76:94:98:73:9C:B6:ED:21:D5:B0:2E:A5:65:73:E0
Authority key identifier: 7D:96:5E:A6:B3:9C:22:AE:C2:AD:2D:4D:4C:0A:3A:31:3D:F1:DE:FA
Certificate issuer:       /CN=7d965ea6b39c22aec2ad2d4d4c0a3a313df1defa
Certificate serial:       0194BD853E4D522863FC9D6098C560905243
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fZZeprOcIq7CrS1NTAo6MT3x3vo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e5/dbb22b-2a1a-4762-a0f7-32f5a9507731/1/fZZeprOcIq7CrS1NTAo6MT3x3vo.mft
Manifest number:          082A
Signing time:             Fri 31 Jan 2025 18:00:13 +0000
Manifest this update:     Fri 31 Jan 2025 18:00:13 +0000
Manifest next update:     Sat 01 Feb 2025 18:00:13 +0000
Files and hashes:         1: 5jihEGuQ4yw7LrN-GxhKRXWzO7o.roa (hash: i+yfzR8jSMTDKBjs/TXoC5+0uTvIRes38f4P8v9dk/U=)
                          2: S0vegGpuiCercYtclM_VH2iVx7s.roa (hash: ei9rkB9FlPql94JwrTYWOFRSXcUG8H3/4pXhvmG/1Ts=)
                          3: fZZeprOcIq7CrS1NTAo6MT3x3vo.crl (hash: 1TXh/Er3gaaZXqIxIrsrKBVNw9RwG1pnPCzXno2CAxo=)
                          4: gZAbXdKIIXZyGHDR512yiOhKrvc.roa (hash: 4+QF/lBUbocOIUtLLdqUYJCroIpokm/YAFfvzHG47+I=)
                          5: mj4UpOOYclM_JjTHAP2KswbbaQE.roa (hash: fAJCCsd04w67kSJn49D770vpfkErruO7UmQMEWCwKcE=)
                          6: z9wFFZP_zA_tDeAiN8JtnO6v01o.roa (hash: i8cRhIUjXH5IXxi+AFlUMsquHQWq5em4btklWiJYWAQ=)
                          7: zQfM-JDEyYtnlHUMMTArONbOmM8.roa (hash: BsV8fCwOGo+p3hz5+JexWR4GrgumAGIe4ztslYYq+fQ=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bd:85:3e:4d:52:28:63:fc:9d:60:98:c5:60:90:52:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7d965ea6b39c22aec2ad2d4d4c0a3a313df1defa
        Validity
            Not Before: Jan 31 18:00:13 2025 GMT
            Not After : Feb  1 18:00:13 2025 GMT
        Subject: CN=733b281f0b769498739cb6ed21d5b02ea56573e0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:09:00:9b:4c:69:bc:d4:d0:2e:1c:0c:ae:17:
                    63:09:f3:a8:23:0b:c5:d8:9d:68:94:18:9c:26:0a:
                    26:1a:a8:e2:6a:60:8e:80:d6:82:85:07:5c:75:15:
                    73:ea:1a:82:7a:59:0c:27:d6:e4:8d:e7:58:a0:c4:
                    14:cb:84:d5:66:9f:08:f9:68:ef:f5:10:f7:87:95:
                    69:34:bc:f5:b7:82:83:2e:a7:ab:5b:f1:4c:af:da:
                    05:83:1c:1b:0f:75:28:e5:51:0c:75:2d:cf:1f:70:
                    d8:fd:a3:87:7a:92:0e:81:74:c4:58:48:bb:58:a9:
                    1a:c5:80:93:eb:7e:b3:f9:28:e1:6c:7b:fb:08:a8:
                    61:f8:2f:13:82:7f:20:56:e5:a9:06:8d:60:8e:4a:
                    20:73:8c:a1:0d:55:e7:69:03:0f:ae:d6:2d:db:86:
                    1d:f4:c2:4f:c1:b6:84:d8:a6:80:5c:4d:9c:d6:79:
                    c0:e4:33:94:44:fd:6c:c2:47:1d:8a:1e:3f:dd:6d:
                    c3:2d:81:e6:2b:54:5a:9d:f6:56:c1:e8:86:a0:e7:
                    ce:0c:a5:3c:96:f4:7b:9d:f3:5d:bf:74:49:bc:f1:
                    c4:b4:86:4e:4d:a8:49:43:c9:f4:5f:d2:0d:92:32:
                    85:f6:cc:99:98:a9:8c:1e:b6:64:cb:45:20:25:be:
                    9b:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:3B:28:1F:0B:76:94:98:73:9C:B6:ED:21:D5:B0:2E:A5:65:73:E0
            X509v3 Authority Key Identifier:
                keyid:7D:96:5E:A6:B3:9C:22:AE:C2:AD:2D:4D:4C:0A:3A:31:3D:F1:DE:FA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fZZeprOcIq7CrS1NTAo6MT3x3vo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/dbb22b-2a1a-4762-a0f7-32f5a9507731/1/fZZeprOcIq7CrS1NTAo6MT3x3vo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/dbb22b-2a1a-4762-a0f7-32f5a9507731/1/fZZeprOcIq7CrS1NTAo6MT3x3vo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:9c:3d:81:13:02:9c:c5:70:20:b4:e8:5e:59:35:6f:28:88:
         2c:30:31:9d:ff:75:bd:1b:0a:ba:89:8f:d7:d5:37:d6:bb:fe:
         a2:80:27:09:fc:48:ee:23:dd:9d:bb:29:d7:93:84:ff:e5:fe:
         7d:f4:50:9f:8b:87:b6:81:2f:e6:4e:0e:62:68:34:6f:67:16:
         29:60:7e:d1:0d:bc:2f:2d:6b:a1:b3:c0:85:66:79:1b:81:7c:
         1c:f5:0a:f8:66:61:fd:56:28:df:de:b6:b5:a8:18:45:05:3c:
         43:76:28:0c:34:77:c9:9d:9b:9f:b9:fe:2a:a7:5c:e4:b7:31:
         89:5b:7c:8e:ef:38:d2:2a:c4:73:23:ff:0d:5a:be:bf:4e:53:
         9a:be:55:ae:62:26:9f:3c:2f:80:55:10:b4:0a:63:f2:04:11:
         9a:46:c7:fd:b7:15:b1:70:a0:6f:c8:4c:0b:25:68:1f:84:1c:
         a0:88:25:e5:b6:80:7e:a4:6e:31:a2:fd:8f:cb:7a:35:21:0c:
         9c:80:f6:49:43:32:e6:25:dc:1a:33:02:d8:e9:53:e6:31:f2:
         3a:c2:19:aa:de:44:8e:28:fa:ee:f2:5a:f6:ea:f7:b0:04:a2:
         43:00:59:e4:3b:6d:d5:03:b5:68:a1:25:fc:9c:a0:63:3e:8a:
         28:73:b1:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----