Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/810c11-a105-4db1-a6b5-392b863c9f03/1/7Lp3S6gvsEJ_dm54PncPS9lkFvk.mft
File:                     7Lp3S6gvsEJ_dm54PncPS9lkFvk.mft (raw, json)
Hash identifier:          e59zbwicvBW1Ag5PMMi9YehHTGKctZ3NG2K5F6XAbNU=
Subject key identifier:   8A:72:9D:72:30:99:A8:3D:34:19:D8:C6:4C:B4:D1:D3:22:3F:7C:31
Authority key identifier: EC:BA:77:4B:A8:2F:B0:42:7F:76:6E:78:3E:77:0F:4B:D9:64:16:F9
Certificate issuer:       /CN=ecba774ba82fb0427f766e783e770f4bd96416f9
Certificate serial:       0194BC049D3B7A41C1EA3A36459253C57B42
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7Lp3S6gvsEJ_dm54PncPS9lkFvk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e6/810c11-a105-4db1-a6b5-392b863c9f03/1/7Lp3S6gvsEJ_dm54PncPS9lkFvk.mft
Manifest number:          11CD
Signing time:             Fri 31 Jan 2025 11:00:06 +0000
Manifest this update:     Fri 31 Jan 2025 11:00:06 +0000
Manifest next update:     Sat 01 Feb 2025 11:00:06 +0000
Files and hashes:         1: 7Lp3S6gvsEJ_dm54PncPS9lkFvk.crl (hash: R6XZoJ26iyKO9T1wDGTMiqty+pS5SL3eaTgW16WDciw=)
                          2: 87P_Ci_iU70ncygI7CnpcT0_t3U.roa (hash: Dx/6MtnsELNcfT3Kd/IAvBHzZJiX4ArB2AnOrW867fY=)
                          3: BVScilCB5AVz4BdoAZN-XzcZq3M.roa (hash: Oi7kCEaMjqNz1/ABo7GXrFFSRxf0di49byHZnkWl/xY=)
                          4: RTkmkNiaF4qMZtlUnnCXs8j2Uz4.roa (hash: vl+4xCPXpGUni/jcI0T4WydcImVmhjMnOzOiGTD/SYU=)
                          5: peAC0jemS44LL9eAMtnnvfhl0QQ.roa (hash: M7HBy7+sXugALnAMwzpYlFnUldtIuCHef9Q+Yk5qLvo=)
                          6: tB98Odb5xySPuatQxtBYr1TkuKY.roa (hash: jqy1Pxj3jnhl57ZRWHAF9knEyjWAZ+BFSBls3RcvCpA=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:04:9d:3b:7a:41:c1:ea:3a:36:45:92:53:c5:7b:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ecba774ba82fb0427f766e783e770f4bd96416f9
        Validity
            Not Before: Jan 31 11:00:06 2025 GMT
            Not After : Feb  1 11:00:06 2025 GMT
        Subject: CN=8a729d723099a83d3419d8c64cb4d1d3223f7c31
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:10:e0:30:31:44:65:48:76:bd:10:67:d2:a9:
                    a0:66:ff:ae:a3:df:b2:73:ed:60:ec:22:b4:d3:01:
                    b7:eb:3c:e5:b1:3e:cf:6a:f4:fc:93:6e:03:34:fc:
                    30:53:9d:cc:25:b3:2e:08:f5:22:b1:51:84:3a:be:
                    5d:fb:22:f5:5b:e1:3b:1b:7c:f1:89:25:0b:15:1d:
                    fa:b6:92:5e:9c:38:38:9b:fd:95:76:43:c5:3d:56:
                    04:86:2c:e2:94:d1:81:63:b6:7a:37:95:1d:da:b2:
                    6a:4a:80:f9:a1:c7:d5:ff:c2:a5:3c:d3:0c:91:39:
                    6f:55:74:d1:a7:75:b3:fc:9a:ef:67:a4:80:38:16:
                    4a:12:9f:69:06:92:9f:ff:4c:09:7a:81:4a:17:4c:
                    0f:b9:58:20:09:5b:b1:3f:d5:03:a4:45:22:e9:42:
                    7b:7d:9d:90:d0:69:9c:a2:86:1b:3e:8b:33:0a:3a:
                    af:4c:82:09:45:ff:ce:bb:14:77:24:75:0f:6c:01:
                    f0:cd:3d:b5:59:16:ab:f6:75:d6:13:ce:fd:39:4c:
                    00:ef:cb:d3:e1:94:7e:42:cf:14:e6:c6:30:47:ba:
                    b5:88:bc:fd:42:74:5e:d8:40:90:99:ca:43:2a:ef:
                    31:94:0d:a4:b3:dd:31:2a:dc:c5:df:6a:11:f7:d1:
                    87:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:72:9D:72:30:99:A8:3D:34:19:D8:C6:4C:B4:D1:D3:22:3F:7C:31
            X509v3 Authority Key Identifier:
                keyid:EC:BA:77:4B:A8:2F:B0:42:7F:76:6E:78:3E:77:0F:4B:D9:64:16:F9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7Lp3S6gvsEJ_dm54PncPS9lkFvk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/810c11-a105-4db1-a6b5-392b863c9f03/1/7Lp3S6gvsEJ_dm54PncPS9lkFvk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/810c11-a105-4db1-a6b5-392b863c9f03/1/7Lp3S6gvsEJ_dm54PncPS9lkFvk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:94:32:66:67:2e:9c:dc:06:27:4f:a8:01:e9:8c:1d:00:f2:
         2b:d9:d1:53:bd:45:91:26:d2:34:78:5a:25:b8:4d:71:6a:91:
         13:74:63:d3:f0:ac:69:ea:02:74:81:22:5a:46:cb:84:58:8a:
         8b:71:ea:e4:a6:e6:81:29:c7:98:11:e1:9b:b2:97:31:8a:5a:
         e6:6b:28:84:cb:5a:e1:2e:e7:c8:8b:07:96:81:0f:1b:6e:b5:
         87:55:af:ca:23:78:f3:a9:a4:fe:49:29:32:2b:b6:75:c4:8c:
         fb:28:48:9d:20:1f:07:da:e5:b2:1c:41:94:46:61:da:ed:59:
         15:d0:70:0f:1d:69:4c:26:b7:a1:36:5d:82:dd:99:7b:c3:d9:
         1e:35:54:ed:b9:7c:d6:ab:92:f4:1f:67:49:20:9a:db:7a:e9:
         c1:6e:11:94:8b:80:9c:e8:fc:a3:d6:4d:8d:04:fd:a2:4d:49:
         27:9b:1c:0d:23:51:52:4f:f3:bf:4d:eb:e5:f8:a5:fa:70:b4:
         b4:71:05:6f:e3:3c:e4:e6:d5:85:de:d3:fe:68:dd:9c:a6:3d:
         fd:09:04:a7:31:0a:a7:ca:80:b5:ac:84:17:0e:c1:52:ee:fe:
         8f:95:3e:f6:1d:7f:16:46:60:b5:da:4c:75:12:c4:ba:c9:c0:
         60:85:46:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----