Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/b82a06-ab0d-4adf-8a85-97c9aab828f2/1/e71RJyBktjssZjwClroR216iOMA.mft
File:                     e71RJyBktjssZjwClroR216iOMA.mft (raw, json)
Hash identifier:          +F/LqNH88ajsPezYGFUPlCXU41KGAg6FZDfbl4NDrd0=
Subject key identifier:   25:88:73:C7:0A:66:85:52:CC:0A:DA:D3:FE:5C:88:22:77:7D:90:A5
Authority key identifier: 7B:BD:51:27:20:64:B6:3B:2C:66:3C:02:96:BA:11:DB:5E:A2:38:C0
Certificate issuer:       /CN=7bbd51272064b63b2c663c0296ba11db5ea238c0
Certificate serial:       0194BCA96B7D75AFE3044B42A92B44704C16
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/e71RJyBktjssZjwClroR216iOMA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e9/b82a06-ab0d-4adf-8a85-97c9aab828f2/1/e71RJyBktjssZjwClroR216iOMA.mft
Manifest number:          1431
Signing time:             Fri 31 Jan 2025 14:00:07 +0000
Manifest this update:     Fri 31 Jan 2025 14:00:07 +0000
Manifest next update:     Sat 01 Feb 2025 14:00:07 +0000
Files and hashes:         1: 2vvTx_yFrt5UrJ0WVDTO--gQh60.roa (hash: eB4HsG9FbYTVRCz9S1t9E+zrZDYTm7BTeCXp3dMiZIo=)
                          2: IB9Yu1asQTPPy0ngjtpUTQR_Ivw.roa (hash: z5Pywc8Q1iL9qP7SJuBWFjeFMCxifvSPuK7zriYnBBA=)
                          3: Q0Z-cVwA4XOeztdkNcwehwFNVmI.roa (hash: MwfJgtXJrn1M2+nm68X48C8kqLl8c52QU/MPByryzoA=)
                          4: QvqihRljCm445jweQ6gFK7wXIOs.roa (hash: b6Ii57U4Sye1rJOrny/XLuYZqJiC9WdbHx+cBgoka7I=)
                          5: T-_3CIyQbqlGg305SxQy5ftJI7w.roa (hash: F0s6Ci0GqXXpEL55mUmVrJT+nL7cPcs5GgzPcy37r9s=)
                          6: e71RJyBktjssZjwClroR216iOMA.crl (hash: tWNcyZHYK2YXT5PZnFYzP9yxndcBayCrq250l4830og=)
                          7: huUdoRBrSkw9ERfAbY_K0ms09AQ.roa (hash: /chnp5DKS977ybnp/eJrPNXNv/laADFMHK9MLA974oE=)
                          8: s7qZwF1zjjkn93vRYJKMTeg7njg.roa (hash: pDr3B3csiw+fcAUQmbSFOppqABEiwfJIZfstULKUEoQ=)
                          9: vuOqkJ576TdEaXJp1TfrxOCwRC0.roa (hash: Z+MjMiYxt6MDAWfYglmjvECMwme4DjstDsJyATyGhhY=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:a9:6b:7d:75:af:e3:04:4b:42:a9:2b:44:70:4c:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7bbd51272064b63b2c663c0296ba11db5ea238c0
        Validity
            Not Before: Jan 31 14:00:07 2025 GMT
            Not After : Feb  1 14:00:07 2025 GMT
        Subject: CN=258873c70a668552cc0adad3fe5c8822777d90a5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:25:d6:b5:84:af:38:f4:51:5c:f8:a5:fe:f7:
                    b4:2f:aa:b6:b0:a0:28:12:cc:f7:f4:c7:e0:3a:df:
                    39:6d:19:ef:2c:07:c4:1d:5a:0f:bf:66:f1:3a:f6:
                    c9:81:76:cc:66:ae:9a:37:71:53:cd:dc:89:04:88:
                    75:8e:73:38:c4:73:6a:a6:80:cd:36:78:e9:f0:11:
                    4f:37:d9:71:f0:ea:87:f8:0f:62:85:c7:fd:cb:01:
                    f6:e6:3d:83:59:cc:9a:fc:fc:d3:b0:49:76:74:5e:
                    5d:3a:71:29:e7:95:db:af:d1:52:c1:9d:bd:60:d5:
                    20:5b:2b:c0:11:8c:1d:87:a0:87:d5:90:47:bb:64:
                    df:c1:93:17:d3:ad:74:b4:55:f9:4e:a2:ef:50:8d:
                    56:22:f7:93:5e:ae:35:cf:ed:9a:63:8c:69:0f:12:
                    31:a2:0a:d2:b0:59:0f:29:ab:6a:63:be:4d:79:37:
                    dd:7e:28:03:eb:9c:48:50:b5:b9:a5:96:c9:50:7e:
                    f2:0b:24:8e:73:44:42:d3:11:af:23:af:c1:13:f4:
                    ba:43:2f:40:4a:f3:46:fa:da:a1:c8:9c:68:71:a2:
                    1a:76:1a:36:7d:9b:d9:bb:97:24:35:21:0c:05:48:
                    fb:9a:77:cb:43:23:60:56:20:ae:95:ab:de:14:ae:
                    c0:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:88:73:C7:0A:66:85:52:CC:0A:DA:D3:FE:5C:88:22:77:7D:90:A5
            X509v3 Authority Key Identifier:
                keyid:7B:BD:51:27:20:64:B6:3B:2C:66:3C:02:96:BA:11:DB:5E:A2:38:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e71RJyBktjssZjwClroR216iOMA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/b82a06-ab0d-4adf-8a85-97c9aab828f2/1/e71RJyBktjssZjwClroR216iOMA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/b82a06-ab0d-4adf-8a85-97c9aab828f2/1/e71RJyBktjssZjwClroR216iOMA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c7:0b:b6:5e:2f:c6:3d:8e:9e:e2:eb:70:b6:f7:39:23:04:1e:
         27:4a:e1:e0:4b:a1:61:e2:a7:37:ee:f5:1e:1f:c2:cd:8d:bd:
         55:f4:05:e3:07:52:4e:ed:cc:03:ba:4c:08:bb:d1:6b:42:d5:
         28:66:ff:a5:cb:92:48:18:31:0e:96:db:c4:47:f0:11:86:70:
         63:1f:85:96:38:bd:35:f7:6c:b3:6b:c8:53:07:35:1e:97:30:
         f8:60:44:0e:e6:ed:d2:75:25:d3:c6:1b:73:a7:9d:1a:20:a2:
         a2:98:84:7e:3c:fb:98:07:82:23:b6:c9:57:7d:3a:38:3e:4e:
         49:d6:4e:2a:85:ed:3b:59:f4:7d:24:94:53:6f:56:28:cb:44:
         52:90:7c:a1:28:d3:93:c3:3f:54:cc:46:61:f6:1f:5b:9c:7d:
         b6:af:9f:b8:5c:e2:fd:77:e6:97:16:63:32:55:ca:be:d7:50:
         3f:a6:3f:47:87:e6:2d:65:ca:c0:ca:95:d2:da:d6:28:d9:92:
         ec:03:3a:31:69:63:15:bd:ec:a9:ea:8e:8c:90:4b:e4:a1:71:
         3f:fb:51:ef:79:d2:24:55:0b:af:21:98:87:41:3b:7a:d5:79:
         b4:76:94:e3:8c:24:a8:8a:aa:da:a6:8d:00:a4:a2:cb:93:3e:
         a9:ee:70:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----