Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/648c75-2be8-4bfd-a1b1-cb8b3a094209/1/Ts9TAHx5zF4vLXNWupEhp4wMdxQ.mft
File:                     Ts9TAHx5zF4vLXNWupEhp4wMdxQ.mft (raw, json)
Hash identifier:          ABUWTPyWUaNvbjkq9ptj4eEovOEZbHYwhx3a+XC4kgA=
Subject key identifier:   7E:F2:4C:53:6E:86:0F:68:BB:F6:A2:12:C8:8F:CD:67:57:E3:B0:79
Authority key identifier: 4E:CF:53:00:7C:79:CC:5E:2F:2D:73:56:BA:91:21:A7:8C:0C:77:14
Certificate issuer:       /CN=4ecf53007c79cc5e2f2d7356ba9121a78c0c7714
Certificate serial:       0194BC3C5281264AC2EE49CAF0E6CBC65072
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ts9TAHx5zF4vLXNWupEhp4wMdxQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f2/648c75-2be8-4bfd-a1b1-cb8b3a094209/1/Ts9TAHx5zF4vLXNWupEhp4wMdxQ.mft
Manifest number:          1487
Signing time:             Fri 31 Jan 2025 12:00:57 +0000
Manifest this update:     Fri 31 Jan 2025 12:00:57 +0000
Manifest next update:     Sat 01 Feb 2025 12:00:57 +0000
Files and hashes:         1: 77nHJ74F1fFAwUbmMeRLrxeDdWA.roa (hash: 2Mtt2AaUFR4ZOfRNdKyuPT3cj2EQ+qy46BQe2ut00YY=)
                          2: G7v3pCkQ6hmfhpbVxzOwUWwmzDY.roa (hash: nVHjBCeWZEPbhgav/+qfuSQLmW0a+8zRMZx9D7jY6PU=)
                          3: Ts9TAHx5zF4vLXNWupEhp4wMdxQ.crl (hash: GEcuZQ1YxOq0a08YbaR0gaWK4mET7vq1OC9EgdOjHn8=)
                          4: ZLnsYJrehSHy13eQaMRY1Tbep5I.roa (hash: beMY8QS7fWlkYI5VTaRGjskfF3hsi1HR7CrNo9yaWBM=)
                          5: jUW3uJuzvpMts6ZS_PpOE0-vHy4.roa (hash: QVsKQjI9Ob132etLfwnFEQDpraGA87DL9fvaD59Kiac=)
                          6: pKRMivQnD51ZFV7c6H0aZRYX5KE.roa (hash: dd7sm2yDcuKSn+d8LJcn2eO/489D0rgWU2bg+0xyjIU=)
                          7: s2kaxqyHVyCTqaRomO4ohfBebsc.roa (hash: vuPF+RwNPBvTGLZXAOB0JJk86Umi+Vc+1JKtKmoQbqM=)
                          8: utyHAEFwJnyFPJNvun5WhnSWaes.roa (hash: 6wOcZjzxIP7txWQ7ykuvtlJ7+2Z7YXGjpvL74E0vFA8=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:3c:52:81:26:4a:c2:ee:49:ca:f0:e6:cb:c6:50:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4ecf53007c79cc5e2f2d7356ba9121a78c0c7714
        Validity
            Not Before: Jan 31 12:00:57 2025 GMT
            Not After : Feb  1 12:00:57 2025 GMT
        Subject: CN=7ef24c536e860f68bbf6a212c88fcd6757e3b079
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:34:d5:4f:72:c8:80:78:5e:0a:25:59:fc:f1:
                    16:ab:f8:c7:00:45:f2:a6:e6:9d:32:fa:96:de:c5:
                    fd:ec:bb:dd:a3:4c:d8:4f:5e:62:6f:9b:6d:26:70:
                    c9:8b:64:83:d9:3c:24:86:f4:f2:00:fe:5c:8e:8f:
                    04:3b:ae:6a:c4:dd:77:db:bd:a5:03:f0:48:ee:cb:
                    59:dd:c5:af:1f:c6:07:58:5e:9d:39:ab:40:28:bc:
                    32:32:f1:b5:d4:5f:df:51:0a:55:67:de:61:2e:11:
                    e3:f4:79:1b:ea:45:0c:d5:75:44:73:7a:b2:43:51:
                    3b:43:aa:4c:eb:18:e8:ed:e9:ee:54:a5:2e:75:76:
                    91:79:67:e9:df:df:e2:1b:9a:12:c9:f7:7a:5e:25:
                    9b:a7:fd:cc:ba:31:29:2e:57:a5:d2:a6:7e:6b:8c:
                    f9:1a:24:de:6d:7c:e7:03:8a:53:ab:39:c9:93:b1:
                    fe:1d:3f:df:c8:66:e0:bc:7e:41:fc:14:b7:07:6c:
                    6e:1c:65:18:2e:a2:70:c7:b1:fb:78:e5:44:55:6e:
                    f9:be:cd:12:05:ac:12:52:c7:62:e4:e1:2f:50:3c:
                    10:bb:e2:69:8d:5f:fd:99:24:ef:2a:d0:c7:b2:4f:
                    0c:1d:68:f1:b2:57:fd:2e:3b:be:17:f5:39:b2:35:
                    38:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:F2:4C:53:6E:86:0F:68:BB:F6:A2:12:C8:8F:CD:67:57:E3:B0:79
            X509v3 Authority Key Identifier:
                keyid:4E:CF:53:00:7C:79:CC:5E:2F:2D:73:56:BA:91:21:A7:8C:0C:77:14

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ts9TAHx5zF4vLXNWupEhp4wMdxQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/648c75-2be8-4bfd-a1b1-cb8b3a094209/1/Ts9TAHx5zF4vLXNWupEhp4wMdxQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/648c75-2be8-4bfd-a1b1-cb8b3a094209/1/Ts9TAHx5zF4vLXNWupEhp4wMdxQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:a4:6e:c0:bb:80:d4:d4:d6:39:90:01:fc:89:aa:34:ff:0b:
         53:ad:bf:87:ab:07:00:e0:89:2a:08:6e:de:91:3f:67:34:5f:
         ab:73:d8:2f:49:ce:7f:2a:0b:46:53:23:ec:fa:e7:cf:b3:34:
         4f:eb:71:41:3d:06:f9:07:9c:4c:8a:d4:07:b2:4c:cd:66:20:
         fc:a8:98:f1:27:d8:7b:96:20:77:d2:28:a6:00:0c:84:42:6d:
         3b:47:1f:ae:56:3b:04:7a:42:7e:b3:4d:57:e1:f4:a4:09:e4:
         c7:d0:f7:83:1e:25:f4:0c:85:a2:76:17:54:d4:fc:d4:dd:b9:
         cc:85:d2:d4:b1:9b:15:bb:3e:03:d4:35:d6:de:de:05:be:35:
         50:2b:49:a1:42:7c:30:29:c5:a2:78:7d:5b:a0:1b:e9:91:1b:
         e1:2d:86:a4:fd:25:ff:df:eb:67:55:ac:50:f6:03:65:69:ba:
         e6:f9:17:93:f8:74:fb:85:53:c4:70:e9:93:71:99:e2:67:60:
         f0:b5:a9:e4:b9:68:f7:1b:47:ed:48:62:98:3d:b5:a7:d6:b0:
         a3:aa:d9:7f:8e:5f:2e:bc:97:9e:5e:ff:4a:ae:05:a3:27:c0:
         54:6b:a4:5c:50:25:91:d4:62:c4:8c:c6:64:2c:ae:01:62:33:
         05:10:00:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----