Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/bd24a5-eacd-46e4-b1db-ad73abd00452/1/7_2zPuX9Ui-vCiR-BXm78e785LE.mft
File:                     7_2zPuX9Ui-vCiR-BXm78e785LE.mft (raw, json)
Hash identifier:          p5Xns9EbdFXmJK7xlIXrL4bEPkT7aybHP3pBEKyDLeI=
Subject key identifier:   F3:65:B5:83:5F:31:18:98:35:C5:23:7C:A8:7D:67:70:53:FB:8F:F0
Authority key identifier: EF:FD:B3:3E:E5:FD:52:2F:AF:0A:24:7E:05:79:BB:F1:EE:FC:E4:B1
Certificate issuer:       /CN=effdb33ee5fd522faf0a247e0579bbf1eefce4b1
Certificate serial:       0193FAB03C0DF60A59AFDA6039B3F8D63B42
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7_2zPuX9Ui-vCiR-BXm78e785LE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f6/bd24a5-eacd-46e4-b1db-ad73abd00452/1/7_2zPuX9Ui-vCiR-BXm78e785LE.mft
Manifest number:          13C8
Signing time:             Tue 24 Dec 2024 22:01:13 +0000
Manifest this update:     Tue 24 Dec 2024 22:01:13 +0000
Manifest next update:     Wed 25 Dec 2024 22:01:13 +0000
Files and hashes:         1: 0xA4rG88gbkkPC5SMlHNxNCVXyo.roa (hash: R7sAlfDK/ph2irH7p348mxNYfRtwKNTtujTmdX0r6bw=)
                          2: 7_2zPuX9Ui-vCiR-BXm78e785LE.crl (hash: KNXuKn5M9cAWE40kdePXkk9Hk7C+Vgo4peSIPdnz0mA=)
                          3: eOa0fI2Z3aqXmDRMwT9hJYQ-cSA.roa (hash: ivfhB36m9UDvOI1o9p8EAqI4/BWM+3lTcGCi2htS3Wk=)
                          4: v-QI8ti1dVuqVXUdQqHxAblT2qg.roa (hash: YzTl7Q+0kV3EYMy1u9rppMVA5sYnHmeyhljH6jGOxRU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:fa:b0:3c:0d:f6:0a:59:af:da:60:39:b3:f8:d6:3b:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=effdb33ee5fd522faf0a247e0579bbf1eefce4b1
        Validity
            Not Before: Dec 24 22:01:13 2024 GMT
            Not After : Dec 25 22:01:13 2024 GMT
        Subject: CN=f365b5835f31189835c5237ca87d677053fb8ff0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:54:e9:1a:61:c8:13:8a:79:3b:0a:9c:a6:fe:
                    b7:26:8f:ae:4f:84:d7:ca:59:a1:e7:92:e9:48:aa:
                    70:78:5e:a7:cf:e8:9d:c5:1a:c3:fb:9e:3e:35:da:
                    41:f7:b7:cc:c9:d7:ea:c2:ae:56:d2:14:be:bb:9e:
                    2c:95:50:aa:ca:0c:f5:6d:3b:f8:1d:de:62:ec:1a:
                    dc:3b:d5:d0:73:da:6e:52:09:b2:cd:41:be:2a:5c:
                    5e:6f:0c:30:93:e3:22:1b:3f:69:b4:57:0b:08:5c:
                    9c:fa:56:64:e0:58:fe:2e:8e:52:c7:a0:1c:f2:3e:
                    b5:7a:72:7d:1d:f1:14:16:7c:b6:f5:ff:93:fa:8a:
                    7b:4d:7a:b8:4b:86:a9:63:e7:07:29:01:7a:d6:7f:
                    5c:c2:70:1c:5f:81:a6:4c:0c:a1:1a:1a:23:74:f9:
                    8b:df:22:84:1f:4a:53:6d:fc:12:b3:b1:ec:73:19:
                    85:1e:23:3f:2c:bd:31:1c:7f:c8:b5:74:eb:87:df:
                    8a:db:67:3e:88:0d:d5:0e:5c:6d:56:d5:10:e4:da:
                    31:eb:19:93:50:b9:b4:b7:d8:4d:29:4c:47:03:b0:
                    b5:28:02:a3:e7:27:f0:a9:68:a3:f9:b7:58:ba:c2:
                    f1:12:fe:5f:41:32:7a:dd:48:1b:42:2f:ea:94:f3:
                    a0:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:65:B5:83:5F:31:18:98:35:C5:23:7C:A8:7D:67:70:53:FB:8F:F0
            X509v3 Authority Key Identifier:
                keyid:EF:FD:B3:3E:E5:FD:52:2F:AF:0A:24:7E:05:79:BB:F1:EE:FC:E4:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7_2zPuX9Ui-vCiR-BXm78e785LE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/bd24a5-eacd-46e4-b1db-ad73abd00452/1/7_2zPuX9Ui-vCiR-BXm78e785LE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/bd24a5-eacd-46e4-b1db-ad73abd00452/1/7_2zPuX9Ui-vCiR-BXm78e785LE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ab:93:89:44:de:84:fc:16:f7:40:d0:ea:62:6a:ec:d6:ea:e6:
         b1:f0:e1:2e:bd:28:8e:65:4d:c9:d0:40:39:ae:c3:ab:95:28:
         2c:e7:f9:71:3d:ad:e6:3a:d1:76:db:60:54:f4:aa:8a:cf:1c:
         79:42:a8:f7:66:d6:e8:a7:9e:b4:c3:25:71:79:03:65:c9:38:
         e3:81:1a:bf:4f:66:34:ba:a0:da:98:0b:db:6f:3f:66:68:56:
         5a:fe:c1:04:25:0a:a2:77:27:05:b8:f4:2b:42:9b:0d:a7:7a:
         2f:2c:ab:2c:15:fc:79:78:2d:c0:6c:4a:bd:41:b8:66:14:36:
         d4:2a:1c:2a:9a:ec:ea:9a:0b:8f:df:51:6b:6e:5b:e3:ce:cd:
         78:72:29:b5:e2:96:80:6c:00:a6:99:f5:f2:04:42:fd:4c:3b:
         54:e7:6a:23:d7:56:12:99:73:d5:ef:44:84:7f:fd:40:c0:5e:
         d6:85:4b:38:74:ca:25:58:51:e0:77:c2:18:6e:99:71:f0:4e:
         dc:a1:2d:e9:41:24:6c:50:db:44:4a:0f:b0:28:ef:b6:f2:ba:
         19:63:7b:9a:b3:c4:81:c0:98:e1:c6:01:1e:06:a3:89:d6:10:
         ce:0f:88:c2:2d:eb:c1:6b:fd:83:db:3c:03:ae:e7:18:de:b5:
         b1:46:65:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----