Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/4fd95a-5157-4a1b-b868-138995c99b97/1/Ee7NccGT5Kww7QPQufBdoQHGA9I.mft
File:                     Ee7NccGT5Kww7QPQufBdoQHGA9I.mft (raw, json)
Hash identifier:          zsonAptk10M7kNf7Pqy8THw7JYGfy3pbZcc8OaVc9gk=
Subject key identifier:   CD:CB:B8:16:25:DC:33:0A:22:34:D5:A5:BE:A3:9E:6B:18:68:5C:24
Authority key identifier: 11:EE:CD:71:C1:93:E4:AC:30:ED:03:D0:B9:F0:5D:A1:01:C6:03:D2
Certificate issuer:       /CN=11eecd71c193e4ac30ed03d0b9f05da101c603d2
Certificate serial:       019416CBA575B623020ACD6C86EAEDFA7A3B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ee7NccGT5Kww7QPQufBdoQHGA9I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f6/4fd95a-5157-4a1b-b868-138995c99b97/1/Ee7NccGT5Kww7QPQufBdoQHGA9I.mft
Manifest number:          0FB9
Signing time:             Mon 30 Dec 2024 09:00:32 +0000
Manifest this update:     Mon 30 Dec 2024 09:00:32 +0000
Manifest next update:     Tue 31 Dec 2024 09:00:32 +0000
Files and hashes:         1: 197szCrW8c-DAHsUqyFAFcvxUL4.roa (hash: sCZJa/rEhODEYIftgT48Tsv5+yoWxHxqbZ2unAtdkBs=)
                          2: 4-CZuqs_wfNDujIuGX70xVA6tSA.roa (hash: MXhdMCQ4Vga0B8DAzQj3qWrB3c94byRufzhSguRvTxI=)
                          3: 71pKUD58AydOaExs5YStKg5RgYA.roa (hash: 1S/+b+7aBmbBVYSTGcnBdXeC+Nd9OCjLHIlFzBCaweg=)
                          4: Ee7NccGT5Kww7QPQufBdoQHGA9I.crl (hash: 1s96rDomnMTz+ggFkar/Mgp0UEb+TLVmM3qkyFa0L90=)
                          5: NENTcyirxpS18KWMaJ4ppkv3kkU.roa (hash: aXE49s2ylPFFgLFqGZRGP9jML1Wlh1OaMcSBkwgg5tQ=)
                          6: YGTQFN0IbNuChwGm1BTZVqce7f0.roa (hash: lqRQAVfD8ph7SMfYcv4SfNPbE8/0fynThAZ+U/f55OI=)
                          7: ZBvwiMSSmKdYwMBlolI8rm7h7Uc.roa (hash: ZVrUShls4ZbYpfb6JomHd0hStXLED8WG0rzmBS3BYf8=)
                          8: ePRHgcRts2kLWhc9jJnowDOe2Rw.roa (hash: 57AeA9tDBXLpDPHA2vfFanfdsbOeMA3fYU2XrhbNWPw=)
                          9: tfuB02HQtimoQr-DD5osgqIb4Pc.roa (hash: ATYEGGuMnO82y/H5Bpf5cxk5trCzNvbXLDdNGdZ+Dow=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:16:cb:a5:75:b6:23:02:0a:cd:6c:86:ea:ed:fa:7a:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11eecd71c193e4ac30ed03d0b9f05da101c603d2
        Validity
            Not Before: Dec 30 09:00:32 2024 GMT
            Not After : Dec 31 09:00:32 2024 GMT
        Subject: CN=cdcbb81625dc330a2234d5a5bea39e6b18685c24
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:57:f3:e3:1c:95:9a:95:6a:ca:54:32:e0:96:
                    c4:63:ee:e7:97:5b:0b:bc:d5:c9:6d:dd:2a:0c:12:
                    49:18:43:cf:ce:44:5e:58:5a:6b:63:c5:87:aa:f0:
                    4a:ff:a7:0d:b0:90:f5:08:cd:ec:3a:31:d0:60:14:
                    5e:4b:1d:3d:a2:a7:46:0c:3d:cd:64:68:50:10:d3:
                    67:10:1e:3a:41:bf:cf:9b:43:82:4c:c1:fa:3f:f3:
                    55:63:94:0d:42:cb:4a:d9:3b:50:13:ee:2d:10:4b:
                    c4:be:92:fc:02:c0:98:aa:79:d8:f6:e4:a4:f1:02:
                    a5:25:34:6e:86:64:71:42:cf:64:a4:93:82:c0:bc:
                    34:e3:9f:b4:83:4d:0b:17:da:5a:e7:bc:75:63:33:
                    3a:b9:47:f3:31:6a:6d:8c:2e:ba:1a:15:95:51:21:
                    28:09:93:54:d0:4e:39:0a:2d:c8:1d:05:15:ae:a5:
                    a3:4e:2e:c0:50:98:88:36:e9:2d:93:cf:ab:0f:af:
                    f5:99:dc:83:99:4d:0c:25:92:4a:8b:9d:b8:c4:14:
                    aa:f0:5d:98:1e:ef:4e:cc:19:c3:78:30:7e:dc:bb:
                    d8:40:47:28:60:c8:74:53:2f:39:8d:77:55:d3:40:
                    b7:16:b4:27:ec:12:32:7c:ac:42:31:47:a0:4f:7a:
                    a0:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:CB:B8:16:25:DC:33:0A:22:34:D5:A5:BE:A3:9E:6B:18:68:5C:24
            X509v3 Authority Key Identifier:
                keyid:11:EE:CD:71:C1:93:E4:AC:30:ED:03:D0:B9:F0:5D:A1:01:C6:03:D2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ee7NccGT5Kww7QPQufBdoQHGA9I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/4fd95a-5157-4a1b-b868-138995c99b97/1/Ee7NccGT5Kww7QPQufBdoQHGA9I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/4fd95a-5157-4a1b-b868-138995c99b97/1/Ee7NccGT5Kww7QPQufBdoQHGA9I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:aa:e8:8b:10:52:a3:34:e0:fb:66:90:20:55:1c:a9:ba:c5:
         40:5a:78:63:39:3b:c6:bc:75:03:43:93:fd:f0:95:c7:a0:47:
         a1:5a:75:d2:1e:4f:52:d9:70:c9:1d:8e:55:b5:30:65:7e:29:
         0e:30:e8:e8:3e:ff:43:ef:ee:f3:b0:0a:d1:0f:ca:de:28:5b:
         55:b6:62:1b:2e:8a:9e:5f:a6:e5:1f:f0:c2:b7:14:08:64:0a:
         dc:6d:7a:da:37:27:e4:e5:65:50:ba:50:00:00:d7:5e:9a:74:
         a0:33:67:b1:68:7f:f1:76:33:c0:3b:96:04:c2:e5:fb:7f:86:
         61:c8:97:06:90:ed:2d:d7:96:e4:b7:92:11:75:db:a4:64:0e:
         5e:16:dd:02:d2:16:2d:2c:67:2a:3a:0f:36:e7:a6:26:fa:8f:
         1f:16:7d:2f:14:96:40:7e:c4:0f:62:4e:d4:6a:32:3d:80:31:
         54:d1:ef:94:64:10:8b:51:84:22:67:be:61:ba:36:70:fa:4f:
         c4:17:81:c2:c3:38:6b:c1:26:2c:1b:1a:b4:63:75:32:91:08:
         17:cb:eb:16:77:3b:cd:df:26:f7:ab:42:80:97:8d:9a:d3:22:
         48:0f:5a:a3:3a:1a:ff:7a:2b:65:3d:7f:d5:4a:c1:b3:0b:33:
         74:b1:9f:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----