Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/7dc85c-b0a1-48d9-9870-3825bf33e4ec/1/7Er2_cFtaK4mqg6rViPmviFwNsE.mft
File:                     7Er2_cFtaK4mqg6rViPmviFwNsE.mft (raw, json)
Hash identifier:          rPN2+/R6YEvb38frv1D7iR2p0nzUjlULzaVEehYi+8A=
Subject key identifier:   9E:A2:3F:74:14:52:14:25:25:0C:DC:D5:48:28:82:0A:D7:5A:E0:A7
Authority key identifier: EC:4A:F6:FD:C1:6D:68:AE:26:AA:0E:AB:56:23:E6:BE:21:70:36:C1
Certificate issuer:       /CN=ec4af6fdc16d68ae26aa0eab5623e6be217036c1
Certificate serial:       01929C4881D3B61D53CA34C0949F3C808260
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7Er2_cFtaK4mqg6rViPmviFwNsE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/20/7dc85c-b0a1-48d9-9870-3825bf33e4ec/1/7Er2_cFtaK4mqg6rViPmviFwNsE.mft
Manifest number:          1315
Signing time:             Thu 17 Oct 2024 21:00:50 +0000
Manifest this update:     Thu 17 Oct 2024 21:00:50 +0000
Manifest next update:     Fri 18 Oct 2024 21:00:50 +0000
Files and hashes:         1: 2L8hVVHoKFZw4Yx_D09pPqSfAts.roa (hash: JXU5vI5lUU/SvohRBy8hBIpXka1bkgIZNiffvKaBJto=)
                          2: 7Er2_cFtaK4mqg6rViPmviFwNsE.crl (hash: Sbbv5ix6s2Njdv7UH3lv9kfXeB7yyn361+Ja2sLY3Ak=)
                          3: c_ORZpR3ooKMGPfa0OmblOdGe1o.roa (hash: 7oPG5YhkzTFPq85armoAnIO4OPEMfyiq1TL/Uwm1q9g=)
                          4: ggyIJb7LBeTbi9_w0Iaae3gkTp0.roa (hash: MOO8Uj5uxGUTYw4us+UxZbh2Gc8FX3omN0gvyIRSyx0=)
                          5: y1L9v2vVO-q46RhUkE8N7byr3OU.roa (hash: JA7iGZg7BPOeagDaNGRiFsitu4NX60PuxnepgH1FCks=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:92:9c:48:81:d3:b6:1d:53:ca:34:c0:94:9f:3c:80:82:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ec4af6fdc16d68ae26aa0eab5623e6be217036c1
        Validity
            Not Before: Oct 17 21:00:50 2024 GMT
            Not After : Oct 18 21:00:50 2024 GMT
        Subject: CN=9ea23f7414521425250cdcd54828820ad75ae0a7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:af:b0:f0:83:8c:b9:e3:ab:78:06:67:da:9c:
                    39:41:03:60:be:f2:83:42:ea:7c:66:17:94:0f:7b:
                    cb:e9:b0:8e:63:9a:0d:f9:44:1a:1d:87:76:c4:51:
                    4f:d3:a7:bb:cc:8d:04:79:fd:4e:82:02:ab:9d:e8:
                    a5:35:23:6b:fe:5d:75:07:b7:de:bb:27:fd:33:ff:
                    ec:88:d9:d6:b3:ab:dc:b8:63:04:e1:32:ce:b8:45:
                    0d:c0:cf:ca:10:92:b9:b1:57:49:f4:79:21:17:1d:
                    f0:8a:99:c2:9c:5b:a1:de:4a:df:a7:22:ac:58:e7:
                    30:8e:d3:00:62:26:7a:db:95:4d:68:ab:44:aa:c1:
                    7d:9f:a3:90:32:6c:0e:30:de:26:2e:d8:c2:8a:d8:
                    50:5c:ff:bc:bf:29:39:2f:65:ea:99:25:8d:e8:c3:
                    9b:c6:6d:b1:4f:b1:96:88:45:7a:4c:aa:33:17:ab:
                    4a:bf:7c:77:84:78:01:33:f9:1b:21:ce:69:7b:38:
                    9e:41:2e:49:18:08:fa:fd:c4:cd:97:4f:f3:92:e2:
                    3f:17:62:48:4e:13:e9:bd:31:bf:2d:94:e4:37:71:
                    38:2f:e0:9e:11:e5:ae:6c:f9:96:cb:db:7a:fd:70:
                    50:62:92:6b:78:11:5f:24:87:66:29:d3:e9:c1:7c:
                    f7:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:A2:3F:74:14:52:14:25:25:0C:DC:D5:48:28:82:0A:D7:5A:E0:A7
            X509v3 Authority Key Identifier:
                keyid:EC:4A:F6:FD:C1:6D:68:AE:26:AA:0E:AB:56:23:E6:BE:21:70:36:C1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7Er2_cFtaK4mqg6rViPmviFwNsE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/7dc85c-b0a1-48d9-9870-3825bf33e4ec/1/7Er2_cFtaK4mqg6rViPmviFwNsE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/20/7dc85c-b0a1-48d9-9870-3825bf33e4ec/1/7Er2_cFtaK4mqg6rViPmviFwNsE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         91:fe:33:5a:52:7b:cd:2e:b1:c8:8f:b8:7c:ec:42:f7:1e:34:
         a2:88:49:03:c7:c4:54:91:44:b5:e3:f0:d6:25:bd:ca:a5:59:
         c6:f1:0c:6c:dc:8a:b5:cb:58:dd:63:f4:02:94:bd:6b:69:ae:
         1f:55:dc:08:f6:ad:fb:0b:4f:15:88:a2:6a:8b:f5:e4:e4:a4:
         ca:da:60:d1:88:62:81:53:23:d1:6d:84:7c:7b:0b:3d:8d:1f:
         0b:67:12:21:42:18:60:4e:5e:1f:5b:5c:ee:ad:f2:0d:52:72:
         f3:f3:64:ba:42:40:63:ad:9f:a3:db:d0:e6:f8:da:0c:ce:a1:
         39:98:df:a1:e2:b5:8f:b8:cc:b4:c9:04:87:cf:07:4f:6a:54:
         82:f8:49:15:6d:ba:c8:ee:46:15:64:73:0c:56:95:05:fd:9a:
         98:fd:c2:3c:bc:18:d6:ef:b5:e8:e7:da:18:f7:68:c8:8b:52:
         34:46:65:3d:1d:38:d3:ef:5c:7e:60:a6:9c:2d:12:eb:a2:98:
         ee:7d:25:d1:3c:ce:65:24:71:f9:45:27:4b:5e:26:32:83:89:
         13:18:40:ea:84:0f:d7:15:64:dd:3a:13:28:a5:c4:f3:48:d8:
         df:08:1a:d3:87:29:db:85:38:b7:a7:f0:92:a9:e2:7e:f3:2d:
         39:04:d9:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----