Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/9668b5-5e92-4c18-9bb9-4351bbf74c0c/1/Ty0wsBXsTvGw08ZDR8jRtZgpP4E.mft
File:                     Ty0wsBXsTvGw08ZDR8jRtZgpP4E.mft (raw, json)
Hash identifier:          CidiYtaNK+CNrG3YN7SPUVECQL1XcbnFrHIEElHj8RM=
Subject key identifier:   0C:C9:2C:6D:4A:44:2C:82:F3:08:3D:17:60:EA:A5:F6:6B:CC:D6:5B
Authority key identifier: 4F:2D:30:B0:15:EC:4E:F1:B0:D3:C6:43:47:C8:D1:B5:98:29:3F:81
Certificate issuer:       /CN=4f2d30b015ec4ef1b0d3c64347c8d1b598293f81
Certificate serial:       0195E190459E870D52D11F3F683C32A52C7C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ty0wsBXsTvGw08ZDR8jRtZgpP4E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1f/9668b5-5e92-4c18-9bb9-4351bbf74c0c/1/Ty0wsBXsTvGw08ZDR8jRtZgpP4E.mft
Manifest number:          0729
Signing time:             Sat 29 Mar 2025 11:01:23 +0000
Manifest this update:     Sat 29 Mar 2025 11:01:23 +0000
Manifest next update:     Sun 30 Mar 2025 11:01:23 +0000
Files and hashes:         1: 1QmmbYJZZWZoqiWNQVq4wZmhLNg.roa (hash: gVkThpG7tc6UKYu6nfIrbCxYB1OnM75XNE9Zf3BxXSE=)
                          2: Gm9NfecPR-RUq_slL2NKmzGqQ1c.roa (hash: tkU2/2KHzDAlfUyxsnryBif6WpEicFze6N39RJoBTkM=)
                          3: IdcqQLaLPNCQJzdTXpACnqYscnI.roa (hash: H+1S4n+OyXlFrQgh9A84gwVt0xMSOKKs5oiKIXtOgjU=)
                          4: OVQ5uPkYukiV8dv56D7X8vrwp8E.roa (hash: OWeiLtMHum8JXxqxvdWPi5crevEaVFFy1EtOqegV6tI=)
                          5: P8VDh_9fdYN8xXLvtJMOKaqZaBs.roa (hash: nMTrg+lyYaQ59OMP8FwWXirKWOtKtrNaOkuqtu/tSjc=)
                          6: Pq__l0a6HrBOcCXhEDnn7AV0g54.roa (hash: A1mBB7bcRpMOwkOKXDY7TtCFDZr1ayBKUG0wvvr/Zlw=)
                          7: Ty0wsBXsTvGw08ZDR8jRtZgpP4E.crl (hash: F1iGmboKw5AmwjdZeM3HTIXQLKZu2gfJ0Z2HMCUt3Us=)
                          8: qqV4lt6FTPnmuHdRaoUeaEC2b8U.roa (hash: HtCD/Cd4hhljqddcvUw+6pkmRGrV8qPj/FjkfpsV+Jw=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:e1:90:45:9e:87:0d:52:d1:1f:3f:68:3c:32:a5:2c:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f2d30b015ec4ef1b0d3c64347c8d1b598293f81
        Validity
            Not Before: Mar 29 11:01:23 2025 GMT
            Not After : Mar 30 11:01:23 2025 GMT
        Subject: CN=0cc92c6d4a442c82f3083d1760eaa5f66bccd65b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:7f:5c:8d:ad:56:29:68:b5:ef:bc:af:da:0d:
                    c8:b0:e7:aa:f8:bd:02:83:de:ef:38:da:db:fe:50:
                    2e:d7:d1:85:8f:71:4d:01:c8:cc:ed:43:fc:46:94:
                    01:b4:29:e4:75:75:92:22:7d:67:5a:f7:5f:e1:fd:
                    9f:b4:48:b7:42:83:9b:e3:ee:97:6a:8b:a5:47:d1:
                    60:05:60:a2:9f:51:a5:01:df:bc:7a:51:43:88:9b:
                    47:b4:90:87:5d:33:51:46:54:51:91:e8:f4:c3:1d:
                    d0:88:f4:40:09:ff:e8:89:ea:15:36:f2:6b:da:40:
                    77:ce:32:8d:e2:16:9e:72:16:95:44:68:0c:d4:88:
                    bc:eb:2c:bf:68:6f:76:2c:e1:35:05:32:8b:1e:91:
                    7a:f8:a6:69:0b:0a:eb:c8:34:bf:cc:3c:db:6c:9d:
                    60:8c:9a:ac:18:13:62:b2:33:00:34:bd:7b:15:72:
                    9d:1d:20:f6:be:d6:df:62:63:d8:3d:80:94:e9:77:
                    e7:a6:06:27:54:21:10:f4:af:ea:02:e1:f5:fa:37:
                    0b:95:82:ed:28:86:d2:fc:75:6b:a9:2e:de:c0:44:
                    d4:6b:c0:34:4a:37:1b:c9:b1:ea:67:b4:95:5a:8b:
                    7e:8b:0f:72:5e:5c:fd:bb:06:54:7b:ad:9d:4f:5d:
                    c9:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:C9:2C:6D:4A:44:2C:82:F3:08:3D:17:60:EA:A5:F6:6B:CC:D6:5B
            X509v3 Authority Key Identifier:
                keyid:4F:2D:30:B0:15:EC:4E:F1:B0:D3:C6:43:47:C8:D1:B5:98:29:3F:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ty0wsBXsTvGw08ZDR8jRtZgpP4E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/9668b5-5e92-4c18-9bb9-4351bbf74c0c/1/Ty0wsBXsTvGw08ZDR8jRtZgpP4E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/9668b5-5e92-4c18-9bb9-4351bbf74c0c/1/Ty0wsBXsTvGw08ZDR8jRtZgpP4E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:9b:4a:df:e6:e8:79:12:16:f1:c0:65:7c:c5:82:c5:c6:62:
         b0:24:2c:4d:48:45:eb:b2:c6:a2:f8:c6:97:a8:cd:94:e1:15:
         a9:8e:79:89:fd:20:69:bd:bd:2f:3c:b9:5b:d8:50:14:63:af:
         df:e2:dd:43:c2:3e:f5:13:a8:7e:e9:90:61:46:5b:f0:2f:21:
         8f:26:c3:65:a8:ca:9e:96:e7:6c:fc:21:7b:d5:9d:f0:b1:c6:
         19:4c:8b:f5:9a:b6:4f:38:2f:a8:02:68:49:1d:03:ee:f5:84:
         d8:96:b4:c5:19:e4:a9:76:59:08:17:85:c1:73:2e:fd:a5:9d:
         25:e6:72:a7:d3:bf:f1:d9:32:5f:fd:e6:9c:db:ba:94:c3:e5:
         db:5d:ae:30:b7:d6:58:e6:64:5e:44:b9:03:31:13:f7:07:03:
         5c:55:e4:45:b8:36:b6:e5:59:97:ff:40:46:88:f5:fa:1e:ec:
         d4:09:8d:19:5f:f8:1d:46:e8:7c:71:17:c4:f2:e7:02:7e:fa:
         bf:02:b2:07:64:86:0a:c6:25:61:4b:61:7e:3b:f9:2a:ed:9a:
         98:b6:a7:3c:28:be:9b:9a:1b:8c:5d:bb:95:a2:1f:ac:dd:1f:
         9e:03:eb:6d:b6:2d:ff:a8:a1:82:3e:47:57:bf:dc:9e:dd:75:
         c8:87:ed:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----