Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/f1b3da-bebf-44b0-ab12-d32e27fb7e59/1/ti1M7HgzBZI-NJftiE8cRFtOePs.mft
File:                     ti1M7HgzBZI-NJftiE8cRFtOePs.mft (raw, json)
Hash identifier:          K1s6tuscXzhngcp0fphTXf0H+d35TRUT9dDO7DBz274=
Subject key identifier:   49:25:D6:7B:07:72:FC:8A:54:AA:D1:14:8D:93:3C:B8:78:D7:AB:3D
Authority key identifier: B6:2D:4C:EC:78:33:05:92:3E:34:97:ED:88:4F:1C:44:5B:4E:78:FB
Certificate issuer:       /CN=b62d4cec783305923e3497ed884f1c445b4e78fb
Certificate serial:       0195E1220022CC2B7AA48879C45E8C7FC66C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ti1M7HgzBZI-NJftiE8cRFtOePs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/35/f1b3da-bebf-44b0-ab12-d32e27fb7e59/1/ti1M7HgzBZI-NJftiE8cRFtOePs.mft
Manifest number:          0560
Signing time:             Sat 29 Mar 2025 09:00:56 +0000
Manifest this update:     Sat 29 Mar 2025 09:00:56 +0000
Manifest next update:     Sun 30 Mar 2025 09:00:56 +0000
Files and hashes:         1: 1ZLLlpQFZQkTqIBAHCc5d1VfoKs.roa (hash: y420UM0xhYvhHVANW5cNvzv2FZY2TvVXtMQ3bLwlcAQ=)
                          2: 8tw_KHHi6CGYhD3JJ8dYd2q6OZE.roa (hash: CHBEM8ZOI7IV+5GWcU/yA4G3UTbvKnv4HCF4/9ncvVU=)
                          3: Lu657SoGRO5i41akpdqVykwmDPo.roa (hash: L0TXwFUTYgd55jn30MVoW0Y/jyiw8Ro0oBxR271bBjw=)
                          4: mWU4uI3AED3kVRIGqsNYpuYsgY4.roa (hash: Fq84oAvE6fP7h+/uIBzyy7ivRhelDe2jm1K3Ltmpeog=)
                          5: ti1M7HgzBZI-NJftiE8cRFtOePs.crl (hash: Ug3Mxl0bq+1SSqTGDzJFi3iaUGlLU6RoqVGAvN9BEL0=)
                          6: uvReHNZu0Zx8p75NQaqJP-qKUVY.roa (hash: KwvRsYUs0tG71ha16eVgbI+g8wMn509oBtGucdJdGuU=)
                          7: vrn7liTWiOV54a6bn1xF4EHebFc.roa (hash: mJIlU8Z+TC1dGYbjGa/ajMktQWJNT60JPY6KVtsPkZI=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:e1:22:00:22:cc:2b:7a:a4:88:79:c4:5e:8c:7f:c6:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b62d4cec783305923e3497ed884f1c445b4e78fb
        Validity
            Not Before: Mar 29 09:00:56 2025 GMT
            Not After : Mar 30 09:00:56 2025 GMT
        Subject: CN=4925d67b0772fc8a54aad1148d933cb878d7ab3d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:3d:89:a8:2e:1d:0f:82:53:dd:28:20:82:8b:
                    e1:2f:63:b3:ea:0a:b0:d0:f9:ec:2c:ec:1c:fa:c5:
                    3c:74:48:ed:fb:d2:53:ec:5a:72:3c:ef:52:63:76:
                    84:f3:b8:a5:72:a2:63:f4:9f:de:d0:91:e9:ce:c4:
                    5d:16:f8:5d:bc:0c:4c:0c:0f:a5:e8:06:16:46:38:
                    d6:d3:a8:f8:fc:fe:4c:aa:1b:bd:f9:dd:3a:e1:d1:
                    be:13:e8:4f:bc:ea:9e:2d:a2:5f:64:bd:83:7b:6c:
                    0f:ed:33:60:ec:ee:f4:36:d8:51:9f:fc:4e:c2:56:
                    78:12:90:28:39:42:9a:46:5c:c8:0d:d4:0d:15:c0:
                    fa:74:d9:02:a9:1e:8f:68:1e:83:43:c8:a6:51:f7:
                    4e:b8:33:d3:b3:20:89:20:3d:e0:dd:15:d8:dc:09:
                    fb:21:0c:86:75:34:89:b7:2e:9a:16:70:1f:9c:84:
                    08:57:5f:e2:65:25:8f:17:6d:74:af:b4:f4:7e:5c:
                    0c:81:7b:1e:23:a6:70:c3:59:cc:61:38:9c:2d:ab:
                    6d:99:7a:7c:c4:7a:25:38:14:ab:3e:5f:c9:4a:b5:
                    a4:5f:70:8c:c1:f6:5f:76:fc:2c:50:e2:2e:1a:ef:
                    3b:37:cb:9b:6d:0a:27:cc:f3:ac:83:7f:4b:5f:83:
                    70:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:25:D6:7B:07:72:FC:8A:54:AA:D1:14:8D:93:3C:B8:78:D7:AB:3D
            X509v3 Authority Key Identifier:
                keyid:B6:2D:4C:EC:78:33:05:92:3E:34:97:ED:88:4F:1C:44:5B:4E:78:FB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ti1M7HgzBZI-NJftiE8cRFtOePs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/f1b3da-bebf-44b0-ab12-d32e27fb7e59/1/ti1M7HgzBZI-NJftiE8cRFtOePs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/35/f1b3da-bebf-44b0-ab12-d32e27fb7e59/1/ti1M7HgzBZI-NJftiE8cRFtOePs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:79:24:e0:51:30:7d:a3:91:ec:b5:44:a1:42:33:d6:af:56:
         aa:91:30:e1:2a:0b:1d:9a:2c:6c:5a:f4:e8:e0:2f:2c:f5:5d:
         4f:0c:bf:4b:17:f2:d2:82:9d:ce:29:ae:fe:25:27:9e:4b:3b:
         58:84:88:fb:30:67:61:f9:73:0b:2b:9d:8b:6a:a7:14:1a:dd:
         da:80:d1:3f:da:c9:a7:e2:e0:16:a8:8f:c4:13:2f:00:6c:ef:
         00:01:d5:e3:86:c9:c2:8a:05:24:e4:b0:82:15:ef:07:33:fe:
         58:1e:bc:78:7a:6c:d1:04:f6:1c:1c:a3:1f:c3:a3:2c:f0:2b:
         d7:a7:a2:9a:99:ed:8c:b6:0b:b6:f5:e1:da:b2:b5:64:26:36:
         10:43:83:89:34:da:87:16:45:12:d4:1c:52:5e:12:5e:4f:cf:
         f2:5e:08:86:47:31:e3:03:fc:57:a6:27:16:53:f7:5b:56:7c:
         cf:b6:33:49:85:0e:02:f9:bd:e5:20:96:7f:ae:df:9c:39:f7:
         83:77:51:7b:3c:ce:bc:f3:26:72:ca:98:e0:29:a3:46:ba:c1:
         7b:44:e6:03:35:95:47:f7:7c:bf:bf:31:c3:91:8e:a9:4d:ac:
         50:a3:fe:03:1f:1b:d5:f4:70:c3:40:d0:9e:d5:26:9e:7c:71:
         8c:35:5e:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----