Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/0f7594-f048-473d-a39a-ddb9e4db98c6/1/DyG3jOl7D1-z2Iv5XPuwiy--qOU.mft
File:                     DyG3jOl7D1-z2Iv5XPuwiy--qOU.mft (raw, json)
Hash identifier:          JkHd7SBVVfxbW/HrTfx/7WDnx/zk7RDcHkkk0InF2R0=
Subject key identifier:   29:9B:85:CD:E9:C2:B1:7D:F9:6C:60:E5:F2:6B:02:80:4D:EF:79:47
Authority key identifier: 0F:21:B7:8C:E9:7B:0F:5F:B3:D8:8B:F9:5C:FB:B0:8B:2F:BE:A8:E5
Certificate issuer:       /CN=0f21b78ce97b0f5fb3d88bf95cfbb08b2fbea8e5
Certificate serial:       0195E0B4A75EF8DA813FAC856AE612EA548E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DyG3jOl7D1-z2Iv5XPuwiy--qOU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e8/0f7594-f048-473d-a39a-ddb9e4db98c6/1/DyG3jOl7D1-z2Iv5XPuwiy--qOU.mft
Manifest number:          1457
Signing time:             Sat 29 Mar 2025 07:01:30 +0000
Manifest this update:     Sat 29 Mar 2025 07:01:30 +0000
Manifest next update:     Sun 30 Mar 2025 07:01:30 +0000
Files and hashes:         1: DyG3jOl7D1-z2Iv5XPuwiy--qOU.crl (hash: qGYANYxZz6vAMH4QrmzIfXfe1kMds/6j9jHnfCNmR6M=)
                          2: KvpIDJeUQ3PjlBVGV8W3vX2yJrA.roa (hash: Hj3l47kt2nIv7SDXU84uufeP/5O2LYhvonXGlVlGdWo=)
                          3: LHzy93jejLfua__lp49Yht10cg4.roa (hash: +Pxk7BfXvDPKOZb+V9E2LwQFfxHHkQA8a+ipeBYUFC8=)
                          4: _I32ouhbcP7uIlgPiXnpN-afsyU.roa (hash: esu4xz3AO+6hl9m1YOif9vfWELQmZoJKQSaoLGoeI/s=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:e0:b4:a7:5e:f8:da:81:3f:ac:85:6a:e6:12:ea:54:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0f21b78ce97b0f5fb3d88bf95cfbb08b2fbea8e5
        Validity
            Not Before: Mar 29 07:01:30 2025 GMT
            Not After : Mar 30 07:01:30 2025 GMT
        Subject: CN=299b85cde9c2b17df96c60e5f26b02804def7947
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:11:24:b9:26:7e:e1:9e:ac:be:12:8b:51:13:
                    00:12:d8:bb:c9:3a:0f:b3:ac:9d:b4:82:d9:08:06:
                    6e:ef:84:29:18:66:e6:2a:33:d6:ce:81:1a:47:11:
                    01:83:13:c1:77:bb:85:3b:92:a5:1c:12:61:e9:af:
                    a8:63:cb:1c:89:20:4e:56:97:11:fa:53:65:49:9b:
                    e4:72:25:ca:48:78:f3:a4:4d:5b:ab:85:23:85:cc:
                    04:e6:1d:b7:2c:9d:c5:20:06:3a:2d:c4:c8:bd:de:
                    96:e8:0a:62:56:d6:16:05:fa:5a:a9:de:5e:0a:f0:
                    f5:7c:d3:ae:29:ac:11:be:c4:c9:a2:0c:17:2f:22:
                    de:bd:3d:05:78:c1:dd:06:b4:5c:e6:42:d5:31:6b:
                    ad:8a:5a:fe:ed:da:cf:5f:a9:ca:98:27:91:50:7e:
                    d7:b9:eb:c6:f3:cf:8c:fb:2f:bf:95:8a:41:11:2f:
                    22:24:01:92:31:4b:5d:40:00:b7:f2:63:ae:a2:68:
                    91:c6:d7:45:80:54:c5:2c:62:40:ee:6f:92:d7:7f:
                    f7:05:75:ff:98:c8:44:c9:45:70:c5:a6:d5:05:fc:
                    01:8a:41:3d:4c:e8:07:fc:eb:f0:e8:62:d4:2f:1a:
                    ed:f6:c1:63:ae:c8:db:1a:fe:56:36:70:6b:c5:07:
                    6a:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:9B:85:CD:E9:C2:B1:7D:F9:6C:60:E5:F2:6B:02:80:4D:EF:79:47
            X509v3 Authority Key Identifier:
                keyid:0F:21:B7:8C:E9:7B:0F:5F:B3:D8:8B:F9:5C:FB:B0:8B:2F:BE:A8:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DyG3jOl7D1-z2Iv5XPuwiy--qOU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/0f7594-f048-473d-a39a-ddb9e4db98c6/1/DyG3jOl7D1-z2Iv5XPuwiy--qOU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/0f7594-f048-473d-a39a-ddb9e4db98c6/1/DyG3jOl7D1-z2Iv5XPuwiy--qOU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:b1:a1:d0:cf:26:0a:b5:43:99:14:67:9c:40:55:0b:4d:2f:
         0a:3c:4e:d6:4a:ac:3c:29:bc:33:45:42:fd:1a:c5:fa:22:b0:
         a9:f9:e1:e8:49:ce:90:79:5d:3c:f0:a1:3e:15:02:28:03:8d:
         05:7d:f5:02:4a:91:a5:a7:69:d7:a4:3e:b8:a2:61:d7:7a:c7:
         f9:28:ef:46:f3:de:c1:bb:f7:f2:6a:a1:01:78:26:57:d6:99:
         79:de:78:28:e0:b2:ef:2a:df:63:62:1d:51:ea:b1:4a:30:11:
         40:c1:ec:78:47:41:a2:c8:8d:60:01:df:7d:70:b7:20:b9:25:
         f3:64:06:11:e0:b2:11:a9:92:94:19:bb:46:fc:ea:d1:e6:0b:
         de:e9:ef:36:6e:40:91:09:4f:5c:b7:9e:f7:fb:da:bc:0a:d9:
         b7:c5:a6:4a:06:40:f5:11:ad:ed:1c:c3:eb:92:b2:a6:de:96:
         26:d7:79:5c:04:d9:c5:41:1e:4c:f8:7c:19:74:d0:e4:a0:7a:
         ad:7b:13:45:c9:93:0a:b1:2e:36:98:36:75:71:2f:51:84:ce:
         1b:ff:a6:e1:dd:60:d6:d6:04:f3:7e:df:76:f1:bb:a4:1d:9e:
         34:18:b0:29:43:b6:fa:71:9c:bf:16:1b:10:8f:56:0d:0d:7e:
         2c:70:20:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----