Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/9668b5-5e92-4c18-9bb9-4351bbf74c0c/1/Ty0wsBXsTvGw08ZDR8jRtZgpP4E.mft
File:                     Ty0wsBXsTvGw08ZDR8jRtZgpP4E.mft (raw, json)
Hash identifier:          CWsrQ1cSUuSgvsxKAwOxRvJP/A8TY78sErPZ3KzLVnI=
Subject key identifier:   04:C9:1E:9E:06:BB:B2:6D:39:31:CA:43:84:67:4B:88:7B:15:F2:65
Authority key identifier: 4F:2D:30:B0:15:EC:4E:F1:B0:D3:C6:43:47:C8:D1:B5:98:29:3F:81
Certificate issuer:       /CN=4f2d30b015ec4ef1b0d3c64347c8d1b598293f81
Certificate serial:       0194BCE0AD574A8EAE7C043A13332C5AA7BB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ty0wsBXsTvGw08ZDR8jRtZgpP4E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1f/9668b5-5e92-4c18-9bb9-4351bbf74c0c/1/Ty0wsBXsTvGw08ZDR8jRtZgpP4E.mft
Manifest number:          0691
Signing time:             Fri 31 Jan 2025 15:00:28 +0000
Manifest this update:     Fri 31 Jan 2025 15:00:28 +0000
Manifest next update:     Sat 01 Feb 2025 15:00:28 +0000
Files and hashes:         1: 1QmmbYJZZWZoqiWNQVq4wZmhLNg.roa (hash: gVkThpG7tc6UKYu6nfIrbCxYB1OnM75XNE9Zf3BxXSE=)
                          2: Gm9NfecPR-RUq_slL2NKmzGqQ1c.roa (hash: tkU2/2KHzDAlfUyxsnryBif6WpEicFze6N39RJoBTkM=)
                          3: IdcqQLaLPNCQJzdTXpACnqYscnI.roa (hash: H+1S4n+OyXlFrQgh9A84gwVt0xMSOKKs5oiKIXtOgjU=)
                          4: OVQ5uPkYukiV8dv56D7X8vrwp8E.roa (hash: OWeiLtMHum8JXxqxvdWPi5crevEaVFFy1EtOqegV6tI=)
                          5: P8VDh_9fdYN8xXLvtJMOKaqZaBs.roa (hash: nMTrg+lyYaQ59OMP8FwWXirKWOtKtrNaOkuqtu/tSjc=)
                          6: Pq__l0a6HrBOcCXhEDnn7AV0g54.roa (hash: A1mBB7bcRpMOwkOKXDY7TtCFDZr1ayBKUG0wvvr/Zlw=)
                          7: Ty0wsBXsTvGw08ZDR8jRtZgpP4E.crl (hash: AhVdtC3e2Vf8m0I+w3Gee2oMy2p5Zzjn/zmX4qv4NYk=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:e0:ad:57:4a:8e:ae:7c:04:3a:13:33:2c:5a:a7:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f2d30b015ec4ef1b0d3c64347c8d1b598293f81
        Validity
            Not Before: Jan 31 15:00:28 2025 GMT
            Not After : Feb  1 15:00:28 2025 GMT
        Subject: CN=04c91e9e06bbb26d3931ca4384674b887b15f265
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:ed:12:72:c5:61:8f:2c:a8:e9:cf:e5:f7:a9:
                    22:3c:d6:10:67:f0:63:40:de:fe:a0:64:ec:fc:e9:
                    99:af:4e:9b:24:ff:c1:65:5b:c3:4c:72:84:c2:ee:
                    52:46:09:10:15:ce:fb:d4:15:8d:29:15:43:1c:2a:
                    fa:7d:4c:e2:c0:fb:fb:4d:4c:6c:a6:f4:a2:cc:e9:
                    58:9a:87:fa:bc:0e:6b:60:ab:d2:3d:1c:75:b4:82:
                    9d:5e:fc:41:90:b7:02:3e:93:ef:bf:14:c2:85:7a:
                    78:7f:bc:78:a6:bf:0b:be:9d:b1:95:78:76:f0:74:
                    44:44:c8:e1:25:42:d8:ed:e4:a3:30:e3:ec:d7:bb:
                    a1:50:a3:5a:a3:dc:2b:b8:0f:3a:00:f3:ae:7c:9b:
                    12:98:63:6b:7f:eb:29:2b:f4:7d:1c:26:54:76:58:
                    28:a8:a5:bc:26:4b:86:1a:aa:7f:ad:b3:4f:9e:4f:
                    7f:e1:f0:cc:a1:4e:bc:a0:5f:6f:cb:f9:17:39:58:
                    06:e5:9a:f8:c0:ed:b7:08:a6:55:d5:0c:f6:ba:f6:
                    26:d6:b4:e9:3b:8d:53:46:03:dd:10:68:f8:98:64:
                    61:0a:a3:1d:69:6d:1d:48:48:40:b8:41:bd:f9:38:
                    8d:7a:90:b7:44:6a:a4:9c:86:d7:4e:13:a2:1c:77:
                    cb:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:C9:1E:9E:06:BB:B2:6D:39:31:CA:43:84:67:4B:88:7B:15:F2:65
            X509v3 Authority Key Identifier:
                keyid:4F:2D:30:B0:15:EC:4E:F1:B0:D3:C6:43:47:C8:D1:B5:98:29:3F:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ty0wsBXsTvGw08ZDR8jRtZgpP4E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/9668b5-5e92-4c18-9bb9-4351bbf74c0c/1/Ty0wsBXsTvGw08ZDR8jRtZgpP4E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/9668b5-5e92-4c18-9bb9-4351bbf74c0c/1/Ty0wsBXsTvGw08ZDR8jRtZgpP4E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:7b:ff:c6:11:09:c6:b0:77:72:5e:48:65:65:76:02:44:47:
         b8:fb:bc:7d:2c:d8:24:71:c8:b4:1a:7d:46:7e:3e:f2:b3:50:
         50:6d:ef:2e:b3:6b:23:89:2f:14:d4:cd:2d:a5:a3:dd:2c:33:
         c8:14:bf:a8:f2:2e:d4:aa:4e:92:71:5c:65:3c:13:91:ea:56:
         46:20:dd:27:c6:f2:8c:82:32:00:a2:e4:c1:70:1e:23:a4:20:
         7f:17:22:5b:fa:1b:b0:83:70:f6:02:cc:01:34:00:6e:e7:3c:
         5b:eb:fb:0c:92:ef:89:d6:05:9d:1d:45:c5:fc:ac:04:db:1f:
         23:e5:ff:6a:33:b1:7a:9a:39:12:72:60:bd:a1:d4:ba:f9:89:
         62:77:e0:a8:e0:9a:62:33:c7:a1:c7:15:f9:5c:19:ec:0c:b3:
         37:6c:08:f0:ef:12:24:89:57:7d:46:57:31:e6:64:56:33:4d:
         96:22:02:e6:be:75:da:ee:e4:f2:66:fd:f2:d5:2b:d7:74:70:
         b4:82:23:8e:07:e3:d1:8b:29:5f:da:d9:14:19:12:bc:dd:eb:
         57:fe:c3:25:99:74:0d:8f:27:22:23:92:2b:e3:4b:01:47:98:
         82:5c:5b:bb:7a:4e:19:3a:5e:a7:46:b1:ce:53:2c:a0:c7:a0:
         5d:91:ed:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----