Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/257fd7-a9f7-4284-acf3-34304f5cda98/1/_ThaYWOY5BbHDcsyJWb5Pj0vvxM.mft
File:                     _ThaYWOY5BbHDcsyJWb5Pj0vvxM.mft (raw, json)
Hash identifier:          GKifdfUCJJG4Vbe/B/qbKPOmZP62xbvUskeRvMOZz3M=
Subject key identifier:   59:70:ED:BF:8E:29:0A:8F:04:B0:E3:14:2C:43:33:7C:52:91:B5:A9
Authority key identifier: FD:38:5A:61:63:98:E4:16:C7:0D:CB:32:25:66:F9:3E:3D:2F:BF:13
Certificate issuer:       /CN=fd385a616398e416c70dcb322566f93e3d2fbf13
Certificate serial:       01962F06DBBACA26E68FC2516C7643094587
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_ThaYWOY5BbHDcsyJWb5Pj0vvxM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0e/257fd7-a9f7-4284-acf3-34304f5cda98/1/_ThaYWOY5BbHDcsyJWb5Pj0vvxM.mft
Manifest number:          0C5A
Signing time:             Sun 13 Apr 2025 12:01:40 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:40 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:40 +0000
Files and hashes:         1: _ThaYWOY5BbHDcsyJWb5Pj0vvxM.crl (hash: Wurb+nIDTU1AyYdTHZKAy4MYYkIVGYQX/I/FbD3TbIA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:db:ba:ca:26:e6:8f:c2:51:6c:76:43:09:45:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fd385a616398e416c70dcb322566f93e3d2fbf13
        Validity
            Not Before: Apr 13 12:01:40 2025 GMT
            Not After : Apr 14 12:01:40 2025 GMT
        Subject: CN=5970edbf8e290a8f04b0e3142c43337c5291b5a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:8a:9d:c5:c3:9e:43:11:b5:d3:25:c9:96:eb:
                    72:54:52:2c:47:18:17:75:3b:19:09:70:63:bc:55:
                    4d:26:0e:ce:18:4d:61:67:8c:1b:71:ed:8a:e6:10:
                    ea:30:e1:ae:e4:1a:30:7c:a4:17:1f:91:d4:16:c2:
                    4c:3a:0d:5a:5f:81:43:68:77:a7:a0:4d:1c:aa:86:
                    8a:e3:b1:bc:d1:92:6d:f9:36:9a:c6:9c:be:06:30:
                    0f:d8:b2:2a:9f:75:77:eb:41:be:10:32:b6:cf:2b:
                    b5:6c:cd:d7:01:6d:07:f2:7e:01:27:66:c7:c3:63:
                    cb:86:ab:7b:c4:80:99:50:1c:9f:cf:10:b0:f9:5d:
                    0f:15:f0:8c:25:50:c0:5f:d0:23:8a:e2:f9:0a:e8:
                    81:d9:e1:98:af:f0:7d:96:0a:35:be:89:51:34:cf:
                    17:8c:5b:9b:87:dd:7c:a2:29:08:63:94:b8:bb:87:
                    4f:4b:0c:e3:21:70:26:47:a8:b9:35:18:e2:59:d9:
                    94:40:4e:c2:54:25:ff:79:96:7d:c1:b8:ee:14:c2:
                    20:6a:94:9a:26:56:2d:2b:52:00:55:09:15:52:d7:
                    6b:5f:b3:b4:7a:c3:70:ad:33:a0:d5:40:ba:cd:74:
                    3f:65:c8:a7:a1:36:43:bd:ff:05:65:06:bb:4c:04:
                    42:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:70:ED:BF:8E:29:0A:8F:04:B0:E3:14:2C:43:33:7C:52:91:B5:A9
            X509v3 Authority Key Identifier:
                keyid:FD:38:5A:61:63:98:E4:16:C7:0D:CB:32:25:66:F9:3E:3D:2F:BF:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_ThaYWOY5BbHDcsyJWb5Pj0vvxM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/257fd7-a9f7-4284-acf3-34304f5cda98/1/_ThaYWOY5BbHDcsyJWb5Pj0vvxM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/257fd7-a9f7-4284-acf3-34304f5cda98/1/_ThaYWOY5BbHDcsyJWb5Pj0vvxM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:7e:1d:d6:6a:48:a0:9b:5f:9f:61:7c:d9:40:d1:8f:da:ee:
         4d:59:68:ef:d9:2e:95:5f:f4:e0:99:9b:e6:b0:d7:36:4f:ef:
         86:82:f2:27:3e:f1:a8:08:f6:73:38:f7:84:47:b0:26:c3:3a:
         86:0d:92:27:ac:38:3d:ff:b8:94:f9:63:25:c1:ba:54:31:8e:
         0a:e2:de:5c:15:49:3c:04:11:29:a0:16:86:a1:85:48:75:cc:
         59:30:ac:b8:d6:4d:79:e2:cd:94:6d:cc:2c:18:ce:0a:67:39:
         44:9b:d6:7c:63:a5:3c:45:f8:bf:75:e3:69:f1:39:08:76:d6:
         b9:00:76:dc:bb:24:2b:13:0f:ae:1a:91:b2:ba:eb:38:8f:ae:
         a6:4c:eb:9c:65:05:90:8b:83:0b:17:53:a0:da:f8:5b:37:5c:
         57:91:09:7b:51:e8:5d:b8:69:0d:3c:c8:9e:bc:58:3c:1a:45:
         53:ca:86:59:b8:41:43:74:34:ba:ec:9b:f7:df:6b:bb:18:c5:
         90:e3:95:ec:6c:7d:11:62:a6:4d:46:f5:e5:1f:f4:fb:70:94:
         c5:1f:ce:50:21:b0:fd:94:75:f5:18:81:b3:e8:64:c2:f8:98:
         93:a6:35:09:55:f6:da:c1:63:03:64:0d:ec:3c:42:a4:b7:89:
         ac:37:10:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----