Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/865f08-4633-4edc-bc8d-3084f767c2b6/1/U-MsX4lfsS5tZ04LFvbu5eUSZF0.mft
File:                     U-MsX4lfsS5tZ04LFvbu5eUSZF0.mft (raw, json)
Hash identifier:          7OIM6aL+hj67Q3dLyUkXrviCkKyITw2MbpGRykSr9E0=
Subject key identifier:   1B:59:CE:D2:E9:E3:3C:25:75:25:87:42:2D:42:F0:66:75:F0:20:6A
Authority key identifier: 53:E3:2C:5F:89:5F:B1:2E:6D:67:4E:0B:16:F6:EE:E5:E5:12:64:5D
Certificate issuer:       /CN=53e32c5f895fb12e6d674e0b16f6eee5e512645d
Certificate serial:       01948DE28240CA768950F3EC0A8E9734536E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/U-MsX4lfsS5tZ04LFvbu5eUSZF0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3c/865f08-4633-4edc-bc8d-3084f767c2b6/1/U-MsX4lfsS5tZ04LFvbu5eUSZF0.mft
Manifest number:          0CA5
Signing time:             Wed 22 Jan 2025 12:00:19 +0000
Manifest this update:     Wed 22 Jan 2025 12:00:19 +0000
Manifest next update:     Thu 23 Jan 2025 12:00:19 +0000
Files and hashes:         1: U-MsX4lfsS5tZ04LFvbu5eUSZF0.crl (hash: enaa+8rkS3OwKJcW6UKl1VGuX0pI0wqFmlZdwn8c02k=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:8d:e2:82:40:ca:76:89:50:f3:ec:0a:8e:97:34:53:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=53e32c5f895fb12e6d674e0b16f6eee5e512645d
        Validity
            Not Before: Jan 22 12:00:19 2025 GMT
            Not After : Jan 23 12:00:19 2025 GMT
        Subject: CN=1b59ced2e9e33c25752587422d42f06675f0206a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:a8:c4:bd:a0:16:70:57:16:59:f6:dc:56:28:
                    54:17:e4:69:9e:f3:3a:d3:e8:51:f1:c5:14:36:6e:
                    b1:b0:ab:12:ee:1b:3f:db:65:29:b1:b8:d2:5b:f9:
                    09:88:96:0e:32:f9:36:14:59:eb:8f:b0:57:9f:2e:
                    7d:cd:bd:31:a0:2b:6c:a1:2d:e2:7e:4c:15:8b:38:
                    9d:92:02:f1:51:9f:df:0c:8f:30:2f:7a:f4:f8:13:
                    31:54:da:8e:00:48:c9:95:74:c5:a6:18:76:9b:48:
                    15:06:75:6c:b5:40:f7:6a:cb:29:c3:78:0d:71:4f:
                    3e:94:9d:56:62:0c:0a:e6:13:83:22:a1:5d:f4:46:
                    7e:17:2f:8d:70:31:43:2d:a9:34:36:40:87:55:3b:
                    04:fc:72:76:16:a2:7c:94:6c:38:4d:60:0d:a2:33:
                    23:82:4e:7e:4a:54:cf:69:25:85:ce:4e:52:e9:2e:
                    61:29:03:4f:cc:78:0c:da:54:14:05:31:a2:b3:d7:
                    06:6d:70:24:20:51:6c:4d:39:1a:81:51:64:0f:39:
                    6c:e9:49:4e:c2:df:a4:db:86:28:b7:2d:90:64:8c:
                    c7:a3:f9:f2:ec:1e:fd:bd:1f:96:39:5e:67:f0:f7:
                    60:63:1d:a1:6c:83:08:42:63:39:04:28:80:9f:4b:
                    0a:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:59:CE:D2:E9:E3:3C:25:75:25:87:42:2D:42:F0:66:75:F0:20:6A
            X509v3 Authority Key Identifier:
                keyid:53:E3:2C:5F:89:5F:B1:2E:6D:67:4E:0B:16:F6:EE:E5:E5:12:64:5D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U-MsX4lfsS5tZ04LFvbu5eUSZF0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/865f08-4633-4edc-bc8d-3084f767c2b6/1/U-MsX4lfsS5tZ04LFvbu5eUSZF0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/865f08-4633-4edc-bc8d-3084f767c2b6/1/U-MsX4lfsS5tZ04LFvbu5eUSZF0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:58:16:84:0c:3b:fd:f8:03:41:f4:82:79:bc:10:ba:44:71:
         2d:6a:ea:3d:d7:f0:23:e6:d0:26:7a:3d:c6:26:9d:7e:4c:f7:
         a5:ba:13:24:68:24:ac:7c:1b:39:2d:ca:ae:e3:52:be:3c:f7:
         22:2a:c8:1b:7c:b3:4b:31:08:e3:6c:71:c6:24:39:5f:cc:df:
         a1:d3:83:09:4d:a3:3e:15:05:0a:0c:13:fc:80:bb:9d:b4:cd:
         67:d1:ae:52:d5:c6:de:6b:d9:d0:97:bc:3f:04:75:03:42:60:
         23:2d:93:83:55:5f:37:99:dc:99:0e:1c:e8:e6:d1:e5:51:ed:
         85:13:9f:96:0b:7c:13:8b:23:23:b0:66:2e:10:bd:3e:c7:4f:
         62:b3:71:7b:f6:58:09:c5:0d:88:60:2a:1e:79:a3:a4:97:14:
         af:2f:2d:38:35:d7:ba:dd:5e:34:32:65:2f:be:ea:b1:62:33:
         2e:3a:a4:75:f5:4f:95:5b:83:77:61:80:93:d3:a6:78:d1:7c:
         8e:5f:8b:5e:17:bb:ed:1d:de:a2:27:c0:39:e2:55:69:07:e2:
         f6:0c:36:3e:c2:75:cb:63:63:22:71:6a:35:d9:8f:57:44:01:
         c8:7f:04:75:2a:13:7f:5d:b3:e8:69:fc:ed:be:39:81:65:78:
         01:97:a4:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----