Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/c9ca65-9253-4fc4-9bbf-01dc944c4477/1/oCUv6bQqZD9HflhGYZquiGkX7_s.mft
File:                     oCUv6bQqZD9HflhGYZquiGkX7_s.mft (raw, json)
Hash identifier:          zaYa12glwTGxQdlBtw3gz2u52mj79KT78ZrNJPpKSF0=
Subject key identifier:   1F:3F:40:C2:FE:C1:DA:6E:19:D5:55:34:9D:68:D6:8E:BB:F3:AB:16
Authority key identifier: A0:25:2F:E9:B4:2A:64:3F:47:7E:58:46:61:9A:AE:88:69:17:EF:FB
Certificate issuer:       /CN=a0252fe9b42a643f477e5846619aae886917effb
Certificate serial:       01962F7491393F053DFE4AB06032D8A94227
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/oCUv6bQqZD9HflhGYZquiGkX7_s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/43/c9ca65-9253-4fc4-9bbf-01dc944c4477/1/oCUv6bQqZD9HflhGYZquiGkX7_s.mft
Manifest number:          12D3
Signing time:             Sun 13 Apr 2025 14:01:30 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:30 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:30 +0000
Files and hashes:         1: oCUv6bQqZD9HflhGYZquiGkX7_s.crl (hash: xpdm5ur82sRnPD/iHXT3VDWJwLtNGmsSCjmakXXaTn0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:91:39:3f:05:3d:fe:4a:b0:60:32:d8:a9:42:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a0252fe9b42a643f477e5846619aae886917effb
        Validity
            Not Before: Apr 13 14:01:30 2025 GMT
            Not After : Apr 14 14:01:30 2025 GMT
        Subject: CN=1f3f40c2fec1da6e19d555349d68d68ebbf3ab16
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:6c:0f:bf:92:54:88:1d:40:d4:91:4f:c6:9f:
                    b8:7c:15:5b:4f:2c:ee:93:fd:95:6a:fd:e4:2f:d1:
                    ac:ec:70:de:4b:33:d2:9b:de:17:85:5b:d8:45:39:
                    1e:fb:3e:8f:e4:3e:43:4d:ae:7b:44:fd:0b:17:84:
                    a2:04:d4:3b:fa:96:7a:f1:4e:dc:7e:2f:26:22:e2:
                    af:50:5a:07:27:12:7f:d7:5a:de:19:ce:1c:8b:b2:
                    86:a7:6a:cd:9d:e4:dd:2b:46:57:cf:a7:53:37:92:
                    98:2f:df:cd:2b:c2:6a:76:92:f3:39:38:49:35:5f:
                    96:4c:58:9f:58:3a:dd:c5:cd:a4:dc:2f:af:ff:95:
                    93:e8:a9:b9:82:e2:79:22:df:2c:7f:de:f8:74:2e:
                    de:1f:8d:f7:3a:c1:22:95:52:e3:b2:58:d4:97:02:
                    05:06:57:97:73:d9:11:22:03:53:86:db:fb:7d:79:
                    1e:db:db:40:d3:70:db:7e:ba:54:e5:64:cf:9e:87:
                    14:c2:41:fa:43:69:25:5d:0a:10:e3:4f:21:56:f4:
                    7c:a7:5c:a3:09:6d:5f:e3:47:7d:98:58:1b:8d:76:
                    c2:5c:d9:af:0d:0d:8b:44:b3:68:d0:18:97:e2:ac:
                    90:ab:21:75:95:c9:2b:51:11:e0:b7:cc:cf:52:3d:
                    56:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:3F:40:C2:FE:C1:DA:6E:19:D5:55:34:9D:68:D6:8E:BB:F3:AB:16
            X509v3 Authority Key Identifier:
                keyid:A0:25:2F:E9:B4:2A:64:3F:47:7E:58:46:61:9A:AE:88:69:17:EF:FB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oCUv6bQqZD9HflhGYZquiGkX7_s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/c9ca65-9253-4fc4-9bbf-01dc944c4477/1/oCUv6bQqZD9HflhGYZquiGkX7_s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/43/c9ca65-9253-4fc4-9bbf-01dc944c4477/1/oCUv6bQqZD9HflhGYZquiGkX7_s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:6e:10:12:77:e5:09:77:5e:fd:25:3a:41:99:c7:32:a6:ea:
         84:7d:97:69:3d:83:54:99:37:ce:57:21:6b:6c:51:11:28:f8:
         25:8a:68:ca:d7:bd:45:71:e2:f8:20:c7:14:89:84:e6:60:41:
         eb:e6:18:24:07:82:e1:e0:37:ff:4e:e2:46:4e:fa:be:b0:58:
         a1:53:59:dd:b7:e8:d0:d4:b1:e9:cf:bd:a5:c2:22:04:ba:37:
         f4:22:30:22:94:56:34:6f:d6:1e:9e:05:53:29:04:fe:cc:fe:
         cc:61:77:3d:a6:c3:8e:c9:41:dc:3e:9e:c0:66:3a:58:ef:0b:
         72:41:3a:21:e5:8f:74:d9:48:ba:a1:51:0e:ce:14:aa:67:c4:
         b3:a4:61:53:8f:cc:41:a9:0b:2c:69:ca:74:b3:8b:87:23:13:
         d9:88:49:0c:6b:77:2d:2f:0b:0e:c6:24:b9:6a:d3:74:12:9a:
         22:53:a2:67:b5:63:00:91:8a:fc:a0:74:8f:ef:78:c0:c8:3c:
         40:52:1d:b8:df:85:e8:05:bd:c8:4e:71:3f:38:cd:bd:f8:50:
         e3:4b:64:8e:8a:fd:b8:f5:5e:88:a2:3f:cf:1c:f8:36:60:c9:
         0f:c7:31:3e:2c:82:0d:91:80:a2:1b:0d:16:6b:30:49:25:98:
         42:9e:17:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----