Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/b80b47-a7bc-4eb4-8be6-b130bf76fe10/1/THWUsCFCZPBmd2CbtKpHeese7K0.mft
File:                     THWUsCFCZPBmd2CbtKpHeese7K0.mft (raw, json)
Hash identifier:          +h7aJ6RvQGQW7lQ48/gIXy0Rn59QYsSzRMUOSbAO00g=
Subject key identifier:   9B:12:0B:00:A5:6A:16:68:2C:BC:79:51:DA:1E:FF:3D:67:B4:67:98
Authority key identifier: 4C:75:94:B0:21:42:64:F0:66:77:60:9B:B4:AA:47:79:EB:1E:EC:AD
Certificate issuer:       /CN=4c7594b0214264f06677609bb4aa4779eb1eecad
Certificate serial:       01962F3DC153C03EF1B3AB75CE3C0FF487DB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/THWUsCFCZPBmd2CbtKpHeese7K0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/78/b80b47-a7bc-4eb4-8be6-b130bf76fe10/1/THWUsCFCZPBmd2CbtKpHeese7K0.mft
Manifest number:          14ED
Signing time:             Sun 13 Apr 2025 13:01:38 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:38 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:38 +0000
Files and hashes:         1: RlERu2riJWKRmPGYqUGwVhMTEfA.roa (hash: w2p8YNRnxQaiCold+0o9++nb5GsSq8cnfNdvqMaxke0=)
                          2: THWUsCFCZPBmd2CbtKpHeese7K0.crl (hash: WObbqvBIGpl1zN3ZQrKUdO+x8ZG4/QlNhv+k3y8OxuM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:c1:53:c0:3e:f1:b3:ab:75:ce:3c:0f:f4:87:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4c7594b0214264f06677609bb4aa4779eb1eecad
        Validity
            Not Before: Apr 13 13:01:38 2025 GMT
            Not After : Apr 14 13:01:38 2025 GMT
        Subject: CN=9b120b00a56a16682cbc7951da1eff3d67b46798
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:ad:6c:2e:5f:2c:cb:3a:e2:75:aa:12:35:53:
                    2b:c7:19:25:1e:e0:85:60:9f:ae:e1:c6:5a:2c:33:
                    2f:27:dc:d7:2b:17:f1:8d:bb:8d:12:43:3c:cd:82:
                    81:44:21:d2:ef:c7:0f:af:48:c5:30:15:8b:08:67:
                    62:df:af:20:4b:fa:0c:89:ef:f3:85:6c:43:37:50:
                    99:ee:ab:7f:94:40:46:71:0a:65:7d:92:10:2e:6a:
                    e5:9f:a4:9e:b7:b3:29:20:ed:67:7f:b7:e8:1d:81:
                    54:26:4c:9c:85:d3:94:e4:71:62:b8:e5:40:42:64:
                    d4:e6:02:f3:da:c2:7a:c9:98:a8:2e:48:f4:b3:a1:
                    ed:40:19:0f:62:dc:af:72:37:00:f7:b2:0f:88:03:
                    d8:18:bc:83:50:3c:47:48:a4:70:56:ba:2a:3a:37:
                    00:6f:e2:09:4f:58:0f:27:72:84:29:f8:07:9f:e1:
                    de:b7:81:c7:68:76:ed:54:ce:54:99:ee:43:1f:8d:
                    00:ad:d9:df:76:07:f3:a6:26:de:e4:26:d5:6d:c9:
                    5a:10:49:c3:bf:fa:40:46:ae:fb:c2:4f:16:41:a6:
                    82:cd:13:68:08:fc:8f:95:cd:26:f5:a4:a3:33:30:
                    ab:7f:0a:47:72:c0:88:68:0a:63:b9:0e:11:49:17:
                    ca:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:12:0B:00:A5:6A:16:68:2C:BC:79:51:DA:1E:FF:3D:67:B4:67:98
            X509v3 Authority Key Identifier:
                keyid:4C:75:94:B0:21:42:64:F0:66:77:60:9B:B4:AA:47:79:EB:1E:EC:AD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/THWUsCFCZPBmd2CbtKpHeese7K0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/b80b47-a7bc-4eb4-8be6-b130bf76fe10/1/THWUsCFCZPBmd2CbtKpHeese7K0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/78/b80b47-a7bc-4eb4-8be6-b130bf76fe10/1/THWUsCFCZPBmd2CbtKpHeese7K0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a3:1b:11:ac:61:38:ba:62:0b:f5:28:bf:09:5c:18:7b:ea:e9:
         60:61:38:31:84:03:ae:fe:9d:a5:a4:dc:18:94:4a:3a:3b:69:
         c5:5f:a2:87:c8:8b:a1:5e:c4:ab:97:b5:c8:5f:58:b2:b8:11:
         ee:bb:8c:52:d5:14:76:8b:93:f2:a7:40:78:3f:38:f4:cb:1b:
         e9:a4:42:57:da:8d:0d:74:23:a2:3b:1e:81:26:64:ed:b0:0a:
         0f:94:f8:0d:1e:c7:d9:8a:f2:1d:23:44:b9:8f:e3:13:39:df:
         fe:fc:54:68:4e:13:25:88:72:48:86:e6:94:1c:5e:92:7c:58:
         e7:0b:c1:6c:c7:86:e9:8b:07:c8:37:e9:f6:0e:d5:29:d8:5f:
         64:73:c3:ee:69:4b:96:4b:5b:9e:a4:4c:45:79:54:9b:8f:24:
         90:ae:31:c5:06:f4:c5:90:63:7f:04:5e:7f:28:ff:4f:6e:92:
         d4:1a:33:8a:d5:40:f5:0b:e1:a7:9f:2f:c0:19:14:d9:73:d9:
         9c:17:f4:7e:73:9b:6b:dc:6c:e7:bc:5d:7f:2f:48:c9:bb:bb:
         f2:ba:73:97:e4:fd:09:54:dd:7c:13:fa:d8:ab:8d:63:03:f6:
         cf:ba:f2:8a:74:72:7c:a3:ab:a6:fb:1e:69:e7:be:7f:8a:cb:
         19:7a:cc:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----