Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/f26f62-ffa2-4170-be4f-983d4da13447/1/thvJe5gnbrO6vZ56pn4nBa4R5lg.mft
File:                     thvJe5gnbrO6vZ56pn4nBa4R5lg.mft (raw, json)
Hash identifier:          DWdUDB0OiyPco3vnemPUlSzJNKSOfjOZJuWu8ZOMmnQ=
Subject key identifier:   2C:BD:DC:C3:67:39:CF:7E:88:DD:09:D4:53:43:B6:C2:3A:41:E8:B8
Authority key identifier: B6:1B:C9:7B:98:27:6E:B3:BA:BD:9E:7A:A6:7E:27:05:AE:11:E6:58
Certificate issuer:       /CN=b61bc97b98276eb3babd9e7aa67e2705ae11e658
Certificate serial:       01962E992569D4AC131D7B325B8CDF8FB190
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/thvJe5gnbrO6vZ56pn4nBa4R5lg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9c/f26f62-ffa2-4170-be4f-983d4da13447/1/thvJe5gnbrO6vZ56pn4nBa4R5lg.mft
Manifest number:          037E
Signing time:             Sun 13 Apr 2025 10:01:50 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:50 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:50 +0000
Files and hashes:         1: 2KuUzLCv3PyxebEYjGPgT5VXJ00.roa (hash: XmhjXdQGkgD5j9EG5FisxLqYz1hfmvpPHcJGVDqYWyA=)
                          2: thvJe5gnbrO6vZ56pn4nBa4R5lg.crl (hash: K5RzPeJLC6VJny4W8zZuisl38z3HGZ6SvsbJA4id8Jg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:25:69:d4:ac:13:1d:7b:32:5b:8c:df:8f:b1:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b61bc97b98276eb3babd9e7aa67e2705ae11e658
        Validity
            Not Before: Apr 13 10:01:50 2025 GMT
            Not After : Apr 14 10:01:50 2025 GMT
        Subject: CN=2cbddcc36739cf7e88dd09d45343b6c23a41e8b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:54:b7:47:bf:8c:9a:34:db:06:dc:21:a0:48:
                    e5:f2:f4:50:cf:c0:54:f0:4e:0f:2b:33:c9:96:5b:
                    ed:b0:56:39:6d:df:74:9a:a8:aa:cb:91:08:41:7d:
                    9d:85:fb:00:c2:e0:80:0a:a1:df:0f:fc:09:47:b8:
                    ee:19:37:75:7d:c8:ae:a4:83:b0:13:a8:85:50:05:
                    3b:d0:83:39:1d:2b:3a:dd:db:a6:ae:69:ee:fd:18:
                    bf:6c:1c:d7:ac:24:42:ba:42:dd:05:be:77:1a:89:
                    af:6e:83:e2:18:45:f7:8e:5e:1d:6b:e5:ec:38:ac:
                    7b:e9:e1:a4:2b:d6:19:23:ab:14:5c:88:50:46:21:
                    bb:f7:ae:25:9b:30:33:7f:67:5c:dc:d9:2f:a1:05:
                    1e:b3:ee:07:7f:a0:44:ac:ef:44:c3:0f:66:b0:f3:
                    cc:bd:d5:55:0b:a9:db:43:f2:ad:b7:6f:cc:e0:d7:
                    1d:36:4f:f5:fb:bb:f2:8f:98:7c:86:e7:83:32:22:
                    c0:91:05:fc:38:8b:ed:b3:b2:31:84:2e:1a:6c:01:
                    7e:a4:62:6c:f7:6d:f5:bf:91:48:92:2f:53:06:8b:
                    75:81:85:1a:44:a9:ac:76:23:5f:55:e2:b1:ed:68:
                    8c:ed:2b:12:dc:14:52:01:df:30:9b:67:85:fa:69:
                    42:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:BD:DC:C3:67:39:CF:7E:88:DD:09:D4:53:43:B6:C2:3A:41:E8:B8
            X509v3 Authority Key Identifier:
                keyid:B6:1B:C9:7B:98:27:6E:B3:BA:BD:9E:7A:A6:7E:27:05:AE:11:E6:58

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/thvJe5gnbrO6vZ56pn4nBa4R5lg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/f26f62-ffa2-4170-be4f-983d4da13447/1/thvJe5gnbrO6vZ56pn4nBa4R5lg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/f26f62-ffa2-4170-be4f-983d4da13447/1/thvJe5gnbrO6vZ56pn4nBa4R5lg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:90:98:a5:61:ec:73:a3:1d:98:db:b9:d0:d8:ac:9e:5b:25:
         53:d4:c9:f7:10:41:64:20:81:98:fa:73:60:d9:30:6f:52:9a:
         d9:b7:8e:10:ed:89:52:34:ec:69:26:8e:53:01:31:97:35:3a:
         1f:b6:f8:9e:19:3c:c1:79:25:68:91:e0:44:9a:60:93:8a:c2:
         c8:de:c3:fa:26:eb:33:59:bd:d9:31:26:57:4e:9c:55:0f:3b:
         5f:6f:be:92:fd:dc:18:df:cd:c7:87:3a:93:39:1d:30:5f:82:
         5c:0e:b1:1c:60:63:86:5d:ce:fe:c6:68:04:a3:01:85:9c:f2:
         03:9d:d0:80:32:87:7f:e4:ee:16:74:61:5b:04:e3:bf:45:79:
         b1:a7:7f:e3:5e:d3:a4:b5:11:51:8e:ab:24:35:2f:bf:f1:06:
         cb:c6:f4:77:38:e0:19:a0:c1:0c:6d:fa:10:e2:bc:ca:33:93:
         db:6a:51:11:e3:b7:76:d8:47:55:3d:a4:8f:81:cf:d3:bd:aa:
         2d:8e:a0:fb:72:60:9f:80:36:88:2b:51:37:2e:e2:11:02:45:
         80:34:55:f9:d2:8f:d8:80:3a:68:0c:89:e0:6e:b6:71:c0:00:
         61:1c:56:ae:ec:31:94:8a:a4:e6:af:f5:49:f4:29:32:2e:3e:
         f7:66:0e:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----