Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/091911-06d8-45c8-b05d-e4bbf4c0db59/1/UzFm4_cJ-zusqa55rL7Gyh0PxQM.mft
File:                     UzFm4_cJ-zusqa55rL7Gyh0PxQM.mft (raw, json)
Hash identifier:          iyqPkiWVTy0XYKQJY6fua0R9yzMzXikdAFg23uQtLD8=
Subject key identifier:   0D:32:1E:60:BD:BE:4E:C2:BE:C5:1B:AD:24:DF:CB:D3:5D:89:24:73
Authority key identifier: 53:31:66:E3:F7:09:FB:3B:AC:A9:AE:79:AC:BE:C6:CA:1D:0F:C5:03
Certificate issuer:       /CN=533166e3f709fb3baca9ae79acbec6ca1d0fc503
Certificate serial:       01962E2B129BF89C22C2A85312D0725E8587
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UzFm4_cJ-zusqa55rL7Gyh0PxQM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/53/091911-06d8-45c8-b05d-e4bbf4c0db59/1/UzFm4_cJ-zusqa55rL7Gyh0PxQM.mft
Manifest number:          03A3
Signing time:             Sun 13 Apr 2025 08:01:36 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:36 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:36 +0000
Files and hashes:         1: JfX_uE4ZrNpyAWrN6XZ19h68cHI.roa (hash: von2tcOSfatHPq0+8nIPwywF9HUMabxhy1Hbp0s6xOY=)
                          2: UzFm4_cJ-zusqa55rL7Gyh0PxQM.crl (hash: oQ4e2nhNvbDO0xGUBiizU1C2gG9ca7429A3Ik+HfKms=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2b:12:9b:f8:9c:22:c2:a8:53:12:d0:72:5e:85:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=533166e3f709fb3baca9ae79acbec6ca1d0fc503
        Validity
            Not Before: Apr 13 08:01:36 2025 GMT
            Not After : Apr 14 08:01:36 2025 GMT
        Subject: CN=0d321e60bdbe4ec2bec51bad24dfcbd35d892473
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:97:c4:a9:32:72:cf:bf:e2:65:13:9c:0b:bd:
                    3b:08:c6:9b:08:ff:ab:7c:76:30:f7:b6:f0:27:1b:
                    7e:bd:30:a8:cf:e3:8c:78:fd:20:ca:31:45:4f:e6:
                    6d:78:a6:ad:92:ff:9c:d9:a0:3e:99:89:7a:ed:b9:
                    73:9a:86:a8:14:e4:f4:61:8f:94:7e:f5:f8:46:80:
                    2c:d9:08:2a:9f:8d:b6:4b:f0:6d:b9:9a:a5:da:b2:
                    6a:16:18:6d:ae:ff:79:57:9f:50:39:fa:6f:71:5c:
                    61:36:f9:52:85:04:fc:20:d3:97:3e:4e:0a:08:ee:
                    27:bd:62:1d:eb:51:9f:7f:20:97:d4:f7:20:5b:19:
                    43:80:fd:79:81:32:ec:e1:ad:ba:f8:be:23:39:d3:
                    79:a4:93:4c:20:37:c3:59:aa:0b:8e:b0:5f:f3:f3:
                    ae:fa:90:20:5b:2a:e4:5f:ef:e3:ae:72:7b:a9:2e:
                    3a:63:4a:a1:2d:81:ef:a6:f4:e1:70:ab:9c:74:a0:
                    5f:1b:6d:d1:40:ac:35:c7:64:ff:df:0c:0a:1c:cb:
                    40:31:2c:e7:ad:5a:d5:80:a1:f8:7b:49:1d:de:ee:
                    c3:ee:d3:ab:5a:75:89:29:88:57:ef:19:c2:88:32:
                    a7:35:90:4d:4b:72:0f:64:fc:43:90:51:07:f4:77:
                    89:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:32:1E:60:BD:BE:4E:C2:BE:C5:1B:AD:24:DF:CB:D3:5D:89:24:73
            X509v3 Authority Key Identifier:
                keyid:53:31:66:E3:F7:09:FB:3B:AC:A9:AE:79:AC:BE:C6:CA:1D:0F:C5:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UzFm4_cJ-zusqa55rL7Gyh0PxQM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/091911-06d8-45c8-b05d-e4bbf4c0db59/1/UzFm4_cJ-zusqa55rL7Gyh0PxQM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/53/091911-06d8-45c8-b05d-e4bbf4c0db59/1/UzFm4_cJ-zusqa55rL7Gyh0PxQM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ab:df:a8:4e:66:f9:29:8c:6d:bf:a2:bb:50:b5:7f:79:39:88:
         ac:fe:5e:91:0e:3a:cd:ef:81:ae:6e:22:28:8f:dd:34:f4:cf:
         53:97:15:8c:3a:0b:27:52:17:99:d8:3c:9f:7f:00:29:d9:bb:
         35:7e:0b:02:bd:b5:dc:61:c0:8f:1c:91:85:bb:ff:f1:9f:5f:
         80:9e:3e:29:03:08:e9:e7:e3:30:c1:4f:de:11:7d:87:1f:90:
         81:2c:6d:d7:8a:ec:8b:a9:f5:44:8a:58:ff:e3:10:31:ac:a7:
         3d:20:88:5a:3e:05:bf:98:b0:40:ff:8d:a0:a4:c6:1a:79:6d:
         dd:12:3b:5f:3f:4d:83:ec:2e:4a:2c:de:45:91:4a:7d:bc:dc:
         b7:e0:bb:8c:4d:5b:d2:3f:b2:a1:2f:04:3b:52:4a:2d:c8:0b:
         16:e6:73:7c:40:5e:20:14:67:50:88:55:4c:b8:26:01:c6:79:
         cd:e9:2f:5a:86:5e:99:33:97:cd:93:d7:f2:90:60:1c:69:b4:
         4e:f1:bf:01:f1:75:fd:e9:37:37:52:9e:53:f1:25:cf:36:be:
         2f:dd:1b:ed:d1:8f:68:26:7c:c5:4e:97:24:6d:70:5f:6c:a4:
         2e:b7:10:73:db:67:44:64:3d:81:6a:c5:58:51:3a:a1:fc:d9:
         f2:12:b2:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----