Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/8f2777-1899-4a35-b284-a62af286f9b3/1/IDs6uNkBFDnUuoTf1K_mFtQZbMQ.mft
File:                     IDs6uNkBFDnUuoTf1K_mFtQZbMQ.mft (raw, json)
Hash identifier:          mRO8RCdwNUzM46tHmMPL20sqU8/RXDLVHCxkMlDXJ8U=
Subject key identifier:   52:F4:14:45:E3:86:EA:7D:36:CD:B7:A0:08:CC:99:89:76:37:7F:9B
Authority key identifier: 20:3B:3A:B8:D9:01:14:39:D4:BA:84:DF:D4:AF:E6:16:D4:19:6C:C4
Certificate issuer:       /CN=203b3ab8d9011439d4ba84dfd4afe616d4196cc4
Certificate serial:       01962ECF6FD00BD01233AC35C2CFC76E969A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IDs6uNkBFDnUuoTf1K_mFtQZbMQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ae/8f2777-1899-4a35-b284-a62af286f9b3/1/IDs6uNkBFDnUuoTf1K_mFtQZbMQ.mft
Manifest number:          053F
Signing time:             Sun 13 Apr 2025 11:01:08 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:08 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:08 +0000
Files and hashes:         1: 1-7BUvW0DqpGIoHRUThEcreOn85U.roa (hash: 1h+BwanAoTba+J1D0yPZhO85Nea+fKXXhs9HYI66nl0=)
                          2: IDs6uNkBFDnUuoTf1K_mFtQZbMQ.crl (hash: yNRsAUPu4kEmv0bQhIYGZKOHZvhcNEv12SREIKaJj+0=)
                          3: bAacBV2Nw5dlSOAXdJOoA7HEvjE.roa (hash: fR7tFabVPNstEHxx+U9K/CBKuKf4T3tR3OGzVsaSh0c=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:6f:d0:0b:d0:12:33:ac:35:c2:cf:c7:6e:96:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=203b3ab8d9011439d4ba84dfd4afe616d4196cc4
        Validity
            Not Before: Apr 13 11:01:08 2025 GMT
            Not After : Apr 14 11:01:08 2025 GMT
        Subject: CN=52f41445e386ea7d36cdb7a008cc998976377f9b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:f3:49:bd:59:83:76:0c:5f:29:2b:b8:62:d8:
                    48:05:ca:40:46:8e:b3:13:f9:b7:e9:89:46:8d:6c:
                    3b:d8:18:3c:26:32:5c:42:2e:c1:6f:1d:08:00:e4:
                    90:34:d5:a6:15:98:25:df:fe:e7:94:a4:42:93:32:
                    ee:31:8c:bd:a3:d2:61:61:08:49:1b:28:3e:d6:ae:
                    fa:a8:f8:13:d7:b1:0d:df:7b:5f:56:8c:95:33:d6:
                    4b:2e:76:6f:65:93:44:8d:1a:5d:59:c6:d3:2f:97:
                    c4:46:d1:b5:df:87:93:d9:d3:fb:39:77:d7:f2:17:
                    0a:33:dd:4a:78:98:6d:f2:f7:71:63:7e:11:d0:d5:
                    fe:fd:73:6c:0e:c8:37:10:d6:42:55:29:62:03:59:
                    c6:52:4e:14:52:fd:5c:14:b7:91:e6:e5:47:2a:b8:
                    13:1e:af:37:bb:59:3b:b4:4e:f7:c2:1d:24:6b:00:
                    04:be:8d:c5:41:a8:26:93:2b:f9:62:cd:a6:6b:65:
                    f2:8c:38:f5:e5:38:74:81:ff:11:6f:ac:41:99:17:
                    04:eb:21:5b:ef:49:1e:6f:2d:6e:fa:e5:be:6b:41:
                    b5:2d:68:6c:f9:7e:17:50:74:6c:77:b3:69:86:17:
                    f8:0d:50:c2:69:21:a2:da:69:e9:82:8f:1d:c5:95:
                    67:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:F4:14:45:E3:86:EA:7D:36:CD:B7:A0:08:CC:99:89:76:37:7F:9B
            X509v3 Authority Key Identifier:
                keyid:20:3B:3A:B8:D9:01:14:39:D4:BA:84:DF:D4:AF:E6:16:D4:19:6C:C4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IDs6uNkBFDnUuoTf1K_mFtQZbMQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/8f2777-1899-4a35-b284-a62af286f9b3/1/IDs6uNkBFDnUuoTf1K_mFtQZbMQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/8f2777-1899-4a35-b284-a62af286f9b3/1/IDs6uNkBFDnUuoTf1K_mFtQZbMQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:ad:ec:a2:22:10:13:a2:bc:fd:f6:3f:4d:04:7d:b2:fb:dc:
         4e:e5:97:de:92:f4:fa:1c:91:17:d2:69:d3:a1:6f:62:bc:c3:
         8a:4d:60:1f:d9:da:a3:c9:b2:e6:f0:7c:eb:4c:fd:8b:2e:20:
         ba:91:06:97:68:32:c9:cb:3f:99:e9:fd:dd:de:28:e0:60:80:
         ba:cc:b6:14:1d:bb:4a:b4:0f:be:52:71:6e:34:48:fb:4c:15:
         06:b2:78:1a:37:a0:60:cf:ea:17:c4:9c:57:0e:35:4c:4a:b5:
         cc:d2:1f:42:c3:0d:25:e0:46:d6:19:d3:b6:4b:b9:21:da:c2:
         13:9b:f8:43:4a:11:44:a8:05:30:a6:4d:47:e7:d7:f3:a0:a2:
         6b:18:03:9b:65:95:35:30:6b:84:0f:d4:a5:32:d9:23:91:ba:
         16:92:03:ed:cf:b7:d4:aa:a0:e7:26:0b:b1:6a:0a:10:9b:d1:
         15:74:9d:b0:b8:1c:22:18:83:de:ae:c8:d1:40:39:67:90:0e:
         1f:c8:ce:21:01:4a:c3:66:2c:a4:24:cd:52:29:79:95:fa:8f:
         02:3d:f1:03:62:92:b4:f0:e5:20:0e:76:ff:61:ec:04:1a:18:
         6b:dd:d4:0c:04:29:21:6a:e0:79:41:eb:32:87:40:c6:77:39:
         d9:0f:17:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----