Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/0f2266-b4f1-48fc-b293-67932656e594/1/YDsxvG5_QvYwOHDwI0tA3vcfoD0.mft
File:                     YDsxvG5_QvYwOHDwI0tA3vcfoD0.mft (raw, json)
Hash identifier:          6RUS3SfqGaeIQ1MIjfhTzjqroQyvIyZ30BrnmgOnKAI=
Subject key identifier:   21:EA:1C:7F:D6:62:DB:6A:55:AC:1A:EC:39:0E:82:AA:AF:58:C7:2F
Authority key identifier: 60:3B:31:BC:6E:7F:42:F6:30:38:70:F0:23:4B:40:DE:F7:1F:A0:3D
Certificate issuer:       /CN=603b31bc6e7f42f6303870f0234b40def71fa03d
Certificate serial:       0194BCDADAF2219A732F009C2060B2801758
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YDsxvG5_QvYwOHDwI0tA3vcfoD0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3d/0f2266-b4f1-48fc-b293-67932656e594/1/YDsxvG5_QvYwOHDwI0tA3vcfoD0.mft
Manifest number:          031C
Signing time:             Fri 31 Jan 2025 14:54:06 +0000
Manifest this update:     Fri 31 Jan 2025 14:54:06 +0000
Manifest next update:     Sat 01 Feb 2025 14:54:06 +0000
Files and hashes:         1: 59_xhKD0T6uSuFEYj3I2uhiqG1c.roa (hash: MYVrtUe54xpHaYsIcVLfMIx5ZncQsO+bXIz8ZL41Ros=)
                          2: 9qqMkqBIjABklRo0TcvZzdRORAI.roa (hash: 2MCPGhcnLXE4oMEI7o6/tc2uu9oOZ9cwxOU5/mzOPUI=)
                          3: DAhkHIU5KT7cYT6FoHdCoN4wLsc.roa (hash: prNqG8/Lqb8HlCJTOAKboTtvelNNuyCGXDSE6N09/90=)
                          4: YDsxvG5_QvYwOHDwI0tA3vcfoD0.crl (hash: 8++WII4o02nhpysUAIYO5jwNEliQMwRo9UBq6YyDGYM=)
                          5: wXfYanJeLekulCR6gXF4hFd0qi4.roa (hash: kVi1Jps4RtrSVg9+xQdU2e8mO6fPm3vlK9bwNs7JRMQ=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:da:da:f2:21:9a:73:2f:00:9c:20:60:b2:80:17:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=603b31bc6e7f42f6303870f0234b40def71fa03d
        Validity
            Not Before: Jan 31 14:54:06 2025 GMT
            Not After : Feb  1 14:54:06 2025 GMT
        Subject: CN=21ea1c7fd662db6a55ac1aec390e82aaaf58c72f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:d4:d3:76:8e:fb:56:90:d1:99:cf:6a:73:04:
                    f2:06:2a:6b:05:37:46:34:25:89:38:44:fb:a3:fa:
                    6a:82:a0:e8:17:00:b7:6e:66:f5:86:94:fb:4d:ca:
                    ed:77:b1:5a:7b:c5:17:88:3c:cc:3d:2b:92:56:ff:
                    18:3e:0e:1f:7d:fa:4c:71:fb:3f:e6:a3:ce:5d:09:
                    a9:28:e9:e7:8f:68:34:07:b7:12:fa:9b:40:80:75:
                    c5:a8:73:9b:8e:b7:38:d5:b3:11:a6:53:ae:c6:ae:
                    30:25:50:08:20:39:08:38:a5:74:f2:8b:9c:0a:41:
                    c1:54:aa:48:1f:59:32:fa:f1:76:66:85:d4:8b:8c:
                    50:b5:0e:bb:3e:bc:1a:35:10:ea:cf:27:4a:08:d5:
                    37:24:03:f8:c8:51:50:33:f7:90:68:81:16:be:53:
                    86:e6:30:92:76:83:82:5e:d5:35:25:2d:31:94:e7:
                    e6:a0:53:ee:b9:9c:17:7c:52:7c:92:ee:27:02:04:
                    19:f9:6a:1d:fd:8f:50:56:98:c8:05:24:98:eb:e2:
                    76:3f:9e:06:74:11:b1:85:c4:1e:7a:02:d9:8e:2f:
                    19:de:1b:f2:21:29:54:4c:0a:d2:c6:a3:0b:c3:b4:
                    21:4f:9f:18:81:2f:7e:88:ea:cd:c7:b5:80:83:0d:
                    82:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:EA:1C:7F:D6:62:DB:6A:55:AC:1A:EC:39:0E:82:AA:AF:58:C7:2F
            X509v3 Authority Key Identifier:
                keyid:60:3B:31:BC:6E:7F:42:F6:30:38:70:F0:23:4B:40:DE:F7:1F:A0:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YDsxvG5_QvYwOHDwI0tA3vcfoD0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/0f2266-b4f1-48fc-b293-67932656e594/1/YDsxvG5_QvYwOHDwI0tA3vcfoD0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/0f2266-b4f1-48fc-b293-67932656e594/1/YDsxvG5_QvYwOHDwI0tA3vcfoD0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:d4:70:d9:3a:e2:61:5b:74:86:37:21:f9:13:fe:de:44:e1:
         a5:f4:c8:96:95:fa:a6:7f:12:cd:1e:77:5f:be:33:ee:06:34:
         03:03:72:b9:3b:e6:c3:46:ac:17:b7:a1:8a:b3:e5:5e:2f:74:
         1d:59:cb:62:ba:24:25:35:8d:24:ee:f5:e7:a2:90:68:58:33:
         e8:e5:87:77:ea:14:3e:a3:74:c4:1f:d8:95:75:26:4b:e5:51:
         f6:55:97:b6:e0:bb:ee:68:fb:62:b9:6c:a6:70:72:c7:36:3f:
         fd:66:09:28:92:ab:65:19:c1:35:8b:b0:c0:66:cc:95:b6:06:
         1e:46:60:92:4e:4e:84:56:49:61:a3:52:2e:6a:50:3b:2a:a6:
         f0:c8:6b:a5:ff:70:6d:3b:0e:4e:e6:e4:1d:45:5f:cf:87:29:
         8c:76:57:04:06:a1:f7:e9:4d:2e:a6:8c:fc:79:c3:0f:df:82:
         6e:5b:70:ab:a0:89:5d:a0:a5:cc:a7:e8:aa:99:d5:34:10:c1:
         38:a7:d1:b0:13:18:89:eb:0f:50:c1:74:1c:af:48:ad:dc:20:
         21:46:d8:b6:db:3e:99:5d:4c:5d:a8:d4:b5:c1:12:8d:7e:15:
         3a:56:68:2b:c8:95:4b:b4:1c:65:6b:78:02:fb:83:cf:2f:f8:
         ec:d7:c6:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----