Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/KdLa_xxbthoKyLPK6tS4ofooTQ8.mft
File:                     KdLa_xxbthoKyLPK6tS4ofooTQ8.mft (raw, json)
Hash identifier:          qnyEtCZFjU+2XEYKVAT3JTIpd7xtMNdbolw2xFER/lE=
Subject key identifier:   0F:64:37:5F:E5:01:DF:E2:7E:66:16:DD:2C:E6:EA:FC:9F:42:EF:3B
Authority key identifier: 29:D2:DA:FF:1C:5B:B6:1A:0A:C8:B3:CA:EA:D4:B8:A1:FA:28:4D:0F
Certificate issuer:       /CN=29d2daff1c5bb61a0ac8b3caead4b8a1fa284d0f
Certificate serial:       01962DF3C17CC64712A4AA0FF5873BFD75D3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KdLa_xxbthoKyLPK6tS4ofooTQ8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/KdLa_xxbthoKyLPK6tS4ofooTQ8.mft
Manifest number:          12A7
Signing time:             Sun 13 Apr 2025 07:01:11 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:11 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:11 +0000
Files and hashes:         1: 12aip6Xg3MRpBHrAo9qI_8lGl6A.roa (hash: IURDLmEl8ceZMqFbp565iUYmMlWKc2UmtDtWI+jSndg=)
                          2: 2SY-qe-5SBhHKk51B06H3d7WW8A.roa (hash: 6/DIJ50Cnk+nITM4AUHonNPdQnw8AUu3PQWc0gDk/RE=)
                          3: 3E9M_L1qni0gOm9o4JNThdl5mKU.roa (hash: 3QEnMAssy1tNKh1FvcPETtJzWZzXiuRM6bkNkokD5XE=)
                          4: 6AVaCjHyXzCmX9RKvsJNeBRWsX0.roa (hash: BmkvGfb9KA/kpLVgShUXMCUOS/qU/B+L76KUE0JlgVE=)
                          5: 6OuCHCa3lBl0qUzzvMzNI-pMEZ4.roa (hash: j9i6HiiS4nI4wcr2RV5FEZkxxBV0ISD5E9GgIlD6ABE=)
                          6: AT1NLNUZ8X0xD6RcwZMdLdIz2ZM.roa (hash: fjnVFsPrVhpcbyIspcCLA5dZQu2SV1yINQliobo6yxc=)
                          7: FHCB6DuGL-bnBGM2X1yDzSnX9Zk.roa (hash: r6GDh9X+ylCTDxl9vj4S1UTcrV/ImccaaTi1D8Mi2xk=)
                          8: GUuYC7cVlHvArBzfO7tfpAP5D60.roa (hash: MBqPwcxZe15O5TCcnQP4rabYZ863Bmk75b+fN9uibnE=)
                          9: JugFLe6jENz0xFJw2G6fMpeVf-I.roa (hash: LY3Ikb4Kwnv22unGatoglkrWDxveEyc5iDX1fxnI/Kc=)
                          10: KSdWPEt9fB_iBluYNf4K7txBQrE.roa (hash: YJ0c3CPnKgl+QFgMB6tD+ii2GX7vwrvuc49Rrz/E7uI=)
                          11: KdLa_xxbthoKyLPK6tS4ofooTQ8.crl (hash: f49G9CbUJqQf1Fe/2fUcqNdoYK5aowB+nVFCNqYMGCc=)
                          12: Mf9Ftgoq8hNaUlnWSE1OgssDPng.roa (hash: 2OpCIxzpIQdhVjJD4azKWQqbRjrwZgvvuIiGX67bBpw=)
                          13: NcWtmNHRiYuhKShMZ2FiNOKfbAw.roa (hash: 6KR850hMO0L6chqV9/ieA2lf65V6cwC4jHYlXOitS7g=)
                          14: RPKuIuiwLUOTopNmIn4BOJGs7i0.roa (hash: lIg6TqObzFxbqNZ5fchVzBYqOiLD6H6xqfkDU6vs6XY=)
                          15: U0kXOYQlCT4siDrxC7rmBYTDjYg.roa (hash: /xFFXqatUzxXHWrxa+teKUB4rwy5tb/b0xZ64HTl1uY=)
                          16: UWAkOLxdcSPEBsnLHKLGVFj6HSY.roa (hash: dNB9CSwfrGd4Zr+0Ay5Qi/d5x8ITuVt9C22HWCd4MaA=)
                          17: dsuGlLVHMB7I47kgKa74SXE1REc.roa (hash: 7Qj6mOC4uog0qj785J6KkN+zNyCNyHyzGiCvkAMiApI=)
                          18: hGqZ-FRlI55t4voAlR-n3NqPej0.roa (hash: B71Rb7BaHyLXQqMJQJiZSZS0lT82TbCVQONz7Ndp5cM=)
                          19: iOyP_Db0F92sxD2S4x9jDUy18wI.roa (hash: 6Iwr8wDrVOHgqwu2HaRDU/1SoUQAFZ31io4JJpWIzCM=)
                          20: izV8LD-KWyx4ph9YXGyEe0qtgqI.roa (hash: 2FIdcaPo0XlL7Qk8UA/+1ue/720HntDktGQmgSyMUIw=)
                          21: qJFVscxIPth-exAWqMl9bVOjxAI.roa (hash: pHwl4Cl7JQcL2UqiEOUWpCgL0r/3gGkJ4NhvF5sKGTs=)
                          22: raPkT2KWJeKCRGMnLBqXVOcCh6c.roa (hash: AxKEGemelOmDh2SMtY0ZCfbnhb9j8WRYHJt5TuaikL8=)
                          23: sd89zYJ1j-RCLpU1z7-DyfQxZL8.roa (hash: UzEpFC1Sc2lK9fjFosdwjJq/oDCr+18i93FGOSEJQN4=)
                          24: t7kFFxrGX7b_8JY79xsh7QWePnI.roa (hash: 3NaS6l21qtRZhafFxfFpDNUW1OP8TUGIeUDERM2ms5M=)
                          25: voV1pHSGjiHjmQ5rvvOxR7Je57c.roa (hash: vGBPYlDzvYjcVIBYHyOvwD8dXv9By2X73KVyoLfQW34=)
                          26: yIMKEplFh6ZEkcubfWX7y2IKKyQ.roa (hash: ZSj+jK0d68aj2QlmnuWYii9Xy8EIUlDgGvMMdbL9Elo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f3:c1:7c:c6:47:12:a4:aa:0f:f5:87:3b:fd:75:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=29d2daff1c5bb61a0ac8b3caead4b8a1fa284d0f
        Validity
            Not Before: Apr 13 07:01:11 2025 GMT
            Not After : Apr 14 07:01:11 2025 GMT
        Subject: CN=0f64375fe501dfe27e6616dd2ce6eafc9f42ef3b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:67:a2:ac:d9:c5:eb:9e:fa:f5:9a:e9:5d:f8:
                    94:f1:02:20:8a:3e:35:3f:a0:6f:ef:9d:f4:68:a5:
                    66:6a:f1:3f:e7:d9:27:e5:83:23:06:59:49:1a:6a:
                    35:e3:fc:4c:ed:56:fb:8a:b5:97:b8:7b:19:82:fb:
                    29:86:d3:85:0d:6a:bd:1a:48:24:0e:a5:3d:67:19:
                    de:cf:4e:08:71:a9:25:2c:3f:0a:88:46:d8:5c:d6:
                    4d:c1:f6:fd:9c:d3:e6:e1:14:8f:85:98:fb:4b:a1:
                    80:62:19:2e:f8:45:8a:48:d2:d7:82:72:de:2a:a5:
                    3b:9c:ce:61:66:4d:14:18:4a:62:a3:94:f7:0c:14:
                    af:47:8b:98:92:0e:c1:88:2f:40:af:fb:8c:66:68:
                    25:0c:88:c2:b0:7b:2e:9c:f3:0d:27:ca:d7:de:92:
                    37:04:0f:2a:fc:35:d0:6f:7d:7d:28:8c:8e:05:08:
                    93:0e:92:4c:20:c2:0c:91:65:3b:3a:d5:c0:fd:b2:
                    2b:42:42:aa:b6:af:38:c8:d7:ce:a2:b4:f3:1f:8e:
                    0b:e0:59:25:ac:39:1c:50:cb:a7:b5:02:81:61:29:
                    7f:52:3d:54:f6:7f:4b:3b:bc:09:1a:ad:03:85:c7:
                    23:de:77:93:0a:37:9c:40:57:6d:8b:7d:4c:77:a7:
                    2e:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:64:37:5F:E5:01:DF:E2:7E:66:16:DD:2C:E6:EA:FC:9F:42:EF:3B
            X509v3 Authority Key Identifier:
                keyid:29:D2:DA:FF:1C:5B:B6:1A:0A:C8:B3:CA:EA:D4:B8:A1:FA:28:4D:0F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KdLa_xxbthoKyLPK6tS4ofooTQ8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/KdLa_xxbthoKyLPK6tS4ofooTQ8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/KdLa_xxbthoKyLPK6tS4ofooTQ8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ae:86:ff:6c:3c:5e:0b:7a:7f:e4:3f:7a:ff:6a:ea:c5:da:b3:
         ef:d0:de:41:98:ca:4c:fe:b8:32:dd:62:91:a7:b9:91:e7:7f:
         ed:af:b6:8c:58:79:ca:ea:92:d2:f5:e5:19:8c:54:da:fa:33:
         c9:b9:45:da:9e:bd:cc:b0:d6:49:ab:ae:a1:cc:82:30:e2:8b:
         6c:ee:22:a1:a6:0c:50:8f:b2:d4:54:bb:82:44:83:d9:1b:bb:
         44:ed:38:83:58:74:88:10:c8:e0:f0:56:6d:8f:6c:d2:ce:fa:
         83:5c:59:21:5d:79:67:81:77:d2:53:c1:29:fe:d8:4e:78:a5:
         c0:d5:e8:c5:d9:33:35:ec:c2:33:f6:64:4b:15:48:01:e4:2f:
         ea:d4:cb:1d:99:7f:a9:be:c0:63:1d:b4:72:74:93:8e:ea:44:
         b8:08:a2:f1:90:76:5f:2f:c5:df:1d:66:47:1e:7b:73:a4:3b:
         16:07:24:6e:fa:c9:cb:68:89:a6:c7:dc:cf:69:9f:8f:4a:b7:
         73:68:92:75:9b:11:07:69:11:2b:9c:a2:6f:05:f7:99:f6:01:
         ff:00:04:17:22:6e:2f:6e:03:e7:24:ec:d7:a2:19:f4:76:09:
         00:1d:fa:0d:bf:5f:4e:3e:4a:ea:92:22:7f:c2:f8:68:63:19:
         a0:22:8c:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----