Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/dc9b6f-3a6d-449f-8b89-1e829ffa1c3a/1/KZkwB8fJLfYXjny0MYP9f1KlJtg.mft
File:                     KZkwB8fJLfYXjny0MYP9f1KlJtg.mft (raw, json)
Hash identifier:          qalS/q5CZb70SusiD5QlZlY/awTZXWuHr5TPIyF0s3k=
Subject key identifier:   F1:DA:6A:AB:2E:FF:EE:DB:2A:B6:24:7F:87:E3:57:63:E4:8E:FF:C7
Authority key identifier: 29:99:30:07:C7:C9:2D:F6:17:8E:7C:B4:31:83:FD:7F:52:A5:26:D8
Certificate issuer:       /CN=29993007c7c92df6178e7cb43183fd7f52a526d8
Certificate serial:       01962E98BCE36AA26B0FCCDAA958C233F58A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KZkwB8fJLfYXjny0MYP9f1KlJtg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/09/dc9b6f-3a6d-449f-8b89-1e829ffa1c3a/1/KZkwB8fJLfYXjny0MYP9f1KlJtg.mft
Manifest number:          0293
Signing time:             Sun 13 Apr 2025 10:01:23 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:23 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:23 +0000
Files and hashes:         1: 1-K_h-bUSjpuq8AZEkNRzu6I7SIQ.roa (hash: NmB1wSq7b0ndUhgjm1rnnnwLFhH3O28HPyZCF7fvGcY=)
                          2: 4Onxw3ZyCceGdWFdrDz9GypV1To.roa (hash: rLXGfCwokEmOeP6DWTGHar2KAFcpyGY37FcoMJ/rm24=)
                          3: 6w2llJPr5u5R0U0gFJBhkfjASt8.roa (hash: Et1DM1KW1gT7dKyxGFfIxs38O3+sH74ZansUhbBdzew=)
                          4: KZkwB8fJLfYXjny0MYP9f1KlJtg.crl (hash: C4mAHn+wfoyBbFp8rab13YAM42BDf4ztrjA3UT6bIao=)
                          5: _NRuiaH4rITcKDBvJBfsltXgb0k.roa (hash: AZ8OzcR8BWD5gBfN+FKNavAS3ygzUESf9YOcCuXRnn4=)
                          6: fNae6M71mV294ZXPAPike0PbceE.roa (hash: yK1vBYE3EmPb37wOJedAwxWWRQFUDScm3ZCALz4wEUs=)
                          7: ypFL40Xoi4y05qu3ogA3n6gvBmc.roa (hash: Osn8j8oSksWpQIeEIhv5U30zU1XAWvsewtWKW4S5v1U=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:bc:e3:6a:a2:6b:0f:cc:da:a9:58:c2:33:f5:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=29993007c7c92df6178e7cb43183fd7f52a526d8
        Validity
            Not Before: Apr 13 10:01:23 2025 GMT
            Not After : Apr 14 10:01:23 2025 GMT
        Subject: CN=f1da6aab2effeedb2ab6247f87e35763e48effc7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:75:8f:39:c7:ad:13:a2:eb:b6:e2:de:9b:3b:
                    9d:26:97:df:d3:86:71:32:38:6d:5f:ef:8c:de:9d:
                    43:f5:05:1d:58:5a:ba:0f:7c:07:ca:04:6f:dc:47:
                    14:22:d5:3e:f4:6e:cf:6f:ed:99:26:81:55:71:8b:
                    72:b8:75:af:7c:ac:a7:55:4a:88:2b:4a:a3:b5:57:
                    29:9b:30:c8:be:e3:a8:73:a5:46:ad:9f:01:9d:85:
                    f3:d3:9c:8d:0b:cc:60:a5:3d:28:4a:ff:3e:d0:40:
                    9b:7e:7a:f6:e5:8c:12:10:00:60:43:45:0c:b7:1c:
                    36:1e:97:e1:5d:2a:b4:b4:a1:f5:8a:ae:db:c9:bc:
                    25:0f:ca:30:49:ae:45:5f:85:bc:7c:f9:74:78:68:
                    e8:78:1a:f2:4c:0a:92:3f:3e:c9:f0:11:0a:c2:47:
                    21:a1:7f:c6:fa:14:7e:bc:0d:a4:1d:bd:42:b9:28:
                    f1:9a:26:0b:88:df:e1:ea:ca:ab:18:2c:1f:97:65:
                    7d:f2:b1:5d:a3:a7:ed:68:77:6f:f6:66:da:35:43:
                    7a:14:6a:46:ed:65:48:6a:ef:a1:73:11:ec:24:45:
                    c4:3a:37:5d:4b:3c:1f:ac:bb:44:2f:50:6e:02:d2:
                    2e:67:29:ac:79:ea:3e:b5:7f:df:5a:d9:00:4f:d0:
                    1c:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:DA:6A:AB:2E:FF:EE:DB:2A:B6:24:7F:87:E3:57:63:E4:8E:FF:C7
            X509v3 Authority Key Identifier:
                keyid:29:99:30:07:C7:C9:2D:F6:17:8E:7C:B4:31:83:FD:7F:52:A5:26:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KZkwB8fJLfYXjny0MYP9f1KlJtg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/dc9b6f-3a6d-449f-8b89-1e829ffa1c3a/1/KZkwB8fJLfYXjny0MYP9f1KlJtg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/09/dc9b6f-3a6d-449f-8b89-1e829ffa1c3a/1/KZkwB8fJLfYXjny0MYP9f1KlJtg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:53:0f:4f:c1:af:5c:9e:5e:1f:21:54:51:8b:4f:3a:46:49:
         b9:48:87:70:4e:a4:b5:90:1d:0f:e2:0b:19:a4:a7:a6:4f:f1:
         87:4c:a0:a7:66:85:01:6a:05:63:20:6f:5b:59:18:ab:ea:40:
         e7:97:98:9b:a0:6d:5f:c2:37:8c:b8:28:4b:32:15:ec:81:53:
         94:bf:df:01:be:83:bd:4b:ee:1e:c4:bf:68:7d:bc:70:be:47:
         8e:68:1f:62:38:f3:3a:ca:dc:fb:af:e4:8c:67:70:92:c4:64:
         3a:d1:0c:85:53:82:ff:b7:9c:3b:89:64:1b:8c:51:e5:f4:dc:
         6b:a7:d8:53:a2:b5:8a:81:80:63:c8:51:1b:74:68:f6:97:0d:
         27:0e:0b:96:7b:c6:7f:08:02:11:e7:30:73:4f:a6:c9:3e:7a:
         e6:2b:eb:09:6b:93:6c:27:1e:85:e2:5e:5f:f3:7e:40:30:64:
         24:4b:71:7a:77:55:2b:81:57:98:fa:7d:64:1f:a9:af:e3:1f:
         a2:65:19:e3:92:49:ed:89:b4:ae:f8:b2:ae:b8:de:3f:35:7e:
         f1:6b:06:b8:7c:ad:d0:cd:2c:e9:09:6b:19:59:8c:ee:25:f9:
         66:36:56:21:1b:7f:e5:0c:eb:21:b7:ed:63:b1:ae:35:a6:ed:
         22:be:da:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----