Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/2f97fc-5fa3-4083-9515-cd9da2d92e8d/1/KaOeu05X_zSFPHaw9Yd66Ks8fPY.mft
File:                     KaOeu05X_zSFPHaw9Yd66Ks8fPY.mft (raw, json)
Hash identifier:          7bzZTIrTEIq9QWJWfLnJznKZ8v6f5i+In0t1L2g+Bas=
Subject key identifier:   33:79:95:32:D1:9B:2A:4A:FB:74:F5:CE:32:06:3F:6C:61:B1:80:00
Authority key identifier: 29:A3:9E:BB:4E:57:FF:34:85:3C:76:B0:F5:87:7A:E8:AB:3C:7C:F6
Certificate issuer:       /CN=29a39ebb4e57ff34853c76b0f5877ae8ab3c7cf6
Certificate serial:       01962E99B30C2EFE3E04381155D196DF3D80
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KaOeu05X_zSFPHaw9Yd66Ks8fPY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0d/2f97fc-5fa3-4083-9515-cd9da2d92e8d/1/KaOeu05X_zSFPHaw9Yd66Ks8fPY.mft
Manifest number:          14EB
Signing time:             Sun 13 Apr 2025 10:02:26 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:26 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:26 +0000
Files and hashes:         1: 023NXf0NRLbsgezphpzZHNxZ3e4.roa (hash: 5Oh3BvS9337aAFlKHkUHIB4jGr7DBQIIdxMScBWVcOU=)
                          2: KaOeu05X_zSFPHaw9Yd66Ks8fPY.crl (hash: U6+xCfcrdY233YfBbhIVyOJQAKAS/Oy+mxd1jI+RKro=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:b3:0c:2e:fe:3e:04:38:11:55:d1:96:df:3d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=29a39ebb4e57ff34853c76b0f5877ae8ab3c7cf6
        Validity
            Not Before: Apr 13 10:02:26 2025 GMT
            Not After : Apr 14 10:02:26 2025 GMT
        Subject: CN=33799532d19b2a4afb74f5ce32063f6c61b18000
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:e8:06:7d:f2:27:af:9e:b1:d4:92:06:e7:fc:
                    d6:3e:34:77:20:57:6f:5d:94:31:b7:e9:bc:f7:ac:
                    04:83:b4:66:d9:b8:50:3d:0e:f2:42:3b:4d:ca:48:
                    4d:74:d9:96:1a:0b:e4:1e:b1:07:12:20:e1:76:8e:
                    c6:9e:b3:df:6b:8f:9e:cd:1e:f1:5a:4a:62:64:c9:
                    f2:2d:3c:aa:f3:4d:25:ec:7d:8d:af:38:ed:a9:1e:
                    69:53:1b:29:f6:31:2a:78:b2:a2:9e:74:d5:5b:ef:
                    fd:73:2a:9b:77:46:51:8d:74:20:79:9e:68:5f:f3:
                    b7:46:f8:d3:85:8d:e9:b1:20:e5:08:84:80:04:e6:
                    31:6f:40:d1:29:a5:c8:73:e8:cc:68:17:3f:b3:4a:
                    4d:2e:e6:12:2a:ee:bd:32:5d:ca:1f:98:e9:9a:69:
                    93:a1:d0:34:f8:f2:53:ec:3a:e9:15:76:7d:c5:92:
                    4f:3b:6d:e0:34:bd:ae:18:93:20:32:87:86:4c:5f:
                    a5:07:35:8a:d9:23:a9:df:38:2e:dc:ed:70:d5:52:
                    29:bf:b7:94:f0:86:d4:59:08:26:9f:11:3a:06:9c:
                    63:48:32:6c:4c:0c:37:fb:f7:40:e8:f6:3a:ce:39:
                    9f:22:27:d4:59:1f:05:a4:f5:3a:f5:dd:96:bf:d4:
                    fc:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:79:95:32:D1:9B:2A:4A:FB:74:F5:CE:32:06:3F:6C:61:B1:80:00
            X509v3 Authority Key Identifier:
                keyid:29:A3:9E:BB:4E:57:FF:34:85:3C:76:B0:F5:87:7A:E8:AB:3C:7C:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KaOeu05X_zSFPHaw9Yd66Ks8fPY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/2f97fc-5fa3-4083-9515-cd9da2d92e8d/1/KaOeu05X_zSFPHaw9Yd66Ks8fPY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/2f97fc-5fa3-4083-9515-cd9da2d92e8d/1/KaOeu05X_zSFPHaw9Yd66Ks8fPY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:62:9e:f3:d7:9d:2e:3b:0f:78:94:de:2c:7d:12:73:5a:c2:
         c8:0a:8e:16:19:4d:02:c9:95:4f:30:14:a7:68:62:5e:32:2a:
         6d:a1:7f:8c:ae:9a:07:84:e5:84:fe:61:a9:25:8d:af:97:79:
         7b:53:9d:ac:51:a2:65:a5:dd:5f:36:b8:0a:cf:5d:01:27:12:
         4d:a4:4d:47:74:7b:85:ed:f6:91:c6:05:74:12:9f:aa:62:a1:
         d8:ec:56:7c:cd:89:fe:95:81:e0:2d:2d:fc:15:03:36:38:de:
         03:6d:4b:49:6b:66:71:97:b6:c2:93:46:7a:9c:46:3b:ce:e1:
         f8:04:b8:1c:23:fe:d7:25:e8:1a:b1:fa:2d:f4:69:97:c8:bb:
         af:c9:25:fe:91:d9:14:d2:86:fe:a6:ca:05:73:e5:3e:f3:25:
         62:75:6e:a6:e3:5a:78:9b:9b:fe:c0:a0:e8:23:a2:14:9a:a0:
         2b:f1:13:e7:d4:7e:33:20:20:74:02:e3:64:f6:54:c2:e8:9b:
         3e:8f:68:09:0b:4d:6c:ed:09:56:89:6c:d0:0f:bf:8f:98:52:
         e1:50:7d:dd:10:dc:8a:f6:c2:b9:99:bb:bd:8b:fa:7c:69:66:
         68:d2:c1:d4:1e:20:0e:5c:50:64:c1:3e:29:74:1c:dd:65:70:
         c5:35:db:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----