Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/f894a3-8ed7-4d6f-bb03-6ab05568ade2/1/D_K7zRwtjXrfdB1wTZ3GS55hT9o.mft
File:                     D_K7zRwtjXrfdB1wTZ3GS55hT9o.mft (raw, json)
Hash identifier:          Xe2x+fkJ5fDcxE5FW/QoQXWftFQwKRauzRLUtdiO5oo=
Subject key identifier:   04:FD:47:2F:01:EA:D6:B6:8F:7E:9E:50:62:DE:E1:23:B5:59:0A:B0
Authority key identifier: 0F:F2:BB:CD:1C:2D:8D:7A:DF:74:1D:70:4D:9D:C6:4B:9E:61:4F:DA
Certificate issuer:       /CN=0ff2bbcd1c2d8d7adf741d704d9dc64b9e614fda
Certificate serial:       01962E61FB0887C46A36D93153F73878F74B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/D_K7zRwtjXrfdB1wTZ3GS55hT9o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/29/f894a3-8ed7-4d6f-bb03-6ab05568ade2/1/D_K7zRwtjXrfdB1wTZ3GS55hT9o.mft
Manifest number:          05F5
Signing time:             Sun 13 Apr 2025 09:01:35 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:35 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:35 +0000
Files and hashes:         1: D_K7zRwtjXrfdB1wTZ3GS55hT9o.crl (hash: LsD2t9X2GmdeFAV+3c1Ee1e08j42UapFjJZEw0fMH0U=)
                          2: XYDcPLsMJ5XYkYL0PQrHKhNJ9s4.roa (hash: 1m7+mEL2iJYkvJfrDXaZzofwFCojsAzxm4zXV5nNyDk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:fb:08:87:c4:6a:36:d9:31:53:f7:38:78:f7:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0ff2bbcd1c2d8d7adf741d704d9dc64b9e614fda
        Validity
            Not Before: Apr 13 09:01:35 2025 GMT
            Not After : Apr 14 09:01:35 2025 GMT
        Subject: CN=04fd472f01ead6b68f7e9e5062dee123b5590ab0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:24:3d:4c:6a:85:b4:c4:7c:54:63:38:cb:1c:
                    7b:d0:ca:43:42:9a:55:83:fa:da:fc:ac:67:b8:75:
                    6e:9b:4a:f7:7c:bf:89:58:9f:b2:f2:08:a6:18:88:
                    63:f8:50:39:92:4a:5b:d8:8b:b1:e7:be:6f:8e:b4:
                    87:25:ee:71:52:0d:70:94:e3:a6:65:9b:17:cf:0f:
                    7c:31:c1:a7:6a:8f:6d:b4:da:95:ef:f0:cd:73:42:
                    ba:a6:b2:f4:19:23:ee:cd:22:8f:ef:fa:99:5a:35:
                    94:25:c6:e1:3f:6d:5b:91:b5:52:0d:8d:52:77:31:
                    56:30:eb:cf:d9:17:33:bc:df:bf:87:83:b2:02:51:
                    5a:30:d7:a1:0e:90:b6:58:f9:5b:40:2b:bf:5a:a9:
                    8c:e0:88:f6:a9:7b:21:fc:b6:ef:c5:bc:b8:f6:7b:
                    83:5a:26:8b:c7:bd:84:94:90:16:74:27:f5:60:ea:
                    30:aa:f9:89:0c:67:6f:34:cc:b1:d5:80:ef:f4:b6:
                    d3:4b:43:62:ae:26:be:c2:c3:0f:1f:5c:f1:64:39:
                    c5:04:f4:97:64:0d:a8:7d:8d:17:c2:0e:de:91:ae:
                    5f:12:37:f2:d8:98:e5:fd:88:f5:1c:b5:8e:e2:e3:
                    68:a5:f9:d8:64:db:e2:f4:9f:b3:7d:31:21:cc:6f:
                    39:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:FD:47:2F:01:EA:D6:B6:8F:7E:9E:50:62:DE:E1:23:B5:59:0A:B0
            X509v3 Authority Key Identifier:
                keyid:0F:F2:BB:CD:1C:2D:8D:7A:DF:74:1D:70:4D:9D:C6:4B:9E:61:4F:DA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D_K7zRwtjXrfdB1wTZ3GS55hT9o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/f894a3-8ed7-4d6f-bb03-6ab05568ade2/1/D_K7zRwtjXrfdB1wTZ3GS55hT9o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/29/f894a3-8ed7-4d6f-bb03-6ab05568ade2/1/D_K7zRwtjXrfdB1wTZ3GS55hT9o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:20:4e:d4:02:15:ef:63:68:41:ec:4a:08:e7:e9:18:98:87:
         db:93:27:c2:f0:2e:73:97:a0:24:09:a8:40:08:f4:af:73:e3:
         59:a7:65:2c:e8:0e:c2:85:c2:c0:46:12:fb:68:c7:32:9e:77:
         50:e8:8b:37:1b:f1:9d:96:df:54:0b:9c:9a:3a:39:14:e5:11:
         b8:00:26:09:1f:5f:78:51:5e:92:8c:95:bc:5b:41:88:a2:77:
         55:b3:3e:42:7c:d5:d3:1f:12:5d:50:c7:16:c2:74:e9:0d:62:
         26:c9:f8:6b:3d:95:5a:8d:0b:22:c5:0f:6c:e5:94:07:19:6a:
         29:0e:da:57:d2:97:36:b1:6c:30:cc:ab:5b:86:78:54:d2:a2:
         cf:70:57:ee:cf:f4:81:24:e5:29:70:5e:1d:9f:0c:40:60:df:
         d8:9c:da:fe:4f:08:5e:70:ae:06:6a:45:4b:7d:2f:2c:ce:c4:
         01:df:22:fb:08:cf:c3:f9:cf:da:92:5c:a2:6c:30:5b:6f:42:
         f1:65:ff:bd:1d:14:03:98:0b:d9:a2:f8:8a:46:5c:23:a2:e3:
         67:ef:60:de:3d:69:d6:75:c1:8e:04:aa:7c:ea:8e:98:fc:2a:
         95:c5:de:56:b5:1d:22:b3:96:8c:6c:78:90:b4:ed:02:35:16:
         b6:da:08:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----