Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/6f4230-05e6-4c00-a4ab-06b8dfe498bd/1/_im9i7SagJlrRg9QKO1SqOBXwLE.mft
File:                     _im9i7SagJlrRg9QKO1SqOBXwLE.mft (raw, json)
Hash identifier:          tHNtyQd4tr6G8IhG98H8Xe+Ie5Su9t1tbK7LJ2wuCIM=
Subject key identifier:   A2:09:2C:5D:1B:00:37:D3:6E:A8:4F:5B:1C:EF:BE:82:C5:39:56:4F
Authority key identifier: FE:29:BD:8B:B4:9A:80:99:6B:46:0F:50:28:ED:52:A8:E0:57:C0:B1
Certificate issuer:       /CN=fe29bd8bb49a80996b460f5028ed52a8e057c0b1
Certificate serial:       01962E995D399989E909891CF14667CED69A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_im9i7SagJlrRg9QKO1SqOBXwLE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2f/6f4230-05e6-4c00-a4ab-06b8dfe498bd/1/_im9i7SagJlrRg9QKO1SqOBXwLE.mft
Manifest number:          129F
Signing time:             Sun 13 Apr 2025 10:02:04 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:04 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:04 +0000
Files and hashes:         1: GKGUA1ULBuEBg6UZcKqTCkNmhrM.roa (hash: S+MOcu2hV7fbEQM0gv8ckh0dyXeXiOXULnIXULZ3i+k=)
                          2: _im9i7SagJlrRg9QKO1SqOBXwLE.crl (hash: WXKpc7yh/Hmz/o0xwpHo6gEhn/nE1EozHnMhgld3p3U=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:5d:39:99:89:e9:09:89:1c:f1:46:67:ce:d6:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fe29bd8bb49a80996b460f5028ed52a8e057c0b1
        Validity
            Not Before: Apr 13 10:02:04 2025 GMT
            Not After : Apr 14 10:02:04 2025 GMT
        Subject: CN=a2092c5d1b0037d36ea84f5b1cefbe82c539564f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:06:40:d4:f4:35:85:9e:72:41:12:bc:e8:45:
                    90:bf:32:36:4a:bc:42:fb:81:3d:3c:c0:66:7e:a4:
                    c5:37:43:2e:ab:a4:98:01:c4:57:bf:8f:c8:97:cd:
                    0c:86:2c:07:dd:c2:20:59:44:11:3b:57:a0:4f:5e:
                    1b:32:bd:81:18:3f:d1:89:45:96:c1:10:cb:70:7e:
                    ab:08:63:90:b2:2a:c9:ca:1a:b8:16:ed:30:7a:29:
                    28:c3:a8:5e:82:b0:52:90:03:e0:2c:e0:60:16:c7:
                    7c:68:3a:5b:79:22:4a:0a:3b:07:dd:b1:d5:31:a9:
                    9c:e8:03:62:b1:52:e4:bc:4e:6f:1d:b8:9a:5f:bc:
                    bc:db:fe:04:4e:08:3d:80:04:db:d4:32:91:68:59:
                    28:e8:88:1e:93:c7:68:a7:8e:24:76:90:7a:4c:87:
                    75:6e:a8:8e:71:ef:a0:97:7e:31:0d:f9:a0:f4:ac:
                    21:03:f9:02:94:64:8f:a4:bb:f6:05:58:bd:5c:0c:
                    8e:81:6f:40:8a:3e:1b:6c:0c:73:eb:aa:66:10:a7:
                    38:c4:73:2e:f2:00:f2:f2:01:75:fd:9a:00:ff:0e:
                    11:36:03:8c:0e:56:c8:6b:c7:0b:67:7c:b0:73:6b:
                    87:4a:c6:c0:14:a8:96:77:31:bd:aa:ed:53:c7:ef:
                    33:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:09:2C:5D:1B:00:37:D3:6E:A8:4F:5B:1C:EF:BE:82:C5:39:56:4F
            X509v3 Authority Key Identifier:
                keyid:FE:29:BD:8B:B4:9A:80:99:6B:46:0F:50:28:ED:52:A8:E0:57:C0:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_im9i7SagJlrRg9QKO1SqOBXwLE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/6f4230-05e6-4c00-a4ab-06b8dfe498bd/1/_im9i7SagJlrRg9QKO1SqOBXwLE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/6f4230-05e6-4c00-a4ab-06b8dfe498bd/1/_im9i7SagJlrRg9QKO1SqOBXwLE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:54:d1:85:5b:1e:3c:2f:9d:9b:38:81:1e:10:b0:b0:2d:b5:
         35:d5:23:62:b8:c9:89:ce:c2:e4:40:17:68:4d:e3:27:98:0a:
         19:28:41:fb:86:f1:0a:2d:83:20:93:5b:55:f0:be:41:1b:dd:
         8c:af:a2:fe:2c:54:db:97:89:74:52:1f:7a:89:a7:ab:fe:fa:
         9f:58:03:f2:50:03:15:19:9d:4b:ff:01:51:de:af:55:03:e9:
         07:05:8b:be:84:a2:2d:4e:8b:89:1f:38:aa:6f:a1:fc:a7:3b:
         9b:a4:17:6f:07:38:b9:2a:41:e5:d3:16:99:9c:49:b7:93:9f:
         04:2f:37:cb:92:ab:6a:0b:a8:db:95:8c:d7:d6:eb:5a:72:4f:
         c8:5e:89:8f:0a:19:d5:df:49:45:ed:09:26:b2:d2:a9:56:97:
         1b:31:44:37:c2:e9:99:6c:19:f7:2d:68:54:3b:50:89:a7:d3:
         3d:5c:52:5e:84:2b:d5:31:db:18:34:9a:19:c9:c3:27:86:f1:
         a5:d6:20:12:66:a6:d3:94:bc:cc:8a:2b:d2:f4:18:21:eb:03:
         ae:dc:4d:9c:69:ae:d5:7b:28:5a:fa:c4:54:84:a9:3f:40:e5:
         02:b3:3e:ea:f4:1e:af:80:43:91:04:ac:6d:08:25:32:54:21:
         f7:12:19:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----