Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/de3041-9536-492e-a9cd-f2ae7bc7ecc5/1/KQn__NgaZryYtinUwFeSR2RfD-Q.mft
File:                     KQn__NgaZryYtinUwFeSR2RfD-Q.mft (raw, json)
Hash identifier:          ntsVicznPAQuUtkk5C23nrsOm696BNJoHp4F8bNkcmc=
Subject key identifier:   D6:7A:59:BE:A3:E6:08:C6:07:A5:9E:A4:94:FD:A5:09:25:D3:29:2E
Authority key identifier: 29:09:FF:FC:D8:1A:66:BC:98:B6:29:D4:C0:57:92:47:64:5F:0F:E4
Certificate issuer:       /CN=2909fffcd81a66bc98b629d4c0579247645f0fe4
Certificate serial:       01962E61A2F5837F25096557C79105DC8D4B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KQn__NgaZryYtinUwFeSR2RfD-Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2f/de3041-9536-492e-a9cd-f2ae7bc7ecc5/1/KQn__NgaZryYtinUwFeSR2RfD-Q.mft
Manifest number:          150F
Signing time:             Sun 13 Apr 2025 09:01:12 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:12 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:12 +0000
Files and hashes:         1: 1-5Fi3WM50atp2DkB7673qszYGEU.roa (hash: kN65NB/E7sHscyK55wK1hzazTC32+9Bs5gcTM4gjKMo=)
                          2: 1bGM56MEcLFHsgzDo3baYK4aCMQ.roa (hash: oVXVqg3b1Z1hACKH4hIRJE0IPfCRY+hMDc2k4VQe4XU=)
                          3: 9qoftOkUQubHrr_5Y0O0OEB0jsk.roa (hash: NpXUbKfrAE82THRrSEt65m3odGmwe5q6Rv8hzF4EGTU=)
                          4: AFOcU_w_QN-XxQkkQfgesDtPy4Q.roa (hash: vuDPxy3QeT/X/Z21aASlCY+NXDSblPQKGqB5xLpgpdQ=)
                          5: Cdz1li8VqIIJV-m5kmfKj99Y7vo.roa (hash: Injt2qVEYstD1CFDA2RDhQ4n71XCzIHna09I/6r+g6s=)
                          6: ITP65m-ELAYrIziT1mqhAaKmFKI.roa (hash: TA6Lz6SPSkTI7bhEP+cVZ388px4lL7fPEARYK+dRI9A=)
                          7: KQn__NgaZryYtinUwFeSR2RfD-Q.crl (hash: N139CDPuqSv/OdEsAQ23WN0EjmuJ8OnG8eoQJ8Daqas=)
                          8: M10xggNFEiYKiCOpaRSr9Q_E5jI.roa (hash: or9G2RnVnC9nrrlnpNuQsb0VwFoCXmXB+b6uwP7Zhns=)
                          9: OFoxo4tSb8S4WTnb9Arp2ooyRvw.roa (hash: RZrf7jypWJt6TvS7MztBYdDEvw+Yp5dHCbAbuiSrNfs=)
                          10: PxE0dP6xcqVNoXMtC1a5Dmb6n-s.roa (hash: Ybvp2SkTVaVfqhDzUmHlRC82UcW4sX3toG9HthgZ+Es=)
                          11: RFQq8CL00Iuq4i_jx3Jd0iwOLHI.roa (hash: +y+KD8Sa0MVn4eIucYiZ7dhXT2uIb+hoC3jKlQ4uUUg=)
                          12: TI9rtNLD66XYwxwHXpdPJetrLYc.roa (hash: ujb2Pqco4C4UTnNLYGJAf0pytP8/IiyRIp98qQq1a6Y=)
                          13: U8lnC6TG0pv6pWZXKVHzbslUv7Y.roa (hash: en2pnR7bb0v314EN8AtTeDNZJOdRSB9qKOFTcoTcCf0=)
                          14: ULfjtaXZKeO21K8lDdoLHe5Lbts.roa (hash: Ky4d9tu18NCNsNUD91GQmMhDdLCi4CgvFfPWYH5+Qp4=)
                          15: WUnk7TNpoMRbrcKaZRtURt3p4fo.roa (hash: PjPxGwGWGX727ceFQzedXW06Hv7b8nuKhbmV/9bEQCI=)
                          16: X8iQP860aal3YLOybxReqwSyPWU.roa (hash: 8p2TloT9N3iJXhSo+Uh11LexFFF6Vzvsu6ANvx+UWDA=)
                          17: XvUgOjjL99J51pC_sC90Y2oxW38.roa (hash: c2LYASTNBV0y11dbQezPYJYqj9am3X4y+DmSJidna/c=)
                          18: cT-m8k4SDtvWHlQKpD65GuRYzTQ.roa (hash: r6RkMNZjMfYtE9PPmCf0mAK1eFJX+kttY3BaDf/aAME=)
                          19: tvd71H71vKZmhl1lUI4Wfg7oqjo.roa (hash: e5ndVp+pna8lqdjnskWIAOqf7gaAH2YiQgOHVw4SZNM=)
                          20: vS5j-9f_l8NB8D0F1O7CDV1036U.roa (hash: R1R99GD9Fbi68eCqK84dzkbtSynzzus+WGLpYqyYhxQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:a2:f5:83:7f:25:09:65:57:c7:91:05:dc:8d:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2909fffcd81a66bc98b629d4c0579247645f0fe4
        Validity
            Not Before: Apr 13 09:01:12 2025 GMT
            Not After : Apr 14 09:01:12 2025 GMT
        Subject: CN=d67a59bea3e608c607a59ea494fda50925d3292e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:bf:6e:1a:07:df:4c:1c:a1:de:f7:65:97:64:
                    41:4e:65:b5:33:bf:7a:f5:fa:2e:4b:04:56:7f:88:
                    cd:f5:44:07:04:2b:e8:78:f9:6f:56:48:02:51:f1:
                    6d:fa:5e:4e:ed:d6:0e:67:f6:96:a0:7f:a3:57:81:
                    55:f3:fc:92:a3:0a:94:5c:af:34:c0:a7:21:0f:42:
                    03:91:79:0c:82:36:38:65:03:94:d0:98:75:c2:d9:
                    ee:85:6c:9d:f4:4e:34:7f:76:48:9a:1e:2c:f4:21:
                    b7:77:f9:56:0d:7c:c3:22:7f:fa:12:6e:4f:4c:c3:
                    8d:ea:1e:2d:74:3d:07:6c:f7:39:5a:02:19:26:2d:
                    dc:3e:64:10:41:2d:3d:37:6e:97:9c:97:e0:ed:e5:
                    2f:ed:89:4d:5b:5a:32:55:c7:0f:55:b8:16:c3:f2:
                    01:b4:94:69:f1:82:30:2d:df:57:2d:66:94:94:11:
                    54:fc:55:98:64:f9:c1:13:1b:73:4a:43:54:2b:d2:
                    e0:73:89:a2:dd:0d:86:f7:86:93:fc:ac:84:d7:49:
                    4c:7d:35:2a:3f:3f:f8:bf:92:55:31:39:34:c0:14:
                    a6:9e:04:5c:d5:39:04:58:cf:ec:5c:57:ff:3a:b9:
                    bb:e6:1c:52:8f:b7:5b:fb:f6:ce:f4:65:f4:5a:0c:
                    a7:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:7A:59:BE:A3:E6:08:C6:07:A5:9E:A4:94:FD:A5:09:25:D3:29:2E
            X509v3 Authority Key Identifier:
                keyid:29:09:FF:FC:D8:1A:66:BC:98:B6:29:D4:C0:57:92:47:64:5F:0F:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KQn__NgaZryYtinUwFeSR2RfD-Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/de3041-9536-492e-a9cd-f2ae7bc7ecc5/1/KQn__NgaZryYtinUwFeSR2RfD-Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/de3041-9536-492e-a9cd-f2ae7bc7ecc5/1/KQn__NgaZryYtinUwFeSR2RfD-Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:6f:3b:48:66:7a:76:e4:19:a8:06:16:e2:7c:9a:63:97:2f:
         71:fd:c2:28:44:82:9d:dc:03:78:4f:47:4c:05:6a:a1:b1:96:
         5c:a4:c0:99:52:6e:0b:aa:d5:76:5d:ca:8e:fd:66:c3:26:78:
         1e:53:a6:34:aa:1b:4d:e0:6d:25:5f:b6:c5:a3:94:42:76:54:
         cf:47:48:2c:04:60:ea:03:0f:e8:01:4f:c6:da:35:1e:c2:b5:
         e5:18:11:41:3e:ec:1f:06:ec:68:3c:11:d0:3f:28:53:ef:c2:
         57:12:64:e6:d7:12:3a:79:0b:8c:48:44:19:24:fa:60:33:f5:
         93:9c:5f:d2:6b:e6:56:2b:d5:29:ad:66:a6:e7:32:81:f9:71:
         22:26:5c:73:e1:65:53:fd:06:88:3c:90:59:f2:55:6a:e0:b8:
         9e:18:fc:50:b6:d1:77:6b:a3:00:36:71:05:a5:ca:35:53:92:
         24:44:0a:c8:8c:47:a2:36:4d:c9:ad:87:4d:68:2d:e9:26:d0:
         ac:66:b7:fc:b4:73:98:40:c4:83:f9:da:f9:1f:95:98:d8:cb:
         94:aa:76:ba:72:1a:96:88:44:b1:47:d3:7f:8b:2a:6a:81:49:
         79:22:8b:e0:a1:82:de:e1:a4:17:7b:fc:8d:9a:69:d4:1f:10:
         65:8c:e9:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----