Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/772fea-4715-4010-8c1e-dee66a35506c/1/KdlQvBhFV79QTPK3yUp9zsCHbWY.mft
File:                     KdlQvBhFV79QTPK3yUp9zsCHbWY.mft (raw, json)
Hash identifier:          agMgTpOgv/dLjiDyAcTXKr/JXZ5p6rj4Z7TDPRGm/gM=
Subject key identifier:   C4:2A:A9:B9:81:AD:E4:16:9E:32:91:14:12:C0:8F:8B:3F:39:48:8C
Authority key identifier: 29:D9:50:BC:18:45:57:BF:50:4C:F2:B7:C9:4A:7D:CE:C0:87:6D:66
Certificate issuer:       /CN=29d950bc184557bf504cf2b7c94a7dcec0876d66
Certificate serial:       01962E617829512BDC22E5DFAF15925D4C8B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KdlQvBhFV79QTPK3yUp9zsCHbWY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3b/772fea-4715-4010-8c1e-dee66a35506c/1/KdlQvBhFV79QTPK3yUp9zsCHbWY.mft
Manifest number:          14E9
Signing time:             Sun 13 Apr 2025 09:01:01 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:01 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:01 +0000
Files and hashes:         1: KdlQvBhFV79QTPK3yUp9zsCHbWY.crl (hash: +9zuGaerRkUdvPTMNnq4/ia/lzXahfrn+jZc/QgyWew=)
                          2: zbr28h6G65Bn1Q6ZX_BmInmSKTE.roa (hash: ETLOFsK2osYgbAep7Hus0i1EKEQGmJzxLIzfnOkM508=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:78:29:51:2b:dc:22:e5:df:af:15:92:5d:4c:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=29d950bc184557bf504cf2b7c94a7dcec0876d66
        Validity
            Not Before: Apr 13 09:01:01 2025 GMT
            Not After : Apr 14 09:01:01 2025 GMT
        Subject: CN=c42aa9b981ade4169e32911412c08f8b3f39488c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:55:b3:64:21:64:be:b6:62:28:02:72:92:7b:
                    0c:17:36:48:50:67:fa:ba:90:56:e6:d4:51:ec:9a:
                    b1:02:4e:39:fe:e5:9c:7a:1c:0b:38:7e:ad:c7:27:
                    13:a0:1c:be:29:0c:92:07:3e:12:0e:b4:18:a6:07:
                    54:7b:93:f2:a7:24:78:fa:a0:f1:ce:8f:3b:6f:cd:
                    71:5a:e4:e8:1e:a1:90:66:e1:01:20:15:40:4b:50:
                    df:e9:c7:9d:a8:f5:37:f1:1a:e7:ac:1a:f6:5a:4d:
                    3e:19:00:34:81:0f:1b:34:40:49:92:b3:4c:5a:0d:
                    c6:c9:ed:06:e1:17:18:9a:c2:7c:03:41:42:9f:76:
                    00:ff:f3:91:fd:97:a8:16:eb:12:63:c3:92:cb:fb:
                    9d:16:9b:27:80:71:e6:a7:df:fb:f4:40:12:0d:7c:
                    22:b4:4d:b3:20:ee:eb:d7:a2:a5:f3:01:76:15:be:
                    27:6e:b6:10:93:0b:c0:3a:b9:8c:83:25:fd:97:c1:
                    85:98:70:83:48:24:f1:8d:a1:78:a9:be:78:f6:36:
                    b2:0e:56:ea:5f:28:05:37:68:2d:10:48:2f:8e:7b:
                    68:38:ca:58:25:d5:e3:e8:24:0b:3c:c3:85:2c:bc:
                    05:3f:b2:4b:b7:97:f6:e1:84:c8:ce:3f:e0:b4:b7:
                    5e:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:2A:A9:B9:81:AD:E4:16:9E:32:91:14:12:C0:8F:8B:3F:39:48:8C
            X509v3 Authority Key Identifier:
                keyid:29:D9:50:BC:18:45:57:BF:50:4C:F2:B7:C9:4A:7D:CE:C0:87:6D:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KdlQvBhFV79QTPK3yUp9zsCHbWY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/772fea-4715-4010-8c1e-dee66a35506c/1/KdlQvBhFV79QTPK3yUp9zsCHbWY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/772fea-4715-4010-8c1e-dee66a35506c/1/KdlQvBhFV79QTPK3yUp9zsCHbWY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:9b:24:af:41:d3:91:f4:eb:9f:72:74:9a:65:9b:90:bf:39:
         26:5b:25:be:2d:35:f2:02:f6:a9:a2:2a:cf:5e:91:20:44:7f:
         fb:cb:f8:e9:4c:4e:4e:e4:0f:71:e4:1a:fd:fc:99:de:6b:4b:
         ce:3d:cf:de:be:39:fc:7a:ec:5a:80:80:f3:ff:60:de:66:61:
         13:b8:b4:ee:63:f2:b4:02:02:38:19:2d:a2:22:9d:5d:bd:11:
         6b:df:71:6a:33:51:86:9f:f9:de:0b:0a:d9:5d:cc:6d:f2:b0:
         48:11:dd:98:1b:f7:0e:a3:43:a5:10:15:53:c8:f6:98:02:d3:
         17:40:57:f6:69:36:86:a9:d1:8a:ed:10:bc:18:8f:b6:c9:77:
         76:60:b7:a0:7d:31:fb:02:d2:cb:f4:a3:09:67:1d:73:67:c5:
         4b:39:ba:99:c8:82:7e:25:db:27:34:a6:28:a6:bb:a3:bd:f7:
         7d:3b:72:8d:8d:6b:e7:b8:32:b9:ed:14:2f:65:c9:16:a3:57:
         19:e5:a2:d9:d6:00:7a:ac:82:3b:1b:89:20:48:55:38:d1:77:
         fb:38:22:51:8a:d6:7b:ea:b7:01:04:82:ec:f0:cc:0f:f0:cd:
         fb:0a:60:cb:c8:f2:14:c6:78:b8:6f:91:f0:0c:2a:96:cb:24:
         01:74:43:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----