Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/0614a6-d01c-4ff2-a993-7246457fd2b3/1/KfUkAji4KPFuYCKeJjNQPwSEZZk.mft
File:                     KfUkAji4KPFuYCKeJjNQPwSEZZk.mft (raw, json)
Hash identifier:          Wvoow19Gr76+fDJ8OD+MnSjlhReAeOKH++9Y33U7hZo=
Subject key identifier:   79:3D:3F:5F:1C:E2:71:05:7B:61:54:0E:0A:FF:7D:68:BC:E2:D1:2D
Authority key identifier: 29:F5:24:02:38:B8:28:F1:6E:60:22:9E:26:33:50:3F:04:84:65:99
Certificate issuer:       /CN=29f5240238b828f16e60229e2633503f04846599
Certificate serial:       01962F74EFC4ABD297D13303C4D018C80633
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KfUkAji4KPFuYCKeJjNQPwSEZZk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/52/0614a6-d01c-4ff2-a993-7246457fd2b3/1/KfUkAji4KPFuYCKeJjNQPwSEZZk.mft
Manifest number:          01DB
Signing time:             Sun 13 Apr 2025 14:01:54 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:54 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:54 +0000
Files and hashes:         1: KfUkAji4KPFuYCKeJjNQPwSEZZk.crl (hash: 3telGTX2iVNcwxjPMk4MTaXgeojqXBiisqoV/fV2i0c=)
                          2: ffvaic9mo-Ox_7Jsdhd4jhWeyvM.roa (hash: nAU1XWM3o+xHaVb0+VtmU8Q3s90CIRxbMQo+s7S+UMk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:ef:c4:ab:d2:97:d1:33:03:c4:d0:18:c8:06:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=29f5240238b828f16e60229e2633503f04846599
        Validity
            Not Before: Apr 13 14:01:54 2025 GMT
            Not After : Apr 14 14:01:54 2025 GMT
        Subject: CN=793d3f5f1ce271057b61540e0aff7d68bce2d12d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:69:29:84:d4:72:bb:97:46:cb:b5:01:68:45:
                    6c:f3:bd:32:a5:06:d7:48:89:f6:ef:14:4c:46:bf:
                    aa:c8:b3:88:63:eb:a3:1e:55:38:06:25:8a:1b:4c:
                    4b:79:6f:8b:bc:fc:67:ff:fa:a0:3c:b9:a5:08:74:
                    4b:6d:4c:2b:de:ec:9f:9a:7f:1a:bb:8c:b9:45:13:
                    d9:52:e9:fd:8c:27:ee:98:4e:4b:5d:81:65:f4:a0:
                    90:2a:4a:79:5f:26:86:ee:2f:ab:c1:1e:47:59:28:
                    42:bd:da:78:f9:04:85:e2:bf:ce:c0:90:61:b6:77:
                    c3:04:c4:35:32:54:4d:4a:9a:6c:b9:89:1f:02:0a:
                    9c:dc:51:8b:81:09:82:37:c2:11:56:a4:c7:ad:cb:
                    17:1f:c0:ce:63:2e:53:ad:71:1d:f3:b7:30:68:c2:
                    eb:d0:2c:ff:2f:ad:6b:b1:01:10:22:16:d2:66:08:
                    16:3e:f0:63:8a:e6:69:36:1d:b0:00:e6:3a:de:fa:
                    a7:80:36:bb:c5:79:1d:cf:ef:8f:13:d5:35:71:86:
                    d4:22:00:ac:2a:7d:92:24:fc:83:4c:af:e9:20:4b:
                    0e:a9:37:9b:82:33:bf:8f:73:51:0f:d7:74:a5:71:
                    52:35:3c:f1:89:de:cc:90:3a:e1:b3:7f:d4:ea:5d:
                    b7:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:3D:3F:5F:1C:E2:71:05:7B:61:54:0E:0A:FF:7D:68:BC:E2:D1:2D
            X509v3 Authority Key Identifier:
                keyid:29:F5:24:02:38:B8:28:F1:6E:60:22:9E:26:33:50:3F:04:84:65:99

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KfUkAji4KPFuYCKeJjNQPwSEZZk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/0614a6-d01c-4ff2-a993-7246457fd2b3/1/KfUkAji4KPFuYCKeJjNQPwSEZZk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/52/0614a6-d01c-4ff2-a993-7246457fd2b3/1/KfUkAji4KPFuYCKeJjNQPwSEZZk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b1:b3:95:bf:54:56:33:bc:ec:ce:c2:9e:6a:a2:f8:0b:e3:49:
         16:43:ea:90:b8:ee:14:d8:8f:18:a0:31:6f:12:10:df:60:22:
         d3:3f:25:73:14:2c:2a:03:5d:0d:4e:f9:fa:a7:1c:88:07:ab:
         55:7a:0e:9e:a4:9e:18:b5:ae:c5:54:36:4b:22:ba:62:33:cf:
         8d:3a:87:d9:b6:5b:58:f1:31:06:c0:d2:0a:7c:39:5c:11:3e:
         89:c0:94:67:46:3b:b1:a2:e4:99:c3:c6:e3:8f:5c:56:06:24:
         3d:50:7c:a3:34:e4:3b:3b:41:c3:83:79:47:c2:f9:56:47:8b:
         40:81:23:bd:84:f1:d2:21:ea:c1:92:92:62:7b:e0:0c:57:50:
         d2:ab:22:f3:3d:a5:c4:12:1c:8c:97:63:5c:bc:a0:38:09:34:
         eb:c9:b0:e5:da:fe:9b:4a:09:4d:71:85:c8:82:81:21:26:b1:
         14:7f:3f:19:6b:b3:3f:b2:83:aa:c5:ee:37:b3:cc:06:f9:5b:
         f1:00:0e:40:44:59:f9:e7:5f:c2:aa:a3:35:f0:f8:e9:96:51:
         1f:78:18:96:2e:2d:74:62:64:19:d2:d3:f4:fe:6f:67:5f:b6:
         55:46:44:44:dc:92:5e:d3:ce:e3:c4:41:da:51:67:f2:b2:e9:
         fb:e4:47:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----