Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/f12029-6758-4233-9dfc-c654356b07c4/1/29OCJ0tFdmK6ctGIZXOix9zDVIY.mft
File:                     29OCJ0tFdmK6ctGIZXOix9zDVIY.mft (raw, json)
Hash identifier:          SLf3rvsb8w10QdrhloVGLvuaJo3mT8qqpWl1l+d9Tbo=
Subject key identifier:   DE:C5:43:8A:FA:B5:DD:1E:6E:BC:C3:CD:B9:36:FE:83:C0:F9:56:A1
Authority key identifier: DB:D3:82:27:4B:45:76:62:BA:72:D1:88:65:73:A2:C7:DC:C3:54:86
Certificate issuer:       /CN=dbd382274b457662ba72d1886573a2c7dcc35486
Certificate serial:       01962E98A91971D0426EB29C86A995A2EF39
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/29OCJ0tFdmK6ctGIZXOix9zDVIY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/52/f12029-6758-4233-9dfc-c654356b07c4/1/29OCJ0tFdmK6ctGIZXOix9zDVIY.mft
Manifest number:          1226
Signing time:             Sun 13 Apr 2025 10:01:18 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:18 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:18 +0000
Files and hashes:         1: 29OCJ0tFdmK6ctGIZXOix9zDVIY.crl (hash: WkhOKtpHF/wjGnaXKWpfTMvn28MyjEgP5L3dvSfdPrU=)
                          2: iUMe2JOAJNlxZXEaHwJwVAIN3WA.roa (hash: ZvIlGSaMCDAbt70045McSuBEc2GtkECp8D75xEWNHU8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:a9:19:71:d0:42:6e:b2:9c:86:a9:95:a2:ef:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dbd382274b457662ba72d1886573a2c7dcc35486
        Validity
            Not Before: Apr 13 10:01:18 2025 GMT
            Not After : Apr 14 10:01:18 2025 GMT
        Subject: CN=dec5438afab5dd1e6ebcc3cdb936fe83c0f956a1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:fa:55:f9:54:7a:5f:47:09:08:aa:e8:ea:3c:
                    f3:62:b2:b7:3c:2e:14:5c:13:51:81:83:b6:79:36:
                    78:4d:f4:3a:ae:8e:9b:ee:fd:99:63:64:ce:80:38:
                    5b:88:f6:de:cf:a2:5c:72:6b:8d:0b:2d:e4:c6:b7:
                    32:6b:11:b7:c4:90:cd:9d:d2:2f:de:b3:48:c9:ac:
                    bd:15:48:40:38:c8:33:5b:aa:56:61:84:32:8f:37:
                    4d:40:cf:a2:91:de:36:d1:f4:a7:a6:c1:01:a4:b0:
                    20:0e:1c:e9:d0:6a:8a:38:df:2e:bf:dc:4a:c6:40:
                    7e:42:9b:ad:07:63:d2:1c:39:be:43:91:28:01:b2:
                    52:d4:75:26:a0:24:70:e7:f8:d1:bc:a7:8a:f0:09:
                    66:a7:72:81:99:2a:a8:54:a5:10:5d:fd:57:55:7f:
                    cb:61:b4:bf:c8:51:49:de:ae:b5:cd:c4:ef:78:0c:
                    41:f8:5d:fb:ff:85:b7:cc:32:c3:84:6d:b0:53:14:
                    e9:d4:f8:d9:41:ba:1e:b7:5b:09:9c:75:7a:2b:e3:
                    32:f6:8b:8e:9e:95:63:87:5c:f8:e2:a9:12:14:3f:
                    2f:fc:ff:a8:ff:34:9f:78:6a:5b:a3:76:ef:c8:52:
                    b0:dc:28:86:01:3b:88:3c:19:ae:50:2d:27:73:32:
                    1c:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:C5:43:8A:FA:B5:DD:1E:6E:BC:C3:CD:B9:36:FE:83:C0:F9:56:A1
            X509v3 Authority Key Identifier:
                keyid:DB:D3:82:27:4B:45:76:62:BA:72:D1:88:65:73:A2:C7:DC:C3:54:86

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/29OCJ0tFdmK6ctGIZXOix9zDVIY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/f12029-6758-4233-9dfc-c654356b07c4/1/29OCJ0tFdmK6ctGIZXOix9zDVIY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/52/f12029-6758-4233-9dfc-c654356b07c4/1/29OCJ0tFdmK6ctGIZXOix9zDVIY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:33:58:f5:3a:0d:3a:8b:58:b8:e1:0f:bd:8d:39:7e:7c:3f:
         fe:d1:d4:15:2a:9b:6c:d3:6d:55:eb:59:51:3f:5b:50:15:b1:
         09:f1:c7:c1:aa:72:57:4a:b6:08:66:e9:b7:af:be:0c:90:99:
         31:42:bb:8f:e9:da:5b:3a:36:37:81:92:3b:9d:64:87:ab:a8:
         d4:70:95:a2:8d:2f:2b:b3:2d:a1:6b:55:e8:fd:88:50:a3:4e:
         d5:c1:34:f5:49:8b:6a:80:f1:7d:74:ce:f9:52:1e:4c:af:d0:
         a2:b1:e9:98:97:b6:ad:06:5a:aa:37:a0:dc:7a:30:72:8a:ff:
         39:28:ea:ba:a5:06:82:34:91:eb:d0:b5:6b:61:d4:23:31:9e:
         e8:b7:3c:bc:a7:ea:2c:21:05:b8:f1:50:00:03:fa:bb:15:5d:
         7e:fa:7b:25:8f:fe:93:28:4a:04:66:4f:32:68:7a:1b:63:05:
         5f:cf:f0:ee:7f:7f:5c:ba:3f:03:a8:9f:f6:5f:c4:27:8e:5f:
         88:4c:85:0b:8d:a6:eb:42:b0:7e:32:af:61:81:e6:85:a5:83:
         23:28:c7:a0:5c:f7:dd:cb:2c:63:9a:4b:43:b8:55:69:72:71:
         73:c2:da:c8:15:a2:b8:b0:27:19:6d:57:d6:e5:48:7c:9b:6e:
         de:ca:42:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----