Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/1043a7-b276-40dc-9f67-35004af5c935/1/KRl7xzMOqZkA9PyRAzozF-VvdeI.mft
File:                     KRl7xzMOqZkA9PyRAzozF-VvdeI.mft (raw, json)
Hash identifier:          Azgubnk1vTW8xYGFhqcQEEcGqmZ+ycdqDTTVwLFdhmA=
Subject key identifier:   6E:8A:57:DF:95:24:0B:54:7D:DD:9A:87:8B:6F:35:BB:7B:66:3A:2E
Authority key identifier: 29:19:7B:C7:33:0E:A9:99:00:F4:FC:91:03:3A:33:17:E5:6F:75:E2
Certificate issuer:       /CN=29197bc7330ea99900f4fc91033a3317e56f75e2
Certificate serial:       01962F3D3897701CCC73FCB7BC82F1F2F331
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KRl7xzMOqZkA9PyRAzozF-VvdeI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/79/1043a7-b276-40dc-9f67-35004af5c935/1/KRl7xzMOqZkA9PyRAzozF-VvdeI.mft
Manifest number:          030C
Signing time:             Sun 13 Apr 2025 13:01:03 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:03 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:03 +0000
Files and hashes:         1: KRl7xzMOqZkA9PyRAzozF-VvdeI.crl (hash: H5eN6UtMdawmWec/4PZrEp1qcT0UHwLoPJRyp5vw6Hg=)
                          2: lzjPjehPcPKbzhp_BORqJSFXL5w.roa (hash: o7m8VbYXK8WyV5y7PTGt6HIYSCCP18Dfj928jAcIW9s=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:38:97:70:1c:cc:73:fc:b7:bc:82:f1:f2:f3:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=29197bc7330ea99900f4fc91033a3317e56f75e2
        Validity
            Not Before: Apr 13 13:01:03 2025 GMT
            Not After : Apr 14 13:01:03 2025 GMT
        Subject: CN=6e8a57df95240b547ddd9a878b6f35bb7b663a2e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:3a:05:fb:10:f8:72:dc:d7:e0:1f:bc:26:56:
                    57:17:99:94:3b:a2:a7:a4:1e:f2:d7:79:cc:7a:8d:
                    11:9b:b1:3f:fb:b6:e9:f9:91:a2:70:22:85:18:12:
                    83:2e:c4:d6:87:4f:dd:69:46:41:ab:1e:fc:f3:b1:
                    67:4e:28:9e:e4:09:5e:d9:0e:28:bf:3a:2f:ff:9c:
                    4a:b6:92:54:ec:60:dc:20:76:24:3e:c3:01:d9:03:
                    f7:f6:4a:6e:9b:30:20:fe:6b:e7:7c:39:31:d2:8f:
                    a3:d3:75:02:46:81:6a:a3:f5:75:1e:4d:3a:6f:fd:
                    9c:a0:da:0c:f4:db:1b:b8:2d:7c:76:1a:90:7a:a2:
                    3b:cb:db:85:39:8c:db:fb:59:15:5e:4f:75:5c:b1:
                    90:37:08:d6:ff:3f:03:19:f5:67:db:eb:52:a4:c1:
                    31:33:71:1d:5f:6a:05:6f:6c:30:6b:e5:4a:19:11:
                    c1:5c:74:c7:d8:ed:a1:e2:47:00:89:b2:02:d5:3a:
                    9e:88:26:34:ab:8f:fa:79:12:00:f0:68:18:a8:98:
                    b7:76:b7:4c:42:10:06:4c:c4:cf:36:a5:58:58:ad:
                    07:9b:5d:96:69:d8:17:a0:15:db:22:08:62:a2:76:
                    4d:64:c0:f3:b8:e2:56:18:4a:19:aa:2f:48:53:80:
                    e9:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:8A:57:DF:95:24:0B:54:7D:DD:9A:87:8B:6F:35:BB:7B:66:3A:2E
            X509v3 Authority Key Identifier:
                keyid:29:19:7B:C7:33:0E:A9:99:00:F4:FC:91:03:3A:33:17:E5:6F:75:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KRl7xzMOqZkA9PyRAzozF-VvdeI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/1043a7-b276-40dc-9f67-35004af5c935/1/KRl7xzMOqZkA9PyRAzozF-VvdeI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/79/1043a7-b276-40dc-9f67-35004af5c935/1/KRl7xzMOqZkA9PyRAzozF-VvdeI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:02:5f:d7:e6:b3:47:ec:ac:d8:91:c8:4b:0b:fc:8c:89:de:
         ef:92:42:36:47:e7:00:95:4a:0d:3c:cb:81:23:98:36:5c:72:
         0f:da:9a:d3:43:5d:d4:28:f9:da:54:01:a1:bb:fb:10:6d:66:
         e5:98:3b:56:90:b4:4f:cc:bd:1f:00:94:7e:b9:cd:a5:f8:c2:
         7a:6c:c4:e4:8f:ae:15:6f:94:5d:d9:0f:9a:8c:ee:53:8e:45:
         75:49:d7:25:94:b5:b0:e8:0e:68:3a:9d:5d:26:c9:de:3c:6e:
         46:84:0d:54:77:6a:c1:e3:d0:a2:33:be:c0:f5:b8:23:87:fd:
         00:b5:94:de:90:be:eb:f4:d1:ca:10:dd:82:6c:c4:81:0e:a3:
         d9:64:f5:55:20:2a:3e:ac:60:c3:8d:a3:32:a6:43:87:b9:46:
         20:fe:f3:c6:d3:9a:a4:cf:58:35:68:61:3f:d7:e2:16:0d:c9:
         53:aa:f2:09:7b:7a:7a:4d:73:b5:9c:9a:6e:2a:ab:78:ed:97:
         19:d8:f3:49:b6:30:86:61:df:39:20:5f:ba:41:b3:d9:c1:f0:
         ea:b6:22:5f:dc:56:f2:2f:fa:32:2a:ef:d9:14:d1:f0:ad:81:
         13:f8:7b:d7:26:ea:9d:b5:bd:44:b3:8b:78:0b:44:00:e5:b9:
         e3:48:b1:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----