Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/55db34-fc79-4004-95c9-39f6d6425338/1/2e_p029fiP3wR0LEFAx1MgkKt3A.mft
File:                     2e_p029fiP3wR0LEFAx1MgkKt3A.mft (raw, json)
Hash identifier:          WMD06mUzO6LFy6BUdYh3fXhIK40VoPFmapmcV4TfVLg=
Subject key identifier:   A4:6C:79:FF:DD:E7:F8:F7:85:3B:33:AD:BF:41:16:F3:E8:03:51:3A
Authority key identifier: D9:EF:E9:D3:6F:5F:88:FD:F0:47:42:C4:14:0C:75:32:09:0A:B7:70
Certificate issuer:       /CN=d9efe9d36f5f88fdf04742c4140c7532090ab770
Certificate serial:       01962ECFAF80AC586CCC92CA8D11FE8000AA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2e_p029fiP3wR0LEFAx1MgkKt3A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bd/55db34-fc79-4004-95c9-39f6d6425338/1/2e_p029fiP3wR0LEFAx1MgkKt3A.mft
Manifest number:          0C3D
Signing time:             Sun 13 Apr 2025 11:01:24 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:24 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:24 +0000
Files and hashes:         1: 2RMmrpcDTc2PvNu5TNTAOyHaouI.roa (hash: XLm+GnfjmWK96gEaM9T+jWpkcJJsItx27t0lDAfnu+M=)
                          2: 2e_p029fiP3wR0LEFAx1MgkKt3A.crl (hash: o4qh6mdsWv4x6OEiMd/qaoS6Drg6WXPjtFHTrg+520U=)
                          3: 8P6Z9Cx8SWSZTkyVumdiUHtewDA.roa (hash: TjOKj4a+PWeCDJb76vAZsC0563BFTc5omsFst4XIgOg=)
                          4: E0pkIzW9n-bHG2zbp1MoMQVm048.roa (hash: B3BqiJI6fxLnY50JHLDClRKLpgrtgt/Wjoy5/3OG5qU=)
                          5: Pk3Y8bmZ9v5bN1_6zxU4UYzAM4s.roa (hash: So1EWdtcEMDdLT99zqpyRyyrElAoZiXcpiXiUbqjYGI=)
                          6: T3lOjSmIziIpwPqfAzGQ-tEJwGg.roa (hash: YO3FHvImLTgWUXMun1aA53LmlRiB4Zb65q5ChwHuYqU=)
                          7: TAvnbGlGOHQkn1H4mmfTjMAonig.roa (hash: 5j2f3QIcoZ3w0v7OOhYxuDlG33ihkkRcN0bfLfGC5dU=)
                          8: qXJMsidJ81j9tR3h2UK1FDbmVxg.roa (hash: HLh56C+v712lFsjl7b6ehYsyReTygh+t6WH5+oMMUUc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:af:80:ac:58:6c:cc:92:ca:8d:11:fe:80:00:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9efe9d36f5f88fdf04742c4140c7532090ab770
        Validity
            Not Before: Apr 13 11:01:24 2025 GMT
            Not After : Apr 14 11:01:24 2025 GMT
        Subject: CN=a46c79ffdde7f8f7853b33adbf4116f3e803513a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:f1:c7:31:f6:c6:a9:18:c1:d4:17:61:6e:3f:
                    d7:bd:bb:e4:ed:b1:ed:14:d4:39:47:1d:96:04:59:
                    17:32:78:ba:3c:d7:e7:5d:1d:bf:9c:4d:b1:33:bd:
                    1b:fa:b8:93:6a:10:38:50:90:49:f9:29:05:42:cb:
                    64:fe:2a:07:e4:54:57:fa:54:2b:b5:d7:10:a3:37:
                    2d:16:a5:8c:ea:6f:81:be:e4:42:26:ff:d5:84:f8:
                    c0:26:bf:e0:69:a4:f8:e2:b7:3b:3e:b5:aa:ef:9e:
                    dc:71:c9:71:eb:4c:28:62:64:55:89:a2:22:90:c9:
                    35:55:44:0c:39:f0:a3:f9:f0:08:86:8d:c6:2c:2a:
                    39:9d:ac:f3:18:f2:c3:be:28:88:fa:da:72:d1:64:
                    bc:0f:b8:86:53:be:be:bf:b8:45:75:0e:1a:79:6e:
                    7a:86:2e:9c:9c:02:1a:09:6a:cb:66:b3:4c:cb:33:
                    ba:3d:8a:56:30:e4:f2:84:ea:9b:ea:18:d6:70:03:
                    63:98:5e:64:d8:e3:0c:73:33:f0:bd:67:9d:e9:90:
                    ce:d2:21:3d:11:cf:84:3d:1b:b5:f3:d6:e0:4c:23:
                    74:87:79:d3:c4:42:56:f9:05:cd:b2:fe:24:8c:4a:
                    bb:3f:28:79:54:87:98:d7:b1:0d:bc:1c:a5:8f:a1:
                    ce:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:6C:79:FF:DD:E7:F8:F7:85:3B:33:AD:BF:41:16:F3:E8:03:51:3A
            X509v3 Authority Key Identifier:
                keyid:D9:EF:E9:D3:6F:5F:88:FD:F0:47:42:C4:14:0C:75:32:09:0A:B7:70

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e_p029fiP3wR0LEFAx1MgkKt3A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/55db34-fc79-4004-95c9-39f6d6425338/1/2e_p029fiP3wR0LEFAx1MgkKt3A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/55db34-fc79-4004-95c9-39f6d6425338/1/2e_p029fiP3wR0LEFAx1MgkKt3A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:72:c2:20:36:0c:94:c0:ab:db:1c:e3:05:e9:f2:27:a2:21:
         90:8b:15:53:7a:8b:e9:80:48:38:1a:ed:47:8f:8f:cb:5a:fb:
         50:c8:e5:74:8c:33:b4:db:d4:2c:b9:d3:86:71:45:04:73:72:
         3b:29:8a:a7:48:a8:3c:e5:76:ca:89:30:01:e6:c8:c9:ec:f8:
         3a:1e:af:75:11:a1:f4:3e:c8:3a:10:fc:8e:92:0b:e7:d2:dd:
         c3:b8:6c:f4:64:b7:4a:fc:b4:b6:d2:b9:3e:22:ee:ad:d7:73:
         91:88:14:b4:12:f9:34:36:b4:3b:17:52:f8:bc:51:43:f3:2e:
         01:34:82:0c:ef:0b:c4:d5:ff:89:76:66:94:3e:75:66:50:92:
         ad:22:1b:5f:f8:09:b9:b0:c0:20:7b:42:d2:4a:24:91:ac:7d:
         5c:5a:0a:08:85:e3:4f:77:2a:63:55:7c:05:e9:2d:2b:3e:1c:
         5c:47:0f:02:a9:82:81:b4:d9:f6:d9:3c:94:08:5f:e4:3a:45:
         76:1e:e1:5c:5a:d0:07:d9:10:4f:20:82:de:a7:fc:93:40:40:
         2c:50:29:4d:7e:1c:1e:ed:1b:70:11:9f:e3:cd:55:18:af:4a:
         c6:79:3c:e6:80:0b:66:9a:8e:62:34:73:2f:47:97:25:e3:03:
         9e:c7:4a:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----