Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/5fa094-efa5-4cf7-86b0-5dd94529eeea/1/29B3gCIiIDwWzo6v1Z8LCsHb58M.mft
File:                     29B3gCIiIDwWzo6v1Z8LCsHb58M.mft (raw, json)
Hash identifier:          TZLQTT/3AUeGMkVXKAY7YEMc78CNsyn/A4BqtawP7Nc=
Subject key identifier:   B6:21:B3:C9:28:C8:DB:DB:DE:DF:BD:79:61:4E:30:E4:02:AC:C8:48
Authority key identifier: DB:D0:77:80:22:22:20:3C:16:CE:8E:AF:D5:9F:0B:0A:C1:DB:E7:C3
Certificate issuer:       /CN=dbd077802222203c16ce8eafd59f0b0ac1dbe7c3
Certificate serial:       01962E99BFD66D8746C7999AF3267206C5C0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/29B3gCIiIDwWzo6v1Z8LCsHb58M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/da/5fa094-efa5-4cf7-86b0-5dd94529eeea/1/29B3gCIiIDwWzo6v1Z8LCsHb58M.mft
Manifest number:          0D9F
Signing time:             Sun 13 Apr 2025 10:02:30 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:30 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:30 +0000
Files and hashes:         1: 29B3gCIiIDwWzo6v1Z8LCsHb58M.crl (hash: wCzC7k1zbYarJc/9cYoqC1KnB6a6k+a6oX/uRkinf1E=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:bf:d6:6d:87:46:c7:99:9a:f3:26:72:06:c5:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dbd077802222203c16ce8eafd59f0b0ac1dbe7c3
        Validity
            Not Before: Apr 13 10:02:30 2025 GMT
            Not After : Apr 14 10:02:30 2025 GMT
        Subject: CN=b621b3c928c8dbdbdedfbd79614e30e402acc848
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:6c:05:e3:ab:e3:50:e5:cd:5e:56:8c:19:78:
                    61:d1:32:8a:0c:07:bf:bc:d1:57:10:32:9b:80:80:
                    23:15:23:e9:51:95:eb:f2:c6:16:00:96:64:69:1d:
                    86:cc:42:74:c4:6e:15:f2:2b:59:f6:44:40:03:fd:
                    a6:75:20:5d:dc:54:3d:6d:2e:eb:63:26:9c:65:f4:
                    aa:dd:1b:f8:16:3b:42:56:f5:f8:77:f1:76:47:6c:
                    70:ab:00:5b:f6:11:1e:e6:0c:92:d1:f2:0f:e8:f5:
                    74:4f:c5:07:73:12:f8:c4:13:64:89:ba:40:0a:10:
                    2e:e1:67:33:41:34:c0:53:7b:58:08:eb:e2:27:0f:
                    9d:32:2f:05:b7:fe:58:98:93:bb:64:e1:bb:b6:59:
                    7a:ef:98:84:26:cf:8e:a3:18:8c:00:6e:39:21:f5:
                    6d:e9:be:a3:9a:dc:99:02:01:3c:a8:10:4f:c3:68:
                    53:2c:99:0f:0f:80:b8:19:1f:49:00:2e:70:bf:54:
                    60:fa:ed:64:85:f2:50:67:15:97:ae:ed:1a:53:3a:
                    b7:ed:ec:16:c5:d8:8b:fc:78:be:6a:de:b7:42:6b:
                    45:f1:8b:d3:b3:81:50:f6:58:46:04:1f:41:1a:4a:
                    a9:78:58:1b:76:8b:6a:44:8f:02:8c:f0:5e:a8:ad:
                    4f:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:21:B3:C9:28:C8:DB:DB:DE:DF:BD:79:61:4E:30:E4:02:AC:C8:48
            X509v3 Authority Key Identifier:
                keyid:DB:D0:77:80:22:22:20:3C:16:CE:8E:AF:D5:9F:0B:0A:C1:DB:E7:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/29B3gCIiIDwWzo6v1Z8LCsHb58M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/5fa094-efa5-4cf7-86b0-5dd94529eeea/1/29B3gCIiIDwWzo6v1Z8LCsHb58M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/da/5fa094-efa5-4cf7-86b0-5dd94529eeea/1/29B3gCIiIDwWzo6v1Z8LCsHb58M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9b:53:61:81:0e:24:2e:ff:f6:09:65:49:c6:02:c5:86:50:66:
         e0:c2:91:2e:f2:72:70:67:ea:be:27:d5:4f:26:48:3a:97:0a:
         8a:3f:71:92:8a:17:50:77:d4:1a:57:54:90:fd:d9:16:be:6e:
         d3:03:20:1b:9a:b5:bf:b5:1a:9e:6b:88:c2:a5:b9:6d:ab:4e:
         5e:e5:d3:da:81:cb:68:dc:71:c1:08:22:98:61:03:c6:48:1b:
         15:c9:6f:9a:f9:2d:2e:8d:08:41:a5:32:c5:73:d8:0a:44:d5:
         ef:b2:f0:c7:96:1c:6d:52:8a:1a:f7:58:2f:94:f5:eb:27:cb:
         ed:5c:bc:c3:81:d9:bc:27:b9:8f:d8:0b:e4:7b:1e:a6:eb:77:
         16:9e:d9:c4:7e:d1:c7:b3:3d:e4:10:fb:b1:4a:d4:ed:c5:19:
         c3:4c:8e:20:25:aa:69:5a:57:6e:40:bc:0b:0b:af:fd:25:d8:
         e2:11:05:bd:f3:f4:36:6d:cf:84:16:54:86:3d:a2:7e:e2:8b:
         0f:25:5d:28:33:2a:e1:45:97:5b:3b:90:0a:bf:03:50:0b:e2:
         72:9d:69:7c:22:2a:ce:5d:e0:37:48:32:88:28:ca:70:0b:95:
         a0:28:49:a1:cf:15:e8:55:f1:34:8e:55:58:15:74:31:d2:f5:
         1c:47:73:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----