Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/d47be8-2ff0-4c93-b912-905e763f048d/1/KfzfdinE4A6QbxQ19EndEJ9BC2w.mft
File:                     KfzfdinE4A6QbxQ19EndEJ9BC2w.mft (raw, json)
Hash identifier:          eyZ/6iR4TW30HIU5251q+kj0Vh47yBq/RoGsQK3MFoc=
Subject key identifier:   57:72:40:7D:45:7B:65:AB:FA:BD:D1:19:00:F6:D6:A8:6D:35:48:5B
Authority key identifier: 29:FC:DF:76:29:C4:E0:0E:90:6F:14:35:F4:49:DD:10:9F:41:0B:6C
Certificate issuer:       /CN=29fcdf7629c4e00e906f1435f449dd109f410b6c
Certificate serial:       01962E9925A153A3F750A61F865A2B16C804
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KfzfdinE4A6QbxQ19EndEJ9BC2w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e1/d47be8-2ff0-4c93-b912-905e763f048d/1/KfzfdinE4A6QbxQ19EndEJ9BC2w.mft
Manifest number:          11C7
Signing time:             Sun 13 Apr 2025 10:01:50 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:50 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:50 +0000
Files and hashes:         1: KfzfdinE4A6QbxQ19EndEJ9BC2w.crl (hash: xt14ONDmgDGNhPbbe8F/CKlMyKVyzdo1bueh3lbQfs8=)
                          2: lKv_MpftntPeWIBfQDo4EvQnOCE.roa (hash: v96JNz5ZiqAWk2kEUzYU+IVtwUC39vYGpp2p54BaFZ0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:25:a1:53:a3:f7:50:a6:1f:86:5a:2b:16:c8:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=29fcdf7629c4e00e906f1435f449dd109f410b6c
        Validity
            Not Before: Apr 13 10:01:50 2025 GMT
            Not After : Apr 14 10:01:50 2025 GMT
        Subject: CN=5772407d457b65abfabdd11900f6d6a86d35485b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:83:79:96:e6:3a:67:15:02:78:5a:4b:d3:b6:
                    46:c3:1d:e2:3d:f7:0e:cd:69:1f:a9:cf:a3:41:c2:
                    6c:3b:e8:8d:d1:55:23:86:b3:61:ec:3e:f0:e9:4b:
                    b0:7a:dd:fc:cf:c1:05:22:c7:18:67:95:71:b8:2d:
                    30:eb:39:62:03:fd:25:ba:aa:4d:7d:fa:1f:9e:e1:
                    e6:1d:d8:b3:25:5d:39:a5:d0:10:dc:af:ea:48:d8:
                    00:00:58:08:2f:c0:73:e7:df:dc:66:27:8f:97:4f:
                    26:03:eb:ac:74:8b:bd:07:d6:4b:e9:08:fd:fb:19:
                    f7:e3:fa:89:5b:e7:04:98:63:78:00:1e:dd:41:f3:
                    69:4e:f4:e8:64:70:58:13:54:07:6c:e4:a4:00:82:
                    fe:d1:c8:10:60:27:c5:0d:be:f7:14:fc:4a:27:83:
                    d6:c0:36:6e:50:d3:de:c0:90:0e:a3:0b:cb:3f:e0:
                    63:12:4a:03:ba:ae:6a:73:f0:7e:3c:38:59:96:99:
                    8d:4d:39:60:f8:3e:05:54:ff:c1:fe:82:63:64:4d:
                    51:1e:b7:0c:f6:20:70:f2:6f:d9:2b:a5:6e:b6:3a:
                    07:fe:e2:20:26:de:59:9d:31:85:19:cc:8c:40:3a:
                    9f:d0:1b:9b:67:81:a0:e2:38:4e:c0:75:ad:f8:3c:
                    34:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:72:40:7D:45:7B:65:AB:FA:BD:D1:19:00:F6:D6:A8:6D:35:48:5B
            X509v3 Authority Key Identifier:
                keyid:29:FC:DF:76:29:C4:E0:0E:90:6F:14:35:F4:49:DD:10:9F:41:0B:6C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KfzfdinE4A6QbxQ19EndEJ9BC2w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/d47be8-2ff0-4c93-b912-905e763f048d/1/KfzfdinE4A6QbxQ19EndEJ9BC2w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/d47be8-2ff0-4c93-b912-905e763f048d/1/KfzfdinE4A6QbxQ19EndEJ9BC2w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:06:72:b6:53:b2:b6:0f:3c:1f:c7:6b:a0:f6:93:b1:02:5a:
         05:79:3d:fa:e6:f5:81:67:1f:e0:d5:66:61:c5:a6:c8:62:18:
         41:f9:73:ab:38:77:06:16:ac:b6:1c:35:09:97:70:82:74:80:
         00:5c:8e:f4:cb:95:d0:e2:db:1f:ec:3e:56:d2:70:8c:7c:dc:
         02:b6:b5:0c:48:9b:ef:e9:7d:28:8b:23:50:0a:6b:4e:03:84:
         90:ae:02:fc:a7:65:42:e7:e9:a1:77:ec:4a:0e:1e:c5:d1:9c:
         26:81:78:6c:45:c6:fa:5d:c5:2f:73:ac:2d:25:25:42:d7:c1:
         4d:e2:3e:84:05:7d:70:4e:d1:f5:f5:4f:67:ea:d2:58:e4:91:
         62:16:6b:a5:49:d7:94:78:9a:6e:9c:7d:55:bb:31:99:82:c8:
         e8:c1:1c:31:c7:bb:21:22:51:8b:52:8e:fd:61:d9:38:22:30:
         d3:5d:29:5f:ba:11:80:49:fc:41:9d:3b:89:70:db:f7:fe:f5:
         64:72:73:3a:7b:27:50:37:17:fd:59:54:46:c6:67:52:81:c6:
         e3:92:c9:6b:1f:c5:a3:7b:cd:d0:96:43:38:01:7d:d8:27:94:
         9f:ba:d0:66:98:6b:bf:21:31:64:85:19:a3:6a:01:19:2b:fa:
         bd:bc:6a:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----