Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/a56c12-db7a-4220-9b15-1c2b842d22be/1/KdpkEaEyZNxt4PEBEIVA73Qe0Zo.mft
File:                     KdpkEaEyZNxt4PEBEIVA73Qe0Zo.mft (raw, json)
Hash identifier:          V434aK8MUVMm9mgArEcuLzL9SXDhHaulNoNIHaqJvac=
Subject key identifier:   DE:79:15:C1:51:E3:DF:59:4F:42:E0:12:49:ED:FE:8A:07:26:71:F0
Authority key identifier: 29:DA:64:11:A1:32:64:DC:6D:E0:F1:01:10:85:40:EF:74:1E:D1:9A
Certificate issuer:       /CN=29da6411a13264dc6de0f101108540ef741ed19a
Certificate serial:       01962E61F67C3B7700297763DFEB26EA1465
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KdpkEaEyZNxt4PEBEIVA73Qe0Zo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e2/a56c12-db7a-4220-9b15-1c2b842d22be/1/KdpkEaEyZNxt4PEBEIVA73Qe0Zo.mft
Manifest number:          1107
Signing time:             Sun 13 Apr 2025 09:01:34 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:34 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:34 +0000
Files and hashes:         1: KdpkEaEyZNxt4PEBEIVA73Qe0Zo.crl (hash: fK+8KvrI9+cv8Lfnr5k7xlDMqAvpbBtwflzmZAkt2mQ=)
                          2: ofG1VLRjjYIcZfzAaNigWWgyFxw.roa (hash: ZHICR+Axb4b3KRXOcmZzuP26q8FUw656ivJ0mJFMsoE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:f6:7c:3b:77:00:29:77:63:df:eb:26:ea:14:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=29da6411a13264dc6de0f101108540ef741ed19a
        Validity
            Not Before: Apr 13 09:01:34 2025 GMT
            Not After : Apr 14 09:01:34 2025 GMT
        Subject: CN=de7915c151e3df594f42e01249edfe8a072671f0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:90:1e:e5:06:1e:23:13:aa:23:b4:9d:77:3c:
                    53:76:d8:fb:32:b1:26:2a:05:e9:52:f4:bf:cb:d3:
                    5b:d0:aa:98:13:e9:8f:b5:76:28:6d:18:2e:6a:fd:
                    47:ac:d0:f5:30:8b:05:cb:22:ae:6e:76:c1:e5:ad:
                    6c:cc:72:65:e5:b0:76:95:55:e8:f5:ef:33:6d:73:
                    cd:4f:ae:8f:62:0a:d3:8c:38:77:ff:b4:4c:01:c0:
                    b8:ff:30:fe:dd:c4:70:0a:0c:a0:32:a0:bf:32:81:
                    6a:b6:6d:c7:ec:0a:cf:70:df:bc:be:c1:5a:fb:9b:
                    ab:39:c0:66:ff:8f:f3:4a:24:7e:1d:2d:7b:76:33:
                    69:8a:61:57:fc:44:92:cd:03:65:26:f8:8d:c2:86:
                    62:98:56:70:3c:27:56:70:a3:13:d5:bc:48:55:09:
                    21:7c:5c:80:17:1b:b7:12:13:da:ff:ca:e6:fb:4f:
                    ad:c7:19:f3:f9:c1:03:b9:36:7a:d2:6c:15:bd:d4:
                    51:2d:8d:5d:1c:df:f8:29:46:38:c3:16:9a:6c:2c:
                    d8:09:5a:56:b5:a5:03:e2:ca:b8:02:1a:a9:9f:9a:
                    3d:a9:6d:25:d5:bd:3b:73:ce:82:2e:81:cc:cb:f2:
                    b7:62:e5:45:e3:a2:72:52:cc:97:e2:d0:2c:a7:3d:
                    33:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:79:15:C1:51:E3:DF:59:4F:42:E0:12:49:ED:FE:8A:07:26:71:F0
            X509v3 Authority Key Identifier:
                keyid:29:DA:64:11:A1:32:64:DC:6D:E0:F1:01:10:85:40:EF:74:1E:D1:9A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KdpkEaEyZNxt4PEBEIVA73Qe0Zo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/a56c12-db7a-4220-9b15-1c2b842d22be/1/KdpkEaEyZNxt4PEBEIVA73Qe0Zo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/a56c12-db7a-4220-9b15-1c2b842d22be/1/KdpkEaEyZNxt4PEBEIVA73Qe0Zo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:36:5b:6d:f4:6f:15:87:53:6a:12:27:eb:e4:2f:2d:04:1c:
         ed:1b:dd:99:0e:11:35:35:be:40:23:00:c4:9f:55:60:8e:56:
         48:73:33:f0:e7:26:32:c8:52:4b:09:03:a7:d5:57:24:01:27:
         b9:56:d3:29:a9:a1:1b:64:c9:d8:8c:c3:0f:58:c3:4f:ac:94:
         49:07:93:9d:31:ad:7f:e7:02:93:a5:55:31:8e:4d:7d:86:05:
         3a:4a:30:2c:c6:fb:ce:8a:f1:1e:78:ae:4d:28:5b:8e:69:37:
         8f:59:17:f6:09:a0:ef:44:11:c5:c7:ab:ea:d4:a0:aa:7a:79:
         a6:e2:8c:d7:79:af:9e:1e:ad:e5:f7:34:f7:cc:3b:d1:89:a3:
         e7:b4:25:6e:db:a3:d7:f4:6b:6c:90:57:84:8f:07:53:40:82:
         78:28:63:69:2d:19:6d:6f:c8:38:fb:bc:d3:61:43:c1:14:54:
         31:14:6b:66:2c:d5:13:93:21:c6:e2:c6:86:af:a6:aa:21:e9:
         8d:4e:2c:c3:75:9a:8d:35:15:7b:bb:8f:94:41:0c:89:30:1d:
         9e:c9:99:59:37:99:bf:7a:bf:1f:1a:9f:34:20:a3:af:2c:d1:
         19:bc:76:84:ff:0f:93:03:1d:44:82:39:77:7e:e0:de:b3:b6:
         16:e2:22:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----