Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/17a016-26c7-424c-862f-bcac8b552a9a/1/Kft9o7ROQbMjaeSlx5DTCB_Gmqk.mft
File:                     Kft9o7ROQbMjaeSlx5DTCB_Gmqk.mft (raw, json)
Hash identifier:          AQ7U9hDJoREDu1UZ67cMYNywTtkV1MZ8ropcEPmodKQ=
Subject key identifier:   DA:D9:22:5A:48:A9:CD:B7:21:50:24:EF:D9:FA:96:60:F6:0D:D2:7D
Authority key identifier: 29:FB:7D:A3:B4:4E:41:B3:23:69:E4:A5:C7:90:D3:08:1F:C6:9A:A9
Certificate issuer:       /CN=29fb7da3b44e41b32369e4a5c790d3081fc69aa9
Certificate serial:       01962E991FF5405D2360023C068FBCE007D7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Kft9o7ROQbMjaeSlx5DTCB_Gmqk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ec/17a016-26c7-424c-862f-bcac8b552a9a/1/Kft9o7ROQbMjaeSlx5DTCB_Gmqk.mft
Manifest number:          10E0
Signing time:             Sun 13 Apr 2025 10:01:49 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:49 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:49 +0000
Files and hashes:         1: Kft9o7ROQbMjaeSlx5DTCB_Gmqk.crl (hash: 07BbO8NcD1i9acmVt/tDyJEXDRc3FP3T89RpLvjV/vw=)
                          2: wWu_mnG1mF1XhVWaW0DZDLRaMZA.roa (hash: OxlFGiJEt7spgwhfyEKbeiDTLip5JYbp9FNAPkL6rNQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:1f:f5:40:5d:23:60:02:3c:06:8f:bc:e0:07:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=29fb7da3b44e41b32369e4a5c790d3081fc69aa9
        Validity
            Not Before: Apr 13 10:01:49 2025 GMT
            Not After : Apr 14 10:01:49 2025 GMT
        Subject: CN=dad9225a48a9cdb7215024efd9fa9660f60dd27d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:60:26:46:88:38:d6:3f:30:53:0a:df:31:93:
                    13:b5:6c:5b:65:38:cc:6c:54:a8:75:3c:df:67:46:
                    37:80:ca:1e:b3:83:48:64:a8:e1:b2:ab:00:3e:03:
                    6d:5b:ef:6d:70:97:7d:d3:c2:fb:6b:63:c6:b6:94:
                    9b:5e:15:77:e5:5c:64:87:96:01:f7:5c:f8:57:1a:
                    a6:06:ac:81:e6:86:7a:17:b9:da:f3:18:91:7e:57:
                    13:17:4c:d8:fa:52:0d:cc:65:67:dc:7d:dc:c4:ba:
                    2f:96:42:50:60:be:f9:a3:98:1a:98:25:f5:8f:f1:
                    e6:99:41:55:5f:44:e7:1b:4a:23:4a:e4:d0:37:f5:
                    bb:43:81:38:9b:32:19:4a:33:bf:a7:a7:64:0f:ac:
                    0c:15:ae:c0:d5:3e:77:89:9c:aa:95:fb:ec:6a:fd:
                    01:dd:4f:9b:bd:14:f4:eb:62:3d:95:48:c7:5f:15:
                    6c:9a:5a:0f:b5:92:ed:ab:00:15:10:96:07:5f:4d:
                    5c:8b:6d:ee:6c:3c:fa:49:5e:67:3f:fc:41:b6:2a:
                    59:14:32:3e:cb:f3:0f:2b:e2:43:88:3c:52:f4:84:
                    fa:bd:be:58:73:50:58:b0:2b:ff:a5:bb:50:a0:7d:
                    39:cb:b2:8a:21:82:c7:01:79:4e:f5:85:9d:a3:55:
                    55:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:D9:22:5A:48:A9:CD:B7:21:50:24:EF:D9:FA:96:60:F6:0D:D2:7D
            X509v3 Authority Key Identifier:
                keyid:29:FB:7D:A3:B4:4E:41:B3:23:69:E4:A5:C7:90:D3:08:1F:C6:9A:A9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Kft9o7ROQbMjaeSlx5DTCB_Gmqk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/17a016-26c7-424c-862f-bcac8b552a9a/1/Kft9o7ROQbMjaeSlx5DTCB_Gmqk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/17a016-26c7-424c-862f-bcac8b552a9a/1/Kft9o7ROQbMjaeSlx5DTCB_Gmqk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:d4:d3:3a:8d:c6:ae:e8:7b:d0:83:ff:91:96:97:1a:ab:d5:
         a8:40:ca:69:2e:f8:e0:da:d3:ea:c4:c0:15:31:8b:9e:e2:9b:
         0d:4f:21:01:45:d2:7e:c8:15:54:8d:1a:67:52:8d:cb:63:ad:
         56:a8:40:93:f1:03:7f:db:f5:cd:bd:28:38:ff:1a:93:de:0c:
         24:0a:36:fd:3e:74:44:3a:3b:60:c0:89:d2:df:c1:af:16:a1:
         59:03:23:ab:15:b4:01:d0:3f:2d:4b:3d:cc:a1:b1:62:ed:29:
         f2:d5:98:e1:b4:46:fe:78:c9:bb:07:02:c5:ea:9a:37:2b:b5:
         79:fe:a6:f5:ad:52:50:b7:96:e3:84:ec:a7:ed:2c:63:ff:95:
         9c:49:6f:4a:50:a9:fb:88:ca:59:d7:6c:0b:a1:5c:d9:2c:f0:
         3b:8e:f0:37:a2:ee:39:db:b9:41:1d:5e:78:5e:3f:a0:a7:f0:
         33:45:49:20:12:8a:db:2e:f8:67:8c:85:fa:a8:df:f8:a5:51:
         aa:66:83:44:13:61:dd:4c:bb:04:57:23:c7:b7:d2:81:8d:0d:
         bc:2e:8b:05:9c:0f:ea:78:38:4b:7a:a0:63:ad:8f:10:34:05:
         9b:ae:12:cb:35:60:c9:89:42:17:87:bb:aa:3b:31:1b:9e:3d:
         70:98:06:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----