Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/aaf49c-83dd-46aa-8ce7-b84c413dfaa4/1/KfajAL99QLf41hgcW4p9vHG30SM.mft
File:                     KfajAL99QLf41hgcW4p9vHG30SM.mft (raw, json)
Hash identifier:          I5181ugU6G0YPh7HycKNFMQvn3hou4/q+yxQRseZ4wc=
Subject key identifier:   37:4E:06:7D:4C:E8:65:1C:69:D2:CC:B6:51:42:7B:A7:09:3C:20:8C
Authority key identifier: 29:F6:A3:00:BF:7D:40:B7:F8:D6:18:1C:5B:8A:7D:BC:71:B7:D1:23
Certificate issuer:       /CN=29f6a300bf7d40b7f8d6181c5b8a7dbc71b7d123
Certificate serial:       01962FABA00295B075C33F2448B33A26AB20
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KfajAL99QLf41hgcW4p9vHG30SM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fa/aaf49c-83dd-46aa-8ce7-b84c413dfaa4/1/KfajAL99QLf41hgcW4p9vHG30SM.mft
Manifest number:          08C5
Signing time:             Sun 13 Apr 2025 15:01:38 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:38 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:38 +0000
Files and hashes:         1: GMQbG0-o6hWvOWZFjvgerZILeUA.roa (hash: 1vJaRcAe7VRxTOCxQZvQmXBz/hhYe/t4hM7qFxtZr7A=)
                          2: KfajAL99QLf41hgcW4p9vHG30SM.crl (hash: ixLzMvIDiV0bHCrax3jqw4QCkQ5GIAmfIHFYungRFfU=)
                          3: rF48GSjCA8nAgS7e7P_0TwDWMHI.roa (hash: mzK0vZsIrvw7/YH7xF2HGiJG11ODO49sPGy1ll1t6eQ=)
                          4: wKUJgTwD7cFwdEtrEHOHqt6iRN8.roa (hash: kOGKpGaa2gE7ztgll470FJTFa167kUV848g0OHaW6ow=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:a0:02:95:b0:75:c3:3f:24:48:b3:3a:26:ab:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=29f6a300bf7d40b7f8d6181c5b8a7dbc71b7d123
        Validity
            Not Before: Apr 13 15:01:38 2025 GMT
            Not After : Apr 14 15:01:38 2025 GMT
        Subject: CN=374e067d4ce8651c69d2ccb651427ba7093c208c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:61:dd:85:cc:3c:ec:68:a0:f9:c0:93:3b:6c:
                    e4:9b:8c:6f:a4:0a:38:c6:21:ad:87:44:a3:c2:38:
                    f2:07:20:b2:cb:e4:d3:e8:f1:2a:8c:7d:43:97:dd:
                    d9:1c:c8:a0:08:2a:1e:d5:57:36:8a:b4:5a:9d:09:
                    bb:fd:48:53:dd:fa:59:74:d4:02:e2:37:70:5e:a7:
                    a8:3d:c9:64:05:76:ea:08:4a:73:06:91:c9:ac:88:
                    b9:c3:7c:9c:7e:f6:16:cd:51:db:75:2c:75:11:3a:
                    57:f8:75:91:e2:a0:d6:7d:fb:fb:d3:56:1e:00:57:
                    4f:81:83:62:4e:2a:67:39:7b:fc:f6:9b:b8:d2:e7:
                    2d:e0:e8:6c:3f:60:db:50:e0:a0:30:39:6a:7c:c4:
                    71:32:ed:40:c7:db:7e:ad:ee:e9:aa:5d:5d:73:4c:
                    44:22:11:5b:64:65:3f:27:ea:98:f7:c5:d7:96:ec:
                    fa:98:22:2b:02:0f:bd:2a:c4:27:e7:c3:d7:30:28:
                    1e:63:64:de:ab:c2:a0:59:42:30:4f:22:bc:2e:68:
                    f1:be:58:3a:65:d2:78:1b:b4:86:fe:76:7f:87:86:
                    0d:2d:72:62:ab:b3:cb:3e:00:30:11:5f:c6:7d:0b:
                    64:d2:c7:9b:8b:c7:28:95:29:94:b4:f7:fa:65:fa:
                    d2:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:4E:06:7D:4C:E8:65:1C:69:D2:CC:B6:51:42:7B:A7:09:3C:20:8C
            X509v3 Authority Key Identifier:
                keyid:29:F6:A3:00:BF:7D:40:B7:F8:D6:18:1C:5B:8A:7D:BC:71:B7:D1:23

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KfajAL99QLf41hgcW4p9vHG30SM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/aaf49c-83dd-46aa-8ce7-b84c413dfaa4/1/KfajAL99QLf41hgcW4p9vHG30SM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/aaf49c-83dd-46aa-8ce7-b84c413dfaa4/1/KfajAL99QLf41hgcW4p9vHG30SM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:5c:15:5f:10:27:6c:98:69:13:c5:08:3a:a6:3f:64:69:cb:
         c1:25:c4:91:2b:34:04:19:76:76:15:9a:4e:cd:79:34:d3:fb:
         39:6c:88:f4:a2:a9:5f:29:1f:58:cf:eb:ec:8d:ab:5b:4a:8c:
         6a:be:ab:e8:c8:ec:96:28:50:ad:c8:53:55:69:f0:f6:4c:55:
         5b:ca:4a:8d:ac:ac:1a:cc:71:6a:cc:d6:55:a4:3c:2c:4c:33:
         c0:68:f5:8a:aa:5e:d1:80:bf:f8:fb:fc:bb:4b:e3:f8:9f:8c:
         63:09:6a:06:69:98:d2:87:18:ef:45:29:82:d1:c5:7e:b1:6e:
         47:cb:15:3e:27:19:00:8f:9a:4f:73:c9:6b:98:a2:d2:bb:57:
         f1:c4:35:e5:de:56:f8:39:b7:1c:8f:e4:4f:08:08:0c:1f:0b:
         f5:8d:16:f0:f5:69:f8:dc:b9:a3:e7:fa:ad:f7:e5:17:dc:f3:
         d3:a9:bc:76:73:9f:f0:bd:89:4c:60:bf:38:a0:94:5b:c9:7a:
         d6:47:7f:65:6f:6f:e8:19:9b:8c:b4:1e:63:fe:5d:82:0a:08:
         03:46:47:37:49:3a:e4:3f:cf:fb:a0:85:73:6c:d3:b7:23:b0:
         28:79:7c:22:ba:f0:6d:86:10:6f:5b:c8:35:13:06:7a:0b:12:
         2f:6e:6c:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----