Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/fcc70e-e4a5-4b19-ab4f-70127b49b323/1/wKatm4cwm9AHnPowXUhhP4fEcNg.mft
File:                     wKatm4cwm9AHnPowXUhhP4fEcNg.mft (raw, json)
Hash identifier:          Tc7PqvkoqqiIX/rG3678+1bb9yGmxIVE7Rj7Qc96ME4=
Subject key identifier:   62:4C:C5:C0:5F:49:99:C5:BE:DE:68:1A:B4:AB:CC:5D:F1:6F:63:5B
Authority key identifier: C0:A6:AD:9B:87:30:9B:D0:07:9C:FA:30:5D:48:61:3F:87:C4:70:D8
Certificate issuer:       /CN=c0a6ad9b87309bd0079cfa305d48613f87c470d8
Certificate serial:       01962F3DCAC3802A24BB799D216099065ADD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wKatm4cwm9AHnPowXUhhP4fEcNg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/10/fcc70e-e4a5-4b19-ab4f-70127b49b323/1/wKatm4cwm9AHnPowXUhhP4fEcNg.mft
Manifest number:          14EE
Signing time:             Sun 13 Apr 2025 13:01:40 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:40 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:40 +0000
Files and hashes:         1: fpbdoc2TI64xJycuwiFh9Gomr6A.roa (hash: cljwIs+0uajrjK0gVgOImyvI4O/zMxkT1vLqnWwJwe0=)
                          2: wKatm4cwm9AHnPowXUhhP4fEcNg.crl (hash: p3QjAz1lKemYg5czr7xITQ9u2xfYDMzHWAKHe4yvFNo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:ca:c3:80:2a:24:bb:79:9d:21:60:99:06:5a:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c0a6ad9b87309bd0079cfa305d48613f87c470d8
        Validity
            Not Before: Apr 13 13:01:40 2025 GMT
            Not After : Apr 14 13:01:40 2025 GMT
        Subject: CN=624cc5c05f4999c5bede681ab4abcc5df16f635b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:b7:cc:1d:12:a8:ae:b7:a9:8f:ca:4c:de:f0:
                    b3:72:f3:e0:d4:f2:29:2e:e1:37:43:bf:ec:df:05:
                    f0:0d:6b:76:6f:62:c7:1e:99:63:9f:e3:e4:3b:c9:
                    e4:e6:ff:a5:a4:be:7e:d9:bf:a0:07:06:45:5e:57:
                    9b:a7:3b:0f:08:44:d0:5d:43:ee:57:f7:7f:f6:6c:
                    d0:43:fc:99:0e:96:df:0d:2f:7d:a2:8a:93:be:6d:
                    63:b3:e5:65:95:34:6a:14:80:b1:00:90:7d:83:de:
                    34:54:c6:59:6e:e2:ca:a6:be:fc:e5:fe:e1:3c:27:
                    1d:42:94:a8:35:18:f9:21:d5:26:2d:1d:ca:09:3c:
                    4b:e3:2c:4f:33:7b:69:a2:2a:1a:bd:6e:7f:04:ee:
                    65:29:91:9b:c9:15:24:1f:b7:ad:91:40:a7:75:10:
                    cf:f6:c0:aa:dd:a5:7b:b1:37:b2:a6:f2:4a:fb:41:
                    f2:bf:e7:bb:ae:b3:a8:ab:54:13:c1:fb:2c:08:ce:
                    3c:39:ee:bf:fb:46:f4:d0:c4:5d:34:7b:c5:05:d7:
                    e4:28:17:ed:66:4b:80:87:77:83:17:35:ee:c1:cf:
                    01:33:5c:27:03:e7:4b:bd:34:e0:a8:65:4b:b7:3b:
                    f7:5d:52:72:33:ac:a8:22:fa:a2:4b:c9:3c:e0:ee:
                    3d:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:4C:C5:C0:5F:49:99:C5:BE:DE:68:1A:B4:AB:CC:5D:F1:6F:63:5B
            X509v3 Authority Key Identifier:
                keyid:C0:A6:AD:9B:87:30:9B:D0:07:9C:FA:30:5D:48:61:3F:87:C4:70:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wKatm4cwm9AHnPowXUhhP4fEcNg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/fcc70e-e4a5-4b19-ab4f-70127b49b323/1/wKatm4cwm9AHnPowXUhhP4fEcNg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/10/fcc70e-e4a5-4b19-ab4f-70127b49b323/1/wKatm4cwm9AHnPowXUhhP4fEcNg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:73:17:1c:d8:4c:f7:63:2c:46:09:33:d2:59:0f:1c:f9:ad:
         fe:96:b5:4c:86:6c:63:b1:89:ea:f9:75:57:1d:55:4e:1e:a0:
         4f:a2:97:93:14:4b:c9:94:40:eb:7d:67:87:32:aa:1d:b1:e2:
         27:14:90:3c:bc:9f:5a:82:7d:3f:1b:a6:3a:67:96:6d:47:36:
         54:23:ad:da:e6:fc:07:86:ce:5f:24:8a:bc:94:97:6f:b6:0c:
         83:cb:37:84:f4:99:34:96:53:9f:55:38:15:88:45:2d:4d:33:
         58:b5:26:a0:4f:df:e3:97:a4:7d:84:8f:35:e4:1d:38:ab:ee:
         de:d0:bc:75:6d:49:9c:fb:87:08:57:c9:6e:06:9d:81:16:14:
         af:f4:77:87:ac:1a:fd:da:fc:4f:d7:5a:6d:05:e5:69:c8:42:
         5a:0c:dd:b4:cb:38:15:16:07:a8:bf:d2:bd:05:4f:36:78:63:
         44:c6:bf:7b:fd:a5:cb:e5:b4:0c:1e:8e:6d:31:a6:0b:5f:a5:
         b3:b1:97:b5:25:0e:32:29:2b:90:48:02:ba:bb:d8:57:4c:0f:
         8f:9d:f7:1b:63:ef:70:61:d2:17:a2:c3:20:91:63:51:0b:e0:
         17:e5:6f:4a:b5:d7:96:33:1c:65:9c:c0:1a:b4:46:0c:e0:bf:
         f6:4e:4e:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----