Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/fce675-bf53-4787-93e7-81f566185b06/1/KwviJiMNQJnO6gpKbPTti5AgE1A.mft
File:                     KwviJiMNQJnO6gpKbPTti5AgE1A.mft (raw, json)
Hash identifier:          aQATrOHwIMmBC5HsNkclOS5+qzBAh4NtBk+a5A8in90=
Subject key identifier:   EC:02:42:D0:0A:9D:BD:C6:A8:EE:9A:B7:84:37:49:F8:02:B7:32:4F
Authority key identifier: 2B:0B:E2:26:23:0D:40:99:CE:EA:0A:4A:6C:F4:ED:8B:90:20:13:50
Certificate issuer:       /CN=2b0be226230d4099ceea0a4a6cf4ed8b90201350
Certificate serial:       01962E61E12FF24FCAF01240CEA822522DA0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KwviJiMNQJnO6gpKbPTti5AgE1A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/15/fce675-bf53-4787-93e7-81f566185b06/1/KwviJiMNQJnO6gpKbPTti5AgE1A.mft
Manifest number:          08F5
Signing time:             Sun 13 Apr 2025 09:01:28 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:28 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:28 +0000
Files and hashes:         1: KwviJiMNQJnO6gpKbPTti5AgE1A.crl (hash: 1+1f2OECHfl0HXTbLGxtYJV199u9KtajKlHaeYUNIbM=)
                          2: lhCB4VKeVIat8YaI7khS8LgNAz0.roa (hash: QGNe/S+LDe3zqs3K0JGfp0BhDLdHDbq+MTuXcKT1Qd0=)
                          3: qi0ZqRW6bWCGCBOudyRc_ZU33PM.roa (hash: Y/jI82xosnyON1Rhfs7vCWE2E/8RN3XifMYZrXwc2DQ=)
                          4: st8xnj4jJi6Xuwa7MiNbU3-F0wo.roa (hash: H2Z+tAqzPpLr9TIzWhq27NXaGhJV330iUQnoQkRKlKo=)
                          5: ymk3s2uYAjIifXFebx0Gs2GCpZg.roa (hash: 1iZB8mSVVI0xWBNNoWKTn+58QXVIuSn2YESYam7CY+4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:e1:2f:f2:4f:ca:f0:12:40:ce:a8:22:52:2d:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2b0be226230d4099ceea0a4a6cf4ed8b90201350
        Validity
            Not Before: Apr 13 09:01:28 2025 GMT
            Not After : Apr 14 09:01:28 2025 GMT
        Subject: CN=ec0242d00a9dbdc6a8ee9ab7843749f802b7324f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:0d:73:64:f6:2b:0e:c0:a9:50:18:25:8a:55:
                    08:47:51:eb:5d:ce:2a:8f:d1:3a:95:bc:4a:2e:9b:
                    15:2d:a8:4c:a0:11:22:3d:3b:99:d9:7e:6d:e4:b5:
                    06:0b:cd:c1:3b:2f:09:64:da:01:ff:bf:07:41:fa:
                    32:d8:4d:7e:da:0b:b2:7c:73:e8:7e:67:cc:0b:31:
                    02:a5:ca:3d:6b:4b:5e:d2:33:3f:7f:aa:43:0a:b9:
                    8e:f9:04:4a:e0:09:00:f4:43:3b:58:fa:2a:bf:7f:
                    7b:bb:ff:15:3c:a6:41:ec:c8:d6:37:fd:7c:b2:76:
                    cd:89:4a:f6:bb:46:a6:01:9b:04:8a:20:aa:9b:27:
                    e4:b3:59:f1:10:80:5c:64:68:53:9a:b4:2b:8d:24:
                    62:44:64:fd:98:33:56:65:6b:4c:fb:4b:58:a5:3a:
                    58:95:47:07:3b:b3:fb:f2:e5:4e:0e:8f:a7:98:bb:
                    e8:30:f5:9b:58:0c:12:7f:61:01:40:a6:84:16:28:
                    99:7f:23:bc:a5:79:ad:b3:7f:44:1d:68:c9:4b:c7:
                    9b:da:76:57:80:50:60:85:91:a6:41:38:66:c5:5e:
                    21:68:c9:00:08:80:e1:77:26:2f:d7:8d:4d:c8:d9:
                    7a:43:85:78:53:56:24:88:4d:da:32:e5:56:d2:ca:
                    a9:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:02:42:D0:0A:9D:BD:C6:A8:EE:9A:B7:84:37:49:F8:02:B7:32:4F
            X509v3 Authority Key Identifier:
                keyid:2B:0B:E2:26:23:0D:40:99:CE:EA:0A:4A:6C:F4:ED:8B:90:20:13:50

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KwviJiMNQJnO6gpKbPTti5AgE1A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/fce675-bf53-4787-93e7-81f566185b06/1/KwviJiMNQJnO6gpKbPTti5AgE1A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/15/fce675-bf53-4787-93e7-81f566185b06/1/KwviJiMNQJnO6gpKbPTti5AgE1A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:5a:2b:5f:d2:f8:48:c3:ae:61:9c:13:dd:a6:d0:90:14:ca:
         08:dd:d1:2d:e3:83:61:8e:f8:1d:7a:e6:c9:46:76:44:98:2b:
         a1:e0:ed:ed:32:71:12:be:2b:7e:66:01:0b:e4:90:76:be:86:
         19:15:2a:c3:ba:40:bd:c8:25:e8:fb:34:b0:47:60:d0:36:92:
         dd:1f:bb:11:1d:8e:54:f6:cd:f8:44:64:4e:5e:ca:1c:27:11:
         48:5c:df:83:1a:61:6a:4e:69:ec:dd:f2:83:28:79:67:38:65:
         8c:34:60:a6:98:f6:fc:67:86:a0:52:b8:b3:f7:67:3b:e3:c6:
         53:80:59:b1:3f:89:0d:d5:0e:1f:a5:ca:ab:e3:f9:55:16:cd:
         db:bd:df:13:73:0f:82:62:47:e2:19:92:7a:39:3b:e2:45:19:
         bb:a9:e6:4a:cf:25:11:a8:6e:ac:ca:fd:9c:ed:8d:cf:42:6c:
         44:27:5a:3b:c0:53:9f:f9:71:d5:41:dd:6a:11:b2:e0:ec:e8:
         07:9b:19:d3:ea:a4:a7:5a:7b:33:39:1a:8f:e4:69:42:c2:f6:
         39:2c:4e:28:44:25:c4:62:be:72:7e:35:44:34:81:f9:b5:48:
         90:58:c5:82:31:f3:f2:19:af:d2:41:bf:0c:d2:4c:d6:aa:ff:
         21:07:24:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----