Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/9657a5-8ce2-405e-ac8c-dd2accacfccc/1/sWIVb1nPx5OW5k8zQt5k3j-I7hg.mft
File:                     sWIVb1nPx5OW5k8zQt5k3j-I7hg.mft (raw, json)
Hash identifier:          wm5jo7lxKXrU7//3fEOGVIxPuow6gBKhQNR5nFQiIOU=
Subject key identifier:   BE:63:26:F4:38:3E:C1:80:E5:88:98:52:E6:46:22:F9:BC:01:1A:C0
Authority key identifier: B1:62:15:6F:59:CF:C7:93:96:E6:4F:33:42:DE:64:DE:3F:88:EE:18
Certificate issuer:       /CN=b162156f59cfc79396e64f3342de64de3f88ee18
Certificate serial:       01962FAB68546D6C3C8BEF2B996F93695F32
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sWIVb1nPx5OW5k8zQt5k3j-I7hg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/27/9657a5-8ce2-405e-ac8c-dd2accacfccc/1/sWIVb1nPx5OW5k8zQt5k3j-I7hg.mft
Manifest number:          049A
Signing time:             Sun 13 Apr 2025 15:01:24 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:24 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:24 +0000
Files and hashes:         1: bx_l27hAP8O-cN20bSgkC97xE0w.roa (hash: CvRYAhtCHrK4e4xO6GAddJnUj7IW4xcxplg1YukPV2Y=)
                          2: sWIVb1nPx5OW5k8zQt5k3j-I7hg.crl (hash: /o2fn8ZJjSVz+Gb65c0hu13KWgVK9FLxXqMt04KlMn8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:68:54:6d:6c:3c:8b:ef:2b:99:6f:93:69:5f:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b162156f59cfc79396e64f3342de64de3f88ee18
        Validity
            Not Before: Apr 13 15:01:24 2025 GMT
            Not After : Apr 14 15:01:24 2025 GMT
        Subject: CN=be6326f4383ec180e5889852e64622f9bc011ac0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:ac:4b:c7:d0:cd:16:1b:18:1e:16:fc:9f:d2:
                    8f:d0:1d:84:9e:7f:b2:0a:d5:0e:5e:23:43:af:dc:
                    4b:d8:f6:4a:8d:a2:f2:12:44:38:5b:0c:fd:33:da:
                    74:95:d8:80:90:77:71:64:6e:29:fb:83:c0:5f:0c:
                    0a:06:10:8f:9f:6e:6a:9d:cd:51:f1:4d:7a:f9:eb:
                    5f:59:c5:91:52:aa:ab:1a:49:8f:1b:91:c5:39:be:
                    0d:eb:ba:e9:13:34:8c:6b:1a:64:9d:a1:c0:09:d0:
                    8a:9b:f5:8d:a0:05:a3:16:44:e8:72:21:fe:f9:34:
                    31:a2:2d:4f:99:20:ee:3a:b9:dd:88:74:bd:f6:56:
                    41:13:82:34:27:55:69:20:ca:11:68:bc:11:e5:5c:
                    51:46:0a:de:ce:6e:39:1e:6d:cb:03:f1:13:45:82:
                    d9:95:a6:a8:71:45:e9:68:89:42:b2:4e:b9:19:a3:
                    56:91:35:76:75:03:59:79:fd:02:da:bb:ac:0a:ad:
                    16:2c:f3:2b:56:ed:d6:98:06:55:ea:6c:6b:31:cd:
                    6c:5a:51:0a:85:b4:84:04:0c:69:9e:14:13:ae:c0:
                    2a:2e:81:ed:ee:17:7b:ab:ce:ae:dd:80:03:61:29:
                    b2:47:a6:96:b0:91:5c:d9:bd:fc:0e:24:7b:fb:ac:
                    35:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:63:26:F4:38:3E:C1:80:E5:88:98:52:E6:46:22:F9:BC:01:1A:C0
            X509v3 Authority Key Identifier:
                keyid:B1:62:15:6F:59:CF:C7:93:96:E6:4F:33:42:DE:64:DE:3F:88:EE:18

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sWIVb1nPx5OW5k8zQt5k3j-I7hg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/9657a5-8ce2-405e-ac8c-dd2accacfccc/1/sWIVb1nPx5OW5k8zQt5k3j-I7hg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/27/9657a5-8ce2-405e-ac8c-dd2accacfccc/1/sWIVb1nPx5OW5k8zQt5k3j-I7hg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:a4:a8:ec:be:86:75:af:fe:ef:dd:06:c6:2e:32:ca:85:24:
         81:cd:5a:12:0e:f8:eb:be:8b:19:7c:1c:34:ca:55:8e:6b:de:
         41:90:fc:8e:57:d6:ba:8d:c8:8b:26:73:68:55:a4:0a:00:46:
         a7:17:0b:ca:ef:24:a1:70:52:a1:81:63:ca:0b:b7:ea:88:47:
         ee:97:f9:c7:ec:04:89:26:ca:e8:08:48:5f:ad:7e:7a:a0:27:
         cc:53:f9:48:6d:be:3e:08:74:5e:b3:02:f1:fa:1c:2b:76:29:
         38:0e:5b:86:19:dc:0f:02:5a:93:3f:a8:61:8a:a1:10:51:b5:
         92:3d:c0:a8:6f:fa:0c:35:0a:d1:a1:95:bd:f8:7f:df:05:c0:
         97:08:84:11:39:06:87:ff:c4:5a:17:ab:1c:e8:60:c1:04:a9:
         db:e2:61:cd:58:6f:d3:63:03:05:55:57:40:c8:c5:3a:7a:a4:
         db:a0:fc:64:f3:66:89:24:85:7a:b9:f0:64:80:fa:ae:3c:7e:
         eb:7b:a2:2b:7c:46:98:93:1f:8d:70:b6:ac:af:da:e0:86:7c:
         95:71:82:3d:49:15:6c:37:58:e4:c7:49:e2:ce:46:be:3d:57:
         5e:3c:9a:38:a5:67:38:c5:3c:d4:c8:e1:ba:7e:34:f4:b9:69:
         ab:1a:e7:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----