Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/96bea2-8e6d-44e8-a809-96b451f6000c/1/sw0gR_9gfu-FKTdg6cEab1lB0bY.mft
File:                     sw0gR_9gfu-FKTdg6cEab1lB0bY.mft (raw, json)
Hash identifier:          iZadYOWr3e7uUNIHMX1wJeegP5bVZsGQQWLUgO2a1PQ=
Subject key identifier:   6A:6F:11:13:44:3D:06:45:60:A5:7F:B9:EF:0E:53:9C:44:DE:CB:91
Authority key identifier: B3:0D:20:47:FF:60:7E:EF:85:29:37:60:E9:C1:1A:6F:59:41:D1:B6
Certificate issuer:       /CN=b30d2047ff607eef85293760e9c11a6f5941d1b6
Certificate serial:       01962DF3CEF7FA4CC63F80B3EC20BAF7E005
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sw0gR_9gfu-FKTdg6cEab1lB0bY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/43/96bea2-8e6d-44e8-a809-96b451f6000c/1/sw0gR_9gfu-FKTdg6cEab1lB0bY.mft
Manifest number:          0C84
Signing time:             Sun 13 Apr 2025 07:01:15 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:15 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:15 +0000
Files and hashes:         1: AybpUeYPjFscWUBGnz0eMxdCYVY.roa (hash: Rp8q+rUirDyaLXwQ073sCktRLzdV+RBLGTTN+wcKRwU=)
                          2: sw0gR_9gfu-FKTdg6cEab1lB0bY.crl (hash: SbVeuZ6IqgOYB/X9jflXKB/M1JeBN8DOleCkJ1QlO+Q=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f3:ce:f7:fa:4c:c6:3f:80:b3:ec:20:ba:f7:e0:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b30d2047ff607eef85293760e9c11a6f5941d1b6
        Validity
            Not Before: Apr 13 07:01:15 2025 GMT
            Not After : Apr 14 07:01:15 2025 GMT
        Subject: CN=6a6f1113443d064560a57fb9ef0e539c44decb91
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:4f:c0:58:86:7c:b6:91:7e:7a:5a:d2:71:3b:
                    21:db:01:03:22:a5:eb:78:68:7e:3d:5e:b4:6a:da:
                    31:f8:dc:9c:b9:0f:10:c3:4f:e1:0f:ab:b5:6f:a8:
                    aa:61:fd:32:fd:6c:a4:70:73:26:11:5b:54:4d:1e:
                    0a:16:e5:81:0f:ce:6f:44:4d:f6:84:b7:09:5d:f0:
                    1c:cf:d6:f9:90:c7:e4:30:ea:72:2a:03:5a:1c:53:
                    1c:27:e2:7d:05:5f:93:2c:a1:0b:f6:3a:0c:03:ed:
                    cb:58:4e:40:c7:be:84:67:2d:a7:01:9f:03:ef:4b:
                    c5:51:03:ea:74:32:7b:89:0a:5a:89:cf:e0:4a:6c:
                    f5:ba:28:83:5b:20:fd:0d:2c:12:f6:13:16:e2:28:
                    d5:38:f5:7c:35:e3:86:24:f6:90:67:b3:03:c1:84:
                    60:dd:c0:59:99:b6:f0:33:ee:6d:23:04:b8:88:a9:
                    fc:50:c5:45:c0:72:e7:7f:3e:c4:20:19:1c:73:98:
                    a2:9e:ca:5d:ef:8c:ba:3a:4f:94:dc:7a:db:51:23:
                    2d:cf:d8:9a:93:b6:0b:12:0c:89:4e:51:3b:07:89:
                    1b:c0:81:b2:3a:57:ec:91:a0:ed:da:d1:14:46:8f:
                    d3:23:bf:e6:7b:53:a4:19:a5:b6:ff:dd:37:80:33:
                    75:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:6F:11:13:44:3D:06:45:60:A5:7F:B9:EF:0E:53:9C:44:DE:CB:91
            X509v3 Authority Key Identifier:
                keyid:B3:0D:20:47:FF:60:7E:EF:85:29:37:60:E9:C1:1A:6F:59:41:D1:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sw0gR_9gfu-FKTdg6cEab1lB0bY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/96bea2-8e6d-44e8-a809-96b451f6000c/1/sw0gR_9gfu-FKTdg6cEab1lB0bY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/43/96bea2-8e6d-44e8-a809-96b451f6000c/1/sw0gR_9gfu-FKTdg6cEab1lB0bY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:1a:c2:31:91:cd:87:cf:47:c7:94:ac:de:42:1e:95:a2:89:
         c3:3e:df:60:da:c5:40:ef:a3:18:12:98:db:cf:54:cd:00:3f:
         bf:e9:e6:bb:55:05:54:8b:ff:8e:10:01:fc:c4:97:ca:41:dd:
         55:e2:57:32:e4:48:5f:92:18:c8:07:d8:b2:2b:15:60:ca:8d:
         18:09:c9:36:3a:13:26:dd:f2:bf:87:42:64:a8:1f:65:72:2e:
         c7:2a:3a:da:d0:27:86:ef:2f:3e:37:fb:8b:7b:40:21:7f:a3:
         1c:a3:e5:ab:e3:00:e7:3a:78:84:34:49:1a:d9:0f:19:5e:91:
         b7:01:81:65:b7:6e:c7:fb:03:d5:6e:fb:8c:25:65:69:21:1d:
         dc:a6:de:72:a8:d3:f5:90:24:8e:32:9e:39:29:9f:a0:67:32:
         93:dd:72:7f:94:04:f8:76:e3:0a:51:35:cc:10:9a:ef:ce:88:
         7f:a1:88:87:d8:26:d5:e9:a5:20:a1:b0:b5:4b:b2:d8:fb:15:
         fd:53:b8:cc:86:16:4f:4b:cb:ce:62:b8:da:dd:fd:f5:0b:fc:
         80:3d:a3:33:09:1d:19:0d:0a:86:a1:98:02:40:72:96:39:4c:
         c7:78:c4:89:6a:75:a6:7c:4c:82:d5:a8:d5:b3:93:48:be:52:
         a1:c5:2a:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----