Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/d21e02-54b7-49de-b15f-729298212f54/1/kTW-jvDc6dHmcHGrfLB89Q1T9hc.mft
File:                     kTW-jvDc6dHmcHGrfLB89Q1T9hc.mft (raw, json)
Hash identifier:          gWSDHhHrhVPvBmqvHXR58i7BJDs1XqGhHjl8jcTG2vw=
Subject key identifier:   A9:61:7E:DB:AF:C6:83:C6:7A:0D:EC:AB:A8:F1:AB:17:1D:FF:15:6C
Authority key identifier: 91:35:BE:8E:F0:DC:E9:D1:E6:70:71:AB:7C:B0:7C:F5:0D:53:F6:17
Certificate issuer:       /CN=9135be8ef0dce9d1e67071ab7cb07cf50d53f617
Certificate serial:       01962DF3D3AE154DC72BA9FDD6FDCEACE7FB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kTW-jvDc6dHmcHGrfLB89Q1T9hc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4c/d21e02-54b7-49de-b15f-729298212f54/1/kTW-jvDc6dHmcHGrfLB89Q1T9hc.mft
Manifest number:          079F
Signing time:             Sun 13 Apr 2025 07:01:16 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:16 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:16 +0000
Files and hashes:         1: PREVDyEb408mqa9BxzP0AsRzJeg.roa (hash: aYqJv67l6Fq1t+h1omQ5wjXrKiL4xcndOuCQgkoKKGY=)
                          2: kTW-jvDc6dHmcHGrfLB89Q1T9hc.crl (hash: LHn+Gn0haVRYWJ6JD4FPjrbKhohHuJmaSFnspMWo9Tg=)
                          3: p4jWyPdIBFSOhKsOHJbFsDe7R3Y.roa (hash: jnU5hIXXGhayItcaB6AV8Aoaha2Knjux2sAEHQkirvk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f3:d3:ae:15:4d:c7:2b:a9:fd:d6:fd:ce:ac:e7:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9135be8ef0dce9d1e67071ab7cb07cf50d53f617
        Validity
            Not Before: Apr 13 07:01:16 2025 GMT
            Not After : Apr 14 07:01:16 2025 GMT
        Subject: CN=a9617edbafc683c67a0decaba8f1ab171dff156c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:db:59:2f:04:7a:bc:54:4a:58:8f:25:d4:c4:
                    1d:03:6a:98:63:a1:1a:b8:40:de:23:d8:cb:e8:8d:
                    89:4f:1a:f7:94:d8:51:f7:41:5c:34:84:89:f8:d2:
                    38:fc:7f:78:a9:0a:46:36:57:f0:05:40:b8:61:87:
                    10:08:ff:78:27:03:15:06:65:18:5c:e1:f3:aa:ed:
                    7c:bd:76:64:30:81:2b:f5:ca:a0:03:14:1b:f6:4a:
                    ee:09:11:ab:f8:89:87:0c:b1:34:55:c2:f4:61:ba:
                    cd:62:52:35:7a:15:7f:60:3a:af:86:79:61:f2:6d:
                    aa:23:55:9e:d3:9d:ab:c3:cc:30:c8:7b:ec:76:cc:
                    37:77:c5:54:45:60:07:0e:af:ec:a3:8f:e7:2f:a9:
                    5c:b4:06:b0:37:df:a2:fe:21:af:50:8c:8e:28:cc:
                    ec:79:f0:cc:79:30:3b:f3:42:ae:44:9d:cc:d6:77:
                    1e:0c:68:60:c1:7d:94:4c:d4:14:fe:9d:71:f7:2c:
                    d1:b1:11:d4:7d:bc:8c:b4:66:9b:4b:cf:2b:55:7e:
                    46:91:49:df:66:51:6b:4e:eb:b9:13:44:da:9f:bc:
                    d3:a6:91:41:48:9f:55:8d:84:2d:55:32:68:39:5e:
                    f4:d9:6a:df:16:3a:11:a0:ee:4c:95:3d:e2:14:c9:
                    4a:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:61:7E:DB:AF:C6:83:C6:7A:0D:EC:AB:A8:F1:AB:17:1D:FF:15:6C
            X509v3 Authority Key Identifier:
                keyid:91:35:BE:8E:F0:DC:E9:D1:E6:70:71:AB:7C:B0:7C:F5:0D:53:F6:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kTW-jvDc6dHmcHGrfLB89Q1T9hc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/d21e02-54b7-49de-b15f-729298212f54/1/kTW-jvDc6dHmcHGrfLB89Q1T9hc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/d21e02-54b7-49de-b15f-729298212f54/1/kTW-jvDc6dHmcHGrfLB89Q1T9hc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:59:58:1a:94:41:8c:3d:60:57:b5:81:05:57:21:7c:f5:5e:
         fc:93:23:45:51:cd:aa:86:d6:e9:f9:9d:02:4a:ed:92:6d:17:
         7e:a0:21:03:e3:e1:ae:4c:a4:0c:00:71:3b:e9:26:d1:d4:ae:
         bd:f0:e4:06:64:24:9b:08:09:a9:2d:f1:df:b3:66:6f:88:f5:
         87:20:80:aa:d0:fd:5c:48:77:66:6b:31:93:a4:bc:9f:cb:3f:
         54:bd:f4:61:6e:ed:c2:94:8d:bc:a7:03:85:e7:5f:77:8b:0f:
         5f:ff:13:65:cd:ae:da:76:d1:ad:22:8d:14:95:41:61:80:4b:
         cb:86:fc:bf:3a:2a:8b:42:1b:66:f6:0b:51:1d:58:47:62:f3:
         13:ed:64:58:37:11:04:1d:e2:3b:12:d5:26:f7:88:d4:5b:d0:
         33:58:89:c4:5b:c7:a4:29:81:06:c6:c8:e1:a6:9c:29:d4:6e:
         33:fd:00:d5:09:33:c0:75:f1:df:9c:6a:93:e4:6a:fe:39:b7:
         66:df:6b:3d:37:c3:d1:e2:fc:51:54:b1:88:5b:ca:a7:6f:ca:
         2e:d1:35:06:82:04:c0:2c:31:cc:4a:60:f1:d5:50:98:8a:6a:
         06:32:de:02:7a:60:0f:6b:d5:85:3d:5c:33:9a:84:8b:34:c2:
         61:57:52:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----