Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/214063-f88f-4958-ae52-d9b533f7fbc3/1/KamWTgzTX7NnV-VlP_p2Jqxd7ug.mft
File:                     KamWTgzTX7NnV-VlP_p2Jqxd7ug.mft (raw, json)
Hash identifier:          QMM/jQpYq3tWEMAPI22gllnH+Kcln2AuM+/7zZCyTBg=
Subject key identifier:   7D:5B:01:CE:CC:C4:70:A6:9C:5A:88:94:B0:6A:14:15:A1:C9:D0:39
Authority key identifier: 29:A9:96:4E:0C:D3:5F:B3:67:57:E5:65:3F:FA:76:26:AC:5D:EE:E8
Certificate issuer:       /CN=29a9964e0cd35fb36757e5653ffa7626ac5deee8
Certificate serial:       01962DF3CF968EF8C74377D3E5F046EAA43D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KamWTgzTX7NnV-VlP_p2Jqxd7ug.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6c/214063-f88f-4958-ae52-d9b533f7fbc3/1/KamWTgzTX7NnV-VlP_p2Jqxd7ug.mft
Manifest number:          09C7
Signing time:             Sun 13 Apr 2025 07:01:15 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:15 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:15 +0000
Files and hashes:         1: 3n7I_kSrxdGXM-Yy8kH4fsc4pN8.roa (hash: s/PREhsDL5iYmJE9h5sCUC+jgqMKpegaWts1GqNWSms=)
                          2: FV9U3Yv2I7_2992_Tu4mBiIQFlI.roa (hash: /WpBV6VXQYMepV5lfUa4zJ1OtPuJRJ1gNT7mbz//kPY=)
                          3: IvOVPi4Jk0LAA7IyC_lBmoedUPk.roa (hash: iVbMNdqQVbnDfCnhCbcyzkADBiETtoTlj0kjeIAta6w=)
                          4: KamWTgzTX7NnV-VlP_p2Jqxd7ug.crl (hash: KB1ngL9wr/5V4JIRMgVbj/zJqpYdTcHJHResJljnRz4=)
                          5: T16pm2MQEAUE2FMbSssYLk6CkTk.roa (hash: 7uW7JXvNCvoGIxe5Z6TwqqTVQIqIp/L1A4jFvTPd0mc=)
                          6: UbPhv_LAVA0rwKgmHrLcoG4Owqg.roa (hash: FNzQh/BeexAfdXsFTyP2FKgRjYQQ55iXr7qpb2vEEQQ=)
                          7: VJKr8K21Xfen5uk1xCfGFVJrqNs.roa (hash: kXpjzIlwN+Gv44HIvCkq7vJ72G9g6c72ZjdAcBJOo5Y=)
                          8: _54CIVi2Yw4yngdpfKbMO07oyqo.roa (hash: TM5Ay2NTiDiELYyiOeCmFyJPSSpITIxR/LNxTfFDHDg=)
                          9: ca6XJ5NiIiIJ1gn26NWoBZY1OOE.roa (hash: m0MfY3W/yHtAcpQIPruy2IhGfS2aQQkvwxrvdJx1dpE=)
                          10: ozTUlRS2BP8xxCFNOquOdzTJVac.roa (hash: l1UJXUEegLYZKNp2zf9niVjLEqjlu26RHLObHLwCBJI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f3:cf:96:8e:f8:c7:43:77:d3:e5:f0:46:ea:a4:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=29a9964e0cd35fb36757e5653ffa7626ac5deee8
        Validity
            Not Before: Apr 13 07:01:15 2025 GMT
            Not After : Apr 14 07:01:15 2025 GMT
        Subject: CN=7d5b01ceccc470a69c5a8894b06a1415a1c9d039
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:47:79:1f:73:8e:97:be:f0:cd:13:15:ba:57:
                    8e:56:b3:fe:ee:7c:64:00:b4:37:ff:8c:d2:e3:81:
                    09:64:aa:8a:d3:aa:3e:06:66:a7:5c:ec:61:6b:6d:
                    24:39:0e:43:5f:7f:e7:cd:88:9f:20:fd:46:d1:d1:
                    83:6c:49:86:93:1d:e4:74:76:fd:90:9c:8b:c3:e0:
                    c3:b5:f5:b0:fb:3e:62:a5:5e:1a:01:7b:01:e9:b1:
                    1f:26:bf:8b:93:4b:14:2b:ea:de:36:36:d8:05:a2:
                    2e:5c:3b:8a:37:86:9c:1a:8c:03:4f:7c:11:4c:97:
                    5b:51:d1:5f:4b:0b:5b:69:98:f7:9e:bb:56:c8:5e:
                    cb:5d:56:14:a8:22:24:4f:62:2f:74:65:60:7c:8e:
                    33:0f:c2:69:c7:c8:74:e6:35:de:bc:5e:5f:3f:cd:
                    2e:18:f0:a1:86:de:cf:61:05:88:66:aa:21:7f:6f:
                    95:dd:58:77:19:b0:8c:cd:b4:20:b0:ed:84:15:66:
                    f5:a8:3e:27:de:ec:8e:f3:e7:68:4a:5b:c8:75:fa:
                    08:b6:6f:97:cb:dc:c9:5f:1a:ab:1b:21:2a:36:a4:
                    18:58:66:d0:b3:63:24:0a:55:13:58:72:6b:ae:a4:
                    ee:9b:a0:87:91:8e:1c:90:54:d5:62:18:ae:23:b4:
                    33:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:5B:01:CE:CC:C4:70:A6:9C:5A:88:94:B0:6A:14:15:A1:C9:D0:39
            X509v3 Authority Key Identifier:
                keyid:29:A9:96:4E:0C:D3:5F:B3:67:57:E5:65:3F:FA:76:26:AC:5D:EE:E8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KamWTgzTX7NnV-VlP_p2Jqxd7ug.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/214063-f88f-4958-ae52-d9b533f7fbc3/1/KamWTgzTX7NnV-VlP_p2Jqxd7ug.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/214063-f88f-4958-ae52-d9b533f7fbc3/1/KamWTgzTX7NnV-VlP_p2Jqxd7ug.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:46:a7:3b:43:7b:bd:5e:6b:af:aa:e6:f0:91:0a:03:b2:e3:
         0c:71:b0:c0:2c:98:b7:26:f6:92:2b:39:16:65:f3:e7:b3:73:
         42:48:5b:d8:06:63:89:98:b8:07:17:72:89:cf:d8:f5:ac:95:
         9d:8f:6c:de:54:f5:cf:50:67:93:b3:40:33:e1:2d:59:23:cf:
         99:3c:8a:85:20:79:01:c0:e6:3c:34:d4:cf:cb:3c:74:05:ca:
         67:e3:11:a9:48:01:b4:9e:aa:55:71:bc:60:27:78:9a:5d:3c:
         eb:2b:7c:b9:c6:63:b3:5a:64:07:39:ce:e9:59:2e:93:34:cd:
         65:8f:00:c1:3b:2d:53:2c:cc:22:a5:ae:87:9e:5b:13:b1:ac:
         8b:4c:04:da:a2:8c:41:da:88:96:8c:2f:6d:3d:e4:56:e4:ea:
         de:9d:c2:7b:f7:3e:b7:33:a2:bd:36:3b:9f:55:ee:18:9b:58:
         b4:cf:11:8e:e6:fd:97:4f:71:dd:70:96:ad:10:92:3b:a1:53:
         76:be:32:55:58:e3:da:a5:08:78:51:34:2e:c5:32:5f:63:15:
         ba:f8:53:87:23:17:0c:53:9a:b0:e3:d9:b6:09:05:d4:9c:88:
         6e:43:97:c7:2b:ee:95:de:70:48:c4:2b:d5:84:ae:6e:b9:d8:
         fc:fe:c3:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----