Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/e13112-5758-4552-b2ad-ed1b9b8e6470/1/KS-wn35or-lfI5ExFObApqpyb90.mft
File:                     KS-wn35or-lfI5ExFObApqpyb90.mft (raw, json)
Hash identifier:          g3U8OkrFjQ8wEStyQufRblA2iI4Xmgi56QmhnPww1O4=
Subject key identifier:   6F:3E:6C:6F:14:1A:7E:17:4F:19:C4:3F:B2:37:97:59:65:A9:5D:AA
Authority key identifier: 29:2F:B0:9F:7E:68:AF:E9:5F:23:91:31:14:E6:C0:A6:AA:72:6F:DD
Certificate issuer:       /CN=292fb09f7e68afe95f23913114e6c0a6aa726fdd
Certificate serial:       01962F3D4BA839C008C722859083B5C7F8DA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KS-wn35or-lfI5ExFObApqpyb90.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9e/e13112-5758-4552-b2ad-ed1b9b8e6470/1/KS-wn35or-lfI5ExFObApqpyb90.mft
Manifest number:          0200
Signing time:             Sun 13 Apr 2025 13:01:08 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:08 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:08 +0000
Files and hashes:         1: JyTHeWPSw0N2vvDNyoUd8epHXA4.roa (hash: OacdQD8AGHB+uL8UAW3yHrwnc616k4RTRtDRnug3bmo=)
                          2: KS-wn35or-lfI5ExFObApqpyb90.crl (hash: SshlIvRLlibXxo0YET2d/foO+0yyUqfcAaGlM4YnolE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:4b:a8:39:c0:08:c7:22:85:90:83:b5:c7:f8:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=292fb09f7e68afe95f23913114e6c0a6aa726fdd
        Validity
            Not Before: Apr 13 13:01:08 2025 GMT
            Not After : Apr 14 13:01:08 2025 GMT
        Subject: CN=6f3e6c6f141a7e174f19c43fb237975965a95daa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:4e:d8:aa:0c:20:bd:44:71:6c:ab:d5:77:e7:
                    d4:9c:89:c2:e3:9e:55:0c:6a:61:9a:b1:2b:47:ad:
                    33:8e:61:ef:d8:55:22:dc:7d:3d:af:53:e2:52:86:
                    4a:2f:97:e6:e1:8b:ad:87:70:f1:20:36:a0:b3:89:
                    d9:cb:d7:44:44:d6:64:4b:28:15:e9:6c:17:5e:2d:
                    a0:22:7d:e5:3a:92:b8:47:fb:dd:f4:1a:7a:1e:4d:
                    a6:67:4d:36:30:72:da:2b:52:cd:95:32:cb:64:43:
                    9f:38:c5:02:8e:2a:8a:20:bb:72:0a:f3:e2:3f:0f:
                    45:df:92:ee:85:5b:81:ff:8f:3d:26:86:42:a7:50:
                    20:9a:9e:e8:00:f6:16:c9:8d:7a:ad:54:34:3f:c7:
                    c9:04:ab:29:19:84:72:99:08:51:67:4c:c8:ba:eb:
                    5d:05:98:24:da:90:28:a5:dc:48:cb:a2:30:7d:2f:
                    ac:41:64:20:8a:90:44:d8:f4:a0:bd:52:f9:61:f9:
                    e3:20:03:2c:c9:d4:db:28:81:7a:7f:4b:fe:e1:ca:
                    55:5b:f4:09:24:db:0c:83:6e:83:3c:d9:8b:d1:59:
                    fc:a6:07:12:bb:af:0e:0e:a9:27:4f:ed:74:f6:8c:
                    9e:80:35:ec:fe:eb:4f:0c:52:88:58:82:e3:c5:37:
                    18:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:3E:6C:6F:14:1A:7E:17:4F:19:C4:3F:B2:37:97:59:65:A9:5D:AA
            X509v3 Authority Key Identifier:
                keyid:29:2F:B0:9F:7E:68:AF:E9:5F:23:91:31:14:E6:C0:A6:AA:72:6F:DD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KS-wn35or-lfI5ExFObApqpyb90.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/e13112-5758-4552-b2ad-ed1b9b8e6470/1/KS-wn35or-lfI5ExFObApqpyb90.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/e13112-5758-4552-b2ad-ed1b9b8e6470/1/KS-wn35or-lfI5ExFObApqpyb90.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:7e:51:97:f4:6b:01:43:2b:d3:97:9a:70:0b:6c:8a:74:0f:
         58:fe:17:b3:de:2a:59:01:eb:c2:44:ea:bd:cf:4f:6d:97:92:
         91:c7:ff:7d:bc:f0:fc:eb:23:88:eb:0a:d3:74:13:f7:0d:02:
         53:1b:60:89:59:ab:9a:fb:a8:3b:86:86:7d:9e:18:8d:7e:be:
         b9:7f:ee:f5:87:21:de:3c:57:ae:b0:f8:01:a1:1f:e6:45:b4:
         c5:bd:2c:02:5a:0b:e4:8f:dc:36:d5:44:10:cd:51:43:46:34:
         99:aa:17:d5:7b:d2:bd:c2:ea:c9:ee:59:9b:c8:a1:97:c0:fa:
         0f:db:0b:38:4e:5c:04:0c:06:4c:0d:fb:4a:75:d0:b0:ba:d0:
         94:42:34:eb:44:32:ed:1c:d0:e7:6e:c3:09:72:9d:74:50:3b:
         d2:c0:cf:07:f0:37:3c:87:fd:c6:54:11:ad:b9:7a:18:82:36:
         27:31:b0:1f:9d:fc:b8:c3:90:23:fb:c5:06:32:48:fa:8a:a7:
         f2:4c:6b:9f:f1:f0:f6:44:4f:dd:f2:60:a0:e3:49:7b:3b:ab:
         4b:6c:27:d1:df:fd:2e:15:b4:23:42:80:ef:21:73:4b:bf:42:
         0e:8e:61:62:5f:63:78:ce:e7:f7:b8:84:96:1b:fc:9c:e3:ca:
         ae:1e:df:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----