Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/481637-6c1c-45e8-8fbd-44f8ed5d61d7/1/KWi04O-BBvDhKrjlAdKqTja3g8I.mft
File:                     KWi04O-BBvDhKrjlAdKqTja3g8I.mft (raw, json)
Hash identifier:          WYYb9mGe0SDf15FgMvnlD33esKujP1/h9r0I19XB4Uo=
Subject key identifier:   FD:E3:DB:04:0B:64:C1:D0:BD:01:EE:F7:7F:A8:DB:0F:1E:0C:BA:77
Authority key identifier: 29:68:B4:E0:EF:81:06:F0:E1:2A:B8:E5:01:D2:AA:4E:36:B7:83:C2
Certificate issuer:       /CN=2968b4e0ef8106f0e12ab8e501d2aa4e36b783c2
Certificate serial:       01962F3D3BD32C36508C1ABACB0435104529
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KWi04O-BBvDhKrjlAdKqTja3g8I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a7/481637-6c1c-45e8-8fbd-44f8ed5d61d7/1/KWi04O-BBvDhKrjlAdKqTja3g8I.mft
Manifest number:          029D
Signing time:             Sun 13 Apr 2025 13:01:04 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:04 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:04 +0000
Files and hashes:         1: 0RDdWF3IBcSYDIn0MLfVBFCjQ7k.roa (hash: JocbkBfhJXWTWCaW/Z+fAOKSZnVwMquu1mYz5s3f9M8=)
                          2: 1-sXlT3E8V0jDUCM-Ybkr4a6wLlo.roa (hash: CvuY/DdFSGhFi/vthGK/0x8yOd1SW50ze7RG7bTscdY=)
                          3: 8I731pLlO7OZA-KP6_7Tyd0X0p8.roa (hash: AgOQfpoBY8oNnSKqmzrHEGGLFBw8XUwNyYW1y0VgcFQ=)
                          4: 9InzsTm0J0FJh6_deGjqmJNOCu0.roa (hash: KQ5YYXT2pBjEDCmfW0eKzjN8cGKuVKrKtN3pdmXsi9U=)
                          5: BI1_IYMcz04ApdAcr2QAYo1Gijc.roa (hash: L+zD+W35uF9Uwlx9BIqDCzEBqTULiJDb8lRlDdA0EUg=)
                          6: CSZU7wWMyS9jUVQzYbXEcfHL2gY.roa (hash: iqLlew5M42CsnChkC0+xYaVtbHLoz5KoE02bFqOtl7c=)
                          7: KWi04O-BBvDhKrjlAdKqTja3g8I.crl (hash: wC2RHw9CzOKB5BDhmRW5Hqpd/agp+tp/aHSfc2pHT3c=)
                          8: OwUb3qCvmdiyRmd8cLx8Je9uUxk.roa (hash: atIx3Wbrqp85enT4nB4Os6srsGzi8BmryGvRtf7uqOE=)
                          9: P2ImEjHF7rUTH52-Q9QuWPkwmSw.roa (hash: cHgFrkOyvHYjzh8XPdArtRphykJDW+VkpmQUgpfqLMY=)
                          10: QMiTm2-yiJDC2oOCB78-T7uhy68.roa (hash: ulPDJeSyn/J0aOHbAtmPLp6M9W5etSSNT8E799B3xEE=)
                          11: QsCDFSI-l5JC6to_qrNHYHmqg7g.roa (hash: BEriwV3dh0T3KvwWaeXKWclUm0zROlAOzgw+CVY7q0Q=)
                          12: U8FQsy0_ygrjfzDfPCuVUPjhxFI.roa (hash: VMdtwa4FkFy7nwi/xmcQtKtxXBN5sTN7YZIqy4ryF34=)
                          13: YeWW1PCTf3K6IXfWsiPqRL1xngw.roa (hash: eB/pknTzW+YV8hh7dZBIuVdC4d8+EHVKJgeJu2HkTYg=)
                          14: ZdiJyoo-l9tkMe9J769OhHUhgMY.roa (hash: AHUi1asCEzcucu2jHRjdz9eQqbhd55OH2AnByHrwu+A=)
                          15: a1UPsQjeoFgrASQvINSJJ7_1FEI.roa (hash: IUZiF8ty9Ran6Rx7Q+49/A+HVghw43cz7NyFFJcOacw=)
                          16: amm4UyE6_-2iIfziflS9OWcpi0I.roa (hash: qVhQHcCInjhG6Z1KYAKADs9ZxRsv3Qktzh0alZXqoKY=)
                          17: bxqRKqA4ZCz-HC5KXbkRpv1VjKY.roa (hash: 1IZMZI5YlnRhnfeBN3K+N1PwHEVvMMcDuqlDUtvJ1nU=)
                          18: emtcqtK2GMFCJvDwdUlQ2vTvmJ4.roa (hash: MGI6nqZElzquCZDFYtpLzQpeiVV6b7oAzJY8DVMAi04=)
                          19: sxNoWpD05QIoi_m8uc_lksfhDKU.roa (hash: wKcDV3z8mFiezwypjA2UNeuoXxV0RwLF2Q6N6uhTmzY=)
                          20: wFjr7ivDDEhOQrSM9UUePfjq6BM.roa (hash: hoiviRTlIUkKH3GW9AA2j6niz2qq5NnhMhKDwUCKYys=)
                          21: wkr3-E_-aqAccu5Xsw4WQFstKqc.roa (hash: Ail0xJvQX43faYT+R1FOFCGtCYp7xWL/Q1iaLeJmFoI=)
                          22: zrIx3F0bpchF38MY3NuMGU_mTx4.roa (hash: xQI4JeS8+tVg+pnfphMJ24bPIXjxEWvAFGvnAUjv++0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:3b:d3:2c:36:50:8c:1a:ba:cb:04:35:10:45:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2968b4e0ef8106f0e12ab8e501d2aa4e36b783c2
        Validity
            Not Before: Apr 13 13:01:04 2025 GMT
            Not After : Apr 14 13:01:04 2025 GMT
        Subject: CN=fde3db040b64c1d0bd01eef77fa8db0f1e0cba77
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:7b:37:a4:62:94:6c:82:9d:c8:ba:b2:63:b4:
                    8b:08:df:42:bc:33:d4:80:79:b4:10:6f:5f:61:5e:
                    8d:16:1d:96:34:33:d8:7b:d8:c0:bb:7c:f4:08:ad:
                    83:bb:05:6f:05:c1:49:34:1e:cc:da:1d:bc:1a:1c:
                    b7:6c:5c:c1:f6:1d:b8:32:66:57:28:c4:2c:8c:1a:
                    26:de:67:8f:5c:b2:44:7d:16:e0:74:c1:12:34:0f:
                    4e:d7:2b:f9:dc:30:ef:0b:33:09:49:0a:00:19:6a:
                    e3:4f:7a:c0:83:4d:ec:0e:90:fa:25:2b:d4:bd:f5:
                    e7:1f:08:83:65:d3:d9:76:e3:3e:ec:f9:6b:c3:ac:
                    61:97:47:15:05:d2:09:04:58:66:b0:14:66:19:46:
                    67:01:74:f0:75:f8:63:b3:c9:a8:c4:54:67:07:4d:
                    56:7c:e9:13:86:96:bf:2a:93:93:87:66:ea:44:b7:
                    6d:bc:4b:32:55:26:82:48:bc:6a:48:ec:70:0c:cd:
                    62:29:33:e5:36:8a:58:f6:03:dc:be:a7:99:67:55:
                    4b:1c:fe:a3:30:03:6e:c2:84:e3:9d:66:91:01:e3:
                    ac:75:74:af:88:6f:9f:58:0c:64:e6:17:c0:66:df:
                    14:db:d5:d7:09:6d:83:ef:2f:bb:a6:3e:87:c2:7a:
                    fa:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:E3:DB:04:0B:64:C1:D0:BD:01:EE:F7:7F:A8:DB:0F:1E:0C:BA:77
            X509v3 Authority Key Identifier:
                keyid:29:68:B4:E0:EF:81:06:F0:E1:2A:B8:E5:01:D2:AA:4E:36:B7:83:C2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KWi04O-BBvDhKrjlAdKqTja3g8I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/481637-6c1c-45e8-8fbd-44f8ed5d61d7/1/KWi04O-BBvDhKrjlAdKqTja3g8I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/481637-6c1c-45e8-8fbd-44f8ed5d61d7/1/KWi04O-BBvDhKrjlAdKqTja3g8I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:95:cb:93:44:cb:bf:1f:b0:43:d6:79:63:84:d3:10:d2:0d:
         e6:28:10:51:18:d3:0c:3b:85:45:b4:19:92:7d:1f:97:d7:80:
         de:b5:f9:92:79:2e:e8:5c:1b:e9:34:6d:eb:b0:54:91:46:d2:
         7a:a6:25:d0:85:da:8a:3c:fb:c3:88:71:cb:7a:2b:4b:fa:b0:
         45:79:c4:5d:c7:19:08:0b:16:98:70:0d:50:75:e9:01:08:1d:
         92:09:0d:22:ee:a1:a7:fd:ec:dd:1c:3e:1a:dd:26:d0:0d:0b:
         b2:18:1c:de:f8:03:d6:b0:0e:7f:f5:c3:64:eb:fe:f0:47:73:
         ad:28:44:51:fb:18:64:16:7c:0c:46:fe:bc:16:cf:2d:f5:d9:
         3c:2c:9a:68:ae:17:cf:e6:48:d3:23:8c:57:71:ac:24:7e:ea:
         e0:ea:3c:10:61:4f:33:2b:b9:7e:cc:b8:7b:c3:72:93:47:12:
         60:e5:67:73:90:0c:93:de:88:cb:b3:e0:9b:9f:1a:7f:4e:d0:
         5a:da:52:50:59:fe:14:7a:d9:a6:10:50:b7:da:c1:f5:69:71:
         dd:c1:70:2b:0c:e2:63:f2:f0:b4:e8:4e:b8:9b:35:27:35:77:
         fe:7a:2c:22:ad:d9:6a:73:01:21:18:38:e0:37:18:8e:e4:a5:
         15:0e:53:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----