Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/b35c9a-8495-4169-8c50-3692f7841619/1/kNWCLTx7v3q1QE3aiP2dqSE43iE.mft
File:                     kNWCLTx7v3q1QE3aiP2dqSE43iE.mft (raw, json)
Hash identifier:          XMukJBdWqUtGKoVS8qnk7HtmtFWNX+X7Aa3jvSvEt+U=
Subject key identifier:   33:A8:19:2A:17:5A:40:6A:80:D9:13:DB:D9:AE:53:7F:F0:13:90:0C
Authority key identifier: 90:D5:82:2D:3C:7B:BF:7A:B5:40:4D:DA:88:FD:9D:A9:21:38:DE:21
Certificate issuer:       /CN=90d5822d3c7bbf7ab5404dda88fd9da92138de21
Certificate serial:       01962F0740DD646768AA21DD79135F0ABB53
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kNWCLTx7v3q1QE3aiP2dqSE43iE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/aa/b35c9a-8495-4169-8c50-3692f7841619/1/kNWCLTx7v3q1QE3aiP2dqSE43iE.mft
Manifest number:          05A7
Signing time:             Sun 13 Apr 2025 12:02:06 +0000
Manifest this update:     Sun 13 Apr 2025 12:02:06 +0000
Manifest next update:     Mon 14 Apr 2025 12:02:06 +0000
Files and hashes:         1: kNWCLTx7v3q1QE3aiP2dqSE43iE.crl (hash: nRKcrkardK1xXyt1RUDaWS0UMT1gfIYUQuiJ0Q5B4D8=)
                          2: wd_UoJqlC6X8mKMfS7O-YEGVRuo.roa (hash: xFPdoUnkz2JIkzmQ5taq1hUGjTFKvPuKX93R37CXGQk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:07:40:dd:64:67:68:aa:21:dd:79:13:5f:0a:bb:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90d5822d3c7bbf7ab5404dda88fd9da92138de21
        Validity
            Not Before: Apr 13 12:02:06 2025 GMT
            Not After : Apr 14 12:02:06 2025 GMT
        Subject: CN=33a8192a175a406a80d913dbd9ae537ff013900c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:82:96:8d:c8:97:c0:47:da:55:5a:7b:ff:b8:
                    f2:b0:9c:16:5b:ba:e7:2a:bd:4d:f4:36:88:c5:e7:
                    60:20:da:c8:57:40:bf:b1:cf:77:15:54:6f:00:41:
                    ec:86:a6:93:47:c3:02:84:e7:7c:da:21:79:5e:e0:
                    98:ea:50:6f:7b:d4:a1:e5:f0:ba:c3:f6:d0:31:eb:
                    2c:a5:ca:98:74:fa:21:d3:7f:c8:a8:3d:d7:00:10:
                    df:15:b5:58:02:3c:86:bc:8e:78:86:6b:6f:fa:c1:
                    7c:12:26:98:4d:e8:3f:f4:5c:41:bf:d6:96:1b:46:
                    14:ee:41:8a:5b:84:48:c1:59:44:62:96:f1:c8:66:
                    34:e4:c8:16:a5:1d:3a:1f:b5:cf:e0:24:58:ba:fe:
                    56:3c:15:ec:f6:c6:6f:24:ad:7d:25:9e:0a:82:d2:
                    36:16:f7:2b:be:30:eb:b7:01:fc:4d:70:6a:bf:5e:
                    58:44:6e:1e:73:50:c6:c9:a4:81:dc:58:f5:6a:45:
                    83:62:42:de:c7:f0:c9:8d:81:27:9b:a5:de:16:52:
                    5a:57:eb:86:b3:06:91:3b:e6:8e:16:37:99:9e:06:
                    b2:67:cd:8c:cb:6b:7c:4d:34:96:29:c9:51:e4:c0:
                    d0:00:0b:8e:75:27:10:2c:3e:f2:40:c0:72:f0:4a:
                    9b:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:A8:19:2A:17:5A:40:6A:80:D9:13:DB:D9:AE:53:7F:F0:13:90:0C
            X509v3 Authority Key Identifier:
                keyid:90:D5:82:2D:3C:7B:BF:7A:B5:40:4D:DA:88:FD:9D:A9:21:38:DE:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kNWCLTx7v3q1QE3aiP2dqSE43iE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/b35c9a-8495-4169-8c50-3692f7841619/1/kNWCLTx7v3q1QE3aiP2dqSE43iE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/b35c9a-8495-4169-8c50-3692f7841619/1/kNWCLTx7v3q1QE3aiP2dqSE43iE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:87:e9:66:09:5a:e0:51:c7:06:fa:81:3b:a8:a5:2a:0d:6c:
         2a:21:b0:7a:f8:4d:24:62:7e:8d:0a:20:5a:cf:8d:85:53:ba:
         04:26:9b:2f:80:a9:70:b6:3b:63:3e:d0:9f:2e:a4:4f:aa:e9:
         2d:34:a8:78:ca:a2:5d:60:44:bc:01:e1:1e:d2:c0:00:42:d2:
         75:15:3b:c5:46:2d:92:1c:35:e6:2f:f0:f3:0b:6f:a5:5f:e7:
         54:4c:c8:83:7b:1c:7b:bb:1b:48:01:93:e2:bc:c3:86:2b:d9:
         de:58:da:07:9c:d9:fd:b1:25:f5:d3:a1:24:d1:3a:ad:dc:54:
         cb:5c:c6:e9:cf:a7:d1:9f:50:37:14:5e:25:c0:c5:07:9b:75:
         49:ab:46:d5:7a:ea:49:9e:85:3e:52:6d:53:e3:83:30:1d:6b:
         6c:fc:c6:30:32:21:7e:bb:22:07:97:85:6d:4d:e3:38:09:ba:
         39:47:37:19:89:51:91:da:1a:da:ad:3a:8c:b8:c2:0c:58:63:
         3e:e4:5e:e7:6b:08:f4:49:c8:f2:57:10:f6:99:5a:5b:ae:ab:
         73:5e:0f:85:0b:e4:18:6a:53:2d:04:3d:3e:d4:80:07:9c:bf:
         90:49:1e:1f:10:91:fe:11:61:01:36:ab:79:36:cb:cf:49:8d:
         50:73:1f:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----