Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/194f22-8689-4fdb-9c41-058bbf9d5e27/1/KwA-WDvbJRH_V6t6MvznQTNLNDs.mft
File:                     KwA-WDvbJRH_V6t6MvznQTNLNDs.mft (raw, json)
Hash identifier:          QAuPlCwWcW7YtYqZFItp6jlg5+O+FMT01jrL/E2ap2Q=
Subject key identifier:   05:A0:41:3A:36:A7:AF:53:55:91:28:79:B7:42:F3:0B:AD:FF:1F:0D
Authority key identifier: 2B:00:3E:58:3B:DB:25:11:FF:57:AB:7A:32:FC:E7:41:33:4B:34:3B
Certificate issuer:       /CN=2b003e583bdb2511ff57ab7a32fce741334b343b
Certificate serial:       01962F743626FA27FF12880AFF55D9DD95D8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KwA-WDvbJRH_V6t6MvznQTNLNDs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ad/194f22-8689-4fdb-9c41-058bbf9d5e27/1/KwA-WDvbJRH_V6t6MvznQTNLNDs.mft
Manifest number:          14EC
Signing time:             Sun 13 Apr 2025 14:01:07 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:07 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:07 +0000
Files and hashes:         1: 0NCBB1EVTJYHifgmM7E7rBOVhWE.roa (hash: xXtvRZ+O4A6Lgj7z0RgWOmE79cvAliXW5idwtaE71is=)
                          2: KwA-WDvbJRH_V6t6MvznQTNLNDs.crl (hash: 5ZsSuq9Scz9OZmI4+iSYR6xLkyupTP/Jl/JaCyXxlHg=)
                          3: NhsPqOKPZlSrioMLr9lpaOYtrkc.roa (hash: V+PG/h3YDAOvt0v7a2x6UYLDP619SNg1ngThHlkwZTQ=)
                          4: rrcNnyYoHhtYzKs3plgNVsgCnq0.roa (hash: U0CZhyWrF/GWPNXT51c8u412LDB2x6JjdiyBKZ4mr/g=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:36:26:fa:27:ff:12:88:0a:ff:55:d9:dd:95:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2b003e583bdb2511ff57ab7a32fce741334b343b
        Validity
            Not Before: Apr 13 14:01:07 2025 GMT
            Not After : Apr 14 14:01:07 2025 GMT
        Subject: CN=05a0413a36a7af5355912879b742f30badff1f0d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:b5:31:65:b3:77:80:a9:d0:24:64:2d:9d:2a:
                    ce:ca:5b:43:f1:63:f5:8c:7b:b6:a5:a1:94:5a:3f:
                    df:29:51:d6:e5:b8:3a:45:4b:8d:ba:85:d9:f3:eb:
                    59:fb:be:45:fe:8b:8d:04:b4:22:57:71:ff:46:0e:
                    d7:2e:67:fd:d0:7c:89:b8:6b:90:1b:49:b0:a7:af:
                    34:35:3d:1f:97:3f:de:0a:d6:64:25:52:cd:28:b5:
                    e8:d3:ef:c9:2e:37:94:1d:a9:a8:4a:3c:b9:01:a9:
                    16:02:4a:90:70:82:b1:48:44:82:ab:ea:ee:e3:00:
                    2c:4d:82:ab:b1:2d:6b:c4:05:09:08:35:3e:ce:cb:
                    39:51:a0:f9:0f:c9:e0:1f:40:91:c9:d8:e0:10:95:
                    d8:b4:9c:e7:13:37:4d:cf:5c:ee:b4:ef:91:ff:56:
                    dc:00:c7:92:7a:b5:f2:7e:4e:02:e3:37:c9:d6:83:
                    b7:d5:cc:53:39:e1:8f:c1:23:99:e8:d9:1b:6d:dc:
                    e9:65:63:db:3b:af:db:e9:43:0a:e2:fb:86:c5:49:
                    bd:87:27:8a:2f:37:da:b9:4b:03:89:82:b1:91:18:
                    d1:33:ca:76:96:20:2e:9b:b6:aa:b9:be:26:01:fb:
                    f6:9d:2b:5f:31:38:9c:a5:9d:e0:a9:ba:e4:69:7e:
                    4d:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:A0:41:3A:36:A7:AF:53:55:91:28:79:B7:42:F3:0B:AD:FF:1F:0D
            X509v3 Authority Key Identifier:
                keyid:2B:00:3E:58:3B:DB:25:11:FF:57:AB:7A:32:FC:E7:41:33:4B:34:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KwA-WDvbJRH_V6t6MvznQTNLNDs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/194f22-8689-4fdb-9c41-058bbf9d5e27/1/KwA-WDvbJRH_V6t6MvznQTNLNDs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/194f22-8689-4fdb-9c41-058bbf9d5e27/1/KwA-WDvbJRH_V6t6MvznQTNLNDs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:cc:44:c7:e9:b9:0d:19:8b:6b:22:5b:08:8f:c0:8d:81:6e:
         14:c1:4e:c8:6f:11:a1:80:45:7a:a4:1a:cc:6e:ba:69:6c:67:
         03:30:68:47:49:3f:af:ce:43:25:2b:98:d5:ce:7f:d4:62:42:
         04:28:99:f1:82:10:06:e9:d1:aa:6a:cb:57:83:9d:4b:8e:2a:
         85:44:46:53:79:a4:3d:d9:8c:4e:e6:94:62:0d:3b:a4:07:d5:
         9c:19:15:7b:b7:7d:27:40:40:10:20:e1:db:44:4d:58:df:2e:
         c0:ff:aa:c3:48:ea:3f:42:e4:19:c0:72:ba:3b:8a:5b:98:fd:
         55:de:4a:44:4b:b5:24:47:b4:03:4d:06:a5:0b:91:e5:f3:45:
         bb:a4:32:3b:6a:96:8a:8f:34:8b:24:1f:18:b6:52:d0:31:c8:
         9f:bb:a7:c0:cd:e3:f9:19:41:6e:ce:cc:75:25:5d:0e:05:99:
         4d:7b:8e:07:a4:df:1c:46:3d:7b:01:bf:0e:ed:9b:71:fd:fa:
         0b:01:d4:0f:80:22:e5:fa:d0:42:ec:92:ee:ed:db:79:1f:18:
         62:d1:c3:37:dd:ca:4a:55:40:6e:cc:c7:20:17:34:b8:d0:1e:
         9a:95:23:04:36:f5:44:ec:66:93:09:28:c7:b9:56:e6:15:7c:
         31:58:c0:c6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvdDYm+if/EogK/1XZ3ZXYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJiMDAzZTU4M2JkYjI1MTFmZjU3YWI3YTMyZmNlNzQxMzM0
YjM0M2IwHhcNMjUwNDEzMTQwMTA3WhcNMjUwNDE0MTQwMTA3WjAzMTEwLwYDVQQD
EygwNWEwNDEzYTM2YTdhZjUzNTU5MTI4NzliNzQyZjMwYmFkZmYxZjBkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxbUxZbN3gKnQJGQtnSrOyltD8WP1
jHu2paGUWj/fKVHW5bg6RUuNuoXZ8+tZ+75F/ouNBLQiV3H/Rg7XLmf90HyJuGuQ
G0mwp680NT0flz/eCtZkJVLNKLXo0+/JLjeUHamoSjy5AakWAkqQcIKxSESCq+ru
4wAsTYKrsS1rxAUJCDU+zss5UaD5D8ngH0CRydjgEJXYtJznEzdNz1zutO+R/1bc
AMeSerXyfk4C4zfJ1oO31cxTOeGPwSOZ6NkbbdzpZWPbO6/b6UMK4vuGxUm9hyeK
LzfauUsDiYKxkRjRM8p2liAum7aqub4mAfv2nStfMTicpZ3gqbrkaX5NKwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAWgQTo2p69TVZEoebdC8wut/x8NMB8GA1UdIwQY
MBaAFCsAPlg72yUR/1erejL850EzSzQ7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS3dBLVdEdmJKUkhfVjZ0Nk12em5RVE5MTkRzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZC8xOTRmMjItODY4OS00ZmRiLTljNDEt
MDU4YmJmOWQ1ZTI3LzEvS3dBLVdEdmJKUkhfVjZ0Nk12em5RVE5MTkRzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZC8xOTRmMjItODY4OS00ZmRiLTljNDEtMDU4YmJmOWQ1ZTI3
LzEvS3dBLVdEdmJKUkhfVjZ0Nk12em5RVE5MTkRzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVsxEx+m5
DRmLayJbCI/AjYFuFMFOyG8RoYBFeqQazG66aWxnAzBoR0k/r85DJSuY1c5/1GJC
BCiZ8YIQBunRqmrLV4OdS44qhURGU3mkPdmMTuaUYg07pAfVnBkVe7d9J0BAECDh
20RNWN8uwP+qw0jqP0LkGcByujuKW5j9Vd5KREu1JEe0A00GpQuR5fNFu6QyO2qW
io80iyQfGLZS0DHIn7unwM3j+RlBbs7MdSVdDgWZTXuOB6TfHEY9ewG/Du2bcf36
CwHUD4Ai5frQQuyS7u3beR8YYtHDN93KSlVAbszHIBc0uNAempUjBDb1ROxmkwko
x7lW5hV8MVjAxg==
-----END CERTIFICATE-----