Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/cb9d7f-afdf-4487-9e08-bd5043c0d1fb/1/SwGwhRt_iepLsTKn9TlbnSrKHAI.mft
File:                     SwGwhRt_iepLsTKn9TlbnSrKHAI.mft (raw, json)
Hash identifier:          aabR2ZFWX2V4Fi+cSCdQhgB8Ffn/r3L1EOX28ukRNN0=
Subject key identifier:   84:08:5A:74:73:C4:BD:AE:B7:16:D3:45:61:B9:42:F7:02:97:9C:C0
Authority key identifier: 4B:01:B0:85:1B:7F:89:EA:4B:B1:32:A7:F5:39:5B:9D:2A:CA:1C:02
Certificate issuer:       /CN=4b01b0851b7f89ea4bb132a7f5395b9d2aca1c02
Certificate serial:       01962DF4179A756C6E9795202943E657C57E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SwGwhRt_iepLsTKn9TlbnSrKHAI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bf/cb9d7f-afdf-4487-9e08-bd5043c0d1fb/1/SwGwhRt_iepLsTKn9TlbnSrKHAI.mft
Manifest number:          1118
Signing time:             Sun 13 Apr 2025 07:01:33 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:33 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:33 +0000
Files and hashes:         1: J7kB6ievmPFEqZTmicl8rRo6FjY.roa (hash: W4zMo+qbtPWsiXhZkqF+6a7KynDxQ8ZCboXDljVbc+4=)
                          2: SwGwhRt_iepLsTKn9TlbnSrKHAI.crl (hash: JcFq43ZlFL4V8IfWMaJTz2U+Ky1kfzhsikX0H/yViqk=)
                          3: X51JyRQsbiO-dRzpiM0BYac4vr0.roa (hash: F7UTgwSfHWU8Fp+YRwGuybMagFBxqwkgosOGLinxRxs=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f4:17:9a:75:6c:6e:97:95:20:29:43:e6:57:c5:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4b01b0851b7f89ea4bb132a7f5395b9d2aca1c02
        Validity
            Not Before: Apr 13 07:01:33 2025 GMT
            Not After : Apr 14 07:01:33 2025 GMT
        Subject: CN=84085a7473c4bdaeb716d34561b942f702979cc0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:92:59:c2:97:38:71:1b:8d:db:1d:c7:3d:c3:
                    11:3a:00:e7:b3:c3:54:d9:93:66:28:bf:a2:f4:c0:
                    a5:ee:90:ec:05:b3:9e:de:46:d4:f9:1b:b1:28:19:
                    c6:3f:f2:0f:ce:ae:f9:1c:60:a8:6f:3a:cb:10:38:
                    61:0f:75:5c:42:5f:55:c7:a3:ba:27:f1:c3:d3:91:
                    a8:86:05:90:0c:46:78:84:56:ad:fc:08:ab:9c:52:
                    a4:2e:f1:8c:2f:b8:20:15:1d:8f:8d:83:4d:5f:4b:
                    e2:df:7c:4b:c0:0e:2b:be:db:d9:92:4d:ff:1c:c7:
                    f2:0a:74:e7:38:29:f7:25:06:42:65:91:2c:36:2b:
                    c2:35:dd:41:d9:fa:be:2a:d7:3f:a5:38:2b:d6:c7:
                    81:48:2b:60:14:ae:9c:fd:15:9f:91:60:94:62:5f:
                    4d:ec:03:19:ef:81:dd:04:9d:df:9b:94:71:c5:0a:
                    a7:98:aa:80:9c:03:da:f0:2c:92:fc:46:11:36:ca:
                    fb:14:44:3a:d6:07:47:ed:ee:1f:ba:8b:cf:4b:ac:
                    8a:6f:09:f0:68:d0:66:b9:7f:17:6f:0d:a3:fa:a5:
                    5f:13:24:f4:bb:02:eb:d9:8e:f4:cb:d2:cf:ba:59:
                    94:d3:4d:b8:ab:11:ea:81:b3:ee:ef:36:71:2f:25:
                    b1:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:08:5A:74:73:C4:BD:AE:B7:16:D3:45:61:B9:42:F7:02:97:9C:C0
            X509v3 Authority Key Identifier:
                keyid:4B:01:B0:85:1B:7F:89:EA:4B:B1:32:A7:F5:39:5B:9D:2A:CA:1C:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SwGwhRt_iepLsTKn9TlbnSrKHAI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/cb9d7f-afdf-4487-9e08-bd5043c0d1fb/1/SwGwhRt_iepLsTKn9TlbnSrKHAI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/cb9d7f-afdf-4487-9e08-bd5043c0d1fb/1/SwGwhRt_iepLsTKn9TlbnSrKHAI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:ce:6e:aa:64:41:3c:44:ea:72:c0:f8:c2:bd:5f:10:4f:8f:
         bc:83:3d:c5:ac:18:b0:bf:9d:5c:bf:b6:33:5d:9b:81:49:ea:
         31:f1:0f:52:06:3b:1d:10:4a:ee:7c:fd:17:80:8f:a8:f4:10:
         61:9b:aa:30:19:2c:3e:e5:da:75:4a:06:4c:08:3d:a6:a6:0d:
         c5:9f:4e:06:2e:29:5e:73:86:09:f6:8b:55:b0:23:13:57:aa:
         f3:f4:e5:8c:88:d8:a1:d2:9e:7c:f4:57:d0:ae:cc:c8:2b:89:
         fc:00:14:8d:69:00:81:01:68:d4:3a:e4:64:82:3a:fb:94:b8:
         c7:4f:63:68:d7:1b:6a:41:1e:cc:18:49:b2:ad:05:e9:4a:72:
         01:c1:8c:42:f6:24:e2:bf:20:6e:7d:be:cd:e1:12:9e:ad:23:
         18:56:96:b3:dd:f6:a0:ec:6b:cd:b0:26:64:9d:fc:b3:db:97:
         b8:4e:77:fb:af:eb:2f:fb:5d:ef:8c:19:59:30:8c:77:f8:c3:
         74:e6:a6:a5:57:d4:37:6e:b0:3b:79:c0:39:40:e0:59:b5:28:
         7d:58:b6:ac:05:72:cb:6e:09:41:de:9b:82:f3:38:db:97:6d:
         d6:0a:85:59:5f:3d:cf:33:81:32:9c:5d:64:ed:8b:01:bf:9a:
         a6:b0:f6:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----