Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/37b63e-9c88-42dc-b043-de844964f5ee/1/kwpGPWfktC2GOazfDRVCT4LxmmA.mft
File:                     kwpGPWfktC2GOazfDRVCT4LxmmA.mft (raw, json)
Hash identifier:          NKa0kPUCMmhGbwQ2uz3nBCQN+CslM8vdhWrItHe4qjs=
Subject key identifier:   75:48:BF:6B:80:E0:09:5D:41:DE:F6:7A:BC:06:3F:5F:D3:3C:2B:E4
Authority key identifier: 93:0A:46:3D:67:E4:B4:2D:86:39:AC:DF:0D:15:42:4F:82:F1:9A:60
Certificate issuer:       /CN=930a463d67e4b42d8639acdf0d15424f82f19a60
Certificate serial:       01962F74E5722FAA329D0BF33FFBCA64483B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kwpGPWfktC2GOazfDRVCT4LxmmA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c5/37b63e-9c88-42dc-b043-de844964f5ee/1/kwpGPWfktC2GOazfDRVCT4LxmmA.mft
Manifest number:          147E
Signing time:             Sun 13 Apr 2025 14:01:52 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:52 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:52 +0000
Files and hashes:         1: j7F-n5BAS7IAV1hUz2AdgLUxWgs.roa (hash: j/qcNW3gwv3EvcvTrR1cViv4t/1AN5TOvaoTXIrqHig=)
                          2: kwpGPWfktC2GOazfDRVCT4LxmmA.crl (hash: jHKic8TbB2xGdK+4TbkzR+SCdwVYCM5bBXllJc/BUjM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:e5:72:2f:aa:32:9d:0b:f3:3f:fb:ca:64:48:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=930a463d67e4b42d8639acdf0d15424f82f19a60
        Validity
            Not Before: Apr 13 14:01:52 2025 GMT
            Not After : Apr 14 14:01:52 2025 GMT
        Subject: CN=7548bf6b80e0095d41def67abc063f5fd33c2be4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:14:ba:24:ee:06:44:a5:cd:fa:8c:bd:39:7d:
                    e8:a7:47:a4:ca:98:b9:d5:01:57:6b:22:4f:6f:5b:
                    ea:b9:da:84:28:6a:03:cf:a8:ae:c2:c8:8a:4a:25:
                    2d:83:49:ed:64:fc:02:52:b6:df:58:ea:ac:84:ad:
                    33:0e:d8:05:ee:60:81:d6:e6:a2:ab:e7:13:54:43:
                    ca:6d:db:fd:41:bc:86:30:87:92:ef:25:b4:02:ef:
                    30:f7:4a:79:f3:ee:f0:44:6d:66:2c:a9:63:94:4c:
                    45:b7:6d:a3:88:ce:c4:90:b4:f3:d6:a0:10:56:2e:
                    f3:3b:0d:bc:a5:49:b5:28:0a:2c:41:15:bb:ff:78:
                    cb:e2:e1:e5:8c:9c:7f:f9:8b:90:db:f1:be:a4:66:
                    40:3d:4b:5c:4a:28:b7:68:7e:25:8e:a1:95:ab:54:
                    f3:6d:49:3f:74:ac:54:f7:c5:dc:92:3c:07:dc:b7:
                    51:b7:39:86:2c:70:88:a5:b1:15:d3:1f:04:65:1c:
                    e4:48:2f:58:fe:d5:2c:14:eb:6a:c9:4c:ca:5d:e8:
                    c7:9e:33:bc:8c:8c:db:28:b6:55:c6:ec:ba:f5:85:
                    fc:7e:85:75:07:cd:b2:1c:a0:ea:3c:5e:3e:41:cb:
                    c6:79:a0:d6:cc:d7:ea:60:9e:f7:6c:1d:7f:86:d8:
                    33:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:48:BF:6B:80:E0:09:5D:41:DE:F6:7A:BC:06:3F:5F:D3:3C:2B:E4
            X509v3 Authority Key Identifier:
                keyid:93:0A:46:3D:67:E4:B4:2D:86:39:AC:DF:0D:15:42:4F:82:F1:9A:60

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kwpGPWfktC2GOazfDRVCT4LxmmA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/37b63e-9c88-42dc-b043-de844964f5ee/1/kwpGPWfktC2GOazfDRVCT4LxmmA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/37b63e-9c88-42dc-b043-de844964f5ee/1/kwpGPWfktC2GOazfDRVCT4LxmmA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:ff:a5:36:7e:4b:a5:c0:fa:8e:1d:67:eb:83:88:22:5a:9d:
         86:b6:f9:a5:da:08:d0:36:6c:6d:de:89:e0:69:c6:aa:4b:ef:
         45:29:b9:e2:42:31:fd:be:d8:fe:ce:a1:4b:c9:c5:91:00:a6:
         c0:44:1b:8c:8e:7f:7e:8f:11:fd:2b:a1:be:94:e3:eb:83:7d:
         0b:74:de:c8:30:06:b5:30:fc:3a:3e:cc:5a:63:53:79:e9:b7:
         79:be:b3:55:d9:fd:44:3a:51:51:58:b1:cf:c2:71:0e:83:d2:
         c6:b4:2a:fe:58:a5:fe:5c:d9:cf:a3:29:87:34:40:5d:0c:0e:
         61:b2:ef:d7:ad:f2:07:6e:d7:59:af:a6:02:87:40:8a:76:96:
         13:aa:bf:5b:c3:55:6b:07:2e:6f:b4:63:13:49:09:79:7d:fd:
         ed:1f:fd:65:88:3e:df:3b:51:7f:47:76:23:94:7f:27:02:26:
         1d:3e:73:0b:a2:6a:8d:61:95:85:87:3f:6d:71:da:f2:0b:fa:
         de:7f:f3:18:fb:06:b8:7c:aa:bc:e5:b4:43:c8:64:52:95:12:
         8d:53:2d:5f:45:86:e5:ff:48:fb:69:b3:5e:77:23:0f:3b:c1:
         b5:e5:97:b3:15:3b:f6:d9:56:eb:2a:1f:a4:11:ba:a9:3b:d8:
         1f:82:86:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----