Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/b33481-6634-4d09-bf12-ab7f14daae4f/1/KWAWrWTCJgCs8wSfh1j1PrseV8Q.mft
File:                     KWAWrWTCJgCs8wSfh1j1PrseV8Q.mft (raw, json)
Hash identifier:          XyR4Qfzo6eZXsgELeI6CW1s0bEnC61YV09mVVxo0dxA=
Subject key identifier:   46:34:0E:74:D0:E2:A6:19:F7:D6:20:EA:A5:DE:76:1C:46:61:F5:80
Authority key identifier: 29:60:16:AD:64:C2:26:00:AC:F3:04:9F:87:58:F5:3E:BB:1E:57:C4
Certificate issuer:       /CN=296016ad64c22600acf3049f8758f53ebb1e57c4
Certificate serial:       01962F74C793B860E2703BE58FAB156E2BE0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KWAWrWTCJgCs8wSfh1j1PrseV8Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f8/b33481-6634-4d09-bf12-ab7f14daae4f/1/KWAWrWTCJgCs8wSfh1j1PrseV8Q.mft
Manifest number:          02A1
Signing time:             Sun 13 Apr 2025 14:01:44 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:44 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:44 +0000
Files and hashes:         1: IoK2zTe-OC_dDY_734EVd48qQJ8.roa (hash: OV/EhbwqGxvFaPc6Pz7o/yEGyZxODTXrHQIagp84Afg=)
                          2: KWAWrWTCJgCs8wSfh1j1PrseV8Q.crl (hash: C+K161+wrbLj5azrl0WfqF4j9ddqXsaFgUW5KPzkucY=)
                          3: ZRdLYDl7hpyDg6YsYK-Wdw4baMc.roa (hash: 5DTIP8T8IUMMx2MqkILNMeW793Ol6SuU7VuRgBULAp4=)
                          4: r_GgOOrK8Ih9MzmtnCA_DxxC0BY.roa (hash: lJ1n4OTRsjhQ2vj+G2gNkyHqsFIRt5AG3VU9W6pXzHs=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:c7:93:b8:60:e2:70:3b:e5:8f:ab:15:6e:2b:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=296016ad64c22600acf3049f8758f53ebb1e57c4
        Validity
            Not Before: Apr 13 14:01:44 2025 GMT
            Not After : Apr 14 14:01:44 2025 GMT
        Subject: CN=46340e74d0e2a619f7d620eaa5de761c4661f580
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:c1:e2:69:e7:91:a8:c3:55:46:7f:1b:88:f1:
                    41:9d:e6:58:9b:ce:a7:4d:dd:16:c0:f9:bc:ff:b6:
                    96:5e:85:18:ef:6d:97:cf:22:8b:09:7c:40:a6:76:
                    89:ba:13:90:b2:19:9b:3e:ce:77:78:38:56:5d:0d:
                    54:8d:ff:f4:38:91:5b:89:e3:81:ab:91:7b:59:61:
                    a6:45:9d:77:cd:39:e9:f9:da:66:6b:28:da:a0:d0:
                    84:af:e7:e1:56:eb:74:3d:d3:fe:83:db:1f:e0:3f:
                    ed:11:da:0f:f9:ab:e3:0f:76:99:91:74:01:ef:c1:
                    53:a2:a7:44:bf:78:7e:a1:6e:3f:60:66:43:c9:8e:
                    af:45:07:71:9b:45:61:7a:7b:ff:e8:bc:d2:e5:46:
                    03:20:b6:90:b8:b8:57:8c:d0:a3:aa:37:f3:9a:1d:
                    b7:75:3e:44:d7:b2:79:35:dd:3b:36:ad:86:e2:de:
                    70:35:1b:4a:28:f1:6f:ca:5a:af:43:e1:77:ea:59:
                    ea:f5:3f:92:f2:a2:0a:79:98:ab:c0:f0:5b:2e:3c:
                    6f:4b:88:c3:c0:5c:41:79:68:ef:98:14:83:b8:a7:
                    95:e0:78:5f:46:4b:8f:3a:2e:b0:ff:23:68:8d:e5:
                    54:c3:ab:b4:56:7d:bd:9c:4a:53:56:e9:ad:a3:67:
                    f7:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:34:0E:74:D0:E2:A6:19:F7:D6:20:EA:A5:DE:76:1C:46:61:F5:80
            X509v3 Authority Key Identifier:
                keyid:29:60:16:AD:64:C2:26:00:AC:F3:04:9F:87:58:F5:3E:BB:1E:57:C4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KWAWrWTCJgCs8wSfh1j1PrseV8Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/b33481-6634-4d09-bf12-ab7f14daae4f/1/KWAWrWTCJgCs8wSfh1j1PrseV8Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/b33481-6634-4d09-bf12-ab7f14daae4f/1/KWAWrWTCJgCs8wSfh1j1PrseV8Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:59:7e:4a:c8:dd:36:cb:0a:8a:5f:1e:72:e0:9b:0d:85:de:
         c0:4f:21:47:14:91:1f:e2:6d:e6:50:83:7a:95:aa:af:73:dd:
         c1:ee:53:bb:7b:1c:7d:a7:42:2a:03:f3:b9:a4:7b:37:d2:a6:
         c9:e5:51:77:43:30:b0:6e:aa:da:a5:78:a7:13:d6:5c:0e:85:
         b5:8d:8d:9d:df:07:a9:8e:1e:35:e2:d0:7b:b6:b8:99:35:c0:
         62:2c:c7:f2:fc:5e:7f:7c:31:13:17:f1:e4:50:93:55:50:27:
         6f:89:b1:0a:99:fb:0c:b9:c6:e7:4d:a8:df:cc:15:21:ec:9c:
         d3:39:f3:ac:69:1f:a9:d7:13:27:51:ea:9e:70:36:43:4a:7a:
         0f:a8:06:4f:41:76:1c:ac:be:58:7a:7f:6b:f7:a7:47:07:46:
         b8:51:4b:96:10:4f:38:98:98:09:28:27:6c:d1:1f:2a:d3:58:
         5b:1f:16:61:0c:50:ad:3d:92:c7:74:b1:9c:fa:8f:33:22:42:
         46:ab:54:1c:55:5f:fe:18:7b:d1:bc:7f:68:07:05:c6:7f:1c:
         7a:15:49:9e:08:3a:e8:17:95:7c:19:3d:dd:83:70:95:8d:18:
         92:56:67:2c:5a:1b:10:51:2f:cc:93:97:58:aa:66:db:39:13:
         af:8b:c9:6b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvdMeTuGDicDvlj6sVbivgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI5NjAxNmFkNjRjMjI2MDBhY2YzMDQ5Zjg3NThmNTNlYmIx
ZTU3YzQwHhcNMjUwNDEzMTQwMTQ0WhcNMjUwNDE0MTQwMTQ0WjAzMTEwLwYDVQQD
Eyg0NjM0MGU3NGQwZTJhNjE5ZjdkNjIwZWFhNWRlNzYxYzQ2NjFmNTgwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtsHiaeeRqMNVRn8biPFBneZYm86n
Td0WwPm8/7aWXoUY722XzyKLCXxApnaJuhOQshmbPs53eDhWXQ1Ujf/0OJFbieOB
q5F7WWGmRZ13zTnp+dpmayjaoNCEr+fhVut0PdP+g9sf4D/tEdoP+avjD3aZkXQB
78FToqdEv3h+oW4/YGZDyY6vRQdxm0Vhenv/6LzS5UYDILaQuLhXjNCjqjfzmh23
dT5E17J5Nd07Nq2G4t5wNRtKKPFvylqvQ+F36lnq9T+S8qIKeZirwPBbLjxvS4jD
wFxBeWjvmBSDuKeV4HhfRkuPOi6w/yNojeVUw6u0Vn29nEpTVumto2f3DQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEY0DnTQ4qYZ99Yg6qXedhxGYfWAMB8GA1UdIwQY
MBaAFClgFq1kwiYArPMEn4dY9T67HlfEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS1dBV3JXVENKZ0NzOHdTZmgxajFQcnNlVjhRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOC9iMzM0ODEtNjYzNC00ZDA5LWJmMTIt
YWI3ZjE0ZGFhZTRmLzEvS1dBV3JXVENKZ0NzOHdTZmgxajFQcnNlVjhRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mOC9iMzM0ODEtNjYzNC00ZDA5LWJmMTItYWI3ZjE0ZGFhZTRm
LzEvS1dBV3JXVENKZ0NzOHdTZmgxajFQcnNlVjhRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKll+Ssjd
NssKil8ecuCbDYXewE8hRxSRH+Jt5lCDepWqr3Pdwe5Tu3scfadCKgPzuaR7N9Km
yeVRd0MwsG6q2qV4pxPWXA6FtY2Nnd8HqY4eNeLQe7a4mTXAYizH8vxef3wxExfx
5FCTVVAnb4mxCpn7DLnG502o38wVIeyc0znzrGkfqdcTJ1HqnnA2Q0p6D6gGT0F2
HKy+WHp/a/enRwdGuFFLlhBPOJiYCSgnbNEfKtNYWx8WYQxQrT2Sx3SxnPqPMyJC
RqtUHFVf/hh70bx/aAcFxn8cehVJngg66BeVfBk93YNwlY0YklZnLFobEFEvzJOX
WKpm2zkTr4vJaw==
-----END CERTIFICATE-----