Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/f516f6-d5a0-4086-94f2-abd4c5c9b374/1/kuwQUNOpMgq58M4rNloJfuQTSyQ.mft
File:                     kuwQUNOpMgq58M4rNloJfuQTSyQ.mft (raw, json)
Hash identifier:          jJVWEIYZXEakQFGsMl3Z7U57JaheySygW3jbXtq5Cuc=
Subject key identifier:   C7:01:19:2B:97:43:D4:A4:2E:D5:17:66:01:43:5B:66:AF:1A:95:12
Authority key identifier: 92:EC:10:50:D3:A9:32:0A:B9:F0:CE:2B:36:5A:09:7E:E4:13:4B:24
Certificate issuer:       /CN=92ec1050d3a9320ab9f0ce2b365a097ee4134b24
Certificate serial:       01962E61DBB334C8CDE9032AE3F5228F17EC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kuwQUNOpMgq58M4rNloJfuQTSyQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/30/f516f6-d5a0-4086-94f2-abd4c5c9b374/1/kuwQUNOpMgq58M4rNloJfuQTSyQ.mft
Manifest number:          1220
Signing time:             Sun 13 Apr 2025 09:01:27 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:27 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:27 +0000
Files and hashes:         1: kuwQUNOpMgq58M4rNloJfuQTSyQ.crl (hash: hL1A5zic0yt1fJEVLedu5E0IIhVK8TU9ypceXxfI0ao=)
                          2: rcP662t9iU7wmmRm1Yh7D85Kb-4.roa (hash: hNPhEZEICgt5or5b1hN6hdrsIiWH59T8KP+7AQfFMXQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:db:b3:34:c8:cd:e9:03:2a:e3:f5:22:8f:17:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=92ec1050d3a9320ab9f0ce2b365a097ee4134b24
        Validity
            Not Before: Apr 13 09:01:27 2025 GMT
            Not After : Apr 14 09:01:27 2025 GMT
        Subject: CN=c701192b9743d4a42ed5176601435b66af1a9512
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:b8:5d:f0:13:38:f5:f0:a4:00:76:30:21:a4:
                    ac:d9:9d:ad:c9:a2:b0:6f:fb:b0:b0:6c:1d:41:3b:
                    a5:9e:7d:33:57:e2:f6:bc:ba:f7:73:dc:fe:a0:4f:
                    7d:ca:94:31:b1:0d:75:35:cf:6b:68:d5:3b:73:04:
                    68:fb:ea:82:6c:41:04:c7:ed:f2:73:32:d5:35:55:
                    03:38:df:c5:84:2a:24:26:d8:f2:85:9d:78:ad:83:
                    87:26:1a:59:47:70:c9:f3:11:2b:17:7a:c8:55:3d:
                    3a:3e:eb:af:3c:71:21:2e:96:91:5c:0b:5e:ae:1d:
                    c8:c1:d1:66:80:d1:4c:be:b7:eb:9a:a8:d4:2b:1e:
                    6d:d3:76:a8:c9:f6:71:58:ec:4d:3b:c6:9b:4c:e7:
                    fc:3b:8b:a0:c8:dc:d2:75:cd:fd:21:d7:7e:5d:6e:
                    92:17:3c:77:83:7a:ef:7e:d3:8f:81:d9:16:3c:cb:
                    46:77:fe:90:45:98:51:4d:c7:21:18:3d:bd:da:c9:
                    07:d9:98:e1:ff:1e:78:a2:b2:14:d4:bb:d4:95:54:
                    c8:79:1b:ed:e2:c9:6d:07:f9:e6:b5:b0:8f:9f:58:
                    1d:ff:88:7a:37:64:de:71:96:00:eb:fd:ca:9d:c7:
                    18:ec:53:66:7d:9e:0c:b0:bc:1f:2f:a3:25:13:93:
                    50:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:01:19:2B:97:43:D4:A4:2E:D5:17:66:01:43:5B:66:AF:1A:95:12
            X509v3 Authority Key Identifier:
                keyid:92:EC:10:50:D3:A9:32:0A:B9:F0:CE:2B:36:5A:09:7E:E4:13:4B:24

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kuwQUNOpMgq58M4rNloJfuQTSyQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/f516f6-d5a0-4086-94f2-abd4c5c9b374/1/kuwQUNOpMgq58M4rNloJfuQTSyQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/30/f516f6-d5a0-4086-94f2-abd4c5c9b374/1/kuwQUNOpMgq58M4rNloJfuQTSyQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:04:f8:77:52:db:65:11:ba:48:b2:0c:59:fb:32:68:5b:09:
         0d:ab:58:f7:19:38:fc:81:22:fa:49:c2:81:b3:cd:5a:ca:01:
         2d:c5:00:de:15:96:95:9f:d2:2f:70:e4:2f:a1:d2:31:d8:65:
         88:c0:44:51:62:20:e6:72:ac:31:c3:f9:89:6c:41:38:a5:91:
         05:d9:e3:39:e9:89:99:65:eb:9d:1e:33:ca:60:ad:26:b4:33:
         c8:9d:69:b3:ab:64:5e:86:4f:38:b3:9d:26:41:76:9c:1f:4f:
         9a:5b:f2:ea:9b:15:93:b5:4d:ad:0a:54:90:35:be:dd:a9:e7:
         df:81:22:c7:6d:87:17:f1:9d:7a:b9:99:2a:52:b9:f1:32:b1:
         20:a5:a2:2e:42:78:67:3e:78:2a:35:59:d3:a9:1c:54:d2:91:
         7e:58:b6:f3:e9:a9:25:01:9c:eb:f1:68:a0:ff:71:25:a1:75:
         82:d9:92:3f:91:d6:6a:ad:94:0a:cf:1f:6e:b3:c6:21:4d:01:
         28:1c:d2:b4:c3:ed:37:37:00:40:37:b0:cb:ea:c2:bc:10:5a:
         76:ce:de:cc:84:a0:88:f8:ba:99:91:5c:2b:ff:c3:ce:63:2d:
         69:b1:e8:c5:72:1d:9c:46:d6:1d:67:f5:4d:64:35:a1:2d:d2:
         51:eb:de:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----