Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/c64d50-fcdd-4a9f-9047-293f6122a19d/1/kvuPoQ3_NHPmU9v2HJqGQyGApcc.mft
File:                     kvuPoQ3_NHPmU9v2HJqGQyGApcc.mft (raw, json)
Hash identifier:          ANS1N1rXfxe/K+9e7pWi8pI5bD3KkAx3WRiD3T99T1A=
Subject key identifier:   C2:03:CF:22:59:2B:BE:CA:B3:85:72:D1:C9:83:FC:5A:F1:67:4D:E7
Authority key identifier: 92:FB:8F:A1:0D:FF:34:73:E6:53:DB:F6:1C:9A:86:43:21:80:A5:C7
Certificate issuer:       /CN=92fb8fa10dff3473e653dbf61c9a86432180a5c7
Certificate serial:       01962F3D492F7B963874F39E61A23C8631C3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kvuPoQ3_NHPmU9v2HJqGQyGApcc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/43/c64d50-fcdd-4a9f-9047-293f6122a19d/1/kvuPoQ3_NHPmU9v2HJqGQyGApcc.mft
Manifest number:          10FA
Signing time:             Sun 13 Apr 2025 13:01:07 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:07 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:07 +0000
Files and hashes:         1: 4deHnJPEkHi_Z6AsiwPaIpTKDAs.roa (hash: F92p4CywFS49zy5OOP8oYTx9eXX41zQ2otjtVHTvTfc=)
                          2: WvlZiKlby6mz_WZr2UVe0cYuFc8.roa (hash: Y5kWltccMkWlbHWE6g816b2afq8ovZonUhJQEFz4q4A=)
                          3: kvuPoQ3_NHPmU9v2HJqGQyGApcc.crl (hash: 5Giw0Se3N725Yk4VzhIVoHQ9qVvz2QiFIYsMQ2pNXQM=)
                          4: uYHKtKuRAQeHOfD7lB4qDgo66SU.roa (hash: t+Ob5Y5NgLCxa3TxH9Z/GTAtTAwcsjfnwDTYcaden8w=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:49:2f:7b:96:38:74:f3:9e:61:a2:3c:86:31:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=92fb8fa10dff3473e653dbf61c9a86432180a5c7
        Validity
            Not Before: Apr 13 13:01:07 2025 GMT
            Not After : Apr 14 13:01:07 2025 GMT
        Subject: CN=c203cf22592bbecab38572d1c983fc5af1674de7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:5a:ab:96:e8:a4:4c:1d:3a:27:37:01:06:89:
                    74:8c:d9:24:da:2d:50:e3:42:2a:f2:7e:e9:a6:d8:
                    86:70:8e:4e:b0:c3:e4:6e:0c:12:d4:cd:80:26:d5:
                    70:b6:7a:83:f9:3d:6f:3c:c5:77:02:03:f0:33:35:
                    c1:7f:10:82:78:75:a9:13:71:e1:5a:34:81:db:2e:
                    42:19:e0:0f:fd:33:07:7c:13:ec:dd:41:60:b4:91:
                    f6:12:9c:70:38:a9:30:47:d6:aa:93:11:7c:f0:a2:
                    75:e7:cb:f8:c6:79:54:22:03:4e:48:9a:32:b9:9a:
                    12:c5:65:46:5d:99:90:67:57:78:98:0b:3f:7d:36:
                    90:7e:4f:43:bc:6f:c0:61:6a:05:d0:1a:84:1c:d9:
                    10:5c:67:4a:f3:9d:56:34:08:3f:c5:23:3c:4c:0e:
                    a5:06:38:da:e0:5f:21:bd:44:c3:d5:d1:7c:dd:54:
                    c8:cc:3b:2f:77:57:0e:c6:fa:1a:0c:d2:19:af:db:
                    c9:b4:82:b7:05:c2:2f:34:29:7f:23:69:ed:70:78:
                    5a:1e:69:15:65:c2:ef:fb:08:01:59:1c:31:dc:17:
                    2c:1c:e1:0c:1b:57:b1:7b:7c:99:b2:c4:c8:b3:35:
                    0d:c0:d2:bc:28:a1:49:2a:91:26:8a:5a:72:8f:5d:
                    c5:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:03:CF:22:59:2B:BE:CA:B3:85:72:D1:C9:83:FC:5A:F1:67:4D:E7
            X509v3 Authority Key Identifier:
                keyid:92:FB:8F:A1:0D:FF:34:73:E6:53:DB:F6:1C:9A:86:43:21:80:A5:C7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kvuPoQ3_NHPmU9v2HJqGQyGApcc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/c64d50-fcdd-4a9f-9047-293f6122a19d/1/kvuPoQ3_NHPmU9v2HJqGQyGApcc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/43/c64d50-fcdd-4a9f-9047-293f6122a19d/1/kvuPoQ3_NHPmU9v2HJqGQyGApcc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:42:64:bd:4a:84:db:39:be:07:2b:3d:e5:a9:cc:55:fa:64:
         d3:1c:c5:74:91:3e:a3:f5:2b:18:17:1f:c7:9c:f7:46:f8:5c:
         0f:e5:5f:1b:e3:ed:83:31:f7:e1:de:52:81:c9:97:a7:f1:9f:
         65:d5:f6:fd:40:bb:0d:01:75:3b:99:b0:f8:df:8f:ac:ff:4b:
         8e:0a:e1:ec:26:d3:80:3d:07:75:fa:45:85:ec:8f:bf:b9:97:
         ab:e6:24:f7:92:3b:b7:d8:bd:ea:84:e3:58:7b:ee:be:27:f6:
         f5:6a:f2:b2:6f:8b:67:e5:2e:29:9a:38:eb:1e:a1:3a:9b:ba:
         53:4e:4e:48:73:73:63:76:59:bc:0c:ad:a0:90:15:fb:a8:97:
         6c:51:2d:55:b6:34:2f:ef:61:7e:b7:64:68:df:e6:bd:be:83:
         09:71:54:fa:e4:d1:48:02:7e:4d:e2:da:1d:76:e9:85:b8:ff:
         e5:a8:fd:27:1a:a8:0e:be:1b:c8:cb:69:ed:68:6a:b5:f7:cd:
         a1:5d:0a:b1:2f:63:61:22:bd:89:59:11:51:4b:c5:e2:da:4c:
         01:2c:a7:e3:2f:00:8a:fc:03:83:23:be:b4:47:82:5c:86:db:
         58:a1:ed:3a:57:89:12:ba:27:99:89:7a:be:1a:e2:bb:f0:dc:
         47:fa:b1:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----