Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/84c3d5-8ab2-44ac-942b-c4b9c539407b/1/kt2u3zcPNa-LXut_hubPr6zojU4.mft
File:                     kt2u3zcPNa-LXut_hubPr6zojU4.mft (raw, json)
Hash identifier:          LZ+52mrcR1xFlHi2N1BZ7EAQ8IAiSiXdy8LTJRh14aI=
Subject key identifier:   B7:7C:9F:A7:03:92:C0:87:0A:EF:38:6E:E6:7B:BC:C9:47:C7:76:76
Authority key identifier: 92:DD:AE:DF:37:0F:35:AF:8B:5E:EB:7F:86:E6:CF:AF:AC:E8:8D:4E
Certificate issuer:       /CN=92ddaedf370f35af8b5eeb7f86e6cfaface88d4e
Certificate serial:       01962F0685055F7E55B01B4B17B2E632A624
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kt2u3zcPNa-LXut_hubPr6zojU4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/63/84c3d5-8ab2-44ac-942b-c4b9c539407b/1/kt2u3zcPNa-LXut_hubPr6zojU4.mft
Manifest number:          053C
Signing time:             Sun 13 Apr 2025 12:01:18 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:18 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:18 +0000
Files and hashes:         1: kt2u3zcPNa-LXut_hubPr6zojU4.crl (hash: zXCJvmbzzWg60YNiO2rX9NhAhXwyLg4LtrwWEwLHLrk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:85:05:5f:7e:55:b0:1b:4b:17:b2:e6:32:a6:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=92ddaedf370f35af8b5eeb7f86e6cfaface88d4e
        Validity
            Not Before: Apr 13 12:01:18 2025 GMT
            Not After : Apr 14 12:01:18 2025 GMT
        Subject: CN=b77c9fa70392c0870aef386ee67bbcc947c77676
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:9d:78:a1:af:ca:84:7a:35:39:ce:1f:6e:12:
                    ff:88:09:95:62:98:d6:5b:55:4d:81:a2:c2:6b:2a:
                    c5:b2:50:c2:58:11:ef:e3:f1:52:90:05:a4:d8:7f:
                    8a:73:fd:95:e5:39:f4:5c:31:98:a0:35:b2:86:01:
                    b4:48:c0:cd:b4:11:28:f7:3c:82:b1:31:ea:ef:fe:
                    51:11:33:83:b6:74:d1:fb:18:21:f4:36:7f:a8:8b:
                    9d:0c:37:52:1b:bf:0c:dc:0f:aa:1a:26:19:33:80:
                    93:ad:33:96:2a:13:27:76:a1:a9:b8:b6:97:4f:45:
                    a3:4f:f2:e8:89:84:44:a9:1c:f2:8a:73:7b:5c:96:
                    3d:2e:1c:b2:64:bf:75:3b:a6:cb:f9:8f:b9:32:55:
                    8b:b4:cb:ab:42:84:3c:6e:fb:20:5a:9a:0a:27:7f:
                    55:23:57:2e:53:8e:a4:18:15:16:15:57:e3:c5:46:
                    a5:1a:64:03:aa:e7:94:fe:96:6a:ac:68:71:a9:9d:
                    5b:94:92:0a:87:ed:ec:18:38:d5:7d:59:a8:ac:bb:
                    7c:58:d1:c4:06:e2:50:e8:7c:87:f6:fe:ce:62:b8:
                    50:20:43:f6:3a:54:1d:24:9d:56:36:ce:87:88:69:
                    bc:1d:14:6f:d5:cc:f1:ac:d7:78:d6:75:55:e4:40:
                    81:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:7C:9F:A7:03:92:C0:87:0A:EF:38:6E:E6:7B:BC:C9:47:C7:76:76
            X509v3 Authority Key Identifier:
                keyid:92:DD:AE:DF:37:0F:35:AF:8B:5E:EB:7F:86:E6:CF:AF:AC:E8:8D:4E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kt2u3zcPNa-LXut_hubPr6zojU4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/84c3d5-8ab2-44ac-942b-c4b9c539407b/1/kt2u3zcPNa-LXut_hubPr6zojU4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/63/84c3d5-8ab2-44ac-942b-c4b9c539407b/1/kt2u3zcPNa-LXut_hubPr6zojU4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:c6:c5:99:05:67:90:6d:10:f8:2e:cc:9f:86:f4:3f:7f:e6:
         b0:7d:2f:81:ec:b6:0e:07:29:c0:d3:51:f9:63:fc:e4:71:fd:
         96:5b:f2:47:76:99:47:7c:82:80:4d:7a:72:d1:44:90:92:e3:
         71:17:58:cb:8e:aa:e7:f3:26:c6:61:c8:28:21:8c:06:0d:43:
         e8:74:9d:84:3d:97:6a:a6:7a:43:f0:23:53:2d:01:9e:82:94:
         ef:39:fa:c4:92:5d:6e:3d:65:7b:b9:08:e9:0a:63:75:47:b8:
         2b:65:d2:8b:32:4e:10:67:aa:69:11:01:28:b8:3d:34:38:02:
         1f:26:41:18:c2:a1:03:12:02:a6:cf:57:6c:7f:60:79:0d:37:
         ce:f7:6b:76:f2:2b:34:e1:75:d7:4b:85:16:8c:95:50:4d:43:
         0a:99:91:cf:f9:00:86:64:6a:67:03:57:40:b6:aa:b0:6b:7c:
         e6:7f:93:67:ac:c1:21:00:48:aa:03:27:3b:a8:ee:87:bd:2f:
         50:49:ca:e6:86:4e:e9:4c:9a:59:4e:ee:1d:22:e0:b5:15:b0:
         07:17:3a:7a:1a:7e:f5:7a:00:b6:c1:84:9d:17:53:c6:45:f5:
         d9:79:bc:23:2c:c7:d8:a2:d0:f3:b8:a0:dd:de:de:ce:10:ff:
         a0:b6:2c:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----