Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/58394a-8cf6-4b11-becb-3ba69131458b/1/kuwpVHbKHZNNsE0AJE_FB5ucl0g.mft
File:                     kuwpVHbKHZNNsE0AJE_FB5ucl0g.mft (raw, json)
Hash identifier:          NjvPfZS0tzOVpUHpwiCj1h1dcesj0/R0U2wtbbrHX0Y=
Subject key identifier:   B0:05:2D:A7:8C:B8:B1:94:0D:50:F0:F6:E5:9D:22:DE:17:02:AD:8D
Authority key identifier: 92:EC:29:54:76:CA:1D:93:4D:B0:4D:00:24:4F:C5:07:9B:9C:97:48
Certificate issuer:       /CN=92ec295476ca1d934db04d00244fc5079b9c9748
Certificate serial:       01962F749CFCAB107F428A61C915514CB17C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kuwpVHbKHZNNsE0AJE_FB5ucl0g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7c/58394a-8cf6-4b11-becb-3ba69131458b/1/kuwpVHbKHZNNsE0AJE_FB5ucl0g.mft
Manifest number:          10FB
Signing time:             Sun 13 Apr 2025 14:01:33 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:33 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:33 +0000
Files and hashes:         1: kuwpVHbKHZNNsE0AJE_FB5ucl0g.crl (hash: 5msisBtjtcdbb4xRbAhez/eefgptH7QLqUnASHr7mJY=)
                          2: sZ85FeVfKS3RqKqG5NUDvn--qlo.roa (hash: gTaYc3X+G3Jkjg5kUdF0n9TPsOguK/WjYif95eZGzOU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:9c:fc:ab:10:7f:42:8a:61:c9:15:51:4c:b1:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=92ec295476ca1d934db04d00244fc5079b9c9748
        Validity
            Not Before: Apr 13 14:01:33 2025 GMT
            Not After : Apr 14 14:01:33 2025 GMT
        Subject: CN=b0052da78cb8b1940d50f0f6e59d22de1702ad8d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:38:f8:5f:55:26:46:b6:55:c3:76:42:0d:2c:
                    90:a2:a0:fd:06:35:4b:d9:46:14:9b:0d:ce:b3:2d:
                    3d:77:8c:1c:76:0b:94:d3:3d:ed:00:80:26:4d:af:
                    a8:78:27:bc:21:66:b3:58:c6:e7:e9:4e:e3:7c:36:
                    83:71:cd:34:0d:b4:56:18:ad:01:99:80:fe:3d:30:
                    0a:50:4e:94:6b:35:89:04:11:95:2d:80:b6:00:d0:
                    e2:54:53:9f:fc:6b:17:f7:33:e7:ec:21:03:dc:ec:
                    95:bc:92:3c:31:37:4a:e0:4f:4e:63:2a:05:0d:26:
                    8a:38:2c:82:aa:32:10:d6:aa:c6:42:f0:75:5f:ac:
                    95:0a:cf:3b:80:2a:97:9d:3b:c9:75:44:f6:2e:ea:
                    51:69:f8:b0:b1:b5:5f:72:e0:b0:1c:a9:d8:51:02:
                    7b:87:18:38:af:60:d5:b6:82:eb:3d:17:8b:9d:92:
                    cb:39:e4:06:c2:57:1a:1a:97:cd:2b:ae:b0:e4:e4:
                    28:6b:f6:18:01:3e:3e:02:ba:b8:b9:3b:56:c5:df:
                    57:1b:14:73:2e:cb:77:66:0b:02:a9:b5:d4:50:95:
                    b2:34:57:00:30:72:6b:e9:db:9e:1a:dd:f1:37:56:
                    c9:b6:ca:cc:2e:4b:ff:3e:99:21:ed:0d:f9:1c:12:
                    61:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:05:2D:A7:8C:B8:B1:94:0D:50:F0:F6:E5:9D:22:DE:17:02:AD:8D
            X509v3 Authority Key Identifier:
                keyid:92:EC:29:54:76:CA:1D:93:4D:B0:4D:00:24:4F:C5:07:9B:9C:97:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kuwpVHbKHZNNsE0AJE_FB5ucl0g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/58394a-8cf6-4b11-becb-3ba69131458b/1/kuwpVHbKHZNNsE0AJE_FB5ucl0g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/58394a-8cf6-4b11-becb-3ba69131458b/1/kuwpVHbKHZNNsE0AJE_FB5ucl0g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:2d:d3:0c:b2:70:c7:00:e7:2a:16:19:fd:e6:e5:3d:e2:27:
         89:e3:12:ef:5a:06:9d:e5:36:7e:59:c0:3d:36:39:73:3b:fe:
         e8:07:5f:d4:65:89:13:1d:a5:7f:29:98:a8:e9:63:cd:fd:86:
         23:3a:93:e0:81:9e:8d:08:1a:fd:e0:16:39:0f:5b:75:7b:48:
         48:c2:9a:1c:bd:3a:48:8d:f9:1f:2a:6e:8b:0a:a9:ba:32:24:
         8c:b7:4d:2a:e0:53:02:1e:34:fb:a1:7c:3f:58:8f:a9:70:25:
         da:13:82:e9:0c:a9:d2:e1:26:6b:48:d6:14:3f:5c:1c:df:57:
         14:3c:96:10:a3:5d:d8:31:f2:76:7f:04:1b:da:9b:ae:a8:8b:
         e2:2b:3b:fd:0c:b6:66:67:7b:87:7c:4c:4b:c8:95:51:c4:54:
         47:d9:96:a7:ff:09:85:f4:20:4f:65:e4:5d:22:95:a1:85:04:
         e0:df:e4:3f:49:56:b1:1d:a8:c5:a6:6a:c5:ad:6d:3a:91:f4:
         3f:c2:44:c9:59:fe:34:e4:ca:8b:92:bc:e2:e8:42:ff:be:cf:
         89:5b:4d:43:f7:7c:2d:7e:0a:93:03:c2:7a:71:ab:0b:5b:ba:
         7d:4a:86:7b:fc:76:3e:85:f9:3f:6f:69:9f:7e:11:5a:23:ab:
         1f:73:98:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----