Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/ae3042-ca98-4dda-95a6-3b8fbfff5342/1/gwI7OXBbNFqG7_PxTvax5NtFk54.mft
File:                     gwI7OXBbNFqG7_PxTvax5NtFk54.mft (raw, json)
Hash identifier:          P4S0gh4iBEO5XbgVpgX1FXIr+8nA/mJ4aOw/VQ/4b5g=
Subject key identifier:   4F:FB:46:57:C5:A6:42:26:6D:DC:0F:05:C4:94:DE:8F:2E:71:25:2D
Authority key identifier: 83:02:3B:39:70:5B:34:5A:86:EF:F3:F1:4E:F6:B1:E4:DB:45:93:9E
Certificate issuer:       /CN=83023b39705b345a86eff3f14ef6b1e4db45939e
Certificate serial:       01962F06539B1C15B3ACFB755E2118EB37D0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gwI7OXBbNFqG7_PxTvax5NtFk54.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/01/ae3042-ca98-4dda-95a6-3b8fbfff5342/1/gwI7OXBbNFqG7_PxTvax5NtFk54.mft
Manifest number:          0D81
Signing time:             Sun 13 Apr 2025 12:01:05 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:05 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:05 +0000
Files and hashes:         1: 1-xAAXQxUbK7GDdH6uCkdwm9GcKQ.roa (hash: 4wGfnneRjqqcoqI8J1mtTnFBuWzrhvTfIpD3nl/XM2s=)
                          2: gwI7OXBbNFqG7_PxTvax5NtFk54.crl (hash: 9Ll8Sk/WIGQqzc2zmQ/xpGWLIUFLcB5qXhsemDugEas=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:53:9b:1c:15:b3:ac:fb:75:5e:21:18:eb:37:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=83023b39705b345a86eff3f14ef6b1e4db45939e
        Validity
            Not Before: Apr 13 12:01:05 2025 GMT
            Not After : Apr 14 12:01:05 2025 GMT
        Subject: CN=4ffb4657c5a642266ddc0f05c494de8f2e71252d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:3d:10:b7:c4:3b:30:8e:16:e4:c7:ac:6a:c5:
                    ef:7d:f8:e9:0a:5e:6e:ee:0f:06:cf:6c:05:67:e2:
                    1a:71:1a:9a:c7:d4:a2:d3:df:21:04:5c:f1:b0:13:
                    36:82:33:6c:82:d1:d2:78:71:7b:14:c3:ac:a5:6a:
                    31:5e:c0:b4:08:57:c3:51:0b:38:95:39:72:5b:f9:
                    cf:51:c7:e6:6a:4d:ef:3d:56:c2:d3:f9:df:b0:b5:
                    4b:a5:2b:5f:82:11:12:f0:e5:e4:ac:0f:a1:0e:29:
                    a8:d5:8a:58:58:95:c3:39:3b:9f:3f:3c:d3:4c:01:
                    60:d8:2b:f3:54:79:e2:6c:aa:09:60:c7:65:ef:b5:
                    63:f2:0d:79:25:d4:91:b2:21:d6:94:71:fa:74:a9:
                    b3:52:f7:0d:32:8e:62:8c:9c:c5:7b:50:44:62:30:
                    71:20:ba:10:6b:0b:93:c7:81:9d:97:2b:e6:e5:86:
                    91:da:f0:4e:cd:c7:26:9b:d4:02:21:c8:a8:b6:fd:
                    50:3f:f7:da:d8:ea:c0:86:2a:1a:82:7f:3f:d0:98:
                    b0:18:fc:d9:7f:83:f4:1e:8a:b2:4c:4d:57:fd:08:
                    43:53:42:4a:ab:76:2d:51:98:d0:cc:56:e6:9c:b8:
                    0f:b6:cf:21:3e:e8:99:be:a4:56:51:05:f9:e1:1c:
                    62:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:FB:46:57:C5:A6:42:26:6D:DC:0F:05:C4:94:DE:8F:2E:71:25:2D
            X509v3 Authority Key Identifier:
                keyid:83:02:3B:39:70:5B:34:5A:86:EF:F3:F1:4E:F6:B1:E4:DB:45:93:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gwI7OXBbNFqG7_PxTvax5NtFk54.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/ae3042-ca98-4dda-95a6-3b8fbfff5342/1/gwI7OXBbNFqG7_PxTvax5NtFk54.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/01/ae3042-ca98-4dda-95a6-3b8fbfff5342/1/gwI7OXBbNFqG7_PxTvax5NtFk54.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:4c:da:3b:c6:44:63:4b:99:f3:13:fd:88:ee:41:61:17:e3:
         8f:1d:e7:77:51:79:04:71:6e:89:a6:6e:9b:c8:e3:98:58:75:
         49:f5:46:a9:51:7e:13:6f:6e:15:09:9a:be:fa:27:bb:8c:02:
         03:bd:c1:58:8e:d1:97:53:e4:65:3e:7b:ba:db:e5:9c:40:f4:
         ad:4e:ca:76:54:7c:b0:1b:69:e3:2d:2d:f6:6d:9f:f0:3d:08:
         a9:a1:a5:31:4e:df:5f:6c:18:09:37:db:30:3c:69:8a:17:35:
         ed:3e:fe:15:22:2e:ec:00:96:3a:e5:df:aa:ce:4d:56:9f:64:
         6a:e7:4a:34:df:30:5a:3f:40:60:b4:37:35:3c:ac:8a:c7:fe:
         53:5a:d0:79:b4:4c:1a:0f:57:eb:9e:e6:f2:12:45:34:5c:ac:
         2e:78:65:1a:9e:a7:69:90:1c:c0:61:b4:a9:39:09:dc:68:22:
         7a:85:08:66:55:60:92:a7:1c:2f:22:b8:05:05:c3:6d:51:f7:
         31:b8:ea:af:04:bc:bc:80:fc:15:bb:5b:67:fe:28:84:08:3d:
         8f:9f:27:58:16:b1:8c:c9:68:8f:ba:ae:8a:b5:cf:cf:e0:2e:
         0f:a8:65:02:0a:35:e5:89:80:02:94:36:97:db:9c:5b:4d:b6:
         c3:6a:2f:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----