Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/b31586-3566-47b0-95cc-144d7473ea59/1/GbOQti0JlQ1QDNa7vXjQOQVg7EI.mft
File:                     GbOQti0JlQ1QDNa7vXjQOQVg7EI.mft (raw, json)
Hash identifier:          T5QAJLZzLH3yyiSv1FNrwSmj4NAI/evpRoyWGXikJEw=
Subject key identifier:   FF:81:CE:CE:8E:38:2E:47:AF:0E:5D:F4:07:68:79:F0:1C:56:61:77
Authority key identifier: 19:B3:90:B6:2D:09:95:0D:50:0C:D6:BB:BD:78:D0:39:05:60:EC:42
Certificate issuer:       /CN=19b390b62d09950d500cd6bbbd78d0390560ec42
Certificate serial:       01962DF40C01CC6FC17BAD17C323401F2A6A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GbOQti0JlQ1QDNa7vXjQOQVg7EI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/03/b31586-3566-47b0-95cc-144d7473ea59/1/GbOQti0JlQ1QDNa7vXjQOQVg7EI.mft
Manifest number:          03C0
Signing time:             Sun 13 Apr 2025 07:01:30 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:30 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:30 +0000
Files and hashes:         1: 1BCQS42AU0GGH4PRx7vWlNY6UnM.roa (hash: UsPM1kz8JudOE7Cn+hyYQwficWvW1KbcDmuvAJ6iOSc=)
                          2: 31ag2HrgANjhnzyqvzYcA_GuDbg.roa (hash: 2P8QZCQEYwZ7T/ngNrFwmBzstV47MWzT0cHknGsfldw=)
                          3: GbOQti0JlQ1QDNa7vXjQOQVg7EI.crl (hash: zDRHKnumUA9EVxKWnXXYTRG0iXYqUKE4xVfyOgk6EMk=)
                          4: xKJMBlinbdfn34LVJF69A7qgGkk.roa (hash: ghKwNM3pv6/CjqUkOttxn9jN7TiH2L3Yp/7tBiGxOUM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f4:0c:01:cc:6f:c1:7b:ad:17:c3:23:40:1f:2a:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=19b390b62d09950d500cd6bbbd78d0390560ec42
        Validity
            Not Before: Apr 13 07:01:30 2025 GMT
            Not After : Apr 14 07:01:30 2025 GMT
        Subject: CN=ff81cece8e382e47af0e5df4076879f01c566177
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:9f:c8:e6:3f:3a:46:81:6b:57:f0:fe:70:ad:
                    e1:45:75:c0:5c:c6:b1:77:c5:1b:52:aa:b1:76:ed:
                    09:08:63:92:9e:d2:2f:cb:6f:9e:bc:0a:28:b0:b9:
                    b7:b2:f3:03:ef:57:f4:35:fe:cd:30:17:1f:37:4f:
                    e7:af:45:f2:e2:bd:75:75:e1:4e:91:dc:6c:1f:c3:
                    0d:01:54:a9:40:a2:00:f3:ba:89:3d:94:70:e2:23:
                    c7:47:73:ec:d4:32:60:35:85:3a:7b:86:db:04:db:
                    0d:44:56:78:49:07:0d:dd:ae:99:50:ca:7d:0d:1e:
                    1f:5d:23:c2:2c:c7:f3:2e:7d:f6:f5:72:4d:aa:cf:
                    6b:4c:82:04:18:7d:d5:8a:58:09:00:ff:30:bf:f1:
                    20:f0:4d:60:7f:5f:43:b5:00:ce:65:bc:03:e7:3b:
                    e7:11:5b:37:da:98:f9:94:bb:f9:79:62:3f:b2:e6:
                    6a:a6:38:88:31:aa:84:d5:5b:e2:66:b0:94:7d:c8:
                    8d:6e:74:86:a8:52:d9:d1:03:76:b3:a9:e1:b7:c7:
                    7a:41:3b:1c:50:e6:50:57:94:53:0d:3b:b6:c2:77:
                    42:ff:1d:35:54:7d:55:f9:33:76:45:91:80:bc:9c:
                    46:82:fc:68:5a:d5:3a:23:61:55:af:3d:25:67:c7:
                    4e:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:81:CE:CE:8E:38:2E:47:AF:0E:5D:F4:07:68:79:F0:1C:56:61:77
            X509v3 Authority Key Identifier:
                keyid:19:B3:90:B6:2D:09:95:0D:50:0C:D6:BB:BD:78:D0:39:05:60:EC:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GbOQti0JlQ1QDNa7vXjQOQVg7EI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/b31586-3566-47b0-95cc-144d7473ea59/1/GbOQti0JlQ1QDNa7vXjQOQVg7EI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/03/b31586-3566-47b0-95cc-144d7473ea59/1/GbOQti0JlQ1QDNa7vXjQOQVg7EI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:cc:6b:1e:ab:ff:de:92:a9:0c:6c:a8:0a:d5:ce:a4:db:62:
         1e:32:99:db:fd:48:34:d6:52:ee:a3:4b:6b:64:a3:7e:ad:0f:
         ba:bb:aa:82:45:6c:c1:c9:b2:38:9c:58:27:32:c8:91:ff:df:
         30:e3:d0:31:ee:2d:4e:8f:8c:7c:26:60:20:40:87:f5:2a:95:
         a9:90:90:93:0a:93:ac:95:5c:92:b7:e9:1b:84:80:2d:bc:07:
         dc:27:82:3f:11:14:8e:9e:36:6d:61:14:8b:52:3e:02:0b:6c:
         57:2c:60:7d:49:a1:cd:94:cb:bb:8e:8e:07:c6:04:15:10:3e:
         6f:4c:df:fa:5c:ec:db:bd:3b:bf:68:b3:88:30:89:c6:bc:f2:
         dc:15:6e:75:23:22:a9:0a:e2:1c:06:f0:29:37:f6:3c:26:60:
         fb:84:25:6b:1f:43:4c:5d:94:51:c8:c4:4e:73:70:16:58:04:
         7b:05:dd:31:2a:8f:27:79:60:c9:87:f2:40:e8:29:41:51:84:
         8c:2e:26:79:dd:e3:53:02:4b:e5:58:04:57:af:92:53:b5:ac:
         ad:3b:e7:fd:18:9f:4b:bb:0d:ee:4e:96:4b:74:26:c6:cb:29:
         32:4e:ef:e2:2c:10:3f:d7:86:4a:6d:99:46:e1:ad:55:fb:ef:
         1e:65:24:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----