Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/d6c86d-6c65-4a25-a8fa-38d4f3211896/1/Gk-AAcMMrFRuP5IQO0sScy38v1I.mft
File:                     Gk-AAcMMrFRuP5IQO0sScy38v1I.mft (raw, json)
Hash identifier:          3aCOx+sBmJxMW7FF+T2VtDFuTZ2xb3OZChYBuh7CKrY=
Subject key identifier:   73:85:C1:55:AD:8F:0A:C4:26:FA:7E:15:ED:87:C3:2B:BF:09:F7:D4
Authority key identifier: 1A:4F:80:01:C3:0C:AC:54:6E:3F:92:10:3B:4B:12:73:2D:FC:BF:52
Certificate issuer:       /CN=1a4f8001c30cac546e3f92103b4b12732dfcbf52
Certificate serial:       01962F3DAA02D803461B0F60215758362088
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Gk-AAcMMrFRuP5IQO0sScy38v1I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/19/d6c86d-6c65-4a25-a8fa-38d4f3211896/1/Gk-AAcMMrFRuP5IQO0sScy38v1I.mft
Manifest number:          14EB
Signing time:             Sun 13 Apr 2025 13:01:32 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:32 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:32 +0000
Files and hashes:         1: 03PqHmjkj4TD2ylDKAOumX_8ZTA.roa (hash: x+gVojJiPW6JgGHksggk6Pxvk6Hei1FVA2Qg8c4io0A=)
                          2: F9dWkDI-kpGgHo1RGxktanl_gRQ.roa (hash: BuoIxKvYOd7Wk6s+uxgqf+pVlc2a+8mJGV3BltAm2us=)
                          3: Gk-AAcMMrFRuP5IQO0sScy38v1I.crl (hash: 9wtvptBcwcqPO5fQcB97B9NCGYMK5D3ZbZrp4Ymqw+k=)
                          4: eWcWfNZ-EfWW-NGvXQCC85ntpH8.roa (hash: JnQ17QGfxQtAemBJMFLXpPFmY/ueJsW7rAduSoORn4I=)
                          5: qa59xb1800lClBGKgPJD3m5Rw8s.roa (hash: g552CxuAT1A0kuubtT8ih3j4BuCostjRts289tICv1Q=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:aa:02:d8:03:46:1b:0f:60:21:57:58:36:20:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1a4f8001c30cac546e3f92103b4b12732dfcbf52
        Validity
            Not Before: Apr 13 13:01:32 2025 GMT
            Not After : Apr 14 13:01:32 2025 GMT
        Subject: CN=7385c155ad8f0ac426fa7e15ed87c32bbf09f7d4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:66:6e:c3:7c:3a:0d:36:8a:7f:3b:64:94:d9:
                    a4:47:49:65:17:74:9a:08:f1:df:f2:44:72:9a:7c:
                    b5:d8:17:05:7c:20:37:5e:41:70:4c:56:86:06:85:
                    96:6f:eb:ac:74:96:94:5b:2d:3b:37:02:22:31:bb:
                    bc:b9:99:7b:4a:c4:73:b0:45:d2:ee:af:3a:c2:92:
                    f0:6f:4f:11:7b:30:08:f6:ae:27:a5:d6:5c:57:53:
                    3a:93:f2:29:64:17:ae:4e:32:83:c6:f9:bf:4a:2e:
                    07:a8:c1:7b:7f:10:4a:94:f3:46:c7:b8:3c:3a:1b:
                    a5:bd:d2:83:ba:96:11:31:a4:b4:aa:33:a1:5e:8e:
                    12:99:8a:d6:af:d8:92:d6:73:e3:c5:10:0d:f4:55:
                    a0:b9:8f:ff:d1:f8:36:8d:b8:9c:86:64:24:6a:60:
                    b1:59:a5:33:b9:0b:28:fd:48:6b:9e:52:ae:7e:c4:
                    08:17:94:ac:99:6b:95:9c:8c:d4:9e:06:ca:2f:29:
                    fd:cb:e0:54:27:c0:82:bf:0f:c4:c2:34:d1:d5:66:
                    95:29:7b:8c:ee:d3:51:1f:29:9b:8b:81:c8:7c:30:
                    04:8b:7c:46:42:87:86:71:1d:93:ae:36:14:66:0a:
                    32:d9:17:a6:1a:e1:83:38:e0:a9:33:b2:94:03:c4:
                    c7:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:85:C1:55:AD:8F:0A:C4:26:FA:7E:15:ED:87:C3:2B:BF:09:F7:D4
            X509v3 Authority Key Identifier:
                keyid:1A:4F:80:01:C3:0C:AC:54:6E:3F:92:10:3B:4B:12:73:2D:FC:BF:52

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gk-AAcMMrFRuP5IQO0sScy38v1I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/d6c86d-6c65-4a25-a8fa-38d4f3211896/1/Gk-AAcMMrFRuP5IQO0sScy38v1I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/19/d6c86d-6c65-4a25-a8fa-38d4f3211896/1/Gk-AAcMMrFRuP5IQO0sScy38v1I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:c5:f6:78:06:9d:b4:77:95:60:26:13:95:25:d7:c0:76:fc:
         7a:82:c0:35:0c:97:6e:42:cd:91:f2:d5:a6:2e:ad:0d:f7:af:
         a5:93:dc:db:50:c9:1d:2b:13:5d:df:e0:5d:a6:09:b3:03:00:
         f9:d3:f0:d8:a8:e1:a3:26:fe:e4:33:aa:4f:38:46:14:d7:f2:
         00:91:f4:7b:23:f8:c0:aa:60:1c:4e:5b:c7:7e:65:03:b5:5d:
         3c:f7:78:78:9a:83:09:c7:f4:ac:fa:f2:04:8c:be:87:5a:b1:
         37:af:9a:ff:01:5e:da:04:d2:8f:70:29:e0:a0:b5:5d:11:2a:
         ff:52:7f:c5:ea:11:11:43:66:42:b4:a7:f1:8d:d5:3d:57:8e:
         44:6c:04:48:86:58:0b:47:d9:25:42:3a:dc:77:9a:4d:40:e7:
         67:f2:f8:92:83:a7:28:9c:60:5a:34:86:a0:1d:ab:40:5f:53:
         7b:ee:d5:66:61:0e:62:32:9c:27:4a:7a:bc:6d:d4:e4:87:6e:
         69:1a:4c:00:5f:50:68:e1:ab:03:12:77:54:2c:b7:70:c3:49:
         c6:95:28:80:d3:cd:24:37:23:11:20:c1:6d:e6:a5:9d:2e:6a:
         73:36:07:13:4c:f1:a3:a2:4b:5c:af:51:87:f1:b4:a0:5c:36:
         8e:7f:b1:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----