Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/65c2d9-80d4-459f-ae61-b5bd428f190c/1/gvGLgDOdiuY39KAvM1u-x8jCa94.mft
File:                     gvGLgDOdiuY39KAvM1u-x8jCa94.mft (raw, json)
Hash identifier:          665bRHAfKCr8Rg4qigdBobk+R+KSWDYU/Gnp+WAqhcQ=
Subject key identifier:   2D:46:D7:6E:D3:F7:29:AD:24:9D:20:74:09:BE:75:64:3E:DE:A2:68
Authority key identifier: 82:F1:8B:80:33:9D:8A:E6:37:F4:A0:2F:33:5B:BE:C7:C8:C2:6B:DE
Certificate issuer:       /CN=82f18b80339d8ae637f4a02f335bbec7c8c26bde
Certificate serial:       01962F3D3E36A32227ED36F76C375266FFC7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gvGLgDOdiuY39KAvM1u-x8jCa94.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1e/65c2d9-80d4-459f-ae61-b5bd428f190c/1/gvGLgDOdiuY39KAvM1u-x8jCa94.mft
Manifest number:          14EA
Signing time:             Sun 13 Apr 2025 13:01:04 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:04 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:04 +0000
Files and hashes:         1: 1-q3Sc_aFuf3HEfZnJlmO5IobYdI.roa (hash: 1ZydJMw0C7UeG9c7OwbN/uc3B58dbwLgrfGBkI/dEhg=)
                          2: gvGLgDOdiuY39KAvM1u-x8jCa94.crl (hash: ErxCT9Ua1M6VZ5F0e+1NU+7lctvtyHrbb5Iwn8CI1ic=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:3e:36:a3:22:27:ed:36:f7:6c:37:52:66:ff:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=82f18b80339d8ae637f4a02f335bbec7c8c26bde
        Validity
            Not Before: Apr 13 13:01:04 2025 GMT
            Not After : Apr 14 13:01:04 2025 GMT
        Subject: CN=2d46d76ed3f729ad249d207409be75643edea268
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:c4:4c:4e:4e:a3:bf:3f:f5:2e:f4:5f:e8:6e:
                    77:d6:6a:1a:23:6c:17:4e:b9:8f:0a:cd:d6:6a:07:
                    77:d4:06:9c:09:45:b8:cd:fe:f3:c6:3d:a4:d6:9e:
                    a9:d1:cc:90:28:42:a5:b7:c0:9c:9b:20:e5:f3:87:
                    e8:d2:77:b0:d7:3a:7d:97:ed:51:fe:a7:8b:84:4a:
                    80:11:5d:62:2c:7a:f8:f0:7e:6f:a7:34:0c:d6:42:
                    20:1a:b2:91:57:7d:a6:8c:94:c0:6d:6d:df:2f:8f:
                    c5:e4:35:93:b9:fe:c2:99:d8:90:dd:15:33:ff:37:
                    80:34:de:7c:ab:0b:47:f1:91:4b:ba:30:9e:35:de:
                    bf:6e:ad:50:bb:ef:72:6b:3c:d7:a4:a4:d6:ac:09:
                    4b:91:5c:db:f8:00:4e:1c:48:e4:a4:3d:d2:cd:9b:
                    92:b1:37:77:56:06:b3:d8:55:7e:88:b9:83:3a:24:
                    40:8b:d9:a5:9c:ef:9b:a1:7f:b6:e5:8f:01:dc:f9:
                    6c:61:6a:8e:c9:01:82:65:da:10:a7:ce:61:1e:d7:
                    3a:ae:fe:de:06:1d:6c:90:c8:94:1c:d5:67:0a:50:
                    67:8b:90:95:e0:95:0a:e9:43:73:ba:c4:24:2f:a9:
                    85:60:f3:50:3b:be:bf:03:e4:10:f6:c3:a1:ac:cb:
                    3a:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:46:D7:6E:D3:F7:29:AD:24:9D:20:74:09:BE:75:64:3E:DE:A2:68
            X509v3 Authority Key Identifier:
                keyid:82:F1:8B:80:33:9D:8A:E6:37:F4:A0:2F:33:5B:BE:C7:C8:C2:6B:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gvGLgDOdiuY39KAvM1u-x8jCa94.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/65c2d9-80d4-459f-ae61-b5bd428f190c/1/gvGLgDOdiuY39KAvM1u-x8jCa94.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/65c2d9-80d4-459f-ae61-b5bd428f190c/1/gvGLgDOdiuY39KAvM1u-x8jCa94.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:ee:f4:59:e6:a4:35:47:6c:22:4a:eb:51:dc:02:66:a0:6e:
         e8:09:b9:97:4c:2d:e7:6c:f9:47:0a:c5:47:bf:fa:87:ce:dd:
         c7:87:5e:11:14:68:78:c0:5a:15:7e:0a:57:7d:3f:a8:cd:b9:
         26:fe:79:85:bd:3f:fa:6e:75:72:e6:ed:c2:90:3c:de:03:a0:
         87:b8:23:03:ae:73:cf:07:ab:15:d3:13:33:28:9a:30:ce:82:
         e8:ce:dd:5b:bb:26:13:f5:30:a5:62:78:77:e0:42:df:d0:84:
         a7:f5:70:bb:18:00:32:e1:cd:94:96:57:e2:82:57:c6:39:f7:
         38:7d:28:67:8f:e9:44:1e:8d:ea:a6:83:8c:38:7e:08:51:b2:
         5e:9c:ce:ac:82:ea:f4:89:e6:a4:db:3e:6a:16:cf:1c:a9:d5:
         89:23:c5:8a:9b:1d:75:aa:b9:0b:a6:4b:8a:da:e8:16:02:73:
         31:e0:4d:72:53:bb:88:35:f1:e0:99:dc:a1:ff:dd:77:58:6f:
         db:bc:d9:3d:68:db:62:05:c3:b9:1c:8a:ab:72:2c:b2:6f:db:
         13:16:63:9b:ab:a6:28:cb:30:6b:ed:4c:25:a7:57:19:1f:b8:
         44:76:ed:27:0e:64:6c:be:7c:16:83:46:a6:8b:d6:7c:b7:08:
         59:23:06:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----