Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/4d2a9f-6f78-4cc6-9ad6-0f6b8468c79d/1/GxubyMfg_Ee_iwpXLRpXLWppa7c.mft
File:                     GxubyMfg_Ee_iwpXLRpXLWppa7c.mft (raw, json)
Hash identifier:          97UpsX0Aw9w3piK15GIz6FnrEDKYZ7irnEJOklgryqw=
Subject key identifier:   DD:3E:05:5F:EC:5A:47:21:73:B5:08:9E:F5:7F:F1:EA:5D:3C:AE:A8
Authority key identifier: 1B:1B:9B:C8:C7:E0:FC:47:BF:8B:0A:57:2D:1A:57:2D:6A:69:6B:B7
Certificate issuer:       /CN=1b1b9bc8c7e0fc47bf8b0a572d1a572d6a696bb7
Certificate serial:       01962F3D661B7CCEFEF23CD1C841B3484317
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GxubyMfg_Ee_iwpXLRpXLWppa7c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/20/4d2a9f-6f78-4cc6-9ad6-0f6b8468c79d/1/GxubyMfg_Ee_iwpXLRpXLWppa7c.mft
Manifest number:          0D0F
Signing time:             Sun 13 Apr 2025 13:01:14 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:14 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:14 +0000
Files and hashes:         1: GxubyMfg_Ee_iwpXLRpXLWppa7c.crl (hash: eB5XQeaLc2Cziz2CipzJa7+P242aQtF5HeHQBqpguKs=)
                          2: xGuOIxMFC1Wn9_vw4MtsHeq3I1E.roa (hash: kcCBBOjP/JTwKy7Io6Y4tXVkBszU8YzDmmO1xZCayZU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:66:1b:7c:ce:fe:f2:3c:d1:c8:41:b3:48:43:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1b1b9bc8c7e0fc47bf8b0a572d1a572d6a696bb7
        Validity
            Not Before: Apr 13 13:01:14 2025 GMT
            Not After : Apr 14 13:01:14 2025 GMT
        Subject: CN=dd3e055fec5a472173b5089ef57ff1ea5d3caea8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:60:0e:ef:45:4e:a9:5a:03:8c:10:4e:ae:16:
                    83:36:33:8f:45:0c:fc:53:6c:00:46:76:45:5b:70:
                    ed:38:d5:72:2b:87:8f:e7:32:45:a6:f2:8f:b8:d7:
                    ee:d7:0a:29:72:9c:43:7a:43:bc:c8:46:d0:1a:e6:
                    38:77:d8:b1:fc:da:bc:b7:79:9a:d5:10:f2:98:39:
                    37:95:9a:9f:2b:5e:19:27:93:08:35:24:1f:0d:20:
                    64:7e:cf:72:f4:f0:8c:28:b6:51:34:4c:29:7f:2b:
                    1c:14:12:ba:0c:09:53:a8:43:da:ac:7f:a3:dd:31:
                    83:94:c2:1e:5d:5c:c7:4d:2f:28:1a:3b:32:3e:68:
                    d5:76:b8:a7:9f:1a:e3:41:01:5d:3a:b2:e4:32:12:
                    aa:de:99:32:aa:10:5d:66:f8:23:64:34:f6:21:16:
                    2c:86:cf:57:79:27:6b:c8:38:b4:a7:e8:6e:e6:14:
                    af:df:f5:9d:3b:ac:0c:11:6a:2c:05:9f:d5:5d:b4:
                    15:a6:91:92:8c:b2:65:e3:9f:51:21:a9:7b:e8:f7:
                    cf:ba:37:44:3d:62:84:36:4a:99:e6:8b:cd:12:9a:
                    18:a5:e8:02:d1:33:2e:f9:16:40:8c:69:ec:28:49:
                    cd:9b:5a:52:9d:b6:3e:88:3c:f3:7a:c7:f6:78:17:
                    c8:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:3E:05:5F:EC:5A:47:21:73:B5:08:9E:F5:7F:F1:EA:5D:3C:AE:A8
            X509v3 Authority Key Identifier:
                keyid:1B:1B:9B:C8:C7:E0:FC:47:BF:8B:0A:57:2D:1A:57:2D:6A:69:6B:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GxubyMfg_Ee_iwpXLRpXLWppa7c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/4d2a9f-6f78-4cc6-9ad6-0f6b8468c79d/1/GxubyMfg_Ee_iwpXLRpXLWppa7c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/20/4d2a9f-6f78-4cc6-9ad6-0f6b8468c79d/1/GxubyMfg_Ee_iwpXLRpXLWppa7c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:d6:c1:e5:38:60:9c:20:92:79:78:25:e5:51:0d:72:95:01:
         8c:0e:53:13:4c:85:00:30:90:5b:59:11:1e:6f:00:57:53:f7:
         f9:a2:3d:86:8f:f5:66:06:13:d2:58:9f:13:d1:20:81:94:5a:
         75:db:ad:d0:fe:4b:49:13:5c:ad:29:d6:bb:7d:2c:60:89:79:
         d1:1b:ea:e1:ce:df:df:1a:e0:01:67:30:34:7e:52:5e:c1:3e:
         db:56:ce:d7:ff:04:75:cb:6a:eb:ef:41:a1:3b:fc:f6:41:21:
         0d:ac:75:62:a7:4d:63:6c:d2:a9:ff:30:6e:a6:1e:39:07:08:
         64:d5:55:d5:10:ef:d8:89:b3:2d:b7:53:2b:e6:5e:28:be:60:
         fe:df:42:bc:ef:38:15:09:7a:28:73:82:89:91:09:64:d1:a8:
         c2:67:f7:7b:65:25:bb:d0:24:12:a0:64:34:9d:f4:45:f7:d0:
         dc:34:23:3f:0a:f8:e5:19:83:52:73:ff:44:0b:ca:5b:6b:5c:
         ff:22:5e:8e:f9:90:98:c1:49:af:b0:d9:ea:e2:16:16:02:4a:
         08:85:4e:da:0b:c1:08:48:68:29:93:88:7f:da:7d:e0:1c:bb:
         69:d5:36:0c:51:5e:63:87:26:fb:30:55:02:62:34:3c:53:71:
         4f:d7:30:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----