Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/4c7b8c-f131-4996-b8f5-5f9f0ac0fae7/1/Goivk4Rb0lOGRS29-qAhbhPK-Mc.mft
File:                     Goivk4Rb0lOGRS29-qAhbhPK-Mc.mft (raw, json)
Hash identifier:          akkxCnR6kmJv56wqLIIsjC2Qq7vQ0/Sw0VXFiubEyc8=
Subject key identifier:   8E:6D:59:1C:C8:30:DA:A1:21:D9:EA:7A:20:B5:EB:6B:AD:1C:9C:EF
Authority key identifier: 1A:88:AF:93:84:5B:D2:53:86:45:2D:BD:FA:A0:21:6E:13:CA:F8:C7
Certificate issuer:       /CN=1a88af93845bd25386452dbdfaa0216e13caf8c7
Certificate serial:       01962F069D1FD6C723062532835A082F9782
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Goivk4Rb0lOGRS29-qAhbhPK-Mc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/23/4c7b8c-f131-4996-b8f5-5f9f0ac0fae7/1/Goivk4Rb0lOGRS29-qAhbhPK-Mc.mft
Manifest number:          1384
Signing time:             Sun 13 Apr 2025 12:01:24 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:24 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:24 +0000
Files and hashes:         1: Goivk4Rb0lOGRS29-qAhbhPK-Mc.crl (hash: X4/Z7vT9FYipINGuHdCSMHlTMPeKI2UQosCwU0inMIs=)
                          2: zMf8rLLySKjPSPZ8s-ZIz2q25OU.roa (hash: VJ+YYFZYZSo5PYkWSZhl4wZdJBhoCHORhk0CDA+bcUE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:9d:1f:d6:c7:23:06:25:32:83:5a:08:2f:97:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1a88af93845bd25386452dbdfaa0216e13caf8c7
        Validity
            Not Before: Apr 13 12:01:24 2025 GMT
            Not After : Apr 14 12:01:24 2025 GMT
        Subject: CN=8e6d591cc830daa121d9ea7a20b5eb6bad1c9cef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:46:78:6c:45:80:20:a3:c1:a9:11:83:a7:1f:
                    ff:90:85:cf:d6:12:f2:49:75:df:45:e9:b3:f2:df:
                    76:93:60:f1:9c:ef:83:1e:b4:15:7f:93:b3:50:88:
                    25:85:44:64:59:1f:de:f9:ac:24:a6:fa:c5:28:7b:
                    27:53:bf:aa:5b:84:f2:54:7b:35:60:7b:69:cd:fc:
                    66:92:8e:56:41:28:fa:6d:b3:25:00:37:96:03:f4:
                    54:fe:d7:5f:4c:cd:be:c2:8f:ed:ea:31:93:9d:e4:
                    21:ea:3d:0b:33:ac:f2:b3:59:bb:10:fa:d2:68:ad:
                    bf:2f:b6:df:ab:36:cd:72:2d:0f:3a:7d:56:ad:3b:
                    33:52:75:d3:e9:e0:54:51:90:d0:1b:2b:9e:4c:92:
                    c8:1a:5f:15:ba:cf:a9:38:90:7c:cb:4e:42:14:ed:
                    f9:db:9c:c9:e4:62:c8:be:d0:56:b7:30:27:ee:1e:
                    44:d5:17:4d:7c:94:8f:02:c5:1d:8e:f4:e0:0e:be:
                    43:35:42:dc:10:0f:12:4a:3c:70:43:b8:6c:c0:5b:
                    01:cb:04:f3:08:d5:73:7e:ac:45:f4:6b:4c:9f:e1:
                    91:75:0f:06:04:32:20:ef:73:73:8b:e8:2a:e5:e3:
                    56:0d:47:9b:60:70:72:11:de:bc:cf:2f:d3:3b:a8:
                    d1:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:6D:59:1C:C8:30:DA:A1:21:D9:EA:7A:20:B5:EB:6B:AD:1C:9C:EF
            X509v3 Authority Key Identifier:
                keyid:1A:88:AF:93:84:5B:D2:53:86:45:2D:BD:FA:A0:21:6E:13:CA:F8:C7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Goivk4Rb0lOGRS29-qAhbhPK-Mc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/4c7b8c-f131-4996-b8f5-5f9f0ac0fae7/1/Goivk4Rb0lOGRS29-qAhbhPK-Mc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/23/4c7b8c-f131-4996-b8f5-5f9f0ac0fae7/1/Goivk4Rb0lOGRS29-qAhbhPK-Mc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:63:1a:fc:3e:b7:a8:b6:2b:d1:7c:1d:78:fb:a8:af:15:df:
         cd:8c:51:71:3d:ec:cf:ec:c5:49:ef:ba:7b:d2:4d:5c:ec:49:
         cc:85:ac:da:7a:15:92:b3:5c:aa:b6:f9:ee:39:79:48:84:a7:
         5e:a0:2f:10:3a:e3:06:04:64:1d:1a:85:0e:06:cd:8c:38:89:
         06:46:9d:23:50:e3:b5:35:97:8e:b8:5d:0a:cd:4e:0c:82:1a:
         10:f9:30:56:e3:78:cc:c5:97:33:47:7d:cc:d4:26:76:e8:cd:
         ab:ac:e3:2f:6d:26:a3:ed:17:cc:cc:ca:cb:77:c7:27:a8:ed:
         0f:c3:23:fb:8b:18:04:c9:4f:b7:21:40:7f:e4:53:b8:68:c2:
         54:47:6a:92:26:fe:d7:a2:c9:a6:8b:a0:4c:1e:81:ac:32:3c:
         c4:d6:10:72:4e:c4:a2:9f:09:1e:36:0e:dd:a9:a3:4d:8d:13:
         c2:a8:08:65:05:01:88:52:76:b5:d8:2b:b4:02:0e:d3:9d:d7:
         37:26:ca:7b:4b:21:00:c5:e3:24:ff:d3:82:51:95:63:ab:64:
         9b:fa:fc:1a:75:ab:d0:18:49:06:16:ff:9b:50:ea:f6:cb:d9:
         5b:59:cd:e8:4d:54:2d:fd:e1:81:f8:a1:0d:22:82:78:fc:fc:
         22:40:74:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----