Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/31f8a0-7e95-4fe2-8809-f78bdb6f60c2/1/gOuvLLqDWUOOQ0Ej3aelo5b19Rk.mft
File:                     gOuvLLqDWUOOQ0Ej3aelo5b19Rk.mft (raw, json)
Hash identifier:          F8DsvqUN96wf1nqVgpYG5dTuG4Jj1ncnzPE+qIoVxhg=
Subject key identifier:   EF:11:9F:03:BB:5C:2B:7B:8D:26:47:4A:20:7F:14:F8:31:9C:10:C0
Authority key identifier: 80:EB:AF:2C:BA:83:59:43:8E:43:41:23:DD:A7:A5:A3:96:F5:F5:19
Certificate issuer:       /CN=80ebaf2cba8359438e434123dda7a5a396f5f519
Certificate serial:       01962FAB553B7C16737B0B4CCFFFAD81B95D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gOuvLLqDWUOOQ0Ej3aelo5b19Rk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/25/31f8a0-7e95-4fe2-8809-f78bdb6f60c2/1/gOuvLLqDWUOOQ0Ej3aelo5b19Rk.mft
Manifest number:          14EC
Signing time:             Sun 13 Apr 2025 15:01:19 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:19 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:19 +0000
Files and hashes:         1: DEbqDj-D0KhPe_ozDfopNhqgvZc.roa (hash: 6XoIqk1u5dfBbYPK0R4bSxJz+kGjtKoT47/COVdRMu0=)
                          2: FaVvxalLzbpJd7lGg-gIZ4RSuqw.roa (hash: Vq9OXxCy4cXw387lqVrsEZN9rZ1lStx9VD3OgQ3YBXs=)
                          3: gOuvLLqDWUOOQ0Ej3aelo5b19Rk.crl (hash: Ha6rFC8k1fXI/zsCUoyDs6vuF1BLTNUftrThUtTfCOY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:55:3b:7c:16:73:7b:0b:4c:cf:ff:ad:81:b9:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=80ebaf2cba8359438e434123dda7a5a396f5f519
        Validity
            Not Before: Apr 13 15:01:19 2025 GMT
            Not After : Apr 14 15:01:19 2025 GMT
        Subject: CN=ef119f03bb5c2b7b8d26474a207f14f8319c10c0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:24:14:13:60:d8:44:96:a5:1d:28:4d:f4:67:
                    c8:67:78:b0:f2:6f:8c:65:6c:e0:9e:bd:61:25:94:
                    6f:67:e8:09:91:af:e4:ba:f5:49:e5:bc:3c:b8:ed:
                    ce:67:85:90:fa:c1:7d:60:a7:53:c6:55:67:2a:60:
                    13:d7:b1:d3:48:86:3e:8d:5a:97:15:54:24:25:7f:
                    78:46:78:1d:15:d8:d6:9b:83:2c:03:a8:48:a0:61:
                    54:cd:5b:89:8c:e0:9b:1c:ea:bf:08:cb:96:45:10:
                    5c:21:73:dd:77:d8:56:47:34:8a:9a:df:e6:b1:73:
                    db:94:b4:20:0f:f2:a3:76:57:04:0e:5a:c0:46:e3:
                    b3:22:20:59:7f:7d:0e:08:cf:b6:3e:53:b6:fd:6b:
                    b0:1a:65:70:8a:14:7e:1e:53:a7:14:59:59:6e:0c:
                    d2:6a:e5:5d:e2:e2:e6:78:9b:53:c3:eb:39:d4:54:
                    7d:f7:49:dc:0f:75:55:63:16:d9:31:5a:36:99:05:
                    e0:05:0a:c6:5a:af:79:50:b0:30:9b:03:58:50:1d:
                    27:9c:6f:bf:f1:2b:29:d7:a0:6c:43:c5:97:3d:09:
                    94:54:d8:de:fd:ec:21:dc:f8:02:3e:15:45:d1:da:
                    87:01:62:83:65:88:a5:3d:80:cf:e5:dd:2f:2e:8e:
                    f2:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:11:9F:03:BB:5C:2B:7B:8D:26:47:4A:20:7F:14:F8:31:9C:10:C0
            X509v3 Authority Key Identifier:
                keyid:80:EB:AF:2C:BA:83:59:43:8E:43:41:23:DD:A7:A5:A3:96:F5:F5:19

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gOuvLLqDWUOOQ0Ej3aelo5b19Rk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/31f8a0-7e95-4fe2-8809-f78bdb6f60c2/1/gOuvLLqDWUOOQ0Ej3aelo5b19Rk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/25/31f8a0-7e95-4fe2-8809-f78bdb6f60c2/1/gOuvLLqDWUOOQ0Ej3aelo5b19Rk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:35:46:cb:2b:f3:1d:a4:79:14:26:1c:d3:fa:1f:96:f3:c4:
         da:bf:74:22:3c:11:69:30:b7:f0:3b:c5:ee:c8:35:02:b9:6f:
         39:2b:ec:3b:68:eb:68:05:a3:df:31:18:52:86:d0:a9:fc:88:
         fb:a3:af:3e:3f:21:80:a8:de:4d:fc:fc:cd:9f:70:6e:e7:27:
         58:8a:dd:aa:d2:4c:f4:f0:44:71:ad:11:57:20:b3:ea:76:73:
         93:2b:1c:bc:dd:63:6e:ab:a0:03:cc:7e:c7:f6:03:c6:4a:33:
         a6:c8:12:95:0e:2b:9a:d5:6d:98:08:e7:6d:40:e8:7b:cf:ea:
         09:90:b3:b3:4c:fd:88:6c:8e:51:08:8c:c4:ae:e2:9f:85:f9:
         84:48:1b:46:0d:7b:01:97:26:ab:74:04:d8:f8:4c:87:e6:87:
         86:32:ff:21:8e:f8:10:c8:35:c1:30:6e:a8:d4:e4:3b:49:93:
         50:42:69:c1:39:67:0d:eb:54:2a:d5:36:0f:f0:f2:7b:1f:b3:
         9c:d9:33:55:b0:ba:a7:f4:bd:67:65:3e:1b:9e:39:89:32:6c:
         a1:3e:ab:7e:a7:9a:d0:e8:c7:44:8c:8d:3f:f5:9d:59:62:64:
         19:43:75:a6:7a:db:df:ed:86:bb:b8:7e:b8:6e:5c:b4:4b:c8:
         e4:bd:82:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----