Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/9c48a0-d3cd-44b3-9ae6-7dffce1d6e2d/1/GkIazkbF3ViinUbNkfso_DnFb-4.mft
File:                     GkIazkbF3ViinUbNkfso_DnFb-4.mft (raw, json)
Hash identifier:          VfztiVstj6jPre8O80XTMFzUk7zCPEcJp23Ay1MxBmk=
Subject key identifier:   E2:80:B0:6F:A9:03:DB:C2:C9:E6:52:B5:E5:18:B9:DE:13:B2:DC:C1
Authority key identifier: 1A:42:1A:CE:46:C5:DD:58:A2:9D:46:CD:91:FB:28:FC:39:C5:6F:EE
Certificate issuer:       /CN=1a421ace46c5dd58a29d46cd91fb28fc39c56fee
Certificate serial:       01962FAB4E64A0A14285149B8D04323D6274
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GkIazkbF3ViinUbNkfso_DnFb-4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/26/9c48a0-d3cd-44b3-9ae6-7dffce1d6e2d/1/GkIazkbF3ViinUbNkfso_DnFb-4.mft
Manifest number:          14ED
Signing time:             Sun 13 Apr 2025 15:01:17 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:17 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:17 +0000
Files and hashes:         1: GkIazkbF3ViinUbNkfso_DnFb-4.crl (hash: /tVbXpxByX9AKThRCxjGRYi9ZjKayVmlUuW8uApmSGY=)
                          2: iYCONvh_-VwWy1qAcfbIbkJR5L0.roa (hash: Mqum/pcnON+fvDqDFxLCGm1Sd5nnM2fK5bauzDteg4o=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:4e:64:a0:a1:42:85:14:9b:8d:04:32:3d:62:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1a421ace46c5dd58a29d46cd91fb28fc39c56fee
        Validity
            Not Before: Apr 13 15:01:17 2025 GMT
            Not After : Apr 14 15:01:17 2025 GMT
        Subject: CN=e280b06fa903dbc2c9e652b5e518b9de13b2dcc1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:df:71:47:f5:21:4e:6c:be:64:9e:48:30:b7:
                    34:a2:a4:7e:4c:46:7e:df:53:73:ce:e9:33:02:ad:
                    26:b2:11:8a:e3:c6:0d:fd:11:7e:a2:ab:bf:b3:87:
                    11:5c:5d:4b:42:f1:38:a0:d8:c7:90:3c:9c:83:6c:
                    65:fc:b4:12:b1:39:82:17:37:67:7e:dd:88:b3:97:
                    34:02:01:f3:22:c2:3b:9b:1c:1d:26:fa:cb:00:23:
                    17:49:e7:f3:a6:fb:15:7c:36:1e:fd:93:b2:bd:0b:
                    1d:95:7f:15:00:84:07:56:22:e9:8b:8c:c3:db:27:
                    55:ed:ac:3f:5c:47:89:3c:61:30:6b:78:11:a8:15:
                    43:a1:1f:38:d2:8d:07:1e:55:8f:69:4d:67:15:be:
                    b3:4e:ac:da:c3:27:26:97:90:0d:2d:31:1a:c7:36:
                    11:5f:21:0b:ee:4e:e3:57:5e:ca:71:3f:1b:3c:17:
                    59:8b:4d:6b:18:8c:eb:a8:61:fd:13:61:22:58:d2:
                    1f:ad:af:98:62:3d:02:f7:25:cd:ab:58:aa:3e:57:
                    c6:d4:c3:a6:ba:a7:7a:17:17:7d:2c:f8:87:06:66:
                    ca:e7:d1:02:2c:41:22:ee:83:ee:1d:78:88:17:f7:
                    e8:ac:e0:59:10:d1:97:92:5d:f7:35:bd:7a:18:be:
                    fe:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:80:B0:6F:A9:03:DB:C2:C9:E6:52:B5:E5:18:B9:DE:13:B2:DC:C1
            X509v3 Authority Key Identifier:
                keyid:1A:42:1A:CE:46:C5:DD:58:A2:9D:46:CD:91:FB:28:FC:39:C5:6F:EE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GkIazkbF3ViinUbNkfso_DnFb-4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/9c48a0-d3cd-44b3-9ae6-7dffce1d6e2d/1/GkIazkbF3ViinUbNkfso_DnFb-4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/26/9c48a0-d3cd-44b3-9ae6-7dffce1d6e2d/1/GkIazkbF3ViinUbNkfso_DnFb-4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:d0:99:42:01:29:47:0f:15:71:d8:7f:43:c7:94:47:f8:f7:
         ef:d8:13:68:84:7f:fe:ce:d0:24:6e:02:b0:82:fd:14:0f:f0:
         12:21:3e:67:cb:90:9a:0e:37:6c:14:74:ce:b7:48:e2:d1:59:
         2a:7c:01:05:d2:69:de:10:cd:86:5e:01:3d:5a:fe:9c:7d:dc:
         8b:fd:e0:75:af:79:c2:85:4d:53:86:b0:6e:d6:e0:20:04:2b:
         87:94:10:a7:71:0a:c5:e2:bb:51:10:f9:58:7f:e8:7a:4a:dd:
         01:06:d5:f3:8f:c5:00:c6:72:a9:05:3b:ce:88:6e:ca:b3:4f:
         12:10:ab:cb:56:5b:f4:05:a8:a0:d8:d9:20:85:63:1b:48:35:
         98:85:4e:6c:a9:58:59:b1:9d:e7:c1:35:a8:85:fe:1f:1f:b4:
         54:d5:ad:20:8f:8e:c4:cf:59:8e:52:2b:9d:2c:49:78:b0:25:
         2b:fa:e3:87:39:65:69:a9:52:8d:6e:d2:a3:b0:44:a3:aa:c5:
         16:9d:13:51:a1:39:1a:de:92:bb:9e:f5:f1:2c:49:db:94:6f:
         5e:1b:55:b0:96:98:8b:b3:12:ba:b7:42:01:c3:9c:03:78:66:
         1e:a0:46:94:3e:e7:33:a9:fa:39:72:c4:0f:b8:f4:8e:f5:02:
         a3:52:d9:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----