Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/cdecd2-38d6-40cf-ab02-dab9dc6dc4c9/1/gbZaIw1pJ9usIBCX-Uni6qJzEiA.mft
File:                     gbZaIw1pJ9usIBCX-Uni6qJzEiA.mft (raw, json)
Hash identifier:          bD8VL9zEB+HYAAYB71D72HO6qZQ/yLcF7dF5044g5+I=
Subject key identifier:   FA:55:BC:F6:88:83:D4:6F:4E:D0:A5:5C:65:80:75:EC:74:0E:9C:B6
Authority key identifier: 81:B6:5A:23:0D:69:27:DB:AC:20:10:97:F9:49:E2:EA:A2:73:12:20
Certificate issuer:       /CN=81b65a230d6927dbac201097f949e2eaa2731220
Certificate serial:       01962E2AEC8B40226663058C282CAD209B47
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gbZaIw1pJ9usIBCX-Uni6qJzEiA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/27/cdecd2-38d6-40cf-ab02-dab9dc6dc4c9/1/gbZaIw1pJ9usIBCX-Uni6qJzEiA.mft
Manifest number:          0A81
Signing time:             Sun 13 Apr 2025 08:01:26 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:26 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:26 +0000
Files and hashes:         1: gEaDDtDg3NGIpNO0dp0YVtxxUek.roa (hash: 1qHWY4UuDI5K0+nd/rC4bO24NaTlHFHg0zG3FVkfXdU=)
                          2: gbZaIw1pJ9usIBCX-Uni6qJzEiA.crl (hash: ++OsppvMunrL57MUzn9WrvmZMoR9hHZn9Bz6CGE3O6A=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2a:ec:8b:40:22:66:63:05:8c:28:2c:ad:20:9b:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=81b65a230d6927dbac201097f949e2eaa2731220
        Validity
            Not Before: Apr 13 08:01:26 2025 GMT
            Not After : Apr 14 08:01:26 2025 GMT
        Subject: CN=fa55bcf68883d46f4ed0a55c658075ec740e9cb6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:d0:ff:fa:f4:0e:ef:ab:9d:4a:fe:79:b9:40:
                    69:e9:2a:b0:2e:5e:23:21:6f:87:5e:d9:b8:68:eb:
                    2b:6d:bf:6b:1f:f4:b2:74:5a:5e:cc:ae:04:6a:25:
                    6c:4f:33:55:68:7c:c3:ef:2e:58:cc:7c:ff:91:b4:
                    74:e5:24:cf:0b:5a:0f:20:31:fc:b4:12:d3:46:20:
                    15:60:f3:90:30:94:69:41:23:f7:0f:b2:ec:63:17:
                    e2:65:b9:9b:1a:9f:46:86:d9:3a:01:34:8c:e1:8d:
                    cd:9d:e1:be:62:2d:cc:87:ae:fc:9f:2a:88:52:58:
                    51:6f:81:93:aa:de:64:51:dc:7b:f8:c9:f3:7d:e2:
                    1f:04:54:55:80:ac:2b:eb:18:22:47:22:28:9d:d2:
                    07:d3:22:ac:e0:fb:68:08:83:a3:7e:af:f5:c7:dc:
                    47:b4:52:52:9b:d1:73:e9:bb:13:4e:48:97:46:68:
                    62:c7:8d:0d:8f:a7:8c:8f:e4:e8:bd:47:dd:67:8c:
                    b5:56:bb:40:de:f7:bb:20:4a:43:e2:3f:7d:6d:85:
                    8f:19:c3:cc:b5:6c:40:a4:46:55:e9:e5:e2:c3:2b:
                    4d:19:d1:63:1e:ef:2b:f7:50:67:f0:f3:74:19:40:
                    9f:5d:a3:17:81:36:c5:0b:a8:af:3d:af:d2:d0:36:
                    f9:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:55:BC:F6:88:83:D4:6F:4E:D0:A5:5C:65:80:75:EC:74:0E:9C:B6
            X509v3 Authority Key Identifier:
                keyid:81:B6:5A:23:0D:69:27:DB:AC:20:10:97:F9:49:E2:EA:A2:73:12:20

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gbZaIw1pJ9usIBCX-Uni6qJzEiA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/cdecd2-38d6-40cf-ab02-dab9dc6dc4c9/1/gbZaIw1pJ9usIBCX-Uni6qJzEiA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/27/cdecd2-38d6-40cf-ab02-dab9dc6dc4c9/1/gbZaIw1pJ9usIBCX-Uni6qJzEiA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8e:9d:c8:14:b9:f9:2b:99:e7:55:85:72:90:d0:c5:6b:2b:56:
         44:88:75:b8:e4:45:f9:34:c2:63:29:e0:c1:1c:f1:72:e9:be:
         b2:27:48:06:a9:38:98:42:2d:84:c7:00:c8:c5:35:54:05:57:
         5b:d6:9c:99:78:c3:c2:40:15:e9:a6:37:1d:94:c8:98:62:51:
         69:99:47:fb:14:96:93:fc:f3:6b:16:97:24:cb:f7:95:46:44:
         cf:76:2b:6b:b1:1c:97:db:e1:62:e1:d3:d6:02:bb:8f:e7:8b:
         16:d3:9e:da:43:7e:60:00:ea:b2:7c:58:af:7f:92:0b:63:0c:
         d7:a6:1f:db:df:eb:9d:0c:56:65:fc:17:57:be:6b:fb:10:46:
         68:80:ff:8a:86:52:03:fc:bb:9d:17:90:d1:2c:7d:ba:12:95:
         cd:d8:17:2c:0a:6c:a0:6b:61:4d:94:fa:81:91:8a:ad:43:e8:
         c7:83:13:f9:c0:1f:f8:34:5b:d4:65:4c:b9:f0:e0:34:37:8d:
         35:61:4b:39:b1:a8:3f:89:c0:c1:e5:ee:5b:21:55:a7:b4:21:
         cb:c8:fd:8e:6c:cc:01:ac:95:4a:2a:3b:8d:b3:4a:cd:dc:6c:
         22:88:a4:66:fb:6f:9c:5a:39:72:14:f3:68:24:49:71:46:89:
         2b:8a:c7:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----