Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/2210c7-9959-44f7-ada6-efd3ae985ee4/1/gswXHj3IRnEeBW4uNiQdrJlKYA0.mft
File:                     gswXHj3IRnEeBW4uNiQdrJlKYA0.mft (raw, json)
Hash identifier:          4na0dWYjY8VN7fTJmSrqu+CPAmWTIDnGAPZnN3fHWL4=
Subject key identifier:   5B:82:92:05:F4:22:6F:E9:C4:A6:70:4B:93:9C:E3:BE:20:2D:9E:42
Authority key identifier: 82:CC:17:1E:3D:C8:46:71:1E:05:6E:2E:36:24:1D:AC:99:4A:60:0D
Certificate issuer:       /CN=82cc171e3dc846711e056e2e36241dac994a600d
Certificate serial:       01962E993C1B1C9C4F2AA582FEE6394F8E03
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gswXHj3IRnEeBW4uNiQdrJlKYA0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/28/2210c7-9959-44f7-ada6-efd3ae985ee4/1/gswXHj3IRnEeBW4uNiQdrJlKYA0.mft
Manifest number:          14EC
Signing time:             Sun 13 Apr 2025 10:01:56 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:56 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:56 +0000
Files and hashes:         1: JjOh7wV3uoOnT6pZLsppbv_LAZ8.roa (hash: QPSPPNn3Qn++fdP63nXuDi3yMhHz0vKFIROySBvf1mk=)
                          2: gswXHj3IRnEeBW4uNiQdrJlKYA0.crl (hash: iGpOyuSkEVIx7V6iMYIVFTLIENtpSdYg7kBOTBH4C2M=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:3c:1b:1c:9c:4f:2a:a5:82:fe:e6:39:4f:8e:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=82cc171e3dc846711e056e2e36241dac994a600d
        Validity
            Not Before: Apr 13 10:01:56 2025 GMT
            Not After : Apr 14 10:01:56 2025 GMT
        Subject: CN=5b829205f4226fe9c4a6704b939ce3be202d9e42
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:b1:ba:42:c5:69:68:ac:0e:fb:09:bf:39:f3:
                    8e:02:8f:26:62:6c:aa:47:bf:f6:ed:65:c9:a2:d0:
                    d0:2d:72:5b:8f:02:76:1b:99:20:3a:9c:44:cf:d6:
                    0b:6e:fc:a3:2f:eb:d2:8e:33:0c:61:1b:ae:b7:7b:
                    6a:0d:a1:89:08:17:35:4e:ee:ac:b7:a5:00:2f:ec:
                    ac:e9:95:e1:2e:ce:17:51:4b:76:59:dd:b7:68:62:
                    0e:ef:3e:35:20:32:18:8d:93:fd:43:e0:b7:f4:b4:
                    d6:4b:e7:0a:38:4f:78:92:f6:7b:87:40:9c:4f:a2:
                    9f:25:fa:23:04:8d:60:3f:2e:30:a4:ee:fb:b3:fc:
                    68:b4:de:93:43:6e:04:a7:2b:a3:20:7c:e5:dc:5c:
                    47:fd:9b:12:f5:6a:f1:54:b8:97:b9:51:e7:a8:0d:
                    b3:d6:02:98:93:97:cf:9a:99:dd:fb:5c:c6:26:8a:
                    7e:7d:9a:27:0c:0f:61:b2:0c:1d:56:67:b5:03:d3:
                    7a:95:7a:88:39:1b:6c:31:d7:64:51:94:43:bc:51:
                    f6:07:29:61:17:f7:9d:6c:49:ea:f6:17:24:7b:69:
                    3d:77:bf:a4:5a:94:5d:b7:ff:50:73:90:9f:a5:80:
                    e6:9b:46:eb:b8:94:c1:54:ff:47:69:ff:37:ba:6a:
                    18:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:82:92:05:F4:22:6F:E9:C4:A6:70:4B:93:9C:E3:BE:20:2D:9E:42
            X509v3 Authority Key Identifier:
                keyid:82:CC:17:1E:3D:C8:46:71:1E:05:6E:2E:36:24:1D:AC:99:4A:60:0D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gswXHj3IRnEeBW4uNiQdrJlKYA0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/2210c7-9959-44f7-ada6-efd3ae985ee4/1/gswXHj3IRnEeBW4uNiQdrJlKYA0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/28/2210c7-9959-44f7-ada6-efd3ae985ee4/1/gswXHj3IRnEeBW4uNiQdrJlKYA0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         98:b2:52:83:30:fe:7d:aa:d3:12:4d:9e:f6:cb:d4:9e:1d:70:
         0b:9c:a5:34:ac:5a:c1:ae:f1:b4:81:cc:72:45:51:8c:0b:77:
         55:02:09:db:26:d4:09:22:ab:ca:f9:bc:cc:63:e8:73:86:6e:
         fc:ca:c3:b7:5d:2f:ed:10:de:d2:a0:22:fc:61:1d:43:62:db:
         64:a8:67:70:ca:ca:55:0b:7d:56:2f:81:5d:44:d8:59:5f:c0:
         39:30:72:1b:9d:52:8f:1b:57:49:01:c5:ef:a3:ad:8d:aa:b8:
         01:88:d0:34:c5:b0:45:a8:78:2c:9e:f2:b1:6c:7d:4c:d9:0e:
         c3:c2:e6:c8:e7:49:b6:78:b0:54:b4:3a:e2:b2:12:93:f0:2e:
         8f:4d:d9:76:02:f2:a1:c9:3f:f5:f0:cd:cf:5a:e4:b0:cc:76:
         a3:11:0d:26:7f:9d:c3:79:3b:bd:c9:9f:4f:6a:d5:7b:af:35:
         0a:c7:52:cc:47:d5:ba:6c:23:ca:3f:33:a7:7d:9b:80:cc:37:
         ab:d1:c5:a3:44:6b:67:46:ba:46:b2:5e:92:1b:56:74:91:46:
         39:52:f3:93:b0:f5:69:f2:e8:7b:3d:2c:46:6c:1a:0c:92:da:
         bc:bb:56:f7:14:e1:18:67:40:ef:c4:d1:c9:01:81:40:e8:2b:
         02:40:09:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----