Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/4d4eef-7246-460e-b946-ece7826787b4/1/GcvQpBNilCFbHCQ7DwIYz91WXVc.mft
File:                     GcvQpBNilCFbHCQ7DwIYz91WXVc.mft (raw, json)
Hash identifier:          HG9n6AuyNVXod832YkoTMuSRvgXTxPrCBs4SwJR+3aw=
Subject key identifier:   50:77:D0:34:56:D5:50:40:62:71:9D:7E:CB:B4:0B:4B:CF:9E:A1:7B
Authority key identifier: 19:CB:D0:A4:13:62:94:21:5B:1C:24:3B:0F:02:18:CF:DD:56:5D:57
Certificate issuer:       /CN=19cbd0a4136294215b1c243b0f0218cfdd565d57
Certificate serial:       01962ECF67F3BDA49CE31713E189EA6B99C0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GcvQpBNilCFbHCQ7DwIYz91WXVc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/28/4d4eef-7246-460e-b946-ece7826787b4/1/GcvQpBNilCFbHCQ7DwIYz91WXVc.mft
Manifest number:          065A
Signing time:             Sun 13 Apr 2025 11:01:06 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:06 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:06 +0000
Files and hashes:         1: GcvQpBNilCFbHCQ7DwIYz91WXVc.crl (hash: OEriPo4twzGGzZmF17AdpmnwnniGHhViGoq2ZgFn5bM=)
                          2: huXjug4okmW8bDkW7ag2OpB5lfQ.roa (hash: NmvkpViuxunQ3md2JciCN3UvTfoukD516vD3ICV2HKQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:67:f3:bd:a4:9c:e3:17:13:e1:89:ea:6b:99:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=19cbd0a4136294215b1c243b0f0218cfdd565d57
        Validity
            Not Before: Apr 13 11:01:06 2025 GMT
            Not After : Apr 14 11:01:06 2025 GMT
        Subject: CN=5077d03456d5504062719d7ecbb40b4bcf9ea17b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:f3:3f:c2:02:e0:51:83:b9:ea:40:47:34:c9:
                    19:69:f4:a8:f4:45:1a:ef:a3:5b:c8:32:33:1c:01:
                    07:0c:dd:a8:42:8f:e6:b6:d5:30:85:f0:33:e1:ce:
                    3d:9b:f2:17:8c:a7:ba:97:59:0d:5d:8e:ea:01:79:
                    0b:fa:dc:0f:00:4c:c6:0e:e3:8c:d6:90:16:d3:df:
                    18:e3:0b:6d:4f:fe:77:19:08:c9:85:25:4e:2f:09:
                    86:b6:6f:d6:fa:04:25:e9:22:c6:7b:a1:b9:2c:8f:
                    0c:81:29:68:71:dc:e6:4a:43:56:92:82:c7:8a:14:
                    a7:00:b4:0e:50:3f:5c:c4:07:6f:b0:41:36:36:42:
                    e8:0c:18:90:be:85:e1:05:99:e6:11:ab:5c:5b:92:
                    51:99:4d:b6:17:1b:7a:e6:36:7d:3f:b6:0d:df:f1:
                    34:0b:d0:5f:65:19:cf:d7:17:25:d1:f6:b7:51:01:
                    9c:50:ec:78:81:14:63:1c:74:b1:fa:c1:d4:dc:d2:
                    d0:5e:f8:a9:58:87:2c:b4:c7:d5:1f:13:b7:89:bd:
                    ca:4c:c6:87:07:81:8b:3f:6f:e0:88:35:ee:f2:1b:
                    de:09:94:e7:dc:e9:99:e9:32:c8:2f:b9:6a:a7:a4:
                    39:80:0f:74:61:6f:05:40:c9:74:06:02:63:41:c6:
                    64:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:77:D0:34:56:D5:50:40:62:71:9D:7E:CB:B4:0B:4B:CF:9E:A1:7B
            X509v3 Authority Key Identifier:
                keyid:19:CB:D0:A4:13:62:94:21:5B:1C:24:3B:0F:02:18:CF:DD:56:5D:57

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GcvQpBNilCFbHCQ7DwIYz91WXVc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/4d4eef-7246-460e-b946-ece7826787b4/1/GcvQpBNilCFbHCQ7DwIYz91WXVc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/28/4d4eef-7246-460e-b946-ece7826787b4/1/GcvQpBNilCFbHCQ7DwIYz91WXVc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:1b:61:c0:ae:12:49:54:d7:d1:c8:66:50:ed:80:78:c9:d1:
         45:f8:13:c1:99:64:01:ed:39:f9:f1:2b:f9:3f:e4:b7:4d:ae:
         51:78:5a:da:af:08:55:e0:b9:9c:54:04:13:4d:7c:35:e8:a2:
         f4:93:84:40:03:06:2f:e2:02:0f:a0:2b:da:6f:55:89:ee:2e:
         97:67:7e:36:3b:99:bc:51:08:7d:c4:37:b8:81:ac:de:37:e9:
         e5:c7:d4:74:3a:88:41:cd:fe:05:81:6c:73:77:06:86:bc:a7:
         d8:45:9b:13:53:d3:ca:cd:89:70:91:9d:7f:db:27:be:fe:2f:
         e9:22:65:14:67:d3:46:02:9c:00:98:4d:82:45:16:47:21:08:
         5f:28:ac:50:06:57:67:8d:9d:be:e6:cd:fe:a9:b9:59:39:49:
         68:d0:09:e3:c0:3d:39:89:71:fc:c6:55:48:7b:bb:ba:7e:9e:
         4a:a9:9e:e9:1a:f1:1f:9c:68:4c:a2:00:b3:80:86:1f:43:e2:
         11:da:37:4c:ef:8f:55:a3:2d:fc:93:75:93:2c:1c:2c:c7:87:
         e8:ed:bd:e8:36:08:0c:20:b8:73:c9:eb:ea:6a:e9:63:8c:ca:
         43:4c:d7:34:79:9b:20:49:0a:cc:03:c0:34:41:b7:48:bb:07:
         fb:4c:b5:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----