Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/36703a-122b-4116-b317-ca5fccbf7a8c/1/GTdDRntNpBxilek1EVMwlYa6I5k.mft
File:                     GTdDRntNpBxilek1EVMwlYa6I5k.mft (raw, json)
Hash identifier:          m6tYUqXaPusjNWvh0ptImOz4l0k1lfJyQ/nnJzx5YgQ=
Subject key identifier:   70:09:F0:34:A1:21:FE:F6:E7:E5:3B:D3:D8:AE:98:DD:68:EA:FE:FE
Authority key identifier: 19:37:43:46:7B:4D:A4:1C:62:95:E9:35:11:53:30:95:86:BA:23:99
Certificate issuer:       /CN=193743467b4da41c6295e9351153309586ba2399
Certificate serial:       01962F06E92B296B75B47FE4CD41DB7C8E97
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GTdDRntNpBxilek1EVMwlYa6I5k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/29/36703a-122b-4116-b317-ca5fccbf7a8c/1/GTdDRntNpBxilek1EVMwlYa6I5k.mft
Manifest number:          116B
Signing time:             Sun 13 Apr 2025 12:01:44 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:44 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:44 +0000
Files and hashes:         1: 1TdnBIQpLOCBWH2mt28aivouF4I.roa (hash: OXerkvpTMgtDn41YlP30T5MtsanNBIBwFIzBvbUKvGE=)
                          2: 4wV3tNw8L-G2g-REyKg7rTv19xc.roa (hash: mlDNB6DLTguCsOh+3JJiKoaNz1XvyyZU+vhtwaeg1hU=)
                          3: GTdDRntNpBxilek1EVMwlYa6I5k.crl (hash: 1CNVzQDZ3QEl5Iej5YdK57hfPMvPvas0oGvuS+DenIs=)
                          4: K4x7WnCPM92IfHKWVCrULIlUaVA.roa (hash: KVnqPoeOrxHfk6WulHu6MwITd97JNsKLMzaXFdfZRTU=)
                          5: L0erWF8zE1RnGBSaNfbAKYl2kd8.roa (hash: /zy+SS2a9gbTjEnXkpsItTqQEn8dlA3GKuajYSpZLoU=)
                          6: bGl-O1VWsJiqIgDexKk7dKheHQQ.roa (hash: 6KFHpVYSoKMAphsv2/6O6zAXDRyPyfaziYVLYjZHZ0s=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:e9:2b:29:6b:75:b4:7f:e4:cd:41:db:7c:8e:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=193743467b4da41c6295e9351153309586ba2399
        Validity
            Not Before: Apr 13 12:01:44 2025 GMT
            Not After : Apr 14 12:01:44 2025 GMT
        Subject: CN=7009f034a121fef6e7e53bd3d8ae98dd68eafefe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:9f:6b:fb:e0:04:92:d8:b0:7a:6e:c9:96:cd:
                    52:a6:d3:57:82:17:e4:94:d8:dc:a4:fb:95:49:30:
                    af:6d:ea:05:aa:f4:d8:e2:46:46:aa:5a:61:a7:b8:
                    b5:ab:6a:2b:81:93:65:d8:05:36:04:9a:17:ab:36:
                    5e:fb:dc:34:23:05:e3:99:ce:26:c8:d8:87:6f:67:
                    58:56:5c:f9:88:77:d3:9a:f8:8b:73:d1:60:f6:99:
                    b0:20:1e:56:d5:0c:a3:4b:86:72:6f:56:1c:52:8f:
                    ef:bd:f0:2f:0d:99:cf:3e:40:74:d8:c0:e4:9d:44:
                    95:0a:3e:47:c7:1a:4f:22:3e:f1:93:09:d1:2b:0d:
                    db:bb:08:c1:3c:51:b1:ff:1c:d6:40:fa:f5:0a:67:
                    1f:14:80:25:08:38:64:ea:f2:ba:90:24:9b:c1:fc:
                    01:78:4b:20:af:42:24:c0:5c:cd:c6:72:06:f2:ba:
                    7b:87:63:04:23:ae:59:da:5a:53:dd:f7:1e:ee:38:
                    eb:13:f0:e2:a8:ed:c6:5c:86:76:18:9b:c2:9e:d5:
                    37:83:c3:72:dd:0a:5a:30:3b:fc:9c:f1:2a:cf:35:
                    4b:15:8a:e4:b6:4d:ae:26:ee:81:d6:bc:f6:65:70:
                    52:37:b6:ba:b2:20:49:be:74:8e:fd:39:dd:3a:c3:
                    ee:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:09:F0:34:A1:21:FE:F6:E7:E5:3B:D3:D8:AE:98:DD:68:EA:FE:FE
            X509v3 Authority Key Identifier:
                keyid:19:37:43:46:7B:4D:A4:1C:62:95:E9:35:11:53:30:95:86:BA:23:99

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GTdDRntNpBxilek1EVMwlYa6I5k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/36703a-122b-4116-b317-ca5fccbf7a8c/1/GTdDRntNpBxilek1EVMwlYa6I5k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/29/36703a-122b-4116-b317-ca5fccbf7a8c/1/GTdDRntNpBxilek1EVMwlYa6I5k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:bd:c9:75:d9:b3:56:d9:a3:21:41:b4:eb:85:7e:cb:f3:e4:
         f1:b7:dc:c4:be:b9:12:ca:77:ea:a0:ca:c9:2e:05:39:4f:c6:
         77:78:5f:76:77:07:09:c2:ca:9a:b3:9d:f0:50:6e:91:44:f4:
         f5:d2:9a:b1:82:f7:43:4c:5e:6a:f5:6d:60:93:2d:f2:a2:d7:
         67:f2:f3:0e:73:7d:aa:61:1e:bc:4e:86:f5:d6:4e:94:48:04:
         20:23:31:6f:7e:d5:80:5a:e0:11:5f:36:61:a6:35:94:9a:c9:
         9a:6f:48:3f:38:87:fa:43:60:b7:46:d2:18:9b:6c:04:45:81:
         a2:85:6d:11:cd:09:28:c2:c6:50:fc:79:ea:dc:1d:cd:e1:05:
         f7:66:f0:60:f0:46:68:44:ba:7c:d4:37:1e:b6:5e:f0:be:e0:
         bd:fe:75:45:0e:87:07:48:2e:36:00:44:45:13:1b:e7:87:13:
         27:5f:4f:23:60:cb:e5:3f:9b:7f:c9:a9:1e:c8:b6:32:0a:26:
         d0:9c:30:0d:c0:eb:9a:9f:00:8d:87:3f:f7:56:d8:ad:c0:fe:
         56:ff:8c:2a:04:05:7e:af:c4:cb:77:f5:fb:fa:45:e4:cf:98:
         48:0d:84:3d:92:28:cf:b9:af:83:c2:31:53:d5:f5:a1:de:14:
         63:cf:a8:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----