Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/20c7e7-a49f-4031-ba77-63df603161c9/1/gv59AOlM0qfL9_noLPCZJBdBjfY.mft
File:                     gv59AOlM0qfL9_noLPCZJBdBjfY.mft (raw, json)
Hash identifier:          yll4zXTd0V8MghkQlD6npPASFW2FZ8+PFxRLDRPLWgs=
Subject key identifier:   D4:3C:EB:E8:B5:13:40:9A:42:A3:4B:9F:F7:9F:77:63:6E:7F:1E:AD
Authority key identifier: 82:FE:7D:00:E9:4C:D2:A7:CB:F7:F9:E8:2C:F0:99:24:17:41:8D:F6
Certificate issuer:       /CN=82fe7d00e94cd2a7cbf7f9e82cf0992417418df6
Certificate serial:       01962E9970F4E0F2AA0E139811AD7C697E08
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gv59AOlM0qfL9_noLPCZJBdBjfY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2c/20c7e7-a49f-4031-ba77-63df603161c9/1/gv59AOlM0qfL9_noLPCZJBdBjfY.mft
Manifest number:          0630
Signing time:             Sun 13 Apr 2025 10:02:09 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:09 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:09 +0000
Files and hashes:         1: 248bDK_2X4s3D78cLTN1zTJo8ls.roa (hash: kLQEr1R8+53FUqqBvs455Xwu5a5on81N6ifpRavsyZA=)
                          2: gv59AOlM0qfL9_noLPCZJBdBjfY.crl (hash: K74I+wl9FYeIlIvGMux8KmwmGmtSeWfzy0OHv4HVVv0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:70:f4:e0:f2:aa:0e:13:98:11:ad:7c:69:7e:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=82fe7d00e94cd2a7cbf7f9e82cf0992417418df6
        Validity
            Not Before: Apr 13 10:02:09 2025 GMT
            Not After : Apr 14 10:02:09 2025 GMT
        Subject: CN=d43cebe8b513409a42a34b9ff79f77636e7f1ead
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:63:5b:58:dc:7f:0c:c9:ab:a3:f6:37:6b:2a:
                    44:0d:74:aa:9d:1f:a1:29:33:3d:53:07:a3:d7:23:
                    fb:ea:eb:c3:7b:d1:3f:ac:93:b6:74:be:94:a0:df:
                    b6:67:ec:af:c9:f2:a4:6f:91:49:2e:42:d9:6b:d7:
                    14:0a:62:fb:85:7f:df:5a:c0:25:67:a5:6e:e3:df:
                    b8:cd:da:dd:e4:56:13:59:46:b2:45:f2:e0:4e:ad:
                    64:46:53:d7:a9:82:fc:40:f9:74:e3:85:b1:73:87:
                    65:b0:34:de:53:91:66:39:52:1b:3b:dd:b1:07:a2:
                    83:80:a8:e2:6a:a8:84:16:0b:3b:96:77:a7:be:c1:
                    24:af:72:ba:ca:bc:12:4c:2e:88:1b:27:64:6c:41:
                    28:53:ec:a5:21:85:31:81:f0:d5:a8:ad:a4:77:ec:
                    5b:78:f6:e6:d9:df:b3:9f:aa:d2:50:8a:d2:3b:39:
                    86:e5:e0:da:82:ba:95:2c:0d:cd:f7:ee:66:66:6a:
                    25:e3:ac:a5:a9:53:35:b8:7b:d5:26:6e:17:ce:86:
                    a2:f3:16:e2:be:06:8a:cb:9f:c4:f3:2d:15:6c:88:
                    f7:b2:43:33:c1:d9:a3:d0:7b:86:e6:02:68:45:8c:
                    bb:55:e6:2e:68:3e:80:ae:7a:07:52:e4:de:e9:c3:
                    d7:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:3C:EB:E8:B5:13:40:9A:42:A3:4B:9F:F7:9F:77:63:6E:7F:1E:AD
            X509v3 Authority Key Identifier:
                keyid:82:FE:7D:00:E9:4C:D2:A7:CB:F7:F9:E8:2C:F0:99:24:17:41:8D:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gv59AOlM0qfL9_noLPCZJBdBjfY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/20c7e7-a49f-4031-ba77-63df603161c9/1/gv59AOlM0qfL9_noLPCZJBdBjfY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/20c7e7-a49f-4031-ba77-63df603161c9/1/gv59AOlM0qfL9_noLPCZJBdBjfY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:ba:98:35:b7:d4:0c:f3:bd:1f:0d:21:e4:e3:94:85:9b:2b:
         30:27:5c:10:52:14:9c:c0:37:81:ea:89:d7:34:8e:92:92:d6:
         19:26:a9:f6:ed:c2:82:cf:f9:b3:46:ff:de:c7:8e:e3:1c:d2:
         ec:e5:b2:b5:d7:58:1b:12:18:c5:93:ba:c4:74:33:3f:09:83:
         50:b0:90:e7:5b:fc:e0:e5:a0:b9:83:ca:a0:82:12:a9:a9:0a:
         7f:1c:e2:bd:98:e3:f4:19:89:fa:dd:a5:36:c7:62:e5:61:93:
         f9:d3:1f:4f:e4:44:bf:88:c1:88:07:90:4d:a3:dc:01:1e:64:
         0e:f6:ea:c1:85:ec:0a:b6:33:de:a8:7d:53:2b:2f:d6:39:fc:
         f8:19:07:f7:45:45:fe:2a:d7:c7:a1:d2:bd:23:93:a5:5c:f7:
         ec:16:44:ff:46:23:26:23:16:53:32:0f:99:f6:c3:ba:2c:e9:
         ac:b9:04:ec:76:b7:4e:00:ee:3b:75:6c:4b:92:0b:1c:03:29:
         aa:7c:ef:7e:c5:f0:bf:07:74:76:86:e9:ea:93:b8:43:fb:70:
         85:74:f5:ce:7f:b6:1e:50:af:5b:ef:91:aa:b8:05:f1:c6:61:
         fe:e5:8e:de:73:a0:6a:54:d1:44:45:cf:56:4c:82:e0:39:1b:
         08:c8:40:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----