Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/0c14f4-9a47-4a5a-a37d-f3555ddf280a/1/GVoSoOc0gtmTJgWYolyPWlxJ0gE.mft
File:                     GVoSoOc0gtmTJgWYolyPWlxJ0gE.mft (raw, json)
Hash identifier:          AO0mGVwQnpFQlbyPKNgxYY/BqR/6sk9rNxJ2Sweaugo=
Subject key identifier:   30:FE:37:76:73:9B:D9:A6:99:46:D2:2B:99:4C:D9:E5:3C:7C:C9:59
Authority key identifier: 19:5A:12:A0:E7:34:82:D9:93:26:05:98:A2:5C:8F:5A:5C:49:D2:01
Certificate issuer:       /CN=195a12a0e73482d993260598a25c8f5a5c49d201
Certificate serial:       01962F745A2215E38C3FAE2A5FB8D6DC1ED8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GVoSoOc0gtmTJgWYolyPWlxJ0gE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2d/0c14f4-9a47-4a5a-a37d-f3555ddf280a/1/GVoSoOc0gtmTJgWYolyPWlxJ0gE.mft
Manifest number:          14E7
Signing time:             Sun 13 Apr 2025 14:01:16 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:16 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:16 +0000
Files and hashes:         1: GVoSoOc0gtmTJgWYolyPWlxJ0gE.crl (hash: 0lCTlvdN4sTzPZQYkzgmm/T3Ov9KFDYy6VuxSASxcrk=)
                          2: UkXF7s7wvZTNugO0xMbM-tho3CU.roa (hash: haf3+lwW0Ofrlk+CxaFcagM4HVa+8i2mqBkmuNQ3QQM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:5a:22:15:e3:8c:3f:ae:2a:5f:b8:d6:dc:1e:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=195a12a0e73482d993260598a25c8f5a5c49d201
        Validity
            Not Before: Apr 13 14:01:16 2025 GMT
            Not After : Apr 14 14:01:16 2025 GMT
        Subject: CN=30fe3776739bd9a69946d22b994cd9e53c7cc959
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:7e:c2:a8:e6:98:3a:5f:ac:44:8c:7d:14:d7:
                    52:97:59:94:b7:d4:9f:58:cd:a4:f8:f2:41:8f:f9:
                    b5:ef:28:1e:e4:de:b9:46:e5:21:97:80:ce:12:62:
                    b5:89:d2:fe:4d:5c:1f:12:11:d0:91:61:c6:86:73:
                    07:94:da:23:a5:e9:27:6c:08:be:40:97:8f:a4:dd:
                    19:96:63:b6:4c:97:44:0a:8f:85:49:49:b7:94:a9:
                    49:c7:d1:0e:9b:b0:1a:b1:73:e3:e5:cb:27:ec:17:
                    33:3f:ff:27:b8:91:13:16:68:34:7b:e0:27:7c:ff:
                    d9:6f:a2:19:e5:85:85:aa:24:0e:d9:31:ce:fc:1f:
                    f4:c5:23:65:9b:a6:03:5f:9b:fc:16:dc:9f:db:82:
                    1a:8c:f7:78:ed:ac:44:5e:06:13:a9:aa:dc:26:36:
                    86:75:0f:65:6f:d0:28:36:b4:00:29:4e:89:7f:c8:
                    1f:63:a1:cf:ac:d2:4b:a2:6b:26:70:f1:2f:8d:c0:
                    3c:8d:cc:dc:f0:4c:38:df:d2:65:ea:51:e7:3e:79:
                    31:b5:da:ba:8c:46:17:94:46:59:15:9d:97:ce:c8:
                    26:d6:0b:3e:29:25:c5:21:5a:67:a9:e1:9f:37:0e:
                    a3:f3:87:52:70:4e:e0:5b:a4:f5:17:d8:ac:59:bb:
                    23:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:FE:37:76:73:9B:D9:A6:99:46:D2:2B:99:4C:D9:E5:3C:7C:C9:59
            X509v3 Authority Key Identifier:
                keyid:19:5A:12:A0:E7:34:82:D9:93:26:05:98:A2:5C:8F:5A:5C:49:D2:01

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GVoSoOc0gtmTJgWYolyPWlxJ0gE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/0c14f4-9a47-4a5a-a37d-f3555ddf280a/1/GVoSoOc0gtmTJgWYolyPWlxJ0gE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/0c14f4-9a47-4a5a-a37d-f3555ddf280a/1/GVoSoOc0gtmTJgWYolyPWlxJ0gE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:ba:87:d6:3a:70:33:77:29:a1:69:3a:22:31:82:6c:11:90:
         da:b1:c7:77:d3:3c:70:ca:73:f3:da:08:b2:ce:fd:49:28:78:
         ce:d2:cd:13:97:88:f6:52:a1:b2:5a:ea:ec:2c:8a:84:3b:48:
         9a:ab:15:79:3a:41:81:0b:eb:5e:05:41:ea:0f:08:b4:2f:b2:
         a6:14:62:63:19:7b:32:53:3e:cc:5c:34:22:8c:2b:16:18:07:
         ec:78:3f:0c:13:a5:c1:f7:f8:3d:01:b3:77:09:e4:a7:f2:b4:
         c3:e2:18:d8:22:f0:05:5b:ae:3b:b3:12:cb:25:47:e1:91:53:
         dc:2a:3b:63:2f:14:c5:0d:99:73:4f:c9:d9:a8:28:38:e1:74:
         c9:82:f8:00:b8:7b:da:92:01:23:50:05:0f:58:15:fd:a9:b9:
         62:c6:e9:6e:d8:bf:0f:ed:ef:d6:7a:14:0e:ea:c5:90:0d:01:
         11:b0:d8:74:84:ec:01:06:e7:b0:69:ea:b8:61:fe:e2:86:c0:
         77:bb:fc:43:a5:e0:b6:50:ff:fb:75:b2:82:d4:88:c2:35:be:
         8d:4c:ce:69:fd:c2:87:23:c8:3c:ca:e8:cd:f6:f9:d2:c2:00:
         2c:a4:99:4d:05:fa:90:e5:31:7e:b6:1b:d3:de:ae:d3:ac:43:
         a0:5b:f1:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----