Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/59a43f-881a-48ed-9c3e-82c085a92777/1/GmoUE8yJZe6SQWtgWfkLGHeMizg.mft
File:                     GmoUE8yJZe6SQWtgWfkLGHeMizg.mft (raw, json)
Hash identifier:          dDQA3nv+UMXMlODEo8pxhW23xtabwyI+D5QCD5trE/0=
Subject key identifier:   A7:39:57:70:9B:14:F1:E3:3D:8D:8C:1C:9C:8C:76:E2:37:A2:ED:F4
Authority key identifier: 1A:6A:14:13:CC:89:65:EE:92:41:6B:60:59:F9:0B:18:77:8C:8B:38
Certificate issuer:       /CN=1a6a1413cc8965ee92416b6059f90b18778c8b38
Certificate serial:       01962F746BB1AF1B15D70FC4311FE45F1767
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GmoUE8yJZe6SQWtgWfkLGHeMizg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2d/59a43f-881a-48ed-9c3e-82c085a92777/1/GmoUE8yJZe6SQWtgWfkLGHeMizg.mft
Manifest number:          0E48
Signing time:             Sun 13 Apr 2025 14:01:20 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:20 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:20 +0000
Files and hashes:         1: GmoUE8yJZe6SQWtgWfkLGHeMizg.crl (hash: 7euNtUHhqbwb/8IHtziT4oCSYfx0YoGEWBIQd+jfCFc=)
                          2: MaOlvwAbeWy9-FgOuMxK1jcYV7I.roa (hash: ImO4oBWkVF+Qx8bpwB2w2UPJr50EG7WrYl+YWVWzFfk=)
                          3: q6mDakXCczwOucfjGR_MCayBN00.roa (hash: WHAyxlbQLqyJ/G0nYhz0U1oY3c2QkU4OXH4il3FpXbI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:6b:b1:af:1b:15:d7:0f:c4:31:1f:e4:5f:17:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1a6a1413cc8965ee92416b6059f90b18778c8b38
        Validity
            Not Before: Apr 13 14:01:20 2025 GMT
            Not After : Apr 14 14:01:20 2025 GMT
        Subject: CN=a73957709b14f1e33d8d8c1c9c8c76e237a2edf4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:a8:b1:79:ef:17:24:28:a3:af:5b:74:69:e1:
                    de:45:5c:b5:4f:3f:e5:e4:63:03:1a:8c:1d:a9:7a:
                    ff:d1:2a:06:d0:fd:c9:63:c8:37:16:4f:dd:6f:13:
                    3c:63:a5:0e:fa:dd:4f:f4:c3:94:79:80:50:9d:6e:
                    04:ee:a1:f1:9d:b5:d7:29:28:9a:0c:8e:85:22:63:
                    ff:89:6f:1b:34:1e:f2:36:bd:72:5e:64:dc:10:ee:
                    1d:ff:e9:98:50:b4:24:7b:36:2e:c0:6c:a8:db:80:
                    c1:6d:a3:71:74:68:63:89:cd:c5:ff:a7:bd:86:ec:
                    74:e0:ea:8e:c0:c1:03:bd:49:ec:11:83:94:fc:b6:
                    bc:7a:6c:49:51:6a:2c:a2:2d:ed:ed:aa:97:77:54:
                    18:4d:d2:bb:35:08:3a:fb:d9:fe:7a:25:76:0d:1a:
                    50:5a:1b:c4:ab:58:93:3d:89:49:c3:af:f8:89:66:
                    92:02:f7:37:db:62:12:bb:ad:2c:04:aa:5b:cd:87:
                    05:bc:86:02:4a:c6:e2:ad:4b:2d:8b:2d:65:0b:30:
                    80:da:a7:5d:d9:cd:c0:dc:5d:85:f8:98:b9:70:83:
                    74:50:4d:5d:3f:a4:d5:11:cf:13:89:ac:fa:ba:ee:
                    14:3c:49:87:a4:d1:39:51:43:8c:2f:d3:e3:bc:54:
                    23:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:39:57:70:9B:14:F1:E3:3D:8D:8C:1C:9C:8C:76:E2:37:A2:ED:F4
            X509v3 Authority Key Identifier:
                keyid:1A:6A:14:13:CC:89:65:EE:92:41:6B:60:59:F9:0B:18:77:8C:8B:38

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GmoUE8yJZe6SQWtgWfkLGHeMizg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/59a43f-881a-48ed-9c3e-82c085a92777/1/GmoUE8yJZe6SQWtgWfkLGHeMizg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/59a43f-881a-48ed-9c3e-82c085a92777/1/GmoUE8yJZe6SQWtgWfkLGHeMizg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:d0:19:86:ef:6f:e0:9d:7a:bb:8f:95:50:67:f2:73:6f:be:
         ae:6a:40:81:96:8b:d5:7d:e6:14:e9:4b:a0:0f:d5:a1:9b:74:
         1c:73:9a:53:ac:34:9f:7f:c8:b4:fe:c2:9c:18:ec:1b:e7:1f:
         d4:cf:50:71:d4:39:df:48:33:c1:91:d7:15:cf:a8:b9:27:bf:
         72:ea:f5:9e:91:49:03:53:25:6d:99:3b:f7:d4:ea:ff:d1:27:
         af:33:8a:09:81:30:b2:0b:1a:10:68:d3:49:3d:81:12:0a:a3:
         de:36:20:2d:72:02:96:08:15:82:a8:27:98:1a:4d:8b:cb:e8:
         e7:be:c4:4c:6f:17:16:5a:49:bb:1f:4e:50:19:09:7d:2b:aa:
         4d:0f:75:83:bf:42:a4:8f:b2:d6:31:d8:f7:8a:ca:d1:ec:68:
         49:4e:f5:fa:df:e4:5c:d8:88:b2:ac:75:27:cb:be:d0:47:c3:
         3d:bb:2a:9d:c4:8d:1d:d3:d7:16:d2:fb:eb:b3:71:3d:fc:de:
         33:8b:a1:5f:ee:f5:80:e8:f4:61:1b:05:04:a0:48:85:33:2a:
         ac:9b:f3:ec:1a:1f:cb:6d:17:65:9a:79:7c:07:5d:6d:5a:65:
         7b:df:0c:b9:a6:b2:0a:37:3c:7d:2b:e0:8f:b5:c6:2c:1c:ef:
         9a:a2:49:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----