Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/e6f1a4-a43e-47bd-a178-c36a96c04177/1/Gqx9tRk8Gzt0h-hH1Bo4PtWyZnE.mft
File:                     Gqx9tRk8Gzt0h-hH1Bo4PtWyZnE.mft (raw, json)
Hash identifier:          P+bAiUYZIMLGLd6SVguwE7HIJd42WfZkb8i2mLhKh28=
Subject key identifier:   25:CB:71:39:0C:02:BD:36:7E:B3:05:BB:C0:3B:FC:95:E9:44:73:45
Authority key identifier: 1A:AC:7D:B5:19:3C:1B:3B:74:87:E8:47:D4:1A:38:3E:D5:B2:66:71
Certificate issuer:       /CN=1aac7db5193c1b3b7487e847d41a383ed5b26671
Certificate serial:       01962F06CFDC0B7EB70D97566C0809BE3B3B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Gqx9tRk8Gzt0h-hH1Bo4PtWyZnE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/32/e6f1a4-a43e-47bd-a178-c36a96c04177/1/Gqx9tRk8Gzt0h-hH1Bo4PtWyZnE.mft
Manifest number:          07C9
Signing time:             Sun 13 Apr 2025 12:01:37 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:37 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:37 +0000
Files and hashes:         1: Gqx9tRk8Gzt0h-hH1Bo4PtWyZnE.crl (hash: WsHqbsL2W+3xW/S4IOGB5rz+T/8cktZ0kcL1pvsmk14=)
                          2: tv0huOh6mK0H4w2Pkxi0zxGdHcU.roa (hash: AhjG9w2zaLD4mADBnCLY0U88JMMTl5C2x9ZxBk5L0+Q=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:cf:dc:0b:7e:b7:0d:97:56:6c:08:09:be:3b:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1aac7db5193c1b3b7487e847d41a383ed5b26671
        Validity
            Not Before: Apr 13 12:01:37 2025 GMT
            Not After : Apr 14 12:01:37 2025 GMT
        Subject: CN=25cb71390c02bd367eb305bbc03bfc95e9447345
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:e5:a7:d4:b8:58:22:00:2c:91:59:ab:3e:4d:
                    bb:55:7d:b0:91:40:54:be:a7:64:c5:29:05:da:67:
                    75:5b:37:ad:de:ce:73:26:c5:82:ef:f9:8f:de:79:
                    6f:87:b5:fc:72:be:aa:3b:b7:17:d9:f9:5c:26:3f:
                    85:41:4a:54:89:9a:e6:ac:bc:4c:09:12:f3:01:87:
                    be:42:c4:a2:3a:15:73:4c:b1:f1:04:37:93:7f:13:
                    77:49:c0:07:cb:29:47:92:0f:c9:72:40:ad:54:4f:
                    e1:8b:b3:32:79:4f:bc:33:5e:22:bd:9b:6e:19:a9:
                    35:1b:91:27:4d:a3:75:f7:f4:d4:c7:9e:b4:b1:59:
                    f8:87:06:8f:5b:a9:9b:ed:e4:1d:f8:3c:0b:ac:e5:
                    35:65:f8:46:38:14:83:6d:97:83:29:e4:52:10:e9:
                    2b:e4:64:34:ab:76:4a:13:b7:ee:f6:5b:36:2b:2e:
                    ba:c7:96:3f:31:c6:bd:1e:e2:98:13:0d:fb:f3:6c:
                    70:8f:a1:44:c1:e1:55:4b:68:d4:29:41:d3:75:8b:
                    2f:63:90:c1:5c:6d:31:c0:bf:9a:c3:9e:a8:17:aa:
                    c4:3d:ee:17:15:24:1f:00:af:91:11:b3:66:8a:79:
                    93:01:b5:1b:93:8c:e9:57:a8:3d:7f:7d:17:f8:0a:
                    d9:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:CB:71:39:0C:02:BD:36:7E:B3:05:BB:C0:3B:FC:95:E9:44:73:45
            X509v3 Authority Key Identifier:
                keyid:1A:AC:7D:B5:19:3C:1B:3B:74:87:E8:47:D4:1A:38:3E:D5:B2:66:71

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gqx9tRk8Gzt0h-hH1Bo4PtWyZnE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/e6f1a4-a43e-47bd-a178-c36a96c04177/1/Gqx9tRk8Gzt0h-hH1Bo4PtWyZnE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/32/e6f1a4-a43e-47bd-a178-c36a96c04177/1/Gqx9tRk8Gzt0h-hH1Bo4PtWyZnE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:d2:4f:e7:0d:32:91:6a:9e:b1:8c:ab:03:64:70:2c:01:7a:
         04:3a:f9:a4:d8:fd:62:3c:90:e3:d2:28:90:9c:8a:9d:4a:a8:
         2f:4e:a1:66:65:75:28:39:a4:94:68:c6:5c:33:1e:ab:cd:ff:
         ed:5b:83:3c:4b:cb:94:e5:77:a1:76:c8:e1:2f:c5:b0:79:14:
         ac:df:ea:d2:8c:e8:9d:91:ef:1b:88:18:f0:b7:42:b7:39:58:
         30:91:bb:bc:56:af:a4:19:7d:c0:00:10:0e:b3:cf:d9:e8:74:
         20:42:39:ad:11:26:16:f6:da:0f:46:a1:1f:79:3e:8b:b7:25:
         34:01:c3:d6:74:92:8f:9c:09:c2:61:50:da:6e:d5:4b:f7:6a:
         59:4c:10:98:3e:1a:33:99:cc:16:29:41:c2:c3:19:5b:56:4c:
         fb:c6:52:db:91:be:8b:19:aa:50:3c:f4:07:c6:ab:45:de:5b:
         6b:b2:78:da:5a:d1:99:51:ee:6c:83:64:21:3a:1a:ca:cc:4e:
         e7:32:81:08:f3:46:b5:f4:60:67:a8:45:20:e6:0b:a9:d3:ec:
         d9:6a:de:f0:26:3c:8f:0c:c7:9a:72:6a:ae:13:ce:b6:76:e4:
         66:55:09:1e:df:6a:af:3d:ae:8d:64:66:f0:2c:7c:9f:23:96:
         96:f6:3c:cd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvBs/cC363DZdWbAgJvjs7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFhYWM3ZGI1MTkzYzFiM2I3NDg3ZTg0N2Q0MWEzODNlZDVi
MjY2NzEwHhcNMjUwNDEzMTIwMTM3WhcNMjUwNDE0MTIwMTM3WjAzMTEwLwYDVQQD
EygyNWNiNzEzOTBjMDJiZDM2N2ViMzA1YmJjMDNiZmM5NWU5NDQ3MzQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAquWn1LhYIgAskVmrPk27VX2wkUBU
vqdkxSkF2md1Wzet3s5zJsWC7/mP3nlvh7X8cr6qO7cX2flcJj+FQUpUiZrmrLxM
CRLzAYe+QsSiOhVzTLHxBDeTfxN3ScAHyylHkg/JckCtVE/hi7MyeU+8M14ivZtu
Gak1G5EnTaN19/TUx560sVn4hwaPW6mb7eQd+DwLrOU1ZfhGOBSDbZeDKeRSEOkr
5GQ0q3ZKE7fu9ls2Ky66x5Y/Mca9HuKYEw3782xwj6FEweFVS2jUKUHTdYsvY5DB
XG0xwL+aw56oF6rEPe4XFSQfAK+REbNminmTAbUbk4zpV6g9f30X+ArZZQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCXLcTkMAr02frMFu8A7/JXpRHNFMB8GA1UdIwQY
MBaAFBqsfbUZPBs7dIfoR9QaOD7VsmZxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR3F4OXRSazhHenQwaC1oSDFCbzRQdFd5Wm5FLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMi9lNmYxYTQtYTQzZS00N2JkLWExNzgt
YzM2YTk2YzA0MTc3LzEvR3F4OXRSazhHenQwaC1oSDFCbzRQdFd5Wm5FLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMi9lNmYxYTQtYTQzZS00N2JkLWExNzgtYzM2YTk2YzA0MTc3
LzEvR3F4OXRSazhHenQwaC1oSDFCbzRQdFd5Wm5FLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOdJP5w0y
kWqesYyrA2RwLAF6BDr5pNj9YjyQ49IokJyKnUqoL06hZmV1KDmklGjGXDMeq83/
7VuDPEvLlOV3oXbI4S/FsHkUrN/q0ozonZHvG4gY8LdCtzlYMJG7vFavpBl9wAAQ
DrPP2eh0IEI5rREmFvbaD0ahH3k+i7clNAHD1nSSj5wJwmFQ2m7VS/dqWUwQmD4a
M5nMFilBwsMZW1ZM+8ZS25G+ixmqUDz0B8arRd5ba7J42lrRmVHubINkIToaysxO
5zKBCPNGtfRgZ6hFIOYLqdPs2Wre8CY8jwzHmnJqrhPOtnbkZlUJHt9qrz2ujWRm
8Cx8nyOWlvY8zQ==
-----END CERTIFICATE-----