Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/68d724-d62e-4689-998a-e14388e6145d/1/gyVb16Los8d3SMPFajBDu8ESbEE.mft
File:                     gyVb16Los8d3SMPFajBDu8ESbEE.mft (raw, json)
Hash identifier:          xupn4EYp/T250ylox9yOCSGkfajVerF27Ln6gydmUJ0=
Subject key identifier:   6F:F3:D5:6B:49:41:37:A2:02:76:7F:A5:C9:6D:D1:8A:45:21:3D:B2
Authority key identifier: 83:25:5B:D7:A2:E8:B3:C7:77:48:C3:C5:6A:30:43:BB:C1:12:6C:41
Certificate issuer:       /CN=83255bd7a2e8b3c77748c3c56a3043bbc1126c41
Certificate serial:       01962F748EE370DFE3B48A4AD1F45DF891A3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gyVb16Los8d3SMPFajBDu8ESbEE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/34/68d724-d62e-4689-998a-e14388e6145d/1/gyVb16Los8d3SMPFajBDu8ESbEE.mft
Manifest number:          021B
Signing time:             Sun 13 Apr 2025 14:01:29 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:29 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:29 +0000
Files and hashes:         1: DSVZ5LWHMvVEjx2Ly8HogvfGbeg.roa (hash: 00oXnXEmoCajVRqJ5SAY3Z4mponT7rL20+QYAvfx80c=)
                          2: gyVb16Los8d3SMPFajBDu8ESbEE.crl (hash: nk9EjKHzhOxbh7we+giXTys/Y9fCUb00ufVfCkwMMaM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:8e:e3:70:df:e3:b4:8a:4a:d1:f4:5d:f8:91:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=83255bd7a2e8b3c77748c3c56a3043bbc1126c41
        Validity
            Not Before: Apr 13 14:01:29 2025 GMT
            Not After : Apr 14 14:01:29 2025 GMT
        Subject: CN=6ff3d56b494137a202767fa5c96dd18a45213db2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:c9:d6:77:ba:be:65:2a:1b:de:04:1a:de:1d:
                    03:75:27:7e:c5:47:d5:d0:aa:f0:c5:c3:d4:f8:27:
                    cb:30:40:a5:b8:dc:b6:ea:8f:0f:b9:56:5b:1a:b4:
                    ad:cc:cb:56:b7:d4:91:fd:1f:be:38:c5:68:28:8d:
                    a0:fc:97:45:bd:b9:21:64:a7:72:19:0e:dc:87:d7:
                    0e:e2:59:75:3a:c5:5c:4b:65:2c:0c:44:f1:24:d1:
                    f4:7c:ce:02:9b:b0:6a:d2:3f:32:15:81:cf:91:2f:
                    59:d8:fd:6b:ed:74:ac:69:9b:ec:21:9c:39:39:c0:
                    a8:2c:50:a6:3b:84:cc:4b:98:7c:09:ca:30:05:0d:
                    56:3e:9d:27:15:ca:5c:0d:d9:fa:71:ac:aa:ab:17:
                    aa:ee:1a:0b:2a:69:af:d2:ba:da:d3:b8:69:04:98:
                    d5:91:73:f7:98:92:88:fe:95:23:0d:5e:a3:f8:4d:
                    8c:a5:bb:63:d8:1c:5a:90:17:9e:74:70:78:20:94:
                    50:08:cd:2a:76:c4:42:1d:da:e9:5c:ca:da:eb:ce:
                    56:7b:25:f4:c1:7f:cd:8b:14:28:25:a3:38:90:62:
                    ea:8b:a2:4c:37:43:b1:58:8c:72:7f:2f:56:e0:10:
                    d0:b9:f6:38:0b:34:9b:13:ac:33:50:af:8d:97:43:
                    8d:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:F3:D5:6B:49:41:37:A2:02:76:7F:A5:C9:6D:D1:8A:45:21:3D:B2
            X509v3 Authority Key Identifier:
                keyid:83:25:5B:D7:A2:E8:B3:C7:77:48:C3:C5:6A:30:43:BB:C1:12:6C:41

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gyVb16Los8d3SMPFajBDu8ESbEE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/68d724-d62e-4689-998a-e14388e6145d/1/gyVb16Los8d3SMPFajBDu8ESbEE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/34/68d724-d62e-4689-998a-e14388e6145d/1/gyVb16Los8d3SMPFajBDu8ESbEE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:6b:81:5d:9e:08:86:ed:be:14:67:a0:51:a0:0d:23:f5:4e:
         c5:80:c7:5e:53:4a:0e:a0:e2:03:d7:a9:68:e1:86:cc:d8:10:
         32:09:0b:65:38:3d:57:e7:96:53:c2:96:d2:c0:5d:df:6c:b1:
         8a:5e:1c:8e:13:a1:aa:c1:ea:60:df:44:e9:04:7f:3b:ce:94:
         5d:b1:3a:40:d9:e8:9a:55:31:c8:b4:28:bb:a2:a5:7b:6d:59:
         be:36:df:37:51:d6:04:ab:f0:32:a6:b4:94:f1:7d:51:29:57:
         92:0d:c6:ae:5e:a3:01:3c:6e:91:1f:cc:7c:88:8a:6d:e0:0e:
         a9:5b:9d:1a:32:0c:e6:32:a5:31:e0:54:27:9d:1f:da:b9:6d:
         6c:83:33:e9:08:3c:79:ee:2e:73:9e:6d:18:37:c5:50:23:ad:
         80:b9:84:9d:53:60:37:18:c2:25:1a:b6:5d:72:ea:98:0f:8d:
         db:69:3b:71:a2:5e:82:8b:89:ce:91:29:50:89:27:84:cc:60:
         ba:50:00:3e:57:6e:3a:04:66:ae:c2:cd:7b:e7:8d:5b:e1:10:
         da:ab:4b:f4:36:19:5e:11:b8:76:c4:04:da:0e:1c:dd:43:14:
         17:58:da:37:42:f8:d1:54:f9:3d:dd:aa:65:e4:fc:d1:03:e9:
         27:9a:13:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----