Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/0bd15a-4c49-40fc-9192-b2a47ed416b2/1/gXSGHd7wagc1I8mTkWjVtxadaHU.mft
File:                     gXSGHd7wagc1I8mTkWjVtxadaHU.mft (raw, json)
Hash identifier:          igtBpxjgySqSv7y6wjTrWQii3nPa2v4ituhUK/bETms=
Subject key identifier:   68:D9:62:53:3C:0E:FD:30:DB:24:4E:91:46:6B:C9:16:2F:C1:3B:D9
Authority key identifier: 81:74:86:1D:DE:F0:6A:07:35:23:C9:93:91:68:D5:B7:16:9D:68:75
Certificate issuer:       /CN=8174861ddef06a073523c9939168d5b7169d6875
Certificate serial:       01962ECFC97B128E1B1ECE34F8CA85A6534C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gXSGHd7wagc1I8mTkWjVtxadaHU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/46/0bd15a-4c49-40fc-9192-b2a47ed416b2/1/gXSGHd7wagc1I8mTkWjVtxadaHU.mft
Manifest number:          0729
Signing time:             Sun 13 Apr 2025 11:01:31 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:31 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:31 +0000
Files and hashes:         1: E-w5M4eQP91wEOXM7w1SR0QOmxg.roa (hash: +jFSsPpUEMM2UeClDBFj9F6a9KDL4VbEDLgdyScKqB4=)
                          2: gXSGHd7wagc1I8mTkWjVtxadaHU.crl (hash: bnAYbY+r62EWXKphAwfIdnporrS8aJIG5KAMeXia+Zo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:c9:7b:12:8e:1b:1e:ce:34:f8:ca:85:a6:53:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8174861ddef06a073523c9939168d5b7169d6875
        Validity
            Not Before: Apr 13 11:01:31 2025 GMT
            Not After : Apr 14 11:01:31 2025 GMT
        Subject: CN=68d962533c0efd30db244e91466bc9162fc13bd9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:e1:a2:e1:d1:1d:57:8d:7b:70:eb:28:e8:86:
                    b2:02:37:d4:d0:76:30:c9:66:89:2a:43:52:c6:a2:
                    b9:86:4e:f9:11:2e:d4:2a:ce:f5:81:f0:95:c6:1c:
                    6c:96:ba:0c:fc:60:47:bd:50:d5:5e:d6:4f:8d:60:
                    22:7e:37:21:0f:12:d5:42:60:11:af:d3:94:e2:76:
                    f3:25:bf:1f:56:93:0c:ab:14:8f:69:e8:f7:05:c2:
                    ed:87:28:b9:b5:62:33:72:1d:c0:92:a8:94:e9:d8:
                    66:09:32:60:ff:34:99:aa:dc:7d:9e:ac:57:ee:52:
                    42:82:fa:ff:5a:bd:47:f5:92:30:fd:97:43:95:14:
                    f3:e8:bc:0a:47:21:97:92:95:b6:98:b4:e0:1a:40:
                    eb:30:bf:db:42:54:86:be:ac:2c:cb:94:43:eb:2d:
                    52:c5:c6:8b:33:29:bd:94:28:bf:44:9e:d0:a7:f0:
                    95:b9:fd:38:48:04:15:60:14:03:5a:04:ee:c3:7c:
                    f7:67:33:3c:a2:b7:8f:bc:05:6d:b3:d4:7b:ef:d6:
                    ea:9c:23:ca:97:fb:b8:e3:27:20:de:13:a2:08:85:
                    99:b9:af:1e:f4:2c:6b:7c:74:45:fa:c2:52:7c:a8:
                    a5:d3:99:7d:f3:0d:c0:b0:d2:28:cc:d1:01:32:9c:
                    94:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:D9:62:53:3C:0E:FD:30:DB:24:4E:91:46:6B:C9:16:2F:C1:3B:D9
            X509v3 Authority Key Identifier:
                keyid:81:74:86:1D:DE:F0:6A:07:35:23:C9:93:91:68:D5:B7:16:9D:68:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gXSGHd7wagc1I8mTkWjVtxadaHU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/0bd15a-4c49-40fc-9192-b2a47ed416b2/1/gXSGHd7wagc1I8mTkWjVtxadaHU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/46/0bd15a-4c49-40fc-9192-b2a47ed416b2/1/gXSGHd7wagc1I8mTkWjVtxadaHU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:05:8d:e1:0f:77:e5:a3:c3:da:59:00:c5:f9:1d:68:54:54:
         28:9b:33:ce:06:3d:52:a4:ac:d2:b7:8f:e3:9b:b9:ad:5b:46:
         b5:25:c6:c9:63:5d:de:74:05:12:c7:3e:63:ce:f8:bf:49:cd:
         06:e1:33:ae:c4:5f:b4:c4:9e:e3:c7:9a:e2:6f:04:cb:51:70:
         ab:c8:a5:13:c0:c5:a0:6e:5a:e3:83:49:6d:28:c2:09:0e:c8:
         b6:82:2f:4c:86:a5:f9:5a:8a:c7:5f:5c:20:08:af:c4:f3:d8:
         75:6f:cb:ff:fe:81:b3:b4:68:9f:91:5b:09:88:3e:69:4e:91:
         da:ed:63:3b:81:c1:61:e4:70:d2:c8:b5:da:67:0e:93:68:cb:
         13:82:41:f2:bd:db:7f:f7:70:b7:b5:7b:2a:b4:ab:13:ad:30:
         15:4f:22:d4:ec:fb:be:4d:80:78:0c:c6:13:89:cd:88:33:54:
         93:fe:4f:12:3f:a0:3a:2b:c7:02:ae:9a:2b:4b:21:0f:39:5e:
         68:0f:75:e2:d1:5d:e5:83:3b:0c:98:c8:74:81:5b:f9:53:6d:
         7b:40:af:b5:58:2a:21:37:13:67:1d:de:0d:85:b8:21:4c:e2:
         1f:49:62:14:0d:0b:5d:df:61:4d:ca:83:93:fb:d3:0c:b3:eb:
         b1:41:69:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----