Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/49f40c-5448-4217-956f-ccf9b0f0e227/1/gmAVLt1HazFwhARFKVhhW2Xdywo.mft
File:                     gmAVLt1HazFwhARFKVhhW2Xdywo.mft (raw, json)
Hash identifier:          6n6jIB+JtH/frkj4Dt48TKpLo1afJ/toMOqhPn6Xewg=
Subject key identifier:   4B:85:F9:EC:75:55:AF:C0:B7:05:C8:77:35:7C:CF:E8:B6:80:AC:FF
Authority key identifier: 82:60:15:2E:DD:47:6B:31:70:84:04:45:29:58:61:5B:65:DD:CB:0A
Certificate issuer:       /CN=8260152edd476b31708404452958615b65ddcb0a
Certificate serial:       01962F3D54821B475C4B9A59346465BD5207
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gmAVLt1HazFwhARFKVhhW2Xdywo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/49/49f40c-5448-4217-956f-ccf9b0f0e227/1/gmAVLt1HazFwhARFKVhhW2Xdywo.mft
Manifest number:          14E9
Signing time:             Sun 13 Apr 2025 13:01:10 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:10 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:10 +0000
Files and hashes:         1: ABnX77DVikk7gn2fQ6SCyXZp5CY.roa (hash: tGweD2UyMDN3jg0C7H8c7WDDk9iUdxSAoQTdTpfDf5g=)
                          2: gmAVLt1HazFwhARFKVhhW2Xdywo.crl (hash: cbwnMha3GSfKb0k1EcQQGjQfgzOHcy/WExvI9EVQO68=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:54:82:1b:47:5c:4b:9a:59:34:64:65:bd:52:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8260152edd476b31708404452958615b65ddcb0a
        Validity
            Not Before: Apr 13 13:01:10 2025 GMT
            Not After : Apr 14 13:01:10 2025 GMT
        Subject: CN=4b85f9ec7555afc0b705c877357ccfe8b680acff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:98:b5:e8:a3:27:dc:43:ef:3e:52:43:a9:eb:
                    56:bb:1e:f2:a1:1f:5d:16:ff:19:51:0f:93:93:ca:
                    ba:c7:4b:f3:4a:f0:77:ee:aa:f8:86:ff:f0:c0:8f:
                    7b:03:5c:69:b9:d5:3e:f6:52:4c:79:01:27:32:eb:
                    f8:0f:c0:4d:40:82:dd:e7:3b:4d:eb:ea:43:e1:dd:
                    24:67:96:14:5f:88:71:82:7c:26:93:08:89:5b:f4:
                    7e:b9:91:0f:40:c0:66:75:f8:9d:24:19:c6:65:bc:
                    95:1d:1a:ba:8b:cf:4c:ab:28:34:d1:0f:07:b8:59:
                    f7:ec:2c:1d:b4:0c:fd:5d:38:3d:79:24:14:88:c2:
                    a3:e7:87:52:24:a5:56:94:a8:a6:16:86:03:f4:a8:
                    a6:28:31:5b:bb:0c:3d:37:7c:f5:ad:63:79:92:ce:
                    9b:f5:0d:9e:41:66:4a:f8:92:95:27:ec:34:5b:26:
                    e3:06:f5:2d:d4:f4:40:c1:71:44:98:3b:c7:c2:82:
                    50:df:b5:8b:93:a0:f6:9b:df:80:ef:34:96:d6:2b:
                    c5:45:8b:66:dd:c1:5e:e6:77:a9:3f:c9:45:8f:a3:
                    cd:17:d1:23:cf:57:8f:c0:c8:d8:b7:98:0b:54:a7:
                    68:66:85:4c:fd:b7:59:85:38:7a:cd:17:64:e6:8c:
                    2e:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:85:F9:EC:75:55:AF:C0:B7:05:C8:77:35:7C:CF:E8:B6:80:AC:FF
            X509v3 Authority Key Identifier:
                keyid:82:60:15:2E:DD:47:6B:31:70:84:04:45:29:58:61:5B:65:DD:CB:0A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gmAVLt1HazFwhARFKVhhW2Xdywo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/49f40c-5448-4217-956f-ccf9b0f0e227/1/gmAVLt1HazFwhARFKVhhW2Xdywo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/49/49f40c-5448-4217-956f-ccf9b0f0e227/1/gmAVLt1HazFwhARFKVhhW2Xdywo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:5e:f8:f9:27:b9:3c:d1:90:2f:d1:d7:b6:6f:ed:57:a6:85:
         d4:52:a3:dd:63:64:0b:ea:94:05:2b:b4:1e:28:a6:76:2b:8e:
         7f:4b:6d:cc:8f:a6:6c:08:ab:a2:8b:3d:c1:d6:09:b2:b9:7c:
         41:19:54:78:f9:2e:f7:b2:5b:74:0a:77:03:62:c9:bc:78:09:
         33:e2:a6:be:4c:eb:c7:f2:8f:36:a1:d0:56:d5:a8:00:8a:cd:
         14:e1:b4:cd:95:68:d7:a2:50:60:d0:96:67:d1:0d:89:05:46:
         6a:9b:53:21:9c:ba:8c:c9:0a:26:e4:f4:5a:24:0c:bd:af:94:
         b0:2f:12:09:12:6f:76:67:06:41:85:68:54:53:33:55:38:a5:
         7d:b2:2c:89:7a:bc:58:4f:b2:b1:72:3e:02:ab:a7:90:f1:82:
         03:f1:09:3a:a2:84:03:3c:94:58:6f:94:d6:ea:cd:19:34:af:
         92:d5:46:04:76:60:47:d5:d6:b9:96:b4:fe:50:14:76:9f:2f:
         0e:c1:62:d6:e2:59:5d:45:2d:27:fa:61:d3:14:a4:38:2e:42:
         e9:d4:fa:0c:dd:e0:79:de:59:e3:c4:d9:fe:f9:42:e2:4f:24:
         c7:c9:03:1d:db:69:97:12:58:c2:8e:d9:fa:9e:63:8b:c3:d9:
         f7:e2:6b:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----