Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/19500a-d8a9-4a31-8931-5e700dd6b9ee/1/GcplSdJk-JmK6KjbvWWpZFBIlqs.mft
File:                     GcplSdJk-JmK6KjbvWWpZFBIlqs.mft (raw, json)
Hash identifier:          Xa+GIBxgw0E2zhyt/6xiosY0YHgvLAU9fv5OMFNS+QQ=
Subject key identifier:   4B:1A:B1:73:EF:41:1A:69:B9:4C:FD:D8:94:C7:C0:23:D8:A8:DD:C3
Authority key identifier: 19:CA:65:49:D2:64:F8:99:8A:E8:A8:DB:BD:65:A9:64:50:48:96:AB
Certificate issuer:       /CN=19ca6549d264f8998ae8a8dbbd65a964504896ab
Certificate serial:       01962FAB4367D35448C4072BD9FAC2A29D41
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GcplSdJk-JmK6KjbvWWpZFBIlqs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/19500a-d8a9-4a31-8931-5e700dd6b9ee/1/GcplSdJk-JmK6KjbvWWpZFBIlqs.mft
Manifest number:          14EB
Signing time:             Sun 13 Apr 2025 15:01:15 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:15 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:15 +0000
Files and hashes:         1: GcplSdJk-JmK6KjbvWWpZFBIlqs.crl (hash: gPyGH63Bmg9lHwh+uEd5QYZnftOkpOCvLsgFperoQEs=)
                          2: t7HeGa1_t6Nxzc-_HOHftvuvy5Q.roa (hash: 7423NrotfDnoM0CPhCQktczVoHyICuq8tfhavM4pkvI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:43:67:d3:54:48:c4:07:2b:d9:fa:c2:a2:9d:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=19ca6549d264f8998ae8a8dbbd65a964504896ab
        Validity
            Not Before: Apr 13 15:01:15 2025 GMT
            Not After : Apr 14 15:01:15 2025 GMT
        Subject: CN=4b1ab173ef411a69b94cfdd894c7c023d8a8ddc3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:34:c5:84:07:07:b8:21:b6:d7:37:9e:b9:5f:
                    be:3a:45:c1:fc:ee:fe:9c:d1:d3:ba:d8:cc:6d:41:
                    f0:0d:4d:91:6d:c1:e1:d5:53:75:d6:bd:a2:17:1a:
                    e8:6c:fc:35:a3:d2:3b:75:17:d6:1f:8e:1c:e5:8b:
                    17:d9:91:6e:0d:de:0f:2a:28:a7:97:0a:c9:ed:1b:
                    3d:39:03:e4:b2:e7:03:97:4e:fc:1d:47:dd:96:1a:
                    a4:d6:a1:cc:82:fd:3b:b9:87:77:10:06:af:16:63:
                    8b:eb:e5:41:78:97:03:45:41:89:db:56:af:86:ac:
                    ab:46:28:bd:15:d0:b0:ea:46:3d:2f:77:aa:71:fa:
                    b7:6d:a5:75:ce:2c:9b:b0:8a:2f:4e:bf:e1:ce:d8:
                    f5:72:55:03:81:e2:ec:31:56:fe:59:25:35:fd:5d:
                    67:b6:e3:ac:4f:f3:07:bb:6d:19:78:2b:89:ee:ec:
                    c4:a5:29:97:ce:50:4b:8c:d8:5a:1a:2b:ff:10:e4:
                    e5:a3:c9:a3:ce:6d:43:a7:d1:d7:b8:c9:4a:11:2b:
                    ab:c1:47:1d:0c:fd:1b:88:1c:b7:2d:ec:aa:01:5a:
                    36:07:81:87:98:2d:9d:33:df:3b:69:2f:71:13:71:
                    39:fd:b4:a0:eb:4d:17:a0:16:28:7d:da:96:54:6d:
                    86:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:1A:B1:73:EF:41:1A:69:B9:4C:FD:D8:94:C7:C0:23:D8:A8:DD:C3
            X509v3 Authority Key Identifier:
                keyid:19:CA:65:49:D2:64:F8:99:8A:E8:A8:DB:BD:65:A9:64:50:48:96:AB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GcplSdJk-JmK6KjbvWWpZFBIlqs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/19500a-d8a9-4a31-8931-5e700dd6b9ee/1/GcplSdJk-JmK6KjbvWWpZFBIlqs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/19500a-d8a9-4a31-8931-5e700dd6b9ee/1/GcplSdJk-JmK6KjbvWWpZFBIlqs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:59:1f:a7:9d:68:f3:68:d4:f6:0e:6b:9b:12:d9:7f:1e:dd:
         cd:8b:68:21:c8:84:ba:ee:1a:36:25:eb:53:cb:f4:60:af:34:
         aa:d3:dc:f6:b1:c6:42:b3:bb:7e:aa:f3:85:3d:ad:d4:14:08:
         d7:e6:25:c9:5b:34:9d:98:e6:9d:63:a0:99:38:73:65:8e:a5:
         27:ab:e5:bf:b9:35:e7:a9:13:d8:78:c6:9d:0f:50:67:e4:86:
         b6:98:4d:d8:06:f1:1e:e6:ce:f8:21:12:7d:71:30:3a:d8:4b:
         92:e7:a5:fe:0b:f5:b6:21:ee:6a:32:ec:b2:03:93:6b:39:03:
         3f:d8:77:b1:f6:31:9c:ab:9e:38:46:9c:c5:18:7a:d0:2e:d1:
         dc:4b:a6:94:6f:44:64:4e:9b:76:19:4c:bb:a0:45:d8:fd:d8:
         2f:d2:03:c2:0f:18:4d:2b:40:42:b8:ee:78:a3:73:f3:a4:68:
         b1:d2:9a:83:7b:b9:97:0a:7e:1e:56:7d:a6:d9:2d:20:6f:ef:
         c7:0c:db:60:f6:f9:ef:1e:7c:7b:89:77:a6:e7:f4:3b:9f:19:
         f7:61:b9:0d:43:dd:a6:1d:c3:d4:3e:00:6a:87:d5:8e:56:8e:
         10:8b:24:66:ad:26:97:44:d5:d5:44:d9:21:7f:70:e8:f7:5a:
         2e:f7:ef:19
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvq0Nn01RIxAcr2frCop1BMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE5Y2E2NTQ5ZDI2NGY4OTk4YWU4YThkYmJkNjVhOTY0NTA0
ODk2YWIwHhcNMjUwNDEzMTUwMTE1WhcNMjUwNDE0MTUwMTE1WjAzMTEwLwYDVQQD
Eyg0YjFhYjE3M2VmNDExYTY5Yjk0Y2ZkZDg5NGM3YzAyM2Q4YThkZGMzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmjTFhAcHuCG21zeeuV++OkXB/O7+
nNHTutjMbUHwDU2RbcHh1VN11r2iFxrobPw1o9I7dRfWH44c5YsX2ZFuDd4PKiin
lwrJ7Rs9OQPksucDl078HUfdlhqk1qHMgv07uYd3EAavFmOL6+VBeJcDRUGJ21av
hqyrRii9FdCw6kY9L3eqcfq3baV1ziybsIovTr/hztj1clUDgeLsMVb+WSU1/V1n
tuOsT/MHu20ZeCuJ7uzEpSmXzlBLjNhaGiv/EOTlo8mjzm1Dp9HXuMlKESurwUcd
DP0biBy3LeyqAVo2B4GHmC2dM987aS9xE3E5/bSg600XoBYofdqWVG2GyQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEsasXPvQRppuUz92JTHwCPYqN3DMB8GA1UdIwQY
MBaAFBnKZUnSZPiZiuio271lqWRQSJarMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR2NwbFNkSmstSm1LNktqYnZXV3BaRkJJbHFzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS8xOTUwMGEtZDhhOS00YTMxLTg5MzEt
NWU3MDBkZDZiOWVlLzEvR2NwbFNkSmstSm1LNktqYnZXV3BaRkJJbHFzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS8xOTUwMGEtZDhhOS00YTMxLTg5MzEtNWU3MDBkZDZiOWVl
LzEvR2NwbFNkSmstSm1LNktqYnZXV3BaRkJJbHFzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAK1kfp51o
82jU9g5rmxLZfx7dzYtoIciEuu4aNiXrU8v0YK80qtPc9rHGQrO7fqrzhT2t1BQI
1+YlyVs0nZjmnWOgmThzZY6lJ6vlv7k156kT2HjGnQ9QZ+SGtphN2AbxHubO+CES
fXEwOthLkuel/gv1tiHuajLssgOTazkDP9h3sfYxnKueOEacxRh60C7R3EumlG9E
ZE6bdhlMu6BF2P3YL9IDwg8YTStAQrjueKNz86RosdKag3u5lwp+HlZ9ptktIG/v
xwzbYPb57x58e4l3puf0O58Z92G5DUPdph3D1D4AaofVjlaOEIskZq0ml0TV1UTZ
IX9w6PdaLvfvGQ==
-----END CERTIFICATE-----