Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/0143cd-a814-4d48-a87c-d7c0e9393ea0/1/GNwjUhF2AjItdBxRNoyouN0aPqo.mft
File:                     GNwjUhF2AjItdBxRNoyouN0aPqo.mft (raw, json)
Hash identifier:          teMQDePxKy+OWu36rJjDx6ilwY9Q9cu/d7C4KdgpBuM=
Subject key identifier:   12:85:AE:60:36:80:2F:5C:CC:86:9C:43:53:CF:0F:84:20:2E:FA:DC
Authority key identifier: 18:DC:23:52:11:76:02:32:2D:74:1C:51:36:8C:A8:B8:DD:1A:3E:AA
Certificate issuer:       /CN=18dc2352117602322d741c51368ca8b8dd1a3eaa
Certificate serial:       01962E61D45F16CF47E0373CA6DD02F1F168
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GNwjUhF2AjItdBxRNoyouN0aPqo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/58/0143cd-a814-4d48-a87c-d7c0e9393ea0/1/GNwjUhF2AjItdBxRNoyouN0aPqo.mft
Manifest number:          0690
Signing time:             Sun 13 Apr 2025 09:01:25 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:25 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:25 +0000
Files and hashes:         1: GNwjUhF2AjItdBxRNoyouN0aPqo.crl (hash: DBnFaf/PtqTm7b07emXoZWaLJ90g4vz0EgDypQRgUuY=)
                          2: ch1KpBgRu3ljafWy2V7pY_YI2M4.roa (hash: ms8ZB4OSeZ322kYbRZpkd1MuHt48+zlVIWdiu6MuxZk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:d4:5f:16:cf:47:e0:37:3c:a6:dd:02:f1:f1:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18dc2352117602322d741c51368ca8b8dd1a3eaa
        Validity
            Not Before: Apr 13 09:01:25 2025 GMT
            Not After : Apr 14 09:01:25 2025 GMT
        Subject: CN=1285ae6036802f5ccc869c4353cf0f84202efadc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:de:3a:4e:8c:70:07:f3:31:ff:ee:43:d9:aa:
                    13:da:c8:a9:1e:15:c0:08:5e:0c:b9:32:70:5f:19:
                    71:97:ea:fe:2a:60:33:15:24:7b:76:2c:b9:0a:6f:
                    95:7a:fd:ba:36:4f:4b:67:c1:f4:69:8a:af:db:7f:
                    be:fe:7d:ad:0f:b8:98:49:d9:13:87:d0:69:df:9d:
                    6a:8e:3b:5e:43:07:0b:3f:b1:10:e5:3b:08:80:34:
                    05:c8:9b:a8:7c:30:01:ad:0a:79:a4:39:92:99:f4:
                    28:bc:65:e7:bb:a2:3e:86:1b:a4:55:18:8d:14:7f:
                    ab:a5:d9:89:2e:8e:6a:2d:c0:aa:d8:69:c9:25:16:
                    ef:ce:5f:d0:91:ca:e5:07:f9:e5:27:17:f7:5e:44:
                    e1:94:88:d7:cd:75:af:7d:98:f4:e8:c0:e7:f4:78:
                    73:ae:dd:52:6a:92:69:d6:5c:08:f2:dc:d6:18:2f:
                    6c:73:ef:e9:2a:0c:a7:2a:f6:42:56:8f:e8:2f:28:
                    02:51:67:2b:3f:f5:ca:16:9c:17:54:d5:b4:84:07:
                    76:6c:0d:2d:6f:c1:7b:a1:73:62:b6:55:2d:aa:31:
                    5c:01:6a:f5:62:c0:ae:62:72:56:04:bc:f4:1a:b3:
                    1c:91:bc:7b:10:48:61:40:91:6f:ac:2a:50:53:bf:
                    0d:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:85:AE:60:36:80:2F:5C:CC:86:9C:43:53:CF:0F:84:20:2E:FA:DC
            X509v3 Authority Key Identifier:
                keyid:18:DC:23:52:11:76:02:32:2D:74:1C:51:36:8C:A8:B8:DD:1A:3E:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GNwjUhF2AjItdBxRNoyouN0aPqo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/0143cd-a814-4d48-a87c-d7c0e9393ea0/1/GNwjUhF2AjItdBxRNoyouN0aPqo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/58/0143cd-a814-4d48-a87c-d7c0e9393ea0/1/GNwjUhF2AjItdBxRNoyouN0aPqo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:1c:3f:87:a2:1e:7f:88:d5:59:f0:1f:40:50:7b:87:a0:c4:
         18:bb:7f:5b:cd:15:58:3a:c7:a5:7f:1a:f5:ea:41:99:0e:4a:
         e2:b8:f6:be:d9:30:84:a2:79:f6:2d:62:5f:34:9d:9c:65:ab:
         88:07:83:c4:4e:be:00:df:05:f1:11:ed:e3:a5:b5:64:80:f3:
         42:6d:cd:c3:c9:03:b3:7b:4c:a5:90:a5:f4:98:c8:16:91:78:
         e2:dd:dd:85:14:b6:49:52:f8:38:b1:f2:8f:64:b2:00:a1:9f:
         5f:1f:b4:80:71:77:49:c1:66:d7:8d:dd:17:57:a7:9d:82:cf:
         13:34:56:d7:c9:80:b4:fc:b8:d8:50:98:60:7b:df:cf:45:da:
         17:92:c4:5f:94:43:61:f6:f2:05:07:98:af:91:35:49:14:a7:
         93:e4:30:2f:7c:43:8f:a2:ab:a5:e9:4d:ee:d0:36:7d:c7:04:
         51:35:56:80:26:7b:0d:94:32:d0:b2:8a:7e:5e:3f:35:c6:b4:
         f3:dc:72:64:6f:ff:31:2b:30:a1:7f:e0:d6:2d:78:1e:53:52:
         bb:28:8a:5c:42:de:46:5a:df:9d:2b:06:c1:d4:26:83:ad:a9:
         96:ed:6d:84:2d:83:87:6b:4b:db:22:63:81:59:89:67:40:6c:
         b7:db:07:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----