Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/b3c8a6-e32e-4700-b5ed-6a994e5ec472/1/gV_CISVyYlbWo189oo91E90xwf4.mft
File:                     gV_CISVyYlbWo189oo91E90xwf4.mft (raw, json)
Hash identifier:          6HjQeY0LGeNwNnM+UkBE5CaVdzrk1jm9rZQvIzt8MNM=
Subject key identifier:   36:E2:FF:3A:E9:D1:A6:21:F7:06:68:1B:A6:46:A2:E1:6B:5A:0A:A7
Authority key identifier: 81:5F:C2:21:25:72:62:56:D6:A3:5F:3D:A2:8F:75:13:DD:31:C1:FE
Certificate issuer:       /CN=815fc22125726256d6a35f3da28f7513dd31c1fe
Certificate serial:       01962F74E7BF6349C5AC40E942298BA1D7B2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gV_CISVyYlbWo189oo91E90xwf4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/58/b3c8a6-e32e-4700-b5ed-6a994e5ec472/1/gV_CISVyYlbWo189oo91E90xwf4.mft
Manifest number:          147B
Signing time:             Sun 13 Apr 2025 14:01:52 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:52 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:52 +0000
Files and hashes:         1: aBrEW06-xKv77MgMEwK2_lYbz-I.roa (hash: RP6KdM7YV2WY/3+umq6rKSdZ3FIW7gCCmbirjcfrx/0=)
                          2: gV_CISVyYlbWo189oo91E90xwf4.crl (hash: WJz5DyyKzmmVGdzKNOLWzO+0nO+nHiOgabzGoq8lQR0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:e7:bf:63:49:c5:ac:40:e9:42:29:8b:a1:d7:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=815fc22125726256d6a35f3da28f7513dd31c1fe
        Validity
            Not Before: Apr 13 14:01:52 2025 GMT
            Not After : Apr 14 14:01:52 2025 GMT
        Subject: CN=36e2ff3ae9d1a621f706681ba646a2e16b5a0aa7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:be:05:17:c9:cb:c8:ba:0c:4b:e4:b8:db:5f:
                    ee:7e:48:79:41:9e:35:a8:c1:83:fd:c9:33:d7:cf:
                    e7:95:e4:09:6d:53:e1:0c:bc:fd:4e:12:16:13:73:
                    76:3f:bc:70:c1:05:38:e3:dc:e0:27:97:fc:c8:f9:
                    ad:92:79:b3:9a:ac:3f:82:9f:7f:d9:43:3b:35:26:
                    33:a5:45:ff:4c:e3:21:36:77:91:c5:02:70:9b:05:
                    d5:4a:e2:ad:7e:5b:59:9f:d9:e4:7d:3d:88:d3:cd:
                    c0:72:9e:92:14:71:06:1b:26:05:0f:5c:2b:d6:a1:
                    b6:b7:e7:d1:e8:ac:5f:00:ef:4c:3b:a0:8d:1e:8a:
                    e2:22:ea:29:ba:d1:ce:3e:af:5b:95:c7:f6:9f:fa:
                    fa:f6:f2:10:07:c2:6d:c0:08:29:b5:66:21:c6:01:
                    d6:15:d1:91:84:7a:50:b8:3e:3f:bf:a9:5b:59:c3:
                    25:b0:74:2a:44:d3:42:52:86:ed:da:3d:60:db:97:
                    47:89:01:98:d2:a8:4c:6d:0d:d4:bf:ea:da:43:29:
                    de:35:53:4d:29:fd:5b:ef:08:a8:50:55:5e:40:46:
                    4e:3b:d2:c7:c3:1a:cb:80:11:a9:c7:f6:8f:b3:a8:
                    5d:32:e2:39:af:4a:c9:15:f5:43:e8:c5:6c:e0:04:
                    71:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:E2:FF:3A:E9:D1:A6:21:F7:06:68:1B:A6:46:A2:E1:6B:5A:0A:A7
            X509v3 Authority Key Identifier:
                keyid:81:5F:C2:21:25:72:62:56:D6:A3:5F:3D:A2:8F:75:13:DD:31:C1:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gV_CISVyYlbWo189oo91E90xwf4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/b3c8a6-e32e-4700-b5ed-6a994e5ec472/1/gV_CISVyYlbWo189oo91E90xwf4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/58/b3c8a6-e32e-4700-b5ed-6a994e5ec472/1/gV_CISVyYlbWo189oo91E90xwf4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b6:79:b1:60:31:a0:77:7a:1f:f0:df:52:8c:ea:f6:b7:a1:7b:
         e9:72:78:b0:96:24:18:02:72:81:e5:62:f5:85:6a:08:9f:01:
         dc:a9:c7:85:9b:aa:22:9f:22:d9:0a:80:19:d7:42:89:dc:7f:
         f6:71:ae:8e:51:23:71:d8:7c:59:12:a9:cb:82:a1:cf:a4:c8:
         19:78:f1:c0:b6:d7:18:3b:13:c0:30:b2:3b:ed:8d:91:60:c3:
         2d:83:2e:0b:14:61:7f:20:da:b3:31:6d:e8:9a:32:97:98:f3:
         61:7e:fb:e5:fb:5a:75:96:d6:73:24:06:4b:d1:4d:9e:34:9a:
         fd:8c:7d:1e:24:ad:f8:de:96:1e:93:e8:32:fc:78:da:c3:cb:
         e2:3d:7c:be:26:df:11:b2:aa:0f:6f:76:61:03:7d:a4:a9:07:
         00:66:b3:74:f7:7a:76:9b:2e:27:ca:77:6b:c0:96:cb:77:2e:
         12:3b:33:05:8b:da:2c:5d:42:80:6a:f3:de:1a:a6:21:bc:5e:
         8c:58:b4:58:f3:22:96:c2:33:e4:5d:8f:9a:46:01:55:31:c7:
         44:29:90:08:81:ad:95:79:42:c7:28:6f:76:53:27:b3:c5:f6:
         82:55:1b:85:08:26:86:bc:8b:2b:83:a6:39:a5:e4:ef:07:ac:
         18:5d:19:83
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvdOe/Y0nFrEDpQimLodeyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgxNWZjMjIxMjU3MjYyNTZkNmEzNWYzZGEyOGY3NTEzZGQz
MWMxZmUwHhcNMjUwNDEzMTQwMTUyWhcNMjUwNDE0MTQwMTUyWjAzMTEwLwYDVQQD
EygzNmUyZmYzYWU5ZDFhNjIxZjcwNjY4MWJhNjQ2YTJlMTZiNWEwYWE3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnb4FF8nLyLoMS+S421/ufkh5QZ41
qMGD/ckz18/nleQJbVPhDLz9ThIWE3N2P7xwwQU449zgJ5f8yPmtknmzmqw/gp9/
2UM7NSYzpUX/TOMhNneRxQJwmwXVSuKtfltZn9nkfT2I083Acp6SFHEGGyYFD1wr
1qG2t+fR6KxfAO9MO6CNHoriIuoputHOPq9blcf2n/r69vIQB8JtwAgptWYhxgHW
FdGRhHpQuD4/v6lbWcMlsHQqRNNCUobt2j1g25dHiQGY0qhMbQ3Uv+raQyneNVNN
Kf1b7wioUFVeQEZOO9LHwxrLgBGpx/aPs6hdMuI5r0rJFfVD6MVs4ARxdQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDbi/zrp0aYh9wZoG6ZGouFrWgqnMB8GA1UdIwQY
MBaAFIFfwiElcmJW1qNfPaKPdRPdMcH+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ1ZfQ0lTVnlZbGJXbzE4OW9vOTFFOTB4d2Y0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC9iM2M4YTYtZTMyZS00NzAwLWI1ZWQt
NmE5OTRlNWVjNDcyLzEvZ1ZfQ0lTVnlZbGJXbzE4OW9vOTFFOTB4d2Y0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OC9iM2M4YTYtZTMyZS00NzAwLWI1ZWQtNmE5OTRlNWVjNDcy
LzEvZ1ZfQ0lTVnlZbGJXbzE4OW9vOTFFOTB4d2Y0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtnmxYDGg
d3of8N9SjOr2t6F76XJ4sJYkGAJygeVi9YVqCJ8B3KnHhZuqIp8i2QqAGddCidx/
9nGujlEjcdh8WRKpy4Khz6TIGXjxwLbXGDsTwDCyO+2NkWDDLYMuCxRhfyDaszFt
6Joyl5jzYX775ftadZbWcyQGS9FNnjSa/Yx9HiSt+N6WHpPoMvx42sPL4j18vibf
EbKqD292YQN9pKkHAGazdPd6dpsuJ8p3a8CWy3cuEjszBYvaLF1CgGrz3hqmIbxe
jFi0WPMilsIz5F2PmkYBVTHHRCmQCIGtlXlCxyhvdlMns8X2glUbhQgmhryLK4Om
OaXk7wesGF0Zgw==
-----END CERTIFICATE-----