Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/2472a9-ff66-4dcf-ac82-30e540d5d3a7/1/G3573I4VumsubQlVJHa7G1WxWcM.mft
File:                     G3573I4VumsubQlVJHa7G1WxWcM.mft (raw, json)
Hash identifier:          qXvduc640r7b8v10dHrYNfn56XK9gm3O/Mjbcaq7+nY=
Subject key identifier:   D7:44:4B:AD:52:CF:5A:7C:FD:F3:33:3F:F8:D4:55:01:5C:02:49:AF
Authority key identifier: 1B:7E:7B:DC:8E:15:BA:6B:2E:6D:09:55:24:76:BB:1B:55:B1:59:C3
Certificate issuer:       /CN=1b7e7bdc8e15ba6b2e6d09552476bb1b55b159c3
Certificate serial:       01962F0687BED8600F31193AE9E13BCA7DA4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/G3573I4VumsubQlVJHa7G1WxWcM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5b/2472a9-ff66-4dcf-ac82-30e540d5d3a7/1/G3573I4VumsubQlVJHa7G1WxWcM.mft
Manifest number:          0E65
Signing time:             Sun 13 Apr 2025 12:01:19 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:19 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:19 +0000
Files and hashes:         1: G3573I4VumsubQlVJHa7G1WxWcM.crl (hash: WSsLzD+7SVDzyk/QlUTmp7MvWKnZpoGvg53ukdHs0UM=)
                          2: hH7p55BYalQ3lSf5_ESdyJOLa1g.roa (hash: CwjN/ntMIQN6pGzj4DyEYFD1soFJfMvM2aBgkytuAgc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:87:be:d8:60:0f:31:19:3a:e9:e1:3b:ca:7d:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1b7e7bdc8e15ba6b2e6d09552476bb1b55b159c3
        Validity
            Not Before: Apr 13 12:01:19 2025 GMT
            Not After : Apr 14 12:01:19 2025 GMT
        Subject: CN=d7444bad52cf5a7cfdf3333ff8d455015c0249af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:0a:3e:59:2c:56:30:90:e3:a6:2a:77:d8:0c:
                    06:c4:f4:bd:39:ba:9c:49:95:62:c9:1b:e5:b0:08:
                    fc:c2:75:0d:3e:df:c0:73:1c:66:a3:21:6e:0e:64:
                    33:64:71:32:51:e0:1c:f3:a9:d6:72:f6:b4:84:5d:
                    51:35:4f:61:c2:8d:0f:44:5b:b2:4e:7b:b6:b6:e7:
                    7e:f7:fd:e2:7d:20:d7:60:f4:87:9f:49:39:49:17:
                    ae:c1:79:83:df:44:36:4c:e2:1f:07:cd:5e:e0:05:
                    3c:3a:72:0c:77:9f:2a:bf:7a:f2:fe:b0:6c:63:a2:
                    96:78:23:c7:65:f6:94:f4:e5:ac:43:66:ec:0c:8d:
                    75:8d:c9:5b:8b:47:9f:12:51:b9:2c:97:25:ed:62:
                    50:8e:e7:f4:93:95:e8:bb:92:28:88:04:4f:6e:2f:
                    35:5e:07:3a:6f:ee:eb:30:fe:b9:1f:4c:8f:4d:24:
                    6d:4b:eb:67:af:79:f4:2d:28:de:51:0b:ef:1f:21:
                    e8:f1:d0:08:1c:f3:5f:55:da:e7:fc:57:44:a7:46:
                    b8:3c:93:e1:cb:54:bb:2d:53:fb:c0:63:a1:82:cc:
                    e4:39:64:26:77:4b:34:9f:bd:84:d1:1f:1a:a0:a1:
                    3f:2a:88:9c:4e:5a:6c:8d:d4:57:56:af:e8:8c:fb:
                    66:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:44:4B:AD:52:CF:5A:7C:FD:F3:33:3F:F8:D4:55:01:5C:02:49:AF
            X509v3 Authority Key Identifier:
                keyid:1B:7E:7B:DC:8E:15:BA:6B:2E:6D:09:55:24:76:BB:1B:55:B1:59:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G3573I4VumsubQlVJHa7G1WxWcM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/2472a9-ff66-4dcf-ac82-30e540d5d3a7/1/G3573I4VumsubQlVJHa7G1WxWcM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/2472a9-ff66-4dcf-ac82-30e540d5d3a7/1/G3573I4VumsubQlVJHa7G1WxWcM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:be:23:17:af:db:84:90:e4:eb:20:df:c6:e2:b3:bf:59:73:
         7d:22:b3:ae:98:1e:0d:be:86:02:b6:cb:30:8e:7f:54:db:c0:
         fa:aa:b2:6f:ab:8e:d7:53:10:59:fb:3f:fe:43:20:8a:6c:83:
         55:3c:a0:af:de:44:4c:2f:2b:a5:7c:00:3b:b3:98:ce:c0:23:
         fb:76:bd:4e:76:eb:23:48:6e:09:70:8a:22:94:bf:93:5c:6e:
         cd:b7:0d:66:26:68:f8:71:12:99:60:f4:e5:fb:d3:2b:b2:1a:
         a3:9c:65:c3:86:9a:2e:9f:59:31:c0:e9:ae:68:02:1a:35:36:
         27:c8:cd:6f:3a:ed:7f:11:77:5a:79:a1:aa:68:d1:e1:22:06:
         fc:42:f0:0a:18:8b:d0:ec:a4:a0:64:58:11:4f:12:f4:ce:93:
         e6:68:30:fe:82:9b:a9:50:59:20:33:f6:72:ee:99:5a:af:fe:
         35:b6:5b:a4:67:04:d7:5e:04:6e:8d:44:13:fe:4c:ee:2c:d2:
         41:37:48:24:9e:0d:8c:59:f4:49:34:3a:b7:b5:b2:1d:2d:00:
         ad:ab:9b:17:25:09:e0:7c:d3:62:b5:03:a8:4e:4a:b3:be:bd:
         b9:d2:41:53:dd:32:10:63:8a:59:9b:90:14:f3:ca:28:81:eb:
         34:cd:76:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----