Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/40503a-6be9-4e1b-8243-716c0347aa76/1/GazwfxNSIiZYt4nk_kDqOKiqcd8.mft
File:                     GazwfxNSIiZYt4nk_kDqOKiqcd8.mft (raw, json)
Hash identifier:          8X47+Brs8upW6y8zKAdo4rgaQ8a5388zRTByf/tf3h4=
Subject key identifier:   61:C6:D4:92:12:F5:9F:41:B5:D3:68:91:12:B5:61:64:B1:45:98:8F
Authority key identifier: 19:AC:F0:7F:13:52:22:26:58:B7:89:E4:FE:40:EA:38:A8:AA:71:DF
Certificate issuer:       /CN=19acf07f1352222658b789e4fe40ea38a8aa71df
Certificate serial:       01962F068551CFD0F3C88E4114552F1A435B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GazwfxNSIiZYt4nk_kDqOKiqcd8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5c/40503a-6be9-4e1b-8243-716c0347aa76/1/GazwfxNSIiZYt4nk_kDqOKiqcd8.mft
Manifest number:          14E9
Signing time:             Sun 13 Apr 2025 12:01:18 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:18 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:18 +0000
Files and hashes:         1: GazwfxNSIiZYt4nk_kDqOKiqcd8.crl (hash: gWUYTy8TfoMn/dEuyrQjWSOl0YMcyOZFUcYOnWu9ams=)
                          2: d_nm2W-JAOMOvlYUOY6MB9B3XU8.roa (hash: FXXHaJZOOCGhJh6oru5lWoLEhggOrs5w/eP6GgcI5Qc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:85:51:cf:d0:f3:c8:8e:41:14:55:2f:1a:43:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=19acf07f1352222658b789e4fe40ea38a8aa71df
        Validity
            Not Before: Apr 13 12:01:18 2025 GMT
            Not After : Apr 14 12:01:18 2025 GMT
        Subject: CN=61c6d49212f59f41b5d3689112b56164b145988f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:cd:00:01:c8:e0:20:ea:b2:a2:1e:10:6e:0b:
                    38:e3:75:f0:c7:94:8a:bf:48:62:22:47:78:db:c9:
                    51:b1:34:80:be:4f:69:a8:59:19:5e:91:40:d9:5d:
                    8b:4f:c6:81:54:ff:33:ca:40:af:35:81:1a:d1:8f:
                    db:92:2e:f0:e1:8b:11:0b:f9:1c:f9:09:02:16:a5:
                    cd:32:40:56:6c:d4:73:40:42:47:25:66:f2:da:d2:
                    79:ba:93:bc:f7:81:27:c1:90:8f:58:7e:30:7b:0f:
                    81:a4:a1:a6:d6:01:51:15:46:25:3e:70:f1:e6:0d:
                    2f:8d:4c:c3:50:85:69:31:e8:f9:67:c3:ac:3b:61:
                    0a:bc:74:2a:cb:84:50:f5:6c:5b:d1:78:15:d9:e9:
                    bc:71:13:fc:94:f0:04:e5:d2:5e:dd:ee:93:25:76:
                    ef:1f:fd:ad:34:b3:12:48:fa:cc:af:77:66:30:17:
                    61:f5:02:9a:ff:dd:28:0a:4d:ca:55:df:3a:71:e0:
                    e2:78:9e:e7:c6:90:49:ff:0b:87:09:e7:de:7e:36:
                    c1:46:91:f2:a8:c7:f7:65:02:76:e4:48:21:e7:fe:
                    a4:bb:b4:03:fb:88:9c:64:4b:dd:90:e3:ec:04:7c:
                    8d:50:48:51:d7:73:3f:df:79:bc:c9:8c:6b:ca:16:
                    5c:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:C6:D4:92:12:F5:9F:41:B5:D3:68:91:12:B5:61:64:B1:45:98:8F
            X509v3 Authority Key Identifier:
                keyid:19:AC:F0:7F:13:52:22:26:58:B7:89:E4:FE:40:EA:38:A8:AA:71:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GazwfxNSIiZYt4nk_kDqOKiqcd8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/40503a-6be9-4e1b-8243-716c0347aa76/1/GazwfxNSIiZYt4nk_kDqOKiqcd8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/40503a-6be9-4e1b-8243-716c0347aa76/1/GazwfxNSIiZYt4nk_kDqOKiqcd8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:ba:6c:f2:58:65:57:77:9d:6f:65:d6:04:51:1b:f9:8a:4b:
         48:2d:7b:e7:27:ef:a2:19:01:78:6a:02:81:49:44:78:6e:06:
         e6:8f:3d:6e:77:07:71:82:63:5d:db:79:44:00:36:e7:3f:33:
         99:88:c6:38:b4:b5:12:63:5a:b4:7a:3f:94:07:45:54:9d:28:
         08:ac:c4:aa:7e:13:62:b6:75:47:b1:19:d1:fe:65:23:73:5d:
         fc:b6:f5:5f:d0:f2:e1:0d:99:22:bc:7f:5f:0e:9b:ca:a6:c4:
         d4:95:f0:1a:83:7a:96:74:98:e9:8a:7b:c8:7f:a2:9b:d6:e7:
         6b:ed:62:07:15:10:b0:38:3f:ce:1c:78:3c:e6:f8:c1:59:39:
         f1:ce:1a:3e:34:76:b2:9d:32:20:09:34:1d:a6:49:f6:ea:f6:
         97:80:80:2f:70:fe:10:a7:94:41:3f:88:84:27:1c:4b:7a:e0:
         72:27:52:4a:06:35:ae:c2:8a:fd:09:5e:a8:be:4a:9b:7a:54:
         cc:7a:0d:0c:d8:2b:e1:e0:51:e6:74:93:3e:0b:8a:63:f0:c4:
         25:96:ae:3b:78:8e:38:6d:7c:1e:39:85:dd:04:08:03:d1:1a:
         e7:81:92:e2:94:9f:5e:07:0b:90:25:da:69:fd:51:a8:25:99:
         6b:74:fa:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----