Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/fe7b79-1568-4eb6-bc0f-5489e22cab81/1/gPPzEUyqjpJigXJfcn1gjZM5URg.mft
File:                     gPPzEUyqjpJigXJfcn1gjZM5URg.mft (raw, json)
Hash identifier:          vzQyxFyj7dnQ6EEccekzIx9dN27RQ48n6Os6Hdsbq3M=
Subject key identifier:   12:1E:91:C9:9D:03:E5:2A:32:CF:4A:A0:FE:1F:09:FF:E8:28:86:66
Authority key identifier: 80:F3:F3:11:4C:AA:8E:92:62:81:72:5F:72:7D:60:8D:93:39:51:18
Certificate issuer:       /CN=80f3f3114caa8e926281725f727d608d93395118
Certificate serial:       01962ECF511EA88613487C8216334FC49A53
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gPPzEUyqjpJigXJfcn1gjZM5URg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/61/fe7b79-1568-4eb6-bc0f-5489e22cab81/1/gPPzEUyqjpJigXJfcn1gjZM5URg.mft
Manifest number:          0135
Signing time:             Sun 13 Apr 2025 11:01:00 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:00 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:00 +0000
Files and hashes:         1: gPPzEUyqjpJigXJfcn1gjZM5URg.crl (hash: uSdLCVH/QPRuFDLfT/kssn3nss775XX7CDYbFIe/3PQ=)
                          2: qQBsyu_cVKZnC2YtWnBhQBpOfUQ.roa (hash: TjgATufRss8r1iBf8Y/PyScO/pIDEQWkrsAtyOXWrVM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:51:1e:a8:86:13:48:7c:82:16:33:4f:c4:9a:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=80f3f3114caa8e926281725f727d608d93395118
        Validity
            Not Before: Apr 13 11:01:00 2025 GMT
            Not After : Apr 14 11:01:00 2025 GMT
        Subject: CN=121e91c99d03e52a32cf4aa0fe1f09ffe8288666
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:1a:a9:f4:af:a5:c0:b8:ee:5f:da:84:fd:5a:
                    78:e2:30:c2:8d:76:88:ef:1a:5d:1a:e9:45:22:2e:
                    b3:6b:29:40:33:8f:a0:d4:03:10:83:e2:ef:e6:cf:
                    3e:21:ed:a8:7c:04:97:38:13:3c:23:d8:9b:d0:9a:
                    ef:1c:09:cc:07:56:3f:61:31:d3:e8:da:47:4d:86:
                    66:4c:c5:1b:50:07:76:85:6e:7c:c1:57:7f:e0:7e:
                    43:db:4e:5f:cd:00:0e:62:37:e3:12:03:0a:aa:3d:
                    c3:23:b7:e5:ec:bc:40:3d:f0:8e:8d:92:3b:20:a4:
                    66:95:f5:df:09:f8:5c:b4:47:75:3e:07:c1:90:99:
                    ef:61:07:a5:55:4a:5f:8f:19:67:73:7d:34:57:9d:
                    45:13:56:68:05:e9:aa:d1:97:d4:26:a9:70:04:c2:
                    19:23:57:1c:c9:6e:e6:c3:fa:27:68:86:f6:74:cd:
                    96:db:e9:f6:19:10:78:3d:bd:08:b3:d3:f0:11:46:
                    3f:d8:17:74:03:a2:34:64:32:33:54:19:58:6b:17:
                    81:3e:b5:d5:44:3b:b5:1d:d0:29:e3:15:da:ef:2f:
                    c3:4a:0b:a1:b3:ad:93:5e:fc:c0:fb:16:f3:34:f8:
                    a6:40:f7:f7:e6:a6:2a:77:a1:59:e0:cf:69:d8:df:
                    4d:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:1E:91:C9:9D:03:E5:2A:32:CF:4A:A0:FE:1F:09:FF:E8:28:86:66
            X509v3 Authority Key Identifier:
                keyid:80:F3:F3:11:4C:AA:8E:92:62:81:72:5F:72:7D:60:8D:93:39:51:18

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gPPzEUyqjpJigXJfcn1gjZM5URg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/fe7b79-1568-4eb6-bc0f-5489e22cab81/1/gPPzEUyqjpJigXJfcn1gjZM5URg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/61/fe7b79-1568-4eb6-bc0f-5489e22cab81/1/gPPzEUyqjpJigXJfcn1gjZM5URg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:82:e4:51:a4:bc:0a:4e:34:a0:40:d5:fb:96:93:e3:70:48:
         5f:df:71:c6:81:d6:3a:10:d9:07:d4:58:4e:01:f9:6c:98:c5:
         05:e6:8d:9b:35:27:51:42:a5:3e:59:dc:c0:d2:17:c6:a3:35:
         62:a4:68:7a:d7:5e:dd:0a:8d:b8:fa:ff:cd:12:33:49:76:b7:
         7c:8c:44:38:fe:52:d5:6f:d8:d5:f8:97:00:69:19:b2:a1:8b:
         18:73:95:69:7b:65:bc:56:83:fb:5f:7a:d5:f6:41:3a:c3:c1:
         64:33:34:04:60:52:ea:56:3b:6d:fb:30:59:30:be:ec:86:05:
         73:e3:41:11:8d:b7:1c:1a:22:8b:d7:2b:41:34:4c:46:25:43:
         16:24:e3:2d:11:92:9f:89:ed:e4:d1:8d:07:91:ff:d2:a6:77:
         1b:61:6b:8e:1e:ee:ee:f7:cf:93:ed:01:35:22:d1:99:25:c9:
         30:3a:4c:4a:1e:da:b6:a3:cf:06:bd:c3:64:37:4a:f2:34:d5:
         50:80:9d:4d:49:2a:91:27:a2:d3:f7:b8:fd:25:ca:f7:60:a2:
         3f:3c:78:ff:8b:18:3c:ee:5e:2b:6c:24:b2:82:21:19:dd:93:
         9d:7c:2f:7b:80:e5:bd:61:c4:2f:86:a8:f0:55:48:6c:c2:a0:
         96:11:b8:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----