Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/13d49f-5e0f-422b-bcf1-e172d6a01e03/1/2gttm-19ptQiB7kAZNPhPv0yVKw.mft
File:                     2gttm-19ptQiB7kAZNPhPv0yVKw.mft (raw, json)
Hash identifier:          f1KQP4U33orKDtcupQT/zEAbIfddtqqd1m9O2ydViuE=
Subject key identifier:   7A:45:AC:83:54:9E:F4:B0:4F:17:EE:39:5C:8F:C7:17:F4:EC:9C:C1
Authority key identifier: DA:0B:6D:9B:ED:7D:A6:D4:22:07:B9:00:64:D3:E1:3E:FD:32:54:AC
Certificate issuer:       /CN=da0b6d9bed7da6d42207b90064d3e13efd3254ac
Certificate serial:       0193FB1D6DA5012A3C0368CDDE48F707ED5B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2gttm-19ptQiB7kAZNPhPv0yVKw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/65/13d49f-5e0f-422b-bcf1-e172d6a01e03/1/2gttm-19ptQiB7kAZNPhPv0yVKw.mft
Manifest number:          13C7
Signing time:             Wed 25 Dec 2024 00:00:29 +0000
Manifest this update:     Wed 25 Dec 2024 00:00:29 +0000
Manifest next update:     Thu 26 Dec 2024 00:00:29 +0000
Files and hashes:         1: 2gttm-19ptQiB7kAZNPhPv0yVKw.crl (hash: lyB/pxiP+akwoQknN+1sWfp+/hMT2JNdoGGlGtJ1/cA=)
                          2: d5p1rXqEESZ461U1m-rcky28uME.roa (hash: FN8T9yynkpB1wkcGSCiLBoHmgOmE79LIKdhw3EVUQoI=)
                          3: eQm2-Cdcdo9KOeNEyyjjcPLoQdI.roa (hash: b73RjAAgibx9UhxX6QMh5GwDV7Trou8uK/oEig2JMKw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:fb:1d:6d:a5:01:2a:3c:03:68:cd:de:48:f7:07:ed:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da0b6d9bed7da6d42207b90064d3e13efd3254ac
        Validity
            Not Before: Dec 25 00:00:29 2024 GMT
            Not After : Dec 26 00:00:29 2024 GMT
        Subject: CN=7a45ac83549ef4b04f17ee395c8fc717f4ec9cc1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:a0:82:7f:fc:56:b0:88:ee:ca:45:16:e3:4c:
                    d3:3d:c4:07:2d:d0:95:17:d9:9f:22:2b:25:2e:70:
                    f2:ab:7b:15:f8:37:f3:d2:ba:9f:ed:ef:76:36:eb:
                    ed:c6:30:82:92:db:de:fb:2e:82:fa:5a:9b:c8:00:
                    3f:49:77:9d:f7:43:45:07:b4:1f:ff:bf:ca:fa:6f:
                    24:a7:02:68:73:c3:71:c8:ef:29:46:0f:04:11:05:
                    4b:df:bb:dc:32:d6:e9:36:15:4c:c8:27:fc:76:c9:
                    52:2c:a4:01:01:14:73:67:84:de:77:9e:1c:f8:47:
                    c7:0b:3e:ff:10:96:97:64:9c:4c:8d:84:a2:81:38:
                    b0:e2:32:4a:4e:46:74:7c:b3:70:aa:7a:11:79:b6:
                    d4:ab:f8:59:62:98:87:33:8b:df:12:15:ef:d8:2c:
                    11:65:ec:2b:b5:cc:7d:ec:76:d4:5e:a0:fb:b8:a6:
                    a3:09:0a:d7:65:ea:a4:11:2a:ef:d3:8c:b2:47:56:
                    e8:5c:18:20:da:65:c2:70:c3:c5:af:20:0a:6b:1f:
                    b1:3d:f2:1f:4b:4b:63:eb:1a:e4:8a:f0:1d:a0:8f:
                    5c:21:6d:d3:84:19:67:46:33:b6:74:b4:6b:91:b7:
                    54:af:2d:5f:e6:68:a2:fe:3a:f4:e8:ec:86:9c:07:
                    43:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:45:AC:83:54:9E:F4:B0:4F:17:EE:39:5C:8F:C7:17:F4:EC:9C:C1
            X509v3 Authority Key Identifier:
                keyid:DA:0B:6D:9B:ED:7D:A6:D4:22:07:B9:00:64:D3:E1:3E:FD:32:54:AC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2gttm-19ptQiB7kAZNPhPv0yVKw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/13d49f-5e0f-422b-bcf1-e172d6a01e03/1/2gttm-19ptQiB7kAZNPhPv0yVKw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/65/13d49f-5e0f-422b-bcf1-e172d6a01e03/1/2gttm-19ptQiB7kAZNPhPv0yVKw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:ac:4f:46:23:48:a4:33:4a:e7:8f:a5:01:74:5b:96:13:17:
         c8:5d:48:b2:a9:9f:05:ad:04:3e:b6:c6:76:ae:2a:c0:13:95:
         9c:45:7a:2a:3a:14:de:54:14:c7:74:8b:7b:f2:c1:c0:cc:5c:
         bf:a2:1e:40:da:31:c8:b9:bb:f1:c9:53:0a:19:3e:3c:fe:04:
         22:33:2f:b2:6f:c0:56:bf:22:6b:c6:d8:18:a4:de:2e:27:c3:
         2c:3c:c8:f2:bf:16:27:7b:54:41:de:dd:e5:29:6c:bf:46:9a:
         61:fa:4e:25:6b:12:1b:b8:63:65:4d:90:dd:1a:45:ef:c6:5a:
         a3:49:e4:e3:a3:97:40:ae:14:1a:f8:84:07:83:ad:5a:00:01:
         f9:bf:ba:c2:d2:b3:bc:84:1e:7a:14:0c:2b:bd:5a:cc:ea:90:
         98:97:e2:a3:e4:2f:a1:14:83:61:0d:d1:b4:64:e2:cf:2e:27:
         18:23:67:b3:b3:91:d5:78:36:40:78:2c:e2:01:93:24:3a:27:
         48:d5:3a:f6:01:d7:ab:f5:79:1d:5d:2a:d9:5a:a3:6a:c4:c8:
         13:38:86:1e:af:ae:80:ac:a8:26:7c:fb:9a:ad:72:7a:c5:eb:
         52:54:70:e9:4c:98:04:58:b0:92:9e:3b:68:bd:79:cd:a4:a2:
         20:17:51:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----