Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/04b23b-9c13-4dd2-bda8-2f22a76996d9/1/GgQ5RItijNC6QjLqXcOalo2paW4.mft
File:                     GgQ5RItijNC6QjLqXcOalo2paW4.mft (raw, json)
Hash identifier:          qi33gCDNMobdY5dnsv1rFynaa1KPiB2o6bIAo9UDaVc=
Subject key identifier:   46:AC:DF:67:F4:40:7C:FF:E0:5F:7D:5A:32:3C:D6:76:A3:3A:E6:01
Authority key identifier: 1A:04:39:44:8B:62:8C:D0:BA:42:32:EA:5D:C3:9A:96:8D:A9:69:6E
Certificate issuer:       /CN=1a0439448b628cd0ba4232ea5dc39a968da9696e
Certificate serial:       01962ECFBBBA00CD1E8E1244CE8641A8F222
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GgQ5RItijNC6QjLqXcOalo2paW4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6c/04b23b-9c13-4dd2-bda8-2f22a76996d9/1/GgQ5RItijNC6QjLqXcOalo2paW4.mft
Manifest number:          14E8
Signing time:             Sun 13 Apr 2025 11:01:27 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:27 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:27 +0000
Files and hashes:         1: GgQ5RItijNC6QjLqXcOalo2paW4.crl (hash: zm4heEW5VnCTUZ5GkmT1JAcz1wFmiPpQY7pdS9AtU+w=)
                          2: awiZZNgesWW0Sbd6K5IRMUenzBI.roa (hash: OVxRXVan7pYiQ6GVr4WHU+GWhPaWUbbRmfzBGki3zjI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:bb:ba:00:cd:1e:8e:12:44:ce:86:41:a8:f2:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1a0439448b628cd0ba4232ea5dc39a968da9696e
        Validity
            Not Before: Apr 13 11:01:27 2025 GMT
            Not After : Apr 14 11:01:27 2025 GMT
        Subject: CN=46acdf67f4407cffe05f7d5a323cd676a33ae601
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:28:25:79:50:72:53:7d:c1:cd:45:dd:79:3e:
                    97:18:a4:08:59:ce:64:12:d2:31:bb:30:a2:db:66:
                    8e:b8:c4:b0:e2:c9:20:d2:2f:0e:59:91:98:b4:85:
                    73:12:7f:3f:37:c9:9d:a4:c1:4f:f0:b1:27:73:b0:
                    34:28:86:d3:ea:3d:fc:4a:aa:e6:f8:61:e3:9e:df:
                    f7:dd:6d:23:a5:b8:80:b3:ce:7a:dd:1b:48:ad:99:
                    fb:c4:16:93:57:72:41:33:6f:77:15:4e:f3:22:57:
                    3a:a9:43:77:ba:d5:3a:68:e9:ca:8d:59:c6:36:91:
                    25:7a:1e:20:68:87:20:2e:55:87:e6:ea:cf:d1:ce:
                    9b:61:fa:2a:13:dd:96:60:92:1e:73:6c:b6:0c:2c:
                    e3:47:9d:ec:f4:78:34:72:13:b0:54:e4:83:21:e5:
                    d5:6a:b8:59:2f:e2:dd:f0:df:44:e9:00:7d:8f:13:
                    7c:41:81:a6:7d:77:ee:0d:e9:b0:1d:a1:30:5f:03:
                    7d:4e:99:ac:19:ed:d0:9e:fa:20:9a:81:9c:c0:09:
                    61:69:21:6f:62:17:0e:fb:78:08:f6:64:55:dc:99:
                    a3:86:bf:9d:71:62:05:09:03:64:96:eb:16:a8:3b:
                    64:00:89:2e:b5:cb:70:d2:34:b2:d8:c1:43:46:fb:
                    81:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:AC:DF:67:F4:40:7C:FF:E0:5F:7D:5A:32:3C:D6:76:A3:3A:E6:01
            X509v3 Authority Key Identifier:
                keyid:1A:04:39:44:8B:62:8C:D0:BA:42:32:EA:5D:C3:9A:96:8D:A9:69:6E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GgQ5RItijNC6QjLqXcOalo2paW4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/04b23b-9c13-4dd2-bda8-2f22a76996d9/1/GgQ5RItijNC6QjLqXcOalo2paW4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/04b23b-9c13-4dd2-bda8-2f22a76996d9/1/GgQ5RItijNC6QjLqXcOalo2paW4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:9d:65:ed:65:66:14:db:05:ca:23:7f:b4:a8:c9:f2:2f:41:
         96:fe:6b:bf:47:8b:79:cb:1a:35:63:0d:0d:bf:ab:3f:3b:34:
         f4:09:ee:83:95:2e:dc:fc:ae:4d:52:ef:36:4e:7f:c0:e3:9f:
         79:c2:6d:31:f1:f7:a3:55:97:5a:55:a9:7b:64:43:f4:c8:7d:
         c1:ac:dc:2d:a1:39:f9:66:f3:c3:0c:8c:98:25:8e:3b:17:b9:
         d9:34:97:54:dc:4d:ac:cb:52:b4:dd:0a:a4:78:ac:22:12:0b:
         1e:79:35:41:a1:a3:7c:e8:bf:ab:e1:6b:5e:02:48:d4:b1:91:
         d3:f7:d6:6c:ad:15:41:8b:41:4b:b0:66:bf:80:da:ea:3d:4b:
         15:fa:6b:5b:3a:ac:d9:dd:4f:ac:b6:93:a7:73:56:10:aa:64:
         26:8a:30:3c:78:5e:f0:b5:97:2a:eb:a3:18:53:66:07:62:20:
         05:ed:1d:a6:10:af:a9:52:ef:b7:3b:7e:40:53:1c:ae:74:3a:
         95:99:54:f5:c7:56:61:87:3c:36:37:d2:5a:12:c3:c9:83:f8:
         13:3f:f7:34:f6:8a:3f:89:09:3e:50:75:76:b3:ff:ae:70:76:
         40:a5:7b:b0:b8:a3:3d:32:15:79:5c:d1:57:9b:77:ac:00:8c:
         68:cf:a7:49
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYuz7u6AM0ejhJEzoZBqPIiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFhMDQzOTQ0OGI2MjhjZDBiYTQyMzJlYTVkYzM5YTk2OGRh
OTY5NmUwHhcNMjUwNDEzMTEwMTI3WhcNMjUwNDE0MTEwMTI3WjAzMTEwLwYDVQQD
Eyg0NmFjZGY2N2Y0NDA3Y2ZmZTA1ZjdkNWEzMjNjZDY3NmEzM2FlNjAxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtSgleVByU33BzUXdeT6XGKQIWc5k
EtIxuzCi22aOuMSw4skg0i8OWZGYtIVzEn8/N8mdpMFP8LEnc7A0KIbT6j38Sqrm
+GHjnt/33W0jpbiAs8563RtIrZn7xBaTV3JBM293FU7zIlc6qUN3utU6aOnKjVnG
NpEleh4gaIcgLlWH5urP0c6bYfoqE92WYJIec2y2DCzjR53s9Hg0chOwVOSDIeXV
arhZL+Ld8N9E6QB9jxN8QYGmfXfuDemwHaEwXwN9TpmsGe3QnvogmoGcwAlhaSFv
YhcO+3gI9mRV3Jmjhr+dcWIFCQNklusWqDtkAIkutctw0jSy2MFDRvuB8QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEas32f0QHz/4F99WjI81najOuYBMB8GA1UdIwQY
MBaAFBoEOUSLYozQukIy6l3DmpaNqWluMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR2dRNVJJdGlqTkM2UWpMcVhjT2FsbzJwYVc0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yy8wNGIyM2ItOWMxMy00ZGQyLWJkYTgt
MmYyMmE3Njk5NmQ5LzEvR2dRNVJJdGlqTkM2UWpMcVhjT2FsbzJwYVc0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Yy8wNGIyM2ItOWMxMy00ZGQyLWJkYTgtMmYyMmE3Njk5NmQ5
LzEvR2dRNVJJdGlqTkM2UWpMcVhjT2FsbzJwYVc0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANJ1l7WVm
FNsFyiN/tKjJ8i9Blv5rv0eLecsaNWMNDb+rPzs09Anug5Uu3PyuTVLvNk5/wOOf
ecJtMfH3o1WXWlWpe2RD9Mh9wazcLaE5+WbzwwyMmCWOOxe52TSXVNxNrMtStN0K
pHisIhILHnk1QaGjfOi/q+FrXgJI1LGR0/fWbK0VQYtBS7Bmv4Da6j1LFfprWzqs
2d1PrLaTp3NWEKpkJoowPHhe8LWXKuujGFNmB2IgBe0dphCvqVLvtzt+QFMcrnQ6
lZlU9cdWYYc8NjfSWhLDyYP4Ez/3NPaKP4kJPlB1drP/rnB2QKV7sLijPTIVeVzR
V5t3rACMaM+nSQ==
-----END CERTIFICATE-----