Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/3a094c-ff8e-4b44-81f0-94c7601aefda/1/GROVdcQBKD__U2E3sOg-VBX-GNA.mft
File:                     GROVdcQBKD__U2E3sOg-VBX-GNA.mft (raw, json)
Hash identifier:          deuNWWC4o9SdiKXuzudBBNPy6oxbdwBswNaNxWAN0Vc=
Subject key identifier:   CF:37:0E:4B:30:66:EF:47:F5:FE:B3:0A:51:48:95:E4:82:F7:71:C5
Authority key identifier: 19:13:95:75:C4:01:28:3F:FF:53:61:37:B0:E8:3E:54:15:FE:18:D0
Certificate issuer:       /CN=19139575c401283fff536137b0e83e5415fe18d0
Certificate serial:       01962E99533FEC808720621671FC01C29245
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GROVdcQBKD__U2E3sOg-VBX-GNA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6f/3a094c-ff8e-4b44-81f0-94c7601aefda/1/GROVdcQBKD__U2E3sOg-VBX-GNA.mft
Manifest number:          0962
Signing time:             Sun 13 Apr 2025 10:02:02 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:02 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:02 +0000
Files and hashes:         1: 8OOoLJDz_FI_NX92WvwejRS7DhA.roa (hash: +qvS9QKZwMOlAg8I6Vrzt2whC56wBRZ4LOEjIO7SoII=)
                          2: GROVdcQBKD__U2E3sOg-VBX-GNA.crl (hash: G4j4GEH47+bc3SQU9QfI4auAoeULdNp0VCif5SJllnE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:53:3f:ec:80:87:20:62:16:71:fc:01:c2:92:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=19139575c401283fff536137b0e83e5415fe18d0
        Validity
            Not Before: Apr 13 10:02:02 2025 GMT
            Not After : Apr 14 10:02:02 2025 GMT
        Subject: CN=cf370e4b3066ef47f5feb30a514895e482f771c5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:c8:8b:24:a9:fe:d9:c1:b3:d0:b6:52:8c:07:
                    b8:61:81:42:b7:bf:77:05:c1:44:9c:98:dc:04:92:
                    d1:63:f4:1f:76:af:45:fe:4f:85:5f:3c:9f:f6:b0:
                    41:a8:2a:92:76:ab:2e:cc:ba:19:3c:b0:23:7f:94:
                    98:25:c6:a2:63:72:b8:8f:8d:84:d4:2d:2b:84:6f:
                    5f:6f:f5:bb:0b:df:a7:3a:bd:9f:13:8a:27:df:84:
                    ba:99:ed:2e:a0:77:ab:19:e0:10:5d:e4:dd:12:73:
                    6a:72:95:b3:96:1e:e6:b1:2c:64:96:fe:52:50:80:
                    d1:16:53:4a:ab:12:35:d4:01:f1:23:33:01:c8:bd:
                    e9:e6:a0:86:07:d8:2f:42:f4:b6:1f:e3:23:c9:c1:
                    49:ca:6c:b3:6a:85:89:7c:d0:d4:3d:79:1e:bf:82:
                    da:10:53:ba:14:68:4f:7b:a4:aa:de:a2:b0:5f:25:
                    1b:21:3e:75:c2:63:92:86:aa:9a:14:b2:30:dd:5b:
                    4c:4e:a2:50:c1:10:65:f2:1a:b0:08:b9:83:d6:11:
                    3b:aa:28:2d:50:cc:a8:07:98:3b:5b:be:72:95:ed:
                    64:45:f2:92:02:76:93:a5:64:63:ad:d8:fb:5f:3b:
                    54:a7:1d:41:6b:d0:27:d5:14:a6:9d:5e:a8:41:d5:
                    a4:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:37:0E:4B:30:66:EF:47:F5:FE:B3:0A:51:48:95:E4:82:F7:71:C5
            X509v3 Authority Key Identifier:
                keyid:19:13:95:75:C4:01:28:3F:FF:53:61:37:B0:E8:3E:54:15:FE:18:D0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GROVdcQBKD__U2E3sOg-VBX-GNA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/3a094c-ff8e-4b44-81f0-94c7601aefda/1/GROVdcQBKD__U2E3sOg-VBX-GNA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/3a094c-ff8e-4b44-81f0-94c7601aefda/1/GROVdcQBKD__U2E3sOg-VBX-GNA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:c0:0a:64:ba:f7:2a:eb:0f:87:85:9c:66:d3:36:1d:52:32:
         ac:5a:06:89:df:04:2d:a2:17:96:9e:ff:c7:b6:7a:9b:c7:33:
         d4:a9:16:61:80:26:5f:03:42:30:1c:89:54:31:8c:20:20:66:
         82:ac:7d:42:57:58:d7:5a:a3:56:a8:61:83:6f:83:2f:8b:be:
         46:ef:39:db:4b:ba:3d:b5:7b:1b:7a:5d:34:0a:e1:ff:08:6a:
         d3:36:3f:b2:e3:fa:ce:86:72:36:44:29:f9:5c:55:cf:b2:58:
         f6:c8:21:4d:13:e9:7e:ae:da:0f:d4:71:e2:bd:e4:ff:d5:47:
         b7:b2:20:bc:c7:af:3b:76:b1:2f:4f:e3:85:66:5f:8a:e3:1c:
         5f:e7:b6:7b:bb:8c:cb:7f:30:21:02:6d:9b:c2:f6:3f:d7:55:
         7d:d7:b2:a9:ed:ac:46:00:62:8e:19:01:41:b4:3e:02:04:45:
         f0:a1:0b:0a:dd:38:b2:20:72:3a:59:45:e8:b9:f4:ac:a9:04:
         2f:e8:b8:7c:fa:e6:07:90:ca:f7:cb:f6:ad:6c:c7:36:e5:31:
         11:f7:68:bd:91:9c:93:82:71:07:15:0b:40:40:b5:6e:cf:2f:
         fd:83:26:51:1a:bb:b5:71:52:cf:24:af:a7:36:d9:e1:07:b5:
         bf:62:a0:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----