Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/95c3c8-6ab1-4951-8f59-65503a9306a0/1/GNgB3p_opmgHWIF4I642ugZcYQ0.mft
File:                     GNgB3p_opmgHWIF4I642ugZcYQ0.mft (raw, json)
Hash identifier:          Cq+dJHK+jz41ZimGPo/AABQ1mwCqV82KGdqpR51MoSc=
Subject key identifier:   35:04:10:2E:DD:0F:E0:EA:D7:E2:B4:A3:26:47:D5:68:11:82:75:BF
Authority key identifier: 18:D8:01:DE:9F:E8:A6:68:07:58:81:78:23:AE:36:BA:06:5C:61:0D
Certificate issuer:       /CN=18d801de9fe8a6680758817823ae36ba065c610d
Certificate serial:       01962F744B86B2772E7E70755CC9333AB260
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GNgB3p_opmgHWIF4I642ugZcYQ0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/75/95c3c8-6ab1-4951-8f59-65503a9306a0/1/GNgB3p_opmgHWIF4I642ugZcYQ0.mft
Manifest number:          14ED
Signing time:             Sun 13 Apr 2025 14:01:12 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:12 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:12 +0000
Files and hashes:         1: C4rk1AoVqjrEH7_zmAJ_svnQgQc.roa (hash: 6jKvc5VnDLqI6HwXgEfuuUIvLcH534eewNyGGwZxdKE=)
                          2: GNgB3p_opmgHWIF4I642ugZcYQ0.crl (hash: n4Ddyr++wCETWH8ZGJ7ex6MweMfRDI4PA40+hGy0ahU=)
                          3: O6hC_E85D-gML2iRrUU2b5ibO0s.roa (hash: F14l9yzbuoxNtXqq8ma/CyqbNDJtpPWFpWAVl55tljo=)
                          4: RHkq_2B9aSMLyQYFQ9FNfjZTBIs.roa (hash: H0KL1J+ki0U19ojTdr1t7y2YJD+4cxGfJhTHY1ROEwg=)
                          5: kb5y1-Zbrkx7MXP5JuLQmArjfW8.roa (hash: HnOpO7aMn3/CAKcuytA4hwDqnkBIYl9jaOvFbzTHg2g=)
                          6: pZmFD-f-bh4pXBFGtCsTwrl3XA0.roa (hash: QUgueN8QgFQMRwHuvSGXOdyJNx8a23P2PHJjPzXyVW0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:4b:86:b2:77:2e:7e:70:75:5c:c9:33:3a:b2:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18d801de9fe8a6680758817823ae36ba065c610d
        Validity
            Not Before: Apr 13 14:01:12 2025 GMT
            Not After : Apr 14 14:01:12 2025 GMT
        Subject: CN=3504102edd0fe0ead7e2b4a32647d568118275bf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:a6:f3:12:c6:4b:a0:0f:08:43:61:6d:26:c4:
                    e0:2c:d5:fb:ab:ce:c1:78:21:b7:4d:7f:7f:2c:53:
                    06:8d:76:ca:7e:22:67:89:0e:1b:24:c9:27:cb:21:
                    86:71:0c:ef:ee:2c:55:57:aa:80:c8:8e:36:98:70:
                    27:3c:15:ed:9a:a7:3f:60:10:e3:38:ae:dd:b3:4e:
                    76:7e:b9:59:9b:ae:61:69:91:da:27:39:f7:af:1f:
                    ca:eb:1a:cb:cd:eb:ea:0b:ba:ec:b7:00:62:38:69:
                    c7:b8:77:84:86:72:54:26:6d:07:eb:d1:d7:61:2a:
                    9d:d8:67:8b:ed:91:0c:be:24:11:db:f7:f6:47:e4:
                    ce:23:97:49:16:6a:4d:a1:20:d2:ea:17:a7:01:c0:
                    ad:7f:f4:6e:4e:3a:37:4c:32:9f:1b:04:08:57:81:
                    a0:09:30:ff:75:aa:c3:94:a1:5e:42:f7:55:c5:1c:
                    ad:54:72:83:ac:77:57:52:0b:0d:9a:4a:a8:87:49:
                    35:42:3d:a9:96:01:4b:ea:a5:8f:cf:54:3e:c8:8b:
                    8c:98:bd:a7:dc:cb:1c:1d:20:9e:b3:93:0b:76:1c:
                    02:e1:37:a2:11:0a:98:ee:7c:45:64:31:d7:6b:33:
                    79:14:a3:5d:7c:53:fb:35:f2:60:22:05:61:50:4e:
                    96:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:04:10:2E:DD:0F:E0:EA:D7:E2:B4:A3:26:47:D5:68:11:82:75:BF
            X509v3 Authority Key Identifier:
                keyid:18:D8:01:DE:9F:E8:A6:68:07:58:81:78:23:AE:36:BA:06:5C:61:0D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GNgB3p_opmgHWIF4I642ugZcYQ0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/95c3c8-6ab1-4951-8f59-65503a9306a0/1/GNgB3p_opmgHWIF4I642ugZcYQ0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/75/95c3c8-6ab1-4951-8f59-65503a9306a0/1/GNgB3p_opmgHWIF4I642ugZcYQ0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:ca:0e:a6:64:37:76:8f:d7:d2:65:89:b5:b0:f8:49:18:27:
         c7:b9:f0:5c:25:d9:19:3d:ef:35:aa:eb:f6:cd:13:ab:51:bc:
         47:27:10:3c:e0:02:4d:4c:2b:25:a4:2a:9a:db:b7:4e:55:76:
         98:74:23:67:1e:e5:1a:d1:ec:6c:98:a6:4c:54:f2:fd:bb:b8:
         13:36:44:c5:91:f9:ce:33:91:5c:bb:8d:8d:e4:36:f7:c9:c9:
         d3:ba:b8:9f:74:46:f8:d2:11:8f:25:ac:18:48:30:a9:3b:19:
         85:c8:33:57:9a:37:02:b5:f0:0c:d5:54:c3:a0:24:be:76:4a:
         55:9d:9c:7a:68:14:c9:13:10:8c:23:94:74:19:65:81:1f:88:
         91:6e:b0:dc:42:47:96:ba:d1:d1:57:2e:d6:ea:c6:af:a8:01:
         3e:71:3a:c0:dd:c9:39:82:9a:e5:b8:07:65:17:bd:a3:94:45:
         7f:78:41:b0:dd:df:12:33:8c:04:1b:94:fc:c4:55:d6:49:d8:
         14:88:bb:26:21:71:66:ef:97:1c:eb:8a:74:c6:de:9d:ca:22:
         74:0e:75:03:dc:db:83:a9:d9:ce:a3:f7:3c:d4:16:38:8d:51:
         b6:5d:eb:e8:2c:34:82:ca:14:6a:1d:35:47:87:f1:28:17:98:
         74:7b:6c:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----