Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/53100f-1bb3-4219-9c82-2398704ab50c/1/G2hlYSYZg3PQeIa_Srj7BrkAZ4A.mft
File:                     G2hlYSYZg3PQeIa_Srj7BrkAZ4A.mft (raw, json)
Hash identifier:          rwNA+p7xhYHLFIh9Zu/BrZCGml6zq4+3uqJrOqAAKzs=
Subject key identifier:   64:78:EB:78:53:6C:2F:85:FC:E6:78:15:D1:8C:6A:A2:12:E7:02:E2
Authority key identifier: 1B:68:65:61:26:19:83:73:D0:78:86:BF:4A:B8:FB:06:B9:00:67:80
Certificate issuer:       /CN=1b68656126198373d07886bf4ab8fb06b9006780
Certificate serial:       01962E61F2657571240BDD1B9318C1F393A8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/G2hlYSYZg3PQeIa_Srj7BrkAZ4A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7a/53100f-1bb3-4219-9c82-2398704ab50c/1/G2hlYSYZg3PQeIa_Srj7BrkAZ4A.mft
Manifest number:          14EC
Signing time:             Sun 13 Apr 2025 09:01:33 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:33 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:33 +0000
Files and hashes:         1: FseoG8adiLo0RLAf1UjvghOTljU.roa (hash: KjYrZHqJ+HstyQr/uUASJXDHhJKgj2NLAuGOtjEwvqg=)
                          2: G2hlYSYZg3PQeIa_Srj7BrkAZ4A.crl (hash: W31wDntvlQXxr2VfCLJNyrSdeYvt3GZUkO+PWSRDHag=)
                          3: HZwokTuDHsI8h-fzTOEC6oBOUUI.roa (hash: WM7QJ6OQyLcuKoO0U9leXRvAuei8nXuZdEOZY6w3qXc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:f2:65:75:71:24:0b:dd:1b:93:18:c1:f3:93:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1b68656126198373d07886bf4ab8fb06b9006780
        Validity
            Not Before: Apr 13 09:01:33 2025 GMT
            Not After : Apr 14 09:01:33 2025 GMT
        Subject: CN=6478eb78536c2f85fce67815d18c6aa212e702e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:ae:e7:38:93:36:fb:1f:47:cf:53:36:36:58:
                    9c:3b:8b:75:48:fc:6d:c5:f0:46:f7:05:8c:30:fb:
                    36:c5:d3:19:51:2b:a0:1c:02:f2:af:91:85:6c:bb:
                    dd:72:f9:98:2d:e1:6a:e4:67:5a:c7:51:7f:f9:62:
                    80:13:3c:e0:b9:88:ea:8b:75:44:9e:10:c5:e1:ad:
                    65:34:be:9a:40:b1:03:44:96:b3:0c:e3:1b:a6:47:
                    d1:c3:8a:2e:03:34:6a:d9:06:f3:a3:ed:1f:0f:f6:
                    b9:8f:b6:4e:e1:5e:1b:8f:db:66:d3:41:58:0b:de:
                    80:46:b7:b0:33:62:cd:e6:1f:23:6b:fc:0a:da:fe:
                    1c:37:bd:df:0c:12:87:40:3b:57:15:43:db:21:3f:
                    3d:6d:bd:41:28:dd:9e:91:f3:c0:d8:54:0e:98:36:
                    ab:12:9a:79:00:8d:6b:61:1d:db:4c:ef:be:55:99:
                    7f:7b:13:1e:11:b8:41:e1:3f:4d:9b:8e:b6:40:66:
                    f1:6a:9c:b1:da:c8:95:7c:bd:5c:43:ea:64:32:b0:
                    0f:ac:a8:28:de:c7:d2:6f:a1:a6:97:1a:2d:6a:1b:
                    59:a2:2f:59:d6:48:3c:94:84:ef:d0:3f:6e:9d:95:
                    bf:d1:c6:bd:d5:b6:fd:0b:f4:97:3e:99:41:2e:b2:
                    1c:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:78:EB:78:53:6C:2F:85:FC:E6:78:15:D1:8C:6A:A2:12:E7:02:E2
            X509v3 Authority Key Identifier:
                keyid:1B:68:65:61:26:19:83:73:D0:78:86:BF:4A:B8:FB:06:B9:00:67:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G2hlYSYZg3PQeIa_Srj7BrkAZ4A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/53100f-1bb3-4219-9c82-2398704ab50c/1/G2hlYSYZg3PQeIa_Srj7BrkAZ4A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/53100f-1bb3-4219-9c82-2398704ab50c/1/G2hlYSYZg3PQeIa_Srj7BrkAZ4A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:3c:9a:aa:2f:06:0c:86:12:3e:86:44:f6:c2:5d:60:b8:3c:
         3d:a7:33:9e:77:c6:7e:e3:51:71:f0:aa:ad:27:c8:d1:44:96:
         37:e2:c9:3c:40:30:fc:e6:b6:8c:88:60:da:14:97:d0:f4:3d:
         76:52:b1:50:87:1d:98:a2:cc:59:ec:ce:e6:d5:3f:2a:a4:af:
         52:cd:f8:4a:2e:ca:c4:b4:4e:f5:00:7e:3c:1c:a6:80:55:a3:
         8a:e2:bc:79:d0:09:c4:ba:8d:53:d4:3a:02:79:b9:fc:ed:a7:
         09:6f:28:6e:de:d5:27:76:ec:fa:a8:9e:ae:67:67:db:cd:e4:
         cf:c0:80:e0:31:13:74:d1:20:7b:65:a8:0f:b2:be:1f:02:ed:
         27:94:5f:8e:90:2f:ff:93:44:bf:cd:12:1a:0c:9b:e8:af:37:
         85:3e:36:62:27:34:22:68:36:5a:95:bd:a7:2a:61:4f:6a:04:
         81:fa:9a:08:69:54:7e:99:13:90:4c:58:5e:19:9a:e0:2a:cb:
         51:e5:e5:a0:d2:b4:58:d1:6c:44:23:cc:c0:42:2a:e4:75:24:
         e9:44:63:3c:5c:b7:8d:3c:22:74:86:92:6d:8f:6e:9d:f6:e3:
         65:4e:d7:e1:e4:24:5e:79:8d:5f:19:f7:69:4b:06:1d:d4:67:
         0c:dd:dc:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----