Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/e47b7d-360a-4a41-b76b-367a411f9ec6/1/_gdsTrghmCibE_9ShZOQfTIU1kg.mft
File:                     _gdsTrghmCibE_9ShZOQfTIU1kg.mft (raw, json)
Hash identifier:          V7jt4jZ6vim1QMWRZN0ablw/08EZgFGKez4d+3Ibrz0=
Subject key identifier:   89:AC:84:48:73:07:8D:35:84:6E:03:69:28:2A:72:45:D7:20:76:47
Authority key identifier: FE:07:6C:4E:B8:21:98:28:9B:13:FF:52:85:93:90:7D:32:14:D6:48
Certificate issuer:       /CN=fe076c4eb82198289b13ff528593907d3214d648
Certificate serial:       01962F069A264C69B45D459F27AC0239AFA2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_gdsTrghmCibE_9ShZOQfTIU1kg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7f/e47b7d-360a-4a41-b76b-367a411f9ec6/1/_gdsTrghmCibE_9ShZOQfTIU1kg.mft
Manifest number:          0835
Signing time:             Sun 13 Apr 2025 12:01:23 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:23 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:23 +0000
Files and hashes:         1: VfeIgjz0AxDDzTkQTX5oI6SFRHA.roa (hash: DxNlqxJB1dj664CEq4HV8OObj2p+8QssDiaq98KmVj4=)
                          2: _gdsTrghmCibE_9ShZOQfTIU1kg.crl (hash: ALTfWPUuJJvxVUkiXlv8P2jEynGYqe4vM+Qy9Ft83Lk=)
                          3: kf6StMkwG23V9ls9smnXkUH-c_U.roa (hash: 2gWZsR5gKC4c6paVczIP5ldxDt0ZMc2sEfNeECKiQpI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:9a:26:4c:69:b4:5d:45:9f:27:ac:02:39:af:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fe076c4eb82198289b13ff528593907d3214d648
        Validity
            Not Before: Apr 13 12:01:23 2025 GMT
            Not After : Apr 14 12:01:23 2025 GMT
        Subject: CN=89ac844873078d35846e0369282a7245d7207647
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:ad:8e:28:ac:12:82:b0:7e:c1:1f:42:59:e6:
                    6d:7a:d0:2a:33:bf:5e:63:eb:d8:67:4f:f5:cf:7c:
                    0f:b6:dc:e1:af:f0:7b:b7:ca:5a:04:8b:fc:69:9e:
                    ac:ae:b3:fb:3c:93:73:82:18:4d:2a:c4:62:9b:ac:
                    ba:68:a1:8f:fc:c2:d8:ad:40:c6:c1:10:a4:23:f9:
                    60:a5:1c:0c:21:11:0b:f4:e2:ac:a2:1f:17:82:92:
                    ed:a4:eb:c6:31:8e:8c:5d:e1:c7:08:d0:66:0b:c2:
                    5f:f2:78:d8:f0:62:9b:c6:f2:be:b2:92:2d:5d:e9:
                    f1:3c:53:3f:77:8e:4a:93:91:23:ac:7d:dc:10:20:
                    39:0f:73:23:ea:f3:22:75:f9:f1:df:95:50:3b:2f:
                    9f:b6:e1:2c:c4:84:0e:5b:a3:8b:ee:e5:b5:54:42:
                    e6:02:c4:b2:e2:2c:a2:01:fe:d5:28:5c:9b:5a:38:
                    dd:63:75:88:6e:fa:2d:c1:34:bd:d7:2c:50:cc:23:
                    74:a1:c0:b4:34:90:96:2f:9e:e9:78:60:15:d1:fc:
                    dd:c2:8b:7d:8c:0c:ba:77:a9:62:93:7f:77:69:8b:
                    20:7d:2d:d0:ae:ec:80:4f:ec:cf:a3:b7:d1:02:bb:
                    f1:0e:22:a6:b5:be:b3:97:a7:e5:ae:05:75:ed:ae:
                    6a:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:AC:84:48:73:07:8D:35:84:6E:03:69:28:2A:72:45:D7:20:76:47
            X509v3 Authority Key Identifier:
                keyid:FE:07:6C:4E:B8:21:98:28:9B:13:FF:52:85:93:90:7D:32:14:D6:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_gdsTrghmCibE_9ShZOQfTIU1kg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/e47b7d-360a-4a41-b76b-367a411f9ec6/1/_gdsTrghmCibE_9ShZOQfTIU1kg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/e47b7d-360a-4a41-b76b-367a411f9ec6/1/_gdsTrghmCibE_9ShZOQfTIU1kg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:b6:b6:9a:a9:19:95:62:a2:2b:24:d9:d5:19:90:c8:5f:87:
         09:a8:ab:91:ea:58:f7:58:a1:b7:7a:e3:58:3f:ef:69:cd:94:
         74:96:db:af:28:5a:74:21:53:96:73:1a:7d:28:4c:24:76:e8:
         b8:82:b4:17:d9:ae:bb:9c:5e:35:04:f3:ee:83:c3:d7:bf:89:
         8e:dc:55:0a:31:a6:52:63:0d:12:ed:be:a5:23:94:2a:18:35:
         c2:4f:6b:43:17:93:a3:c2:4c:52:b9:5b:3f:b6:4d:f9:15:d8:
         85:25:2b:86:f3:be:0a:83:79:d9:b5:9a:5e:48:19:04:8a:b1:
         61:1d:f2:6c:ac:08:31:62:30:51:21:9d:66:84:06:42:42:b4:
         15:0c:ed:bc:5e:c1:9c:d6:43:70:cf:ea:d7:7d:e2:d9:70:e1:
         3b:a4:62:21:dd:4b:3a:40:53:2d:4f:01:11:a5:0c:09:ca:56:
         78:73:a0:13:29:d9:83:bf:58:99:fb:84:11:0f:95:fd:91:f7:
         50:39:4c:5d:bc:94:2a:42:fc:49:1b:2c:3a:5f:d8:cf:8b:01:
         c0:63:13:42:fe:b6:b4:2a:63:4b:d6:ca:ae:a2:14:fb:93:65:
         6e:e8:58:38:be:18:67:44:74:b4:5b:df:d1:8d:4b:a7:e1:82:
         38:08:fa:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----