Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/GBAXciSJlrh9kIQMLSfWJUlFgXM.mft
File:                     GBAXciSJlrh9kIQMLSfWJUlFgXM.mft (raw, json)
Hash identifier:          gQl6o37JMU9bOw3UdRcfRi0oChIXyX4ov2cnlI9U8Mc=
Subject key identifier:   8F:21:F4:65:72:66:EC:C3:1E:44:C3:17:3D:69:20:AD:45:66:86:18
Authority key identifier: 18:10:17:72:24:89:96:B8:7D:90:84:0C:2D:27:D6:25:49:45:81:73
Certificate issuer:       /CN=18101772248996b87d90840c2d27d62549458173
Certificate serial:       01962F74A2378B94827727DD1ED5A441093C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GBAXciSJlrh9kIQMLSfWJUlFgXM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/GBAXciSJlrh9kIQMLSfWJUlFgXM.mft
Manifest number:          14E7
Signing time:             Sun 13 Apr 2025 14:01:34 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:34 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:34 +0000
Files and hashes:         1: 4B3_MshNOWnWjP1BmUx5GXRuYXQ.roa (hash: vtRq/5g0n/DkAaOADbPmajlUlRSvasZCKPeJT99ypTw=)
                          2: 6dChuohTDCDCdX4xGrGFs8noFQU.roa (hash: xhBX5O5lALmdJBG0Zdk5Gif2Y7IwFUtNAXlVBenOuI0=)
                          3: ADw5ULNp5csIlPVZQfXB8yIQYtU.roa (hash: q0MPcDmug9yHkrtSvpk3xWn1fbFk/3h4YL5GZCs73Bs=)
                          4: CSdBKAAdfW7cwun5izwk606xA6w.roa (hash: Ig/6bzx+3zQBa9AHiPdoQd7yxLAcSLLT7yZ9/s6Z7Bk=)
                          5: DnSfICIchmVdW2iyXXRSVkbbNyA.roa (hash: CQlhZD4v2Sq/Gi1DViDNA/f5nMO261J5bDYJyiWX0Hk=)
                          6: F05pDSdP6LoB0OP4bH1TiON5TDE.roa (hash: nXDcHsVqskZHQebgQIJgL/95s4mzZsJSrrip91rsqAc=)
                          7: GBAXciSJlrh9kIQMLSfWJUlFgXM.crl (hash: 2NS8bDUCB7b6OXuB1qZvsDyKHtjWvTFvQrQTy3clLPo=)
                          8: GxeOyVoZRKlhrsd07uGVymkqXOA.roa (hash: k5o3s2Qgx1UPo1xnCxcu1FDwfEFB39lUl4fyOvt51j8=)
                          9: RGD4J9Y6yTEHY1igLZ-uvYBnces.roa (hash: sduGng/1h4H+ay2Q9Sc4d8D+jCRUFIhG2cnDQt00BLw=)
                          10: XqxEdclaAmRMTPYp41kyOEXD204.roa (hash: x7+bdDrA7xSNj6ohIZwMCkTBUTfDvQ8QVy9Lwv8uwBM=)
                          11: _gpLxW0fzvb5DJJQd0bq0o_QET0.roa (hash: tD3Cm8lKrfj4EtGNAWAxKK6dJmhObO63VITMzdu4Eek=)
                          12: bzxRiVGDHiR68JnnZkEHcQSeEgc.roa (hash: CndFCZaOMfrjRLvio2IIWmDshTZnNq5iyASkAOmKcRo=)
                          13: dSSeeBpgxumBIOIgRUYKo-rlKWo.roa (hash: lmpXcJ+CKLXvZjyKRCwdgP6g8fKXZFHNIaapVhOrY50=)
                          14: gRtu0LUQ36KM73SlUMkc38__UYk.roa (hash: AwJs+C3iqzflDXpMLXTupa1Hnui98iLghZQTs3MlUEo=)
                          15: n3Zc51Cjh-GLrciptyieExQH7yk.roa (hash: 8kQMvULnSaX1bsQcxs0wqbkmZxrZsioKOXASv0afA+I=)
                          16: qgPjnbxNpbDqvwf_d4VSEhwjpVU.roa (hash: bNvXj9xQb3LIJevq5+1LF5QI+fNnOyWnvLuoU9F7vcY=)
                          17: rrUNWOAHpdHgyxxJieb0wNdGaqU.roa (hash: njmYuUZq0RHFa7IUQo8a41jl5mw6uDWyn1XW2onkIz4=)
                          18: sPQj7GNvWjjtxqZ62JF9H42DMMI.roa (hash: O8z6PYZ9T+hNLoZ+Aa1FEdADEMKWYr0nGcdPMi6X/6Q=)
                          19: uk0QbJL6mHzA4vNnpeck_tMVVvE.roa (hash: KnqK7jZ2ORVcjCRW4FQ21u1nxeBRFMMQY1XtgNLzOQQ=)
                          20: xWvxYFAZyAYuQbuw5LcBYmpTVhE.roa (hash: jF6nMrItYL3p1nixedbqVRkj6MMqr/ktH4rh4D+Amos=)
                          21: zBB80tlDlWdUGM0XNThH3proqVk.roa (hash: Hpnc7kBqdnVZtObcZbR6l/FES2WWxBkwCVz3pFbI3rM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:a2:37:8b:94:82:77:27:dd:1e:d5:a4:41:09:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18101772248996b87d90840c2d27d62549458173
        Validity
            Not Before: Apr 13 14:01:34 2025 GMT
            Not After : Apr 14 14:01:34 2025 GMT
        Subject: CN=8f21f4657266ecc31e44c3173d6920ad45668618
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:0f:99:f1:cc:60:8d:2c:b8:f7:49:f1:f5:11:
                    da:4d:03:39:a1:b6:4f:7a:80:fb:6f:7e:87:f8:e8:
                    07:13:98:75:8b:5d:a9:83:ab:78:15:5d:49:44:f5:
                    ed:78:df:91:a7:60:c2:8b:8d:d4:4e:20:70:d2:af:
                    cb:51:79:ed:5b:61:b0:1d:b2:11:99:99:84:ea:a5:
                    e6:23:bf:c3:8d:cc:66:ae:7e:0c:71:99:6f:9a:7d:
                    85:61:58:97:f0:02:63:b6:22:04:fb:4b:45:31:10:
                    bb:0c:a1:84:66:16:f6:13:3e:41:36:37:42:37:f6:
                    1c:3d:9a:9d:b6:a5:7a:1b:d1:39:8e:c6:ee:01:e3:
                    56:e6:94:3f:34:90:aa:37:eb:db:5d:35:f8:37:a1:
                    84:ad:36:d7:aa:e1:46:5e:52:52:9b:4f:47:48:75:
                    3f:cd:81:f4:78:99:ee:59:14:57:f7:32:a9:54:5d:
                    7c:e3:7a:48:0e:73:ac:85:11:b1:a5:94:98:07:9a:
                    7e:27:f1:dc:70:21:1e:68:c1:f5:02:51:a2:33:c8:
                    b0:be:d0:41:19:1c:bb:d6:48:6b:b0:dd:c6:1d:ba:
                    4e:c8:b4:87:d3:b1:b7:72:67:43:59:f0:7a:c2:76:
                    5c:19:2e:0c:00:e5:24:29:d6:ac:10:fb:3d:5e:d0:
                    36:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:21:F4:65:72:66:EC:C3:1E:44:C3:17:3D:69:20:AD:45:66:86:18
            X509v3 Authority Key Identifier:
                keyid:18:10:17:72:24:89:96:B8:7D:90:84:0C:2D:27:D6:25:49:45:81:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GBAXciSJlrh9kIQMLSfWJUlFgXM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/GBAXciSJlrh9kIQMLSfWJUlFgXM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/GBAXciSJlrh9kIQMLSfWJUlFgXM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:91:63:f4:f6:ea:42:70:22:73:71:c1:e2:14:14:7b:3e:5c:
         e0:87:dc:78:f6:b1:49:35:e7:33:db:a7:82:4c:fc:c6:9d:8b:
         83:8e:51:ca:fa:9a:bb:f4:dc:1d:d8:28:47:cb:b1:8c:7e:b4:
         86:76:ac:5c:dd:71:43:dd:7c:c5:23:f4:51:5d:33:5e:7d:ce:
         df:b3:d0:be:93:ec:1a:9d:6b:6a:c9:1c:25:9b:43:a8:9b:08:
         f8:da:74:26:6a:80:c7:e6:7e:f7:20:10:ed:a8:e3:d2:37:f1:
         16:39:e5:61:b3:a8:02:45:aa:40:c0:ce:58:cd:85:b7:d0:9c:
         03:20:d0:91:ec:6e:d0:47:c6:26:16:0f:fc:fb:0a:c5:5a:6d:
         28:87:f8:e9:9f:a3:b3:7e:b7:3b:e9:3f:c4:58:f5:9d:7e:12:
         d5:bf:96:76:a9:0a:cd:15:a5:d6:aa:6d:06:23:80:a0:17:00:
         7f:d6:f7:7e:bf:e7:5c:5c:45:3c:7b:2d:8b:32:b2:cc:21:89:
         1c:5f:a8:8a:20:e0:76:1d:00:6a:e7:51:34:3e:7a:ff:6b:9a:
         ff:34:57:ec:64:9e:05:45:29:bf:04:51:a4:71:72:0b:82:a0:
         d2:04:70:63:60:0e:fd:f2:78:eb:9d:b1:b9:eb:c0:01:04:01:
         c5:83:e4:5a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvdKI3i5SCdyfdHtWkQQk8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE4MTAxNzcyMjQ4OTk2Yjg3ZDkwODQwYzJkMjdkNjI1NDk0
NTgxNzMwHhcNMjUwNDEzMTQwMTM0WhcNMjUwNDE0MTQwMTM0WjAzMTEwLwYDVQQD
Eyg4ZjIxZjQ2NTcyNjZlY2MzMWU0NGMzMTczZDY5MjBhZDQ1NjY4NjE4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkw+Z8cxgjSy490nx9RHaTQM5obZP
eoD7b36H+OgHE5h1i12pg6t4FV1JRPXteN+Rp2DCi43UTiBw0q/LUXntW2GwHbIR
mZmE6qXmI7/Djcxmrn4McZlvmn2FYViX8AJjtiIE+0tFMRC7DKGEZhb2Ez5BNjdC
N/YcPZqdtqV6G9E5jsbuAeNW5pQ/NJCqN+vbXTX4N6GErTbXquFGXlJSm09HSHU/
zYH0eJnuWRRX9zKpVF1843pIDnOshRGxpZSYB5p+J/HccCEeaMH1AlGiM8iwvtBB
GRy71khrsN3GHbpOyLSH07G3cmdDWfB6wnZcGS4MAOUkKdasEPs9XtA2bwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI8h9GVyZuzDHkTDFz1pIK1FZoYYMB8GA1UdIwQY
MBaAFBgQF3IkiZa4fZCEDC0n1iVJRYFzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR0JBWGNpU0pscmg5a0lRTUxTZldKVWxGZ1hNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MS8yMGE1YTUtMGJhMi00MDUyLWJlYjQt
M2NjODVhZDNjMTkwLzEvR0JBWGNpU0pscmg5a0lRTUxTZldKVWxGZ1hNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MS8yMGE1YTUtMGJhMi00MDUyLWJlYjQtM2NjODVhZDNjMTkw
LzEvR0JBWGNpU0pscmg5a0lRTUxTZldKVWxGZ1hNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYZFj9Pbq
QnAic3HB4hQUez5c4IfcePaxSTXnM9ungkz8xp2Lg45Ryvqau/TcHdgoR8uxjH60
hnasXN1xQ918xSP0UV0zXn3O37PQvpPsGp1raskcJZtDqJsI+Np0JmqAx+Z+9yAQ
7ajj0jfxFjnlYbOoAkWqQMDOWM2Ft9CcAyDQkexu0EfGJhYP/PsKxVptKIf46Z+j
s363O+k/xFj1nX4S1b+WdqkKzRWl1qptBiOAoBcAf9b3fr/nXFxFPHstizKyzCGJ
HF+oiiDgdh0AaudRND56/2ua/zRX7GSeBUUpvwRRpHFyC4Kg0gRwY2AO/fJ4652x
uevAAQQBxYPkWg==
-----END CERTIFICATE-----