Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/f25066-9eba-43ac-bbb4-7b1778ddf7a9/1/Gc3YIGweNSxQZeSBeX73evDD3o0.mft
File:                     Gc3YIGweNSxQZeSBeX73evDD3o0.mft (raw, json)
Hash identifier:          GgEFJLBL/Z39w9Ih3LbV3dEB2/T9TtDUZGRpgwVIQww=
Subject key identifier:   E9:AE:8E:34:2C:98:FB:92:D3:B0:95:E6:09:9C:1C:A4:68:53:BC:E1
Authority key identifier: 19:CD:D8:20:6C:1E:35:2C:50:65:E4:81:79:7E:F7:7A:F0:C3:DE:8D
Certificate issuer:       /CN=19cdd8206c1e352c5065e481797ef77af0c3de8d
Certificate serial:       01962FAB674BE27843479A5B9A19FF16B6FA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Gc3YIGweNSxQZeSBeX73evDD3o0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/82/f25066-9eba-43ac-bbb4-7b1778ddf7a9/1/Gc3YIGweNSxQZeSBeX73evDD3o0.mft
Manifest number:          0BA1
Signing time:             Sun 13 Apr 2025 15:01:24 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:24 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:24 +0000
Files and hashes:         1: BXWkDJgGeE3wLT1lYDsJPAlavfw.roa (hash: irjuewqr+XdI7kgKWav4JZTl4lqEMRRX3Cq/Qdp74jc=)
                          2: Gc3YIGweNSxQZeSBeX73evDD3o0.crl (hash: Lmx3YDdRl6CoHpHh6lS8+xyRjtpAa0SAcVbbbrS9MPc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:67:4b:e2:78:43:47:9a:5b:9a:19:ff:16:b6:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=19cdd8206c1e352c5065e481797ef77af0c3de8d
        Validity
            Not Before: Apr 13 15:01:24 2025 GMT
            Not After : Apr 14 15:01:24 2025 GMT
        Subject: CN=e9ae8e342c98fb92d3b095e6099c1ca46853bce1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:f1:5e:f5:98:4a:b8:e7:9d:a5:6c:c3:4e:3a:
                    8f:a2:73:b9:92:ec:a1:53:bc:2b:85:c1:a1:ca:a9:
                    75:19:72:45:9e:0d:b1:3a:15:bd:8b:bb:76:e9:28:
                    f8:e2:1d:21:dc:1e:83:b6:b0:f1:55:04:da:19:be:
                    65:ee:d2:06:ee:16:74:1b:5a:84:4b:be:b2:b3:9c:
                    e2:71:f0:13:05:e2:3c:34:82:7a:1e:d8:05:e5:88:
                    5c:c5:8f:a3:1d:d6:61:07:db:eb:ff:6a:d9:d3:ae:
                    66:8e:e3:a7:83:39:28:d1:03:91:0d:22:4e:10:ea:
                    24:bd:ae:f6:a5:38:ba:3c:b1:e3:9c:91:b3:59:3f:
                    0c:e4:6f:e3:28:bf:e4:fc:29:08:e6:08:45:c4:9b:
                    c2:4f:48:45:30:3d:15:8d:9a:9e:f1:a9:44:cc:ee:
                    0c:2d:7f:e8:d8:aa:c6:a0:b1:de:d8:b7:54:4e:33:
                    e3:88:ea:d0:85:53:24:e6:fa:d0:fc:07:7a:8f:dc:
                    f0:06:1f:85:5a:9f:d3:6a:28:89:30:9a:ea:ff:73:
                    82:a5:33:53:ac:9c:93:9a:7f:79:ee:78:ef:6e:40:
                    fa:da:81:ee:fc:d0:96:82:82:3b:4c:5a:d4:13:64:
                    42:c7:0f:0c:eb:2a:dd:ca:8c:2f:35:5c:fd:fb:02:
                    d4:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:AE:8E:34:2C:98:FB:92:D3:B0:95:E6:09:9C:1C:A4:68:53:BC:E1
            X509v3 Authority Key Identifier:
                keyid:19:CD:D8:20:6C:1E:35:2C:50:65:E4:81:79:7E:F7:7A:F0:C3:DE:8D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gc3YIGweNSxQZeSBeX73evDD3o0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/f25066-9eba-43ac-bbb4-7b1778ddf7a9/1/Gc3YIGweNSxQZeSBeX73evDD3o0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/82/f25066-9eba-43ac-bbb4-7b1778ddf7a9/1/Gc3YIGweNSxQZeSBeX73evDD3o0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:ae:ac:97:f7:81:36:21:6a:fc:2e:44:8e:eb:d4:8e:8b:1d:
         44:9d:b2:50:94:6d:cd:1f:ab:71:35:d9:59:03:03:e6:91:d7:
         e9:59:1f:f8:81:1f:11:86:16:64:67:66:35:12:fd:82:d1:c2:
         90:a4:9e:a4:5a:8f:05:fc:ad:92:04:ac:12:b5:bb:a0:da:c1:
         ed:a4:71:bf:0e:ea:48:bf:a4:9a:b8:a9:f4:c4:b1:15:fa:12:
         a3:57:8d:0d:bb:91:3d:f2:d0:36:16:65:0c:3b:57:30:41:bd:
         12:b0:98:3e:f7:fc:42:6f:d2:2d:81:79:d1:0e:2c:1f:e8:d7:
         59:3b:e7:26:55:73:5d:7c:6d:b1:24:bf:87:27:dd:5d:30:f3:
         35:54:7b:9f:21:bd:81:2a:a5:5d:64:41:86:4a:f5:52:1e:f9:
         00:60:b9:4e:b4:15:3c:e1:e6:87:8c:25:31:e0:b3:7c:f7:c0:
         2a:33:88:48:49:ac:f6:be:ac:c5:4d:7f:f5:6b:58:78:ed:40:
         43:ce:32:35:19:60:62:5b:b6:8a:53:19:85:61:37:aa:e5:75:
         2b:86:6c:7e:e4:25:1c:7d:6c:ee:71:e6:40:ab:8d:a7:45:7b:
         24:08:51:2c:c7:2f:59:4b:b8:a1:1a:dc:8b:4f:4c:1e:ae:b9:
         a8:48:3d:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----