Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/93da3a-87d5-4433-9f38-a296092be153/1/g0jafL6MpBhlvaGgguAMtcJYh68.mft
File:                     g0jafL6MpBhlvaGgguAMtcJYh68.mft (raw, json)
Hash identifier:          VqE8+E8CULzszQgB6Sre5894lEsN+ZYelkbBQ9GmfKk=
Subject key identifier:   51:2E:57:97:F8:EA:ED:7C:64:C2:BC:70:E3:67:FA:AB:5B:DB:8C:8C
Authority key identifier: 83:48:DA:7C:BE:8C:A4:18:65:BD:A1:A0:82:E0:0C:B5:C2:58:87:AF
Certificate issuer:       /CN=8348da7cbe8ca41865bda1a082e00cb5c25887af
Certificate serial:       01962F745AFDD904DF9C8D09DCD8E296B4B7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/g0jafL6MpBhlvaGgguAMtcJYh68.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/85/93da3a-87d5-4433-9f38-a296092be153/1/g0jafL6MpBhlvaGgguAMtcJYh68.mft
Manifest number:          14EB
Signing time:             Sun 13 Apr 2025 14:01:16 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:16 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:16 +0000
Files and hashes:         1: g0jafL6MpBhlvaGgguAMtcJYh68.crl (hash: n8xbcw/uSWOgwVfGME3VxaNyfUoiSCnI7FKC2Gfta1E=)
                          2: tiFC6JqksrztinNgeHjMezLIyQo.roa (hash: AMO7U+NdmFNyNa76WinXG21mQKY3WubeaQslsZeF+HY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:5a:fd:d9:04:df:9c:8d:09:dc:d8:e2:96:b4:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8348da7cbe8ca41865bda1a082e00cb5c25887af
        Validity
            Not Before: Apr 13 14:01:16 2025 GMT
            Not After : Apr 14 14:01:16 2025 GMT
        Subject: CN=512e5797f8eaed7c64c2bc70e367faab5bdb8c8c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:1f:5f:9e:0c:d2:d4:c5:dd:f8:7a:34:d6:cc:
                    94:7c:54:bc:c3:20:6a:26:00:82:f7:a5:98:fe:6e:
                    c8:4b:2c:94:09:f6:a0:e3:59:bc:2d:08:ca:d5:65:
                    4e:2c:5d:d3:1f:98:2a:c6:f2:f5:8a:ad:c7:53:66:
                    6c:28:fc:17:6c:aa:05:e6:9b:7b:b1:64:89:51:ac:
                    22:23:03:37:2e:b1:60:3b:3d:67:72:63:1b:61:52:
                    90:82:4c:76:54:1e:92:ac:40:0c:3d:78:33:7d:ee:
                    99:01:2b:f2:5a:32:7e:1b:f8:5c:41:33:f9:5f:12:
                    16:9a:93:cb:ed:f2:55:9f:84:bc:0f:8b:09:f1:10:
                    5d:1f:0d:b4:8c:e3:b6:2e:e2:15:49:ca:99:82:2b:
                    23:9a:6a:14:a5:7a:33:8c:f1:35:f6:f6:22:bf:07:
                    0e:b8:3d:9d:8e:2f:ae:eb:30:4e:90:33:0f:61:92:
                    0b:ff:30:31:50:d7:da:61:a4:6a:1a:d8:43:19:43:
                    ea:91:67:81:0b:6d:67:60:d1:9e:58:cd:07:2c:49:
                    b0:06:38:53:a2:e6:56:bb:94:db:cc:ab:3c:79:0f:
                    98:00:c4:49:3a:85:c9:97:1d:1f:63:7f:f2:49:99:
                    57:da:b8:7b:e6:09:e7:44:bc:44:2c:2a:36:c9:d9:
                    06:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:2E:57:97:F8:EA:ED:7C:64:C2:BC:70:E3:67:FA:AB:5B:DB:8C:8C
            X509v3 Authority Key Identifier:
                keyid:83:48:DA:7C:BE:8C:A4:18:65:BD:A1:A0:82:E0:0C:B5:C2:58:87:AF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g0jafL6MpBhlvaGgguAMtcJYh68.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/93da3a-87d5-4433-9f38-a296092be153/1/g0jafL6MpBhlvaGgguAMtcJYh68.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/85/93da3a-87d5-4433-9f38-a296092be153/1/g0jafL6MpBhlvaGgguAMtcJYh68.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:55:3a:f1:ad:1e:db:49:3b:38:d5:66:a0:eb:ba:9f:df:9b:
         71:70:63:f1:80:76:e4:6b:90:8c:87:91:02:6d:bd:0d:57:dd:
         85:fc:57:3d:44:4c:83:71:3b:a7:fc:47:5b:a0:c0:62:a6:7a:
         c6:9a:8a:95:02:73:8f:89:40:8a:b7:0f:db:9a:07:5c:a4:3c:
         49:b6:93:a3:61:7a:ed:92:10:28:20:15:1a:92:81:3a:e5:fe:
         df:99:9b:7d:28:78:15:36:7e:25:75:8f:81:c9:13:2c:e8:43:
         c3:87:b6:f9:52:df:49:4b:53:36:3b:3d:4a:d9:39:6f:00:15:
         82:9d:9b:b5:7e:c6:ab:5e:e4:cb:8c:d4:56:56:a1:98:4f:e6:
         60:92:9f:8a:e4:7d:16:c0:52:23:cd:7b:16:22:95:37:76:47:
         f7:d8:2a:e1:94:ff:ff:eb:12:0a:ba:13:82:bb:55:24:63:3e:
         44:27:88:9d:da:45:7a:be:71:27:e0:4e:98:58:d8:d6:a0:16:
         32:88:6e:58:14:9d:f5:1c:1c:08:08:bc:32:f1:9e:f3:8e:1d:
         2c:93:20:91:b0:a8:18:65:d4:50:e5:13:6b:d0:cc:3c:f0:9e:
         c9:23:96:32:86:bb:a5:96:4a:a2:00:5e:ee:dc:17:38:e6:94:
         54:5a:f0:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----