Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/f0b960-86d8-4062-a597-9b4a2d5f3a76/1/pS_GDTbii7jfFFyErKsZz6U7Alo.mft
File:                     pS_GDTbii7jfFFyErKsZz6U7Alo.mft (raw, json)
Hash identifier:          Pqx3d1uiNFRp1Fc2Zk56HMy3cuWzf4YKYMH1eoe1gMQ=
Subject key identifier:   CE:65:8C:21:CE:9E:8E:F6:2C:C4:84:7E:D0:9C:AA:86:80:9B:A4:89
Authority key identifier: A5:2F:C6:0D:36:E2:8B:B8:DF:14:5C:84:AC:AB:19:CF:A5:3B:02:5A
Certificate issuer:       /CN=a52fc60d36e28bb8df145c84acab19cfa53b025a
Certificate serial:       01962FAB1E39F6E78B8ACA0D6C8B0A6D5D74
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pS_GDTbii7jfFFyErKsZz6U7Alo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/86/f0b960-86d8-4062-a597-9b4a2d5f3a76/1/pS_GDTbii7jfFFyErKsZz6U7Alo.mft
Manifest number:          14EB
Signing time:             Sun 13 Apr 2025 15:01:05 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:05 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:05 +0000
Files and hashes:         1: 1-KYSj48sD3jE1Gzvv9kFu9QJGtY.roa (hash: H4x96iKua2b3UDRaB1WSf9rakbeSZ8QQwLawXzA3kBc=)
                          2: kroCcDuLJiEm7WFd8GtQQzKukrk.roa (hash: C4/C9Nc89baYiSQf8o8T95z101LyK5Fm6SS+L143NqQ=)
                          3: oWikPPO3V0QeY0v8vBGwReraGUs.roa (hash: xHZgaltZECGHYZXkWizrY9iMMJdCdaYUNGOTHUNFxDM=)
                          4: pS_GDTbii7jfFFyErKsZz6U7Alo.crl (hash: IrPvEjvGqaCrGZL8AjAOR9XSX7f9t6rkbjcHPJ7zlpg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:1e:39:f6:e7:8b:8a:ca:0d:6c:8b:0a:6d:5d:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a52fc60d36e28bb8df145c84acab19cfa53b025a
        Validity
            Not Before: Apr 13 15:01:05 2025 GMT
            Not After : Apr 14 15:01:05 2025 GMT
        Subject: CN=ce658c21ce9e8ef62cc4847ed09caa86809ba489
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:e1:a2:18:fd:6e:32:b4:3f:05:9a:a8:12:24:
                    6e:a6:33:1e:99:74:51:9e:5b:1d:80:b3:8d:d0:ef:
                    e9:2e:30:a2:79:0d:d2:66:6e:69:23:27:bc:07:ba:
                    3a:8f:a0:42:02:8c:1f:69:87:fc:9c:ce:4a:d9:5c:
                    e8:2a:62:ba:e8:e8:e7:26:55:fa:3e:29:31:81:22:
                    99:73:70:c8:cb:5e:7a:14:7b:3b:d1:5a:95:34:41:
                    13:55:38:6a:72:e2:87:61:2b:a6:dc:6f:18:de:b1:
                    06:91:7d:19:3f:89:34:98:8f:a1:6b:03:1c:89:0f:
                    5a:b9:43:c6:78:71:25:f6:1c:eb:10:a8:b1:45:19:
                    16:a6:c3:6d:7a:cd:f0:80:70:23:2b:42:e5:2e:1d:
                    26:34:74:9d:2d:c4:81:7f:c1:c6:cf:64:23:1d:61:
                    fe:46:62:25:73:76:83:06:33:5f:7c:4d:f4:58:ba:
                    23:08:e6:4f:1f:de:d7:20:be:f9:35:7e:fb:54:2d:
                    4b:08:c1:77:d9:ee:9d:88:66:fd:62:13:63:27:b6:
                    03:aa:7d:f4:70:7e:ed:d9:68:87:64:c4:d2:b4:35:
                    3c:7b:9c:bd:1f:ff:5d:98:aa:4f:17:09:c2:99:e7:
                    06:7f:54:d8:4a:c9:45:2e:60:25:16:b2:b1:13:7a:
                    4e:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:65:8C:21:CE:9E:8E:F6:2C:C4:84:7E:D0:9C:AA:86:80:9B:A4:89
            X509v3 Authority Key Identifier:
                keyid:A5:2F:C6:0D:36:E2:8B:B8:DF:14:5C:84:AC:AB:19:CF:A5:3B:02:5A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pS_GDTbii7jfFFyErKsZz6U7Alo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/f0b960-86d8-4062-a597-9b4a2d5f3a76/1/pS_GDTbii7jfFFyErKsZz6U7Alo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/86/f0b960-86d8-4062-a597-9b4a2d5f3a76/1/pS_GDTbii7jfFFyErKsZz6U7Alo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:72:69:70:b8:be:e2:fb:6c:4d:be:39:de:81:d3:ce:93:54:
         b4:a7:a2:16:03:9d:10:00:34:49:14:f9:56:b0:b6:30:61:4a:
         3a:36:3b:7f:72:08:a6:28:00:da:ef:e0:92:ee:c6:af:9d:2d:
         83:a3:5b:d3:2f:9d:d5:a6:c2:94:28:eb:c9:d4:85:f5:67:e3:
         7c:01:83:e2:09:07:69:7f:31:71:7d:a5:bf:fc:12:b3:69:ad:
         82:27:52:2d:06:cc:22:7d:29:7b:72:dd:dc:1f:f9:52:a5:be:
         d5:3f:32:30:d5:13:f1:b1:18:33:fd:2c:4c:b2:ad:48:cc:3c:
         54:13:98:12:04:6b:fd:67:34:ad:fd:f2:e5:d3:2a:cf:90:77:
         70:52:e2:30:49:2b:6d:b4:54:c5:19:f6:c7:ab:96:4a:77:d2:
         c7:81:a2:e5:52:f3:d8:a7:8d:d9:bd:7d:c1:85:38:48:f9:c3:
         64:5c:82:33:a1:32:44:a4:4c:bd:0c:4e:a9:75:63:d4:e6:d6:
         db:07:8b:32:93:be:01:4a:39:fe:ce:99:06:d0:53:c9:cc:d3:
         8a:91:c8:c6:00:31:3e:af:02:b0:a7:c0:8f:92:51:2d:be:a3:
         4c:ff:12:b6:a6:5c:9a:d0:ed:ab:9c:e6:27:a2:5d:d3:db:f2:
         76:b5:b7:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----