Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/bf580b-e912-4c1d-9e50-57b91e815330/1/GdlgBYpVOz9d-f5ychkDfEirUOE.mft
File:                     GdlgBYpVOz9d-f5ychkDfEirUOE.mft (raw, json)
Hash identifier:          Tb1mIJPrR94Pu3MPKt2es4etW+L2wAsc3BwVn7rzQao=
Subject key identifier:   45:55:03:A4:D9:22:27:CE:07:DF:05:79:85:9D:DE:E1:B4:E3:0A:4D
Authority key identifier: 19:D9:60:05:8A:55:3B:3F:5D:F9:FE:72:72:19:03:7C:48:AB:50:E1
Certificate issuer:       /CN=19d960058a553b3f5df9fe727219037c48ab50e1
Certificate serial:       01962DF3C07BEE4D50AF9BA2BFE11CA3D30D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GdlgBYpVOz9d-f5ychkDfEirUOE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/87/bf580b-e912-4c1d-9e50-57b91e815330/1/GdlgBYpVOz9d-f5ychkDfEirUOE.mft
Manifest number:          0BBA
Signing time:             Sun 13 Apr 2025 07:01:11 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:11 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:11 +0000
Files and hashes:         1: GdlgBYpVOz9d-f5ychkDfEirUOE.crl (hash: phcwHCRoyl0WFwsJpNcNzGKKopw3NHo2m+5JzajXlIs=)
                          2: X3uPBxzPVXv3n_QN1aGdKbmuIRY.roa (hash: hUPc8yRkBzbeF7M/RRJW79E+lPzVmxoaNEB54waojEo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f3:c0:7b:ee:4d:50:af:9b:a2:bf:e1:1c:a3:d3:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=19d960058a553b3f5df9fe727219037c48ab50e1
        Validity
            Not Before: Apr 13 07:01:11 2025 GMT
            Not After : Apr 14 07:01:11 2025 GMT
        Subject: CN=455503a4d92227ce07df0579859ddee1b4e30a4d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:f2:f1:2c:d8:a9:41:e4:66:8e:79:19:fc:47:
                    c0:d7:5e:46:bd:45:15:49:49:df:a3:74:bc:b4:01:
                    a7:79:c9:68:ad:3d:4a:74:70:bb:0f:60:54:28:2f:
                    e8:a1:5f:e6:11:01:b6:43:2c:2f:ae:e4:67:1f:6d:
                    23:51:ca:f5:e7:00:3b:97:68:67:46:b1:f2:53:ea:
                    a0:c8:f5:da:19:13:f0:2a:af:78:a2:cf:2b:35:89:
                    9d:47:9c:65:ce:71:2d:e8:50:3e:1e:b6:20:66:28:
                    dd:ba:01:6a:21:9d:64:05:20:8b:84:d9:ce:11:76:
                    b5:2b:7e:3c:94:54:d2:be:7b:5d:f1:31:68:5d:fd:
                    3a:1a:86:45:38:20:06:27:4e:16:72:6e:34:38:db:
                    27:ce:16:6d:86:85:8e:05:33:bf:da:ec:4c:cc:10:
                    f0:1d:f0:d9:60:41:5d:55:b0:d9:7e:ca:3a:f2:33:
                    58:f4:9e:ab:a1:f0:39:48:51:52:b9:b3:f4:9b:b6:
                    e8:f2:88:30:e0:0b:7d:96:b5:ac:bb:e0:2a:7d:11:
                    36:16:33:2b:6a:ab:2e:f7:0d:3d:a4:65:d6:7d:58:
                    aa:ba:d1:54:6c:27:9b:08:cd:fd:8d:69:91:31:da:
                    47:45:24:28:8b:9d:e5:6f:6a:87:c2:a8:6c:db:45:
                    9a:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:55:03:A4:D9:22:27:CE:07:DF:05:79:85:9D:DE:E1:B4:E3:0A:4D
            X509v3 Authority Key Identifier:
                keyid:19:D9:60:05:8A:55:3B:3F:5D:F9:FE:72:72:19:03:7C:48:AB:50:E1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GdlgBYpVOz9d-f5ychkDfEirUOE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/bf580b-e912-4c1d-9e50-57b91e815330/1/GdlgBYpVOz9d-f5ychkDfEirUOE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/87/bf580b-e912-4c1d-9e50-57b91e815330/1/GdlgBYpVOz9d-f5ychkDfEirUOE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a2:2f:ac:35:25:26:67:a5:34:88:66:38:1e:28:85:25:f0:46:
         76:26:85:4a:00:69:43:19:ed:1c:77:d7:5d:ed:d0:e6:30:da:
         28:7a:8b:be:55:b6:7e:1c:5b:00:cd:4a:d4:b6:ab:52:c7:aa:
         f9:8f:72:b5:14:09:7e:36:f2:6c:ea:4b:fc:92:c5:e0:02:89:
         0c:a1:85:dc:55:cc:79:fc:52:d2:5b:c5:29:ad:7e:d1:cd:77:
         15:e3:1e:89:4e:cc:53:43:53:94:cb:d3:bb:f0:d8:5a:c5:2e:
         6c:1e:9c:05:40:c9:4c:14:86:b7:0f:ea:9d:ef:a3:63:3f:4f:
         a2:a4:b1:21:c4:b3:84:b8:2b:79:08:4f:2b:4f:8f:5e:33:8a:
         ad:ca:ea:82:82:bd:f9:1f:94:60:23:9c:8c:7b:a4:da:37:fd:
         b6:a4:88:e1:1b:c4:8f:a4:9e:e7:61:05:b5:c0:b1:3f:d4:4d:
         9c:18:63:eb:f4:5f:38:a7:38:24:99:27:f1:ee:db:7a:73:ae:
         57:04:16:32:82:4c:16:b8:ba:63:73:1b:29:83:4f:a9:b0:3d:
         7e:f0:b6:cd:e3:c1:cc:d7:52:13:d5:ec:a1:e0:42:5e:9c:b3:
         21:b9:4e:ab:be:67:ed:0d:e4:88:3f:11:b4:a6:74:46:16:39:
         65:d4:0c:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----