Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/971311-f47f-46db-8c57-e9782041cc24/1/gW0iCytaRvvrJ-8tlp-iHdM4xbM.mft
File:                     gW0iCytaRvvrJ-8tlp-iHdM4xbM.mft (raw, json)
Hash identifier:          TFeVZ5CZLZpJKPbwXkOcDtOj354F6ljED7c+ATQDtd8=
Subject key identifier:   D4:15:8B:29:F7:F2:BD:4B:49:54:92:33:18:B4:D5:82:B5:50:D8:20
Authority key identifier: 81:6D:22:0B:2B:5A:46:FB:EB:27:EF:2D:96:9F:A2:1D:D3:38:C5:B3
Certificate issuer:       /CN=816d220b2b5a46fbeb27ef2d969fa21dd338c5b3
Certificate serial:       01962E2AFD2E61DD49A4EDB8123952158215
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gW0iCytaRvvrJ-8tlp-iHdM4xbM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8d/971311-f47f-46db-8c57-e9782041cc24/1/gW0iCytaRvvrJ-8tlp-iHdM4xbM.mft
Manifest number:          0991
Signing time:             Sun 13 Apr 2025 08:01:31 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:31 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:31 +0000
Files and hashes:         1: 2TNhAlAEfdOvgjGX47xcBe0ec8Q.roa (hash: F4E+yi6wuov8nVtjH23YAurT+H1Svha6Z7BC42V28wo=)
                          2: FmQ80l0dYXHJ_YszXOyTcMs1MTU.roa (hash: fSjkPRX7Cv4pegplKIsFbpWztpRWIWp5drmzYAiL38E=)
                          3: M2T_h-HT-LjV3MxmhC3AaCL7DR0.roa (hash: JUe0w/L/a5YNGKCvQ5Od3tGqP8OCxA0GZG5F9koR5ws=)
                          4: gW0iCytaRvvrJ-8tlp-iHdM4xbM.crl (hash: MyUEdR1stuzVDuY270VyzUN5Qfvyq0NMMc4Am0mxy94=)
                          5: hfZ9JmRYsdrX_WsZKnGJG03yjoY.roa (hash: KsXjtR8VJ0gF1kTfS5RfLRCRZJ2gEjdzhxwY2pQ41Hg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2a:fd:2e:61:dd:49:a4:ed:b8:12:39:52:15:82:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=816d220b2b5a46fbeb27ef2d969fa21dd338c5b3
        Validity
            Not Before: Apr 13 08:01:31 2025 GMT
            Not After : Apr 14 08:01:31 2025 GMT
        Subject: CN=d4158b29f7f2bd4b4954923318b4d582b550d820
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:c2:00:46:d0:f5:99:17:4c:af:14:64:30:e1:
                    ca:f3:26:a2:02:75:f1:7a:8d:3d:f3:5b:fa:bc:54:
                    d4:b4:03:c0:e3:92:ba:c7:7b:2e:0c:12:0b:d0:94:
                    09:ae:d4:34:8b:ad:c2:b4:ca:a5:23:e1:d3:2d:81:
                    e0:b5:88:ee:e1:d1:99:af:5b:a3:83:a4:d6:86:d4:
                    db:4f:77:9b:6b:74:39:ab:c5:cc:4a:72:4f:8d:eb:
                    55:05:9b:3e:b4:1b:21:8c:3c:4d:b5:cd:28:62:90:
                    bc:e6:cc:92:dd:31:11:c4:0a:26:77:04:a4:f2:5a:
                    f2:05:71:df:f6:10:78:00:4f:20:97:bd:b3:23:22:
                    4e:e2:a6:7d:19:d7:47:fe:ef:55:a5:9a:7b:8a:4f:
                    58:0b:7c:18:52:7b:c1:ab:1f:27:85:ee:7c:c9:b3:
                    0c:c4:c6:d5:1d:26:dd:2c:10:86:10:1f:53:0a:96:
                    1b:09:0f:ff:f7:81:7e:37:5a:7b:25:3a:82:ca:7e:
                    13:1f:1e:ea:6c:23:e1:0f:bc:43:7e:53:e3:ae:a9:
                    bd:d0:53:6a:1d:ff:fc:9e:b9:0c:7e:c2:8f:5a:39:
                    3b:4f:8b:1e:5d:23:44:f8:b6:de:0e:d1:de:0d:79:
                    98:26:9e:20:bd:17:32:b3:a2:f4:eb:ad:e8:23:2e:
                    ae:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:15:8B:29:F7:F2:BD:4B:49:54:92:33:18:B4:D5:82:B5:50:D8:20
            X509v3 Authority Key Identifier:
                keyid:81:6D:22:0B:2B:5A:46:FB:EB:27:EF:2D:96:9F:A2:1D:D3:38:C5:B3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gW0iCytaRvvrJ-8tlp-iHdM4xbM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/971311-f47f-46db-8c57-e9782041cc24/1/gW0iCytaRvvrJ-8tlp-iHdM4xbM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/971311-f47f-46db-8c57-e9782041cc24/1/gW0iCytaRvvrJ-8tlp-iHdM4xbM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:f6:87:0c:ec:2d:72:3e:c1:c4:c2:48:f6:3d:0f:43:0f:c1:
         90:53:3f:33:b2:83:30:e6:e9:ec:b9:30:f8:39:a9:fc:af:48:
         6f:10:69:d3:67:26:9f:c6:92:4a:a1:09:43:f5:e9:35:2c:58:
         7c:f0:b4:46:40:ee:76:fe:71:37:c9:8b:1c:dd:31:5f:5b:44:
         20:46:68:1d:56:72:01:58:94:d6:9e:6a:53:30:fc:90:0f:96:
         a6:da:37:80:2d:c7:80:0d:93:72:d8:1d:9b:49:f6:be:6f:f7:
         80:9a:58:94:54:b8:ce:fb:e4:ca:f8:6f:7b:2a:06:4b:25:d2:
         44:61:77:6d:b8:52:0e:30:64:29:d5:a5:99:86:c6:1f:53:a1:
         fd:f9:0d:5b:4e:f3:2c:26:72:95:5d:97:e2:a3:cf:32:2c:79:
         aa:a9:6b:26:ee:34:a0:d4:80:69:4b:8d:53:72:6c:5e:e8:bd:
         7b:18:9d:8d:86:07:1a:5e:15:77:19:ea:1b:02:d6:39:5b:9d:
         ca:23:ee:9c:b7:c5:27:a5:ff:8d:45:50:54:fc:73:27:96:0d:
         fa:f1:07:d5:73:cc:fb:86:ba:e0:1e:d9:f1:21:74:df:dd:2c:
         13:7f:1b:f8:7c:31:a5:b7:f2:33:d1:29:07:0a:bb:73:16:47:
         f5:93:0e:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----