Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/4ccd40-e32b-436d-ad7c-62c7fde4838a/1/gBfqodqvIl9FOAKjO6-WOMzNd6U.mft
File:                     gBfqodqvIl9FOAKjO6-WOMzNd6U.mft (raw, json)
Hash identifier:          8dkF5rnAAqTZGa1n7MskHYITQZaKdOo9la56zvM9wZ0=
Subject key identifier:   F6:8A:0B:53:C4:BA:4C:61:2F:4B:E7:B1:1E:44:70:A9:81:CD:B0:50
Authority key identifier: 80:17:EA:A1:DA:AF:22:5F:45:38:02:A3:3B:AF:96:38:CC:CD:77:A5
Certificate issuer:       /CN=8017eaa1daaf225f453802a33baf9638cccd77a5
Certificate serial:       01962E61EC1A65F065B7DC4E87868636EE54
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gBfqodqvIl9FOAKjO6-WOMzNd6U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/92/4ccd40-e32b-436d-ad7c-62c7fde4838a/1/gBfqodqvIl9FOAKjO6-WOMzNd6U.mft
Manifest number:          0A8B
Signing time:             Sun 13 Apr 2025 09:01:31 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:31 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:31 +0000
Files and hashes:         1: KQTK1M5p1w2tgkimZwP7TTABtyY.roa (hash: LTRVwyOZnYQaG256SSamw/dl7HTrEkfEZ7OCXHYqevA=)
                          2: gBfqodqvIl9FOAKjO6-WOMzNd6U.crl (hash: X0quuRMQOegakVqNvP4aL5vwnKCyXBxFSqf/IW2XalE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:ec:1a:65:f0:65:b7:dc:4e:87:86:86:36:ee:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8017eaa1daaf225f453802a33baf9638cccd77a5
        Validity
            Not Before: Apr 13 09:01:31 2025 GMT
            Not After : Apr 14 09:01:31 2025 GMT
        Subject: CN=f68a0b53c4ba4c612f4be7b11e4470a981cdb050
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:23:1c:d1:79:3f:2c:51:e0:4f:bc:f6:5c:2c:
                    fa:45:19:f7:45:ac:b4:7a:d6:e0:9e:1d:71:86:4f:
                    17:11:61:9e:7f:c7:32:86:c5:d6:17:13:72:a9:0c:
                    de:02:28:59:7c:72:99:a7:9d:62:20:81:6b:d9:92:
                    e0:25:da:cf:39:ee:e2:c1:c9:a4:b1:7f:ff:5f:09:
                    14:61:83:35:b6:17:5e:d0:9c:87:93:68:65:60:21:
                    f9:a5:2d:bc:9f:55:52:e7:32:4e:79:42:9c:55:75:
                    66:02:d0:d6:ae:c3:09:76:1a:88:6e:b9:ec:39:d9:
                    02:2a:82:ad:71:49:82:9b:82:f2:e5:45:27:a3:a6:
                    98:51:1b:53:ae:94:fa:e4:43:a0:6f:c6:de:d8:b5:
                    f3:22:ee:28:e4:29:6d:58:38:40:1a:4f:e7:df:be:
                    4d:c8:e0:60:25:1f:dc:6e:73:74:2b:68:2e:90:9a:
                    19:39:e0:87:a9:0f:65:c0:44:8f:5a:bf:a4:1a:55:
                    a0:b9:22:98:fc:2b:89:6b:d9:97:63:09:58:f8:29:
                    77:3f:2c:bb:ad:97:50:08:2e:07:42:38:1c:93:0d:
                    24:dd:f4:cd:1f:c3:3d:26:ec:e8:22:6f:cd:36:37:
                    fb:8f:a2:93:a9:41:f6:28:98:5f:d6:68:ad:e4:d7:
                    9d:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:8A:0B:53:C4:BA:4C:61:2F:4B:E7:B1:1E:44:70:A9:81:CD:B0:50
            X509v3 Authority Key Identifier:
                keyid:80:17:EA:A1:DA:AF:22:5F:45:38:02:A3:3B:AF:96:38:CC:CD:77:A5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gBfqodqvIl9FOAKjO6-WOMzNd6U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/4ccd40-e32b-436d-ad7c-62c7fde4838a/1/gBfqodqvIl9FOAKjO6-WOMzNd6U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/92/4ccd40-e32b-436d-ad7c-62c7fde4838a/1/gBfqodqvIl9FOAKjO6-WOMzNd6U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a9:d6:fe:af:75:46:9d:25:b8:01:4b:2a:52:5b:2a:12:c3:88:
         a8:a9:39:65:62:2e:79:06:8c:01:2e:30:53:e2:b7:0a:9f:6b:
         0a:96:ea:f5:a4:3b:a2:2e:47:a7:4c:be:d7:28:ae:d5:9e:dc:
         32:a4:14:85:9a:9d:c3:a1:29:10:b6:47:31:8d:3e:b9:1a:9b:
         df:7c:da:79:fa:aa:0c:cf:9a:ac:29:b7:e9:5c:51:80:24:86:
         a9:ff:b9:89:34:86:72:70:21:d2:29:ae:ab:ea:63:eb:59:be:
         20:39:d0:4c:47:86:2d:7e:9f:fe:58:95:7c:25:07:c1:f0:e3:
         e7:82:84:20:95:87:0a:12:02:18:e1:1a:fb:c0:97:bf:9a:1a:
         5a:0e:55:49:0d:dd:21:80:32:c8:b2:8e:9b:a0:80:66:85:a5:
         1c:54:fe:92:df:f8:c5:73:e3:93:98:ac:00:de:94:fb:76:46:
         f0:62:1a:c5:77:75:11:12:06:8a:fd:92:a4:9f:45:38:4f:ff:
         81:ec:0c:a2:3e:ee:ea:f7:d1:87:6f:dd:55:7c:a3:8a:95:42:
         0e:59:d1:f0:a7:70:32:78:0b:0b:0b:cc:4a:77:64:45:4c:e3:
         cb:72:b1:ea:39:5b:ac:82:12:af:8d:d7:f5:fe:3b:25:46:62:
         df:21:c9:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----