Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/78f82d-0bb9-43de-9810-1ca7a0b6ac9a/1/gynJE4dY3-i6EjXuDsfZtlifSyc.mft
File:                     gynJE4dY3-i6EjXuDsfZtlifSyc.mft (raw, json)
Hash identifier:          mc63+p3BRhU3Hd6oFUvXuZELhc1Lork2q9Gnu4rYSqI=
Subject key identifier:   A3:D7:7C:4A:28:AC:B5:9F:A1:C9:A9:D5:96:41:AB:41:A1:F4:E1:2A
Authority key identifier: 83:29:C9:13:87:58:DF:E8:BA:12:35:EE:0E:C7:D9:B6:58:9F:4B:27
Certificate issuer:       /CN=8329c9138758dfe8ba1235ee0ec7d9b6589f4b27
Certificate serial:       01962E2B45942117D8701E276692CA0FD10C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gynJE4dY3-i6EjXuDsfZtlifSyc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/96/78f82d-0bb9-43de-9810-1ca7a0b6ac9a/1/gynJE4dY3-i6EjXuDsfZtlifSyc.mft
Manifest number:          04D4
Signing time:             Sun 13 Apr 2025 08:01:49 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:49 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:49 +0000
Files and hashes:         1: NEtfj8eymwkFpDG7BP2gOv3cbAs.roa (hash: J8/tby/ZFT8OsdOz/hNiW3bEdXZu2ngXmdS3bjVWlAA=)
                          2: gynJE4dY3-i6EjXuDsfZtlifSyc.crl (hash: JU10xsU7X8/n3HHOEpLds0mw5FhpzppQceQelfZCeU4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2b:45:94:21:17:d8:70:1e:27:66:92:ca:0f:d1:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8329c9138758dfe8ba1235ee0ec7d9b6589f4b27
        Validity
            Not Before: Apr 13 08:01:49 2025 GMT
            Not After : Apr 14 08:01:49 2025 GMT
        Subject: CN=a3d77c4a28acb59fa1c9a9d59641ab41a1f4e12a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:dd:f6:cd:31:ab:5e:8e:5f:b6:5d:75:f1:67:
                    53:8f:81:bd:33:5a:03:e3:a0:75:73:96:9f:a7:0f:
                    05:98:9a:88:f4:72:b6:16:b8:67:58:a7:04:00:ee:
                    b5:e2:0b:7d:45:97:b7:0e:3e:4a:09:3e:ff:3e:ea:
                    1c:bf:54:bd:1c:46:b9:67:fa:29:10:a6:cd:65:b5:
                    61:fd:21:8e:40:3f:6e:1b:1b:d0:a6:b2:13:0d:d9:
                    23:32:77:fc:e5:1c:a0:b3:d4:3d:b8:c8:be:7f:c6:
                    ee:38:37:b5:8a:9d:57:e1:94:6f:ef:0b:fb:fe:83:
                    4a:a1:08:8b:1d:b0:7d:d1:d2:9f:aa:cc:c1:79:38:
                    43:92:f2:54:84:9e:39:98:49:24:3d:e0:25:37:72:
                    de:28:a5:46:f9:b8:e1:62:52:79:50:b5:b3:79:50:
                    52:64:66:44:4c:82:3a:89:cc:83:d1:2a:6a:b9:fe:
                    78:34:9b:d4:bd:ad:44:06:2c:3d:c5:63:23:72:fb:
                    1d:d7:54:ad:7d:fe:52:12:56:df:fc:91:b9:d4:d3:
                    b1:0e:68:5e:81:e1:01:18:a6:59:5f:0d:7f:b5:b2:
                    b5:af:7e:d5:a2:e4:b7:9a:d5:72:d7:4d:4a:ee:07:
                    ee:48:a0:6e:f6:6a:62:4b:85:64:61:b0:c8:66:81:
                    17:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:D7:7C:4A:28:AC:B5:9F:A1:C9:A9:D5:96:41:AB:41:A1:F4:E1:2A
            X509v3 Authority Key Identifier:
                keyid:83:29:C9:13:87:58:DF:E8:BA:12:35:EE:0E:C7:D9:B6:58:9F:4B:27

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gynJE4dY3-i6EjXuDsfZtlifSyc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/78f82d-0bb9-43de-9810-1ca7a0b6ac9a/1/gynJE4dY3-i6EjXuDsfZtlifSyc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/96/78f82d-0bb9-43de-9810-1ca7a0b6ac9a/1/gynJE4dY3-i6EjXuDsfZtlifSyc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:35:35:43:43:78:f1:3d:f1:40:f5:c7:b1:e5:1f:5b:8e:da:
         1a:83:f4:18:8c:91:97:cd:30:98:85:fe:18:7b:1d:19:71:b6:
         ec:0c:37:82:df:ba:87:94:96:6a:f9:00:80:e1:e9:b5:97:7f:
         9d:36:1a:8c:c7:b7:26:06:30:ed:cf:9c:7f:38:d7:1e:26:0f:
         b5:62:a4:74:1d:34:d7:63:e9:b1:11:6a:72:fe:22:b2:f8:cb:
         20:23:e4:b7:4d:d0:9d:a6:6f:c0:4b:4d:0b:20:24:0b:f9:c3:
         73:b0:91:90:94:45:f2:fd:20:5b:c1:56:b8:f5:54:d9:10:be:
         ab:19:33:ad:db:10:78:d3:b8:e6:3c:9a:a3:62:9a:a0:1d:67:
         46:2e:ba:d6:4d:44:91:2e:3b:88:16:22:e9:1c:7e:16:5f:32:
         a6:0c:e3:a1:80:55:c4:05:33:79:58:0a:45:9a:2e:18:c9:19:
         50:e2:6c:49:f0:41:19:78:03:e5:bc:0b:33:8a:56:40:20:66:
         67:5f:c1:d0:8a:e6:4b:7a:d6:cc:01:ed:42:80:1b:5e:08:db:
         1d:8b:d2:81:29:15:a7:e1:1c:3e:09:2c:d9:ab:b6:59:06:b5:
         3b:8c:1c:d5:a9:66:84:de:9a:3e:d6:8f:40:b9:5c:f6:f1:76:
         cf:8a:e1:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----