Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/774e26-d08f-46d3-ad06-347b566ddbd1/1/G5gPIqWVKk75pOxKng0MNR_slFQ.mft
File:                     G5gPIqWVKk75pOxKng0MNR_slFQ.mft (raw, json)
Hash identifier:          9Uf42PhgtztISJiOGzXa0H24wF+uJ9FXXzxRKKcTLuI=
Subject key identifier:   5E:BB:9D:76:27:13:30:41:B3:BC:5F:9C:3B:CB:9C:AA:C2:74:48:47
Authority key identifier: 1B:98:0F:22:A5:95:2A:4E:F9:A4:EC:4A:9E:0D:0C:35:1F:EC:94:54
Certificate issuer:       /CN=1b980f22a5952a4ef9a4ec4a9e0d0c351fec9454
Certificate serial:       01962DF4437FB9229271A47D500AEBE4D4A2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/G5gPIqWVKk75pOxKng0MNR_slFQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/97/774e26-d08f-46d3-ad06-347b566ddbd1/1/G5gPIqWVKk75pOxKng0MNR_slFQ.mft
Manifest number:          14E9
Signing time:             Sun 13 Apr 2025 07:01:44 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:44 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:44 +0000
Files and hashes:         1: G5gPIqWVKk75pOxKng0MNR_slFQ.crl (hash: qysXAYcXP23r4Ipg6FCpxBm8Q9LnGUrDHHByFb9+b/k=)
                          2: jFeXSLOcmKjdy19dvekbxvl1dmc.roa (hash: 52Ov8zQceO7HlblWWc/Kf8ebS6bj291XEV6Vi2okLGs=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f4:43:7f:b9:22:92:71:a4:7d:50:0a:eb:e4:d4:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1b980f22a5952a4ef9a4ec4a9e0d0c351fec9454
        Validity
            Not Before: Apr 13 07:01:44 2025 GMT
            Not After : Apr 14 07:01:44 2025 GMT
        Subject: CN=5ebb9d7627133041b3bc5f9c3bcb9caac2744847
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:c1:82:ed:10:37:d0:fa:8a:bc:4f:0b:bd:2a:
                    75:df:59:2e:6b:e8:71:6f:c9:e9:a6:a9:0d:91:40:
                    e5:b7:fc:72:90:ed:2c:59:eb:42:5d:5b:d4:30:25:
                    f1:8c:23:21:34:9e:7e:1d:66:ea:f8:8b:ba:61:78:
                    07:f9:f7:fe:ed:c6:cb:c6:ad:c0:52:29:1a:d0:ce:
                    d5:3b:50:61:25:bc:b1:cb:71:c3:6a:85:1c:ab:75:
                    92:f8:8f:fe:0f:7e:69:36:4a:c7:74:9e:ed:16:c6:
                    5e:67:8d:8a:b2:70:d3:dc:fd:81:35:11:6f:32:10:
                    44:21:43:00:78:cc:58:58:0c:a6:cf:52:a4:7c:29:
                    cc:f1:14:45:bb:cf:be:6b:9e:af:6a:8c:9f:55:a5:
                    b1:eb:da:d6:8f:06:4f:e0:db:ba:24:e7:73:9a:57:
                    a7:aa:94:d9:c0:9a:61:cf:fd:f8:03:8c:1d:98:a8:
                    de:01:c7:86:6c:cd:a8:e2:bf:ec:78:95:52:4e:10:
                    24:e4:80:2b:f7:59:bf:c5:b5:92:31:b9:c1:b9:5f:
                    9c:0b:6d:e8:04:28:68:33:c4:ea:21:76:be:5f:4c:
                    98:a5:75:ea:89:0c:be:a0:af:d0:11:f2:ae:0a:d6:
                    d5:a4:98:1e:f4:1e:fd:48:07:5d:c4:0f:38:04:8d:
                    0e:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:BB:9D:76:27:13:30:41:B3:BC:5F:9C:3B:CB:9C:AA:C2:74:48:47
            X509v3 Authority Key Identifier:
                keyid:1B:98:0F:22:A5:95:2A:4E:F9:A4:EC:4A:9E:0D:0C:35:1F:EC:94:54

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G5gPIqWVKk75pOxKng0MNR_slFQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/774e26-d08f-46d3-ad06-347b566ddbd1/1/G5gPIqWVKk75pOxKng0MNR_slFQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/97/774e26-d08f-46d3-ad06-347b566ddbd1/1/G5gPIqWVKk75pOxKng0MNR_slFQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:46:16:b9:c7:99:16:2c:a5:79:ac:c8:94:3b:2e:a0:80:7b:
         db:a5:97:0e:bd:59:29:22:e8:85:06:bd:01:5b:a8:a3:da:47:
         a6:83:bf:ff:76:85:93:e6:af:cf:72:2d:47:09:38:49:4c:e4:
         bc:40:b1:a0:b8:94:35:2a:3d:54:a7:e8:dc:9b:4f:d3:c6:5e:
         39:94:d5:bd:3a:8c:f5:03:d6:aa:e9:29:06:61:1e:01:c4:87:
         1f:43:2d:f1:62:2a:e7:b2:e5:31:0d:0f:31:89:38:9f:91:2b:
         a5:94:4d:2a:5a:ea:2c:64:a0:d3:96:43:08:5e:92:34:bc:27:
         08:79:23:b6:94:1d:d2:c4:ad:52:5c:92:46:f9:8d:75:0c:26:
         ec:ea:03:be:da:e5:00:c7:f2:58:04:16:4b:bd:e6:18:1f:b8:
         11:d9:57:52:07:23:8b:3a:0d:cb:80:a1:a2:57:ad:e1:43:17:
         8f:d1:5e:ce:94:65:43:ff:a7:26:82:98:b1:e1:c0:b0:fa:d2:
         11:fc:ea:38:85:e6:61:31:f7:cc:4f:e7:7f:b7:59:27:ea:79:
         a6:ae:7d:e3:ba:69:7f:a2:c7:2e:7e:2d:ee:9e:45:eb:36:3b:
         d5:a3:5d:e3:72:e8:bf:fd:50:db:a8:cf:b5:e8:87:41:78:d8:
         8b:69:73:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----