Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/1991fe-adf7-4352-ab83-0396e87f5202/1/GK9qBgUOTKJrL90Tp8CtFGzSbcg.mft
File:                     GK9qBgUOTKJrL90Tp8CtFGzSbcg.mft (raw, json)
Hash identifier:          Yv7wBKYpXpe0gveG/iS3VGz4SEDhI2YE0YS3QBHkHjU=
Subject key identifier:   D3:48:F7:96:8A:9A:B9:0D:B8:5C:9D:AA:C9:27:95:D8:9A:04:7E:57
Authority key identifier: 18:AF:6A:06:05:0E:4C:A2:6B:2F:DD:13:A7:C0:AD:14:6C:D2:6D:C8
Certificate issuer:       /CN=18af6a06050e4ca26b2fdd13a7c0ad146cd26dc8
Certificate serial:       01962E2B3D70140FD5054B85722F71CAF04F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GK9qBgUOTKJrL90Tp8CtFGzSbcg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/98/1991fe-adf7-4352-ab83-0396e87f5202/1/GK9qBgUOTKJrL90Tp8CtFGzSbcg.mft
Manifest number:          086E
Signing time:             Sun 13 Apr 2025 08:01:47 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:47 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:47 +0000
Files and hashes:         1: GK9qBgUOTKJrL90Tp8CtFGzSbcg.crl (hash: jmoG6AGnreidp++OblHITaHks1+iMQSmLSHh0ZRSpMI=)
                          2: ZnGF6W1D3X-NrkNFr6eImmQhdy8.roa (hash: Bt9KY5B97syBzqVEmQ0mMOoNBbtJyQudj313FGbVLOw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2b:3d:70:14:0f:d5:05:4b:85:72:2f:71:ca:f0:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18af6a06050e4ca26b2fdd13a7c0ad146cd26dc8
        Validity
            Not Before: Apr 13 08:01:47 2025 GMT
            Not After : Apr 14 08:01:47 2025 GMT
        Subject: CN=d348f7968a9ab90db85c9daac92795d89a047e57
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:11:70:7f:62:2a:db:7f:0e:75:60:d7:2a:82:
                    84:63:1a:d8:a4:ca:c5:43:7d:29:54:10:ca:fb:07:
                    5a:f9:2c:50:b6:d6:e8:96:be:77:b7:74:84:8d:55:
                    d0:05:de:74:87:74:ef:fe:8a:fe:53:e6:cc:26:ec:
                    cd:b0:c0:ce:a9:c7:51:5c:08:8a:73:4b:23:33:b2:
                    23:91:25:f0:1f:82:0d:31:52:ff:3a:c9:67:16:6f:
                    a5:3b:81:65:35:29:25:bc:39:20:94:54:10:8e:cb:
                    0a:fb:48:07:dd:70:a4:1d:be:13:7a:65:fb:33:66:
                    c0:13:48:e4:ae:c6:88:ff:00:a0:39:15:18:35:3b:
                    9f:ec:ea:44:b9:4e:99:60:1b:95:b4:c1:7d:ef:9b:
                    15:4f:76:e0:ae:ca:ef:9c:cf:23:89:9a:8f:c9:0c:
                    4c:4d:88:51:7c:63:38:20:a1:ac:ab:97:3d:1c:e7:
                    d9:e9:27:37:79:d5:a1:1b:ef:d5:7c:64:65:fb:5b:
                    eb:6e:9b:10:17:d2:99:32:fb:1c:fc:12:31:5f:7c:
                    c0:b3:b6:2a:a1:9f:5e:ca:ce:d0:00:d6:f8:60:ce:
                    d4:ce:e9:52:0e:36:70:32:c4:4a:82:35:2a:0b:da:
                    12:c1:93:19:0c:1a:eb:d2:7f:b8:ef:83:3a:08:0b:
                    1a:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:48:F7:96:8A:9A:B9:0D:B8:5C:9D:AA:C9:27:95:D8:9A:04:7E:57
            X509v3 Authority Key Identifier:
                keyid:18:AF:6A:06:05:0E:4C:A2:6B:2F:DD:13:A7:C0:AD:14:6C:D2:6D:C8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GK9qBgUOTKJrL90Tp8CtFGzSbcg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/1991fe-adf7-4352-ab83-0396e87f5202/1/GK9qBgUOTKJrL90Tp8CtFGzSbcg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/98/1991fe-adf7-4352-ab83-0396e87f5202/1/GK9qBgUOTKJrL90Tp8CtFGzSbcg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d5:45:89:4c:86:d7:9c:0d:0b:11:2d:66:3e:ac:de:1f:e7:b0:
         97:be:4c:8f:ee:a5:d9:21:2b:60:bc:00:b4:dc:ab:e4:f8:06:
         d5:e0:3b:c0:b0:d3:97:ad:31:01:46:49:27:90:dd:9e:56:d2:
         ec:ea:5e:9f:bc:1f:85:fb:44:19:89:e5:53:ae:db:ee:a1:e5:
         87:b6:68:00:60:9c:01:54:09:c3:4b:e7:25:2a:b9:44:88:79:
         58:94:81:e9:a7:23:5c:d7:7b:72:d6:f1:36:b5:28:c2:ac:03:
         3b:bf:e4:c9:a9:51:5a:0d:bc:d6:e7:a6:20:81:2a:df:a4:c3:
         ce:30:79:68:18:37:e6:a2:2c:ea:c6:d2:57:a3:c4:ed:3b:71:
         2e:bf:17:ed:17:9a:1d:d0:17:a3:3e:1a:cc:64:b6:eb:f2:7e:
         db:1b:28:48:11:5d:cd:b3:d8:89:67:4d:a7:9e:91:db:b5:b3:
         06:51:da:ee:ae:4d:11:ed:3a:01:b6:c4:ce:80:b0:e2:c1:30:
         93:a3:a4:2a:95:ec:9e:55:51:97:65:97:53:91:10:73:32:08:
         41:14:46:e2:d5:a1:3b:50:a0:11:3d:16:c8:46:19:fa:af:2a:
         11:3a:5c:29:8f:ab:e5:23:47:50:2d:97:30:f2:48:36:6b:27:
         4e:26:70:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----