Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/e90ff2-6c91-4eb8-a4b1-c5febe487c40/1/gTPYnAaoocydvDYiAffsVZ1_3Ug.mft
File:                     gTPYnAaoocydvDYiAffsVZ1_3Ug.mft (raw, json)
Hash identifier:          1ueyxbyR4+cohlsV4IypJ71y/X2KZ1DWuqtimV9G/Ow=
Subject key identifier:   5E:07:FB:37:F8:71:0E:1E:DA:E3:A0:6B:17:37:E0:E4:1C:68:3A:26
Authority key identifier: 81:33:D8:9C:06:A8:A1:CC:9D:BC:36:22:01:F7:EC:55:9D:7F:DD:48
Certificate issuer:       /CN=8133d89c06a8a1cc9dbc362201f7ec559d7fdd48
Certificate serial:       01962ECFC4C105683542687173920465A930
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gTPYnAaoocydvDYiAffsVZ1_3Ug.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/98/e90ff2-6c91-4eb8-a4b1-c5febe487c40/1/gTPYnAaoocydvDYiAffsVZ1_3Ug.mft
Manifest number:          14F4
Signing time:             Sun 13 Apr 2025 11:01:30 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:30 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:30 +0000
Files and hashes:         1: HQKTK8IX9OSL7OWf6c-Mjr6KGKU.roa (hash: eulrcAEwXCYc0JEhm9epX49atadlGQKR7gDn+Gjq2/0=)
                          2: HahR5soNktUlYKPgZEbE7H3aKhs.roa (hash: lStniR/EONynfdLx+qNvUDgudFR2+K1QsCmoIxTWUXU=)
                          3: VpDc8u2rAhCHY8dw5A-uURm2uTo.roa (hash: TnPUye+699meF5Ik4Elk4nVoV3KO8X7ti0DlB40uigY=)
                          4: ZkqOfmuhubAXa5wjbsE6j4_ahXs.roa (hash: Hey5kTZ4283sFnXZkMTOrQ0P+6y/gPOLg1iSKQS0uK8=)
                          5: gTPYnAaoocydvDYiAffsVZ1_3Ug.crl (hash: XVl8C6lLTtd+NI87LyMh0SPycIFVRsr9aLxY7xThGe0=)
                          6: j1-fP3sdEayV1bR9GGOFSeW4cN0.roa (hash: z2Cs0c66T/XL7AZnx0VV9qMsM3hsvemjVWPE/YF4p8M=)
                          7: kgWUcLVwnlHQ9N0edYU-mPTihYQ.roa (hash: Rkf4hqgx8RyOM/raBR82mKj09VXl9DozZJeQyPvjCIk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:c4:c1:05:68:35:42:68:71:73:92:04:65:a9:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8133d89c06a8a1cc9dbc362201f7ec559d7fdd48
        Validity
            Not Before: Apr 13 11:01:30 2025 GMT
            Not After : Apr 14 11:01:30 2025 GMT
        Subject: CN=5e07fb37f8710e1edae3a06b1737e0e41c683a26
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:53:9d:b3:20:5a:e7:c2:aa:8e:45:bb:0a:c2:
                    3f:3d:6e:60:43:6e:41:0e:8f:99:f8:3f:6d:2a:5d:
                    9d:ed:3e:a9:d6:7a:cb:03:86:68:d7:10:7d:09:fc:
                    96:ec:36:75:ce:09:1d:0a:31:f0:ea:0c:9b:d5:11:
                    ee:7f:45:56:5f:3a:ac:fa:b0:41:60:a0:7d:b8:59:
                    66:9f:63:64:5d:e2:74:ce:28:59:40:11:ab:44:07:
                    a0:98:9f:46:e3:a3:9c:a7:e6:8d:3b:09:da:99:d6:
                    40:a6:70:b4:81:13:9e:cd:4c:c4:ac:26:d5:2e:59:
                    da:50:09:7a:af:0f:3d:e3:a0:4a:34:ab:6e:8c:c8:
                    6d:39:66:33:c9:1f:35:ef:79:f2:05:12:cb:60:fc:
                    6f:25:84:ca:3d:ad:86:c5:40:0d:23:68:cc:ca:10:
                    d7:07:3b:a5:99:4c:ee:d9:02:12:69:27:a4:c6:79:
                    c0:09:55:c4:d0:b2:c7:89:e3:a0:b4:12:e3:79:7d:
                    9b:e0:9f:78:56:09:5a:ec:d2:26:0e:a7:b3:08:29:
                    00:77:a9:7c:14:ef:c5:2f:9d:d5:0b:f4:f1:03:23:
                    68:d2:fc:4c:fd:2c:c4:65:8d:49:c0:a6:ba:38:ad:
                    81:9a:22:1f:91:2d:97:17:19:2d:a0:f5:41:0b:5b:
                    01:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:07:FB:37:F8:71:0E:1E:DA:E3:A0:6B:17:37:E0:E4:1C:68:3A:26
            X509v3 Authority Key Identifier:
                keyid:81:33:D8:9C:06:A8:A1:CC:9D:BC:36:22:01:F7:EC:55:9D:7F:DD:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gTPYnAaoocydvDYiAffsVZ1_3Ug.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/e90ff2-6c91-4eb8-a4b1-c5febe487c40/1/gTPYnAaoocydvDYiAffsVZ1_3Ug.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/98/e90ff2-6c91-4eb8-a4b1-c5febe487c40/1/gTPYnAaoocydvDYiAffsVZ1_3Ug.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:aa:6d:bd:1f:2e:96:20:6c:25:85:df:b2:92:d5:f6:00:d2:
         e4:4b:73:19:b6:d2:a9:79:67:9c:d9:d3:82:da:20:da:de:6e:
         95:3d:47:92:79:dc:c3:1b:0b:50:96:3a:91:3e:78:25:7b:cd:
         da:23:1f:36:dc:7b:4b:8b:15:a2:36:1b:b9:3f:99:07:98:81:
         1a:81:84:04:93:fe:b2:ad:22:40:8d:ab:bf:9b:a0:f4:05:7c:
         25:f8:e1:d0:ac:92:6b:21:69:a4:87:a8:44:60:2d:05:a1:18:
         e0:a5:e6:77:4b:cb:3f:4b:ac:89:c3:3b:bb:61:1b:78:6a:42:
         87:c9:8f:fc:8e:e6:17:17:38:b0:b3:75:03:e5:b6:c1:76:75:
         2b:46:60:e7:83:91:3e:80:fb:89:7a:18:60:df:69:1d:1f:97:
         9b:cf:32:7c:33:6d:91:6d:72:3e:e2:91:f7:d9:ce:6e:9b:ad:
         da:32:0e:54:c8:ab:8e:ac:02:73:97:fe:d0:e9:aa:8e:93:95:
         ff:29:36:a1:24:34:7a:54:30:46:2a:0f:a7:43:fb:32:61:34:
         71:7b:b6:4b:06:1e:2f:17:78:7e:c7:ee:e4:0d:35:43:4f:3e:
         2d:43:7d:f0:b5:cd:67:4d:cb:48:23:48:46:78:ef:5b:d0:f7:
         e3:a4:91:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----