Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/7247b0-4989-43ea-9350-7a936751db1b/1/GstjdqFkjUnVXk17ATcTZ7DcKvk.mft
File:                     GstjdqFkjUnVXk17ATcTZ7DcKvk.mft (raw, json)
Hash identifier:          aXDpek/qR1sMN5qmhb5/nIbWquiHtcmfuroPzwvY/zc=
Subject key identifier:   0A:8B:56:34:FD:E5:F4:18:DD:A6:F2:E9:27:68:5B:E9:CE:AF:42:6B
Authority key identifier: 1A:CB:63:76:A1:64:8D:49:D5:5E:4D:7B:01:37:13:67:B0:DC:2A:F9
Certificate issuer:       /CN=1acb6376a1648d49d55e4d7b01371367b0dc2af9
Certificate serial:       01962FAB7B051B9AD2555687BA3AC16A6662
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GstjdqFkjUnVXk17ATcTZ7DcKvk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/99/7247b0-4989-43ea-9350-7a936751db1b/1/GstjdqFkjUnVXk17ATcTZ7DcKvk.mft
Manifest number:          0924
Signing time:             Sun 13 Apr 2025 15:01:29 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:29 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:29 +0000
Files and hashes:         1: 2qbv-Pz4jvP3wMojh-nzxxXsgEA.roa (hash: 6+tOpgdGlSlIz8zd2wwUoB5CJwy5U+RYKeXiB03sSqI=)
                          2: 4iz3Hu7F2tbrDoJ4Ra5IwOQBcc8.roa (hash: IuX1GQGX1ljfGB12u2KgCWJaKWaeRSMtVHGJgPlmubc=)
                          3: CIdrqclZnSmjRFuSBAbdKW19zw4.roa (hash: 9geTO1Fm8NuZG2BgvP5/MT++gloTQfJHuTiZpCoTKho=)
                          4: FK7ySAm15wLL-A5orFXHLmT_3-4.roa (hash: euYKdJ6l4Q6ZCJVn8FSzuiK3t+z0DHSmXlQqQRNIQAA=)
                          5: GstjdqFkjUnVXk17ATcTZ7DcKvk.crl (hash: STn9yazLBu9XN6P3cTohZH87S2t/wXT7K6suNOViG60=)
                          6: m8Tdxvep8gBoC6AvkeleXRfcmoc.roa (hash: JYOwdAc9iDDM7jQ9HDSgVBqUbsa0fTnhwbYX6eo7TMw=)
                          7: mgJS3W7Q1z7oQKmX5lJZfvASfdU.roa (hash: txXvckVXMlcgRykwLcE07dh3QNh7v2yueF/O/NOTi+w=)
                          8: r0MpZWGF2my5L4ptog2DrTmu7No.roa (hash: z4pivdKzari5mOdXF7fYltYsmUc2SDlRQvzzFytcUVQ=)
                          9: r1Iga4svRdXgkzzcH3Kg0RXZCVM.roa (hash: JeLfIM6nAeSe3Dl7vi7FqJjfcjK2HshwWCY2+gwSDpU=)
                          10: xdWwTqIEbBWD-ayZaCrJQr7xhvk.roa (hash: XVK45wg0nZbg1ksXLgfN8TmYvrajdIvWajx9rGkrzcs=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:7b:05:1b:9a:d2:55:56:87:ba:3a:c1:6a:66:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1acb6376a1648d49d55e4d7b01371367b0dc2af9
        Validity
            Not Before: Apr 13 15:01:29 2025 GMT
            Not After : Apr 14 15:01:29 2025 GMT
        Subject: CN=0a8b5634fde5f418dda6f2e927685be9ceaf426b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:c1:95:91:83:48:b8:90:71:57:59:a6:d3:cc:
                    32:9d:18:f7:7c:67:5c:71:6f:d3:b6:ed:ef:72:cc:
                    d1:94:bc:3d:1b:b4:d8:e1:6c:01:2f:7c:e2:3e:78:
                    0d:9b:25:42:a7:80:8d:5a:ff:5a:5a:67:3c:b7:52:
                    ff:dc:1b:8a:fe:a0:ce:b3:2a:32:ad:f6:9c:e6:87:
                    2d:b9:4c:5a:cb:68:c8:d6:4f:d6:01:82:f1:96:7d:
                    d2:a2:df:ea:6a:57:ce:e3:d7:f7:53:52:22:2b:41:
                    20:a4:9f:e2:39:82:8b:40:9a:64:f0:86:ca:e5:42:
                    02:5e:50:c7:5f:3d:e8:32:7b:cd:89:54:76:8f:87:
                    18:11:ba:7f:0b:fa:13:00:a2:b2:c7:4d:86:35:6d:
                    06:76:e7:d1:5e:dc:75:fc:da:48:4a:d8:51:bb:44:
                    cf:2f:72:fc:0a:0d:29:db:ae:e6:3b:d4:33:7b:3c:
                    e8:26:b3:44:c9:c0:5e:86:45:bb:b6:fd:16:21:f8:
                    5b:a5:6f:0c:39:45:0b:13:57:57:87:bc:d8:f9:ad:
                    c3:4a:07:7f:18:31:1b:7e:68:97:bc:e9:7f:41:6f:
                    3a:ee:a1:36:75:24:26:f6:02:59:03:df:26:64:c2:
                    b1:ba:94:63:a2:10:fa:f8:66:f7:c8:b2:3d:1d:c1:
                    b7:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:8B:56:34:FD:E5:F4:18:DD:A6:F2:E9:27:68:5B:E9:CE:AF:42:6B
            X509v3 Authority Key Identifier:
                keyid:1A:CB:63:76:A1:64:8D:49:D5:5E:4D:7B:01:37:13:67:B0:DC:2A:F9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GstjdqFkjUnVXk17ATcTZ7DcKvk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/7247b0-4989-43ea-9350-7a936751db1b/1/GstjdqFkjUnVXk17ATcTZ7DcKvk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/99/7247b0-4989-43ea-9350-7a936751db1b/1/GstjdqFkjUnVXk17ATcTZ7DcKvk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:72:cb:51:42:c5:9a:30:83:8f:04:32:19:82:6c:d2:fc:25:
         05:43:15:55:51:7e:6e:7f:af:4d:1c:50:cf:84:a5:46:44:9c:
         15:d4:bf:b8:11:3e:07:7a:03:66:53:b8:90:09:54:4a:76:9f:
         17:97:c4:e5:4c:eb:71:48:c9:bc:d7:ba:81:78:14:0b:f8:8e:
         3e:c4:92:db:a4:cd:f7:96:87:d3:2b:aa:b7:03:54:d3:7b:bb:
         da:1e:b8:4e:20:cb:ba:35:44:6c:95:4c:60:e7:b6:fd:8f:ce:
         4a:a0:b0:cf:64:a5:56:e1:07:8f:17:f5:84:8b:0d:81:04:4d:
         69:9b:47:88:4d:d4:be:36:bc:fe:c4:32:93:75:e7:28:d4:47:
         e0:48:e3:eb:7c:0e:34:c2:df:cc:3f:11:93:0a:a1:b2:d1:f2:
         4b:c1:58:e5:1a:fb:7c:95:46:bc:cf:4c:c2:1d:7d:ed:0c:6b:
         32:90:40:7d:50:55:d6:fa:3c:18:e6:ce:61:9f:0f:0f:0b:31:
         49:a5:4a:06:79:18:f3:20:32:4a:dc:21:85:aa:97:16:72:f2:
         73:01:b3:92:8d:a0:12:78:f8:0c:a1:fe:e8:9f:ee:16:c6:de:
         3e:4f:58:99:47:8b:68:66:72:62:30:fc:ab:72:1a:5f:ff:d6:
         77:02:76:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----