Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/4b2e49-f667-494a-afe9-6df3e4a4eeb1/1/gyTF3xl4nVJZEE4K4NzUZyqOK6s.mft
File:                     gyTF3xl4nVJZEE4K4NzUZyqOK6s.mft (raw, json)
Hash identifier:          QNapp0rCaYDPfNTRR7RHlLLcwRaiNIIGmrxAsFTweYc=
Subject key identifier:   1E:7D:F8:69:44:8B:EE:60:8F:B6:D9:C2:2B:E0:23:F0:89:8B:AC:89
Authority key identifier: 83:24:C5:DF:19:78:9D:52:59:10:4E:0A:E0:DC:D4:67:2A:8E:2B:AB
Certificate issuer:       /CN=8324c5df19789d5259104e0ae0dcd4672a8e2bab
Certificate serial:       01962DF424D84437411B45E9D5C3E2C7B014
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gyTF3xl4nVJZEE4K4NzUZyqOK6s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a3/4b2e49-f667-494a-afe9-6df3e4a4eeb1/1/gyTF3xl4nVJZEE4K4NzUZyqOK6s.mft
Manifest number:          14EB
Signing time:             Sun 13 Apr 2025 07:01:36 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:36 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:36 +0000
Files and hashes:         1: gyTF3xl4nVJZEE4K4NzUZyqOK6s.crl (hash: DTe3iDGeSSofJ87Yb9S/41b4cTekmE9A6jy55nFqKcI=)
                          2: zMBNnU414lgd-NbPPxv6LfAwsv0.roa (hash: a4j1fjgcVTUDMcw7oEdiVT0gcdKWNK33wBEmeJ+tzqw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f4:24:d8:44:37:41:1b:45:e9:d5:c3:e2:c7:b0:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8324c5df19789d5259104e0ae0dcd4672a8e2bab
        Validity
            Not Before: Apr 13 07:01:36 2025 GMT
            Not After : Apr 14 07:01:36 2025 GMT
        Subject: CN=1e7df869448bee608fb6d9c22be023f0898bac89
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:a7:2f:c5:3c:74:d0:fe:f4:f3:2e:c6:b8:36:
                    08:ed:fc:5b:b1:18:f4:1d:c3:e4:79:cf:bf:90:da:
                    71:0e:3c:ab:af:27:2e:2a:5d:81:ef:6d:77:e5:29:
                    24:f1:07:5f:51:56:e0:3e:63:93:a1:83:38:91:0d:
                    59:af:39:a9:aa:41:55:cd:77:17:7a:98:39:1d:41:
                    80:ad:e0:5c:14:a5:28:08:5c:bd:a8:96:75:76:fb:
                    78:03:c4:19:40:13:e5:52:a2:ef:d1:9e:ff:1b:ef:
                    87:a8:3d:fe:d1:18:16:c2:cc:57:2e:35:d4:94:d4:
                    a1:e2:86:02:99:43:a4:25:62:0b:c1:c3:75:29:7a:
                    08:bc:3b:66:5c:94:24:df:35:82:aa:c6:16:9c:ca:
                    38:ba:4e:6d:14:25:db:ec:b4:4b:86:5d:f6:6d:bd:
                    70:dc:7c:26:a3:a2:2c:fa:80:7e:32:a4:0c:03:5c:
                    0b:25:fa:b7:3d:6d:0a:26:04:21:24:9b:e7:13:c4:
                    4b:be:94:df:27:5b:d5:00:2b:77:3e:88:96:5c:df:
                    37:9c:a5:5e:c4:8c:fc:e2:20:d2:12:41:b7:69:59:
                    47:a0:80:02:6b:37:a2:e2:2e:3e:ec:84:cc:86:d4:
                    c2:2e:6c:53:b1:2c:c8:16:00:0c:fd:e5:e2:38:d1:
                    dd:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:7D:F8:69:44:8B:EE:60:8F:B6:D9:C2:2B:E0:23:F0:89:8B:AC:89
            X509v3 Authority Key Identifier:
                keyid:83:24:C5:DF:19:78:9D:52:59:10:4E:0A:E0:DC:D4:67:2A:8E:2B:AB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gyTF3xl4nVJZEE4K4NzUZyqOK6s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/4b2e49-f667-494a-afe9-6df3e4a4eeb1/1/gyTF3xl4nVJZEE4K4NzUZyqOK6s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/4b2e49-f667-494a-afe9-6df3e4a4eeb1/1/gyTF3xl4nVJZEE4K4NzUZyqOK6s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:fd:f7:7c:c3:89:7f:b2:0e:a1:41:37:6e:02:da:fc:54:52:
         f4:6c:44:30:68:56:13:26:fd:e5:9c:f9:92:cf:8b:ac:96:af:
         c1:3b:0b:e6:04:28:47:fa:86:4d:02:e5:83:b8:5f:d9:bd:ac:
         84:02:7a:df:05:39:15:88:66:51:43:ca:d2:98:a0:4b:39:72:
         bc:0f:9f:27:76:e9:96:9e:04:5d:4c:ce:ad:8c:77:a7:e3:54:
         9d:73:88:ad:df:60:38:1c:23:6a:d3:ac:48:77:93:10:b5:61:
         96:4c:5c:f7:41:95:48:5e:f7:c3:14:60:fe:e8:7c:93:18:ea:
         a3:b8:a4:6c:e5:7d:ee:2b:1f:72:6b:42:89:1e:e3:e7:0d:f3:
         7d:95:c5:3a:f0:94:5b:5c:50:3a:c2:2a:03:05:95:84:9c:45:
         af:f7:4a:b0:81:ea:ae:98:1b:73:9f:2a:c9:1c:40:c4:45:fd:
         ab:62:7f:b7:c0:76:95:f6:46:4c:f4:c0:29:4d:c4:c4:7a:a4:
         22:64:77:39:6b:9e:8e:b2:2d:06:6a:d1:3c:71:c6:5f:ef:07:
         3a:ea:6f:ce:47:66:6a:2e:4e:2a:a3:e1:89:bd:62:65:d8:12:
         77:87:27:a1:02:dc:82:59:85:f4:91:e0:4d:70:52:5e:31:b4:
         8f:eb:7d:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----