Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/7926b8-6ea7-45b4-953e-aab7fc3f8ac5/1/GFjKpoMqoqPnzG0URRX49DG2Z2I.mft
File:                     GFjKpoMqoqPnzG0URRX49DG2Z2I.mft (raw, json)
Hash identifier:          3OMb0b+G3lUtwWhJvArCDhm1qTknAixC85R2R+Ug5V8=
Subject key identifier:   A0:2C:31:88:06:FE:40:4C:68:D7:9D:D4:AD:91:F6:8B:44:12:77:4C
Authority key identifier: 18:58:CA:A6:83:2A:A2:A3:E7:CC:6D:14:45:15:F8:F4:31:B6:67:62
Certificate issuer:       /CN=1858caa6832aa2a3e7cc6d144515f8f431b66762
Certificate serial:       01962ECF88F06462D3D7FC820B4E2AB7964E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GFjKpoMqoqPnzG0URRX49DG2Z2I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b0/7926b8-6ea7-45b4-953e-aab7fc3f8ac5/1/GFjKpoMqoqPnzG0URRX49DG2Z2I.mft
Manifest number:          14EA
Signing time:             Sun 13 Apr 2025 11:01:14 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:14 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:14 +0000
Files and hashes:         1: 8s2ldX9oHHwyl8fUEVLqhDsQqu4.roa (hash: 8RTmSwJoya32i12kM5MRjAc5F89+JLBUKY/2kNp2yVc=)
                          2: GFjKpoMqoqPnzG0URRX49DG2Z2I.crl (hash: 2hfiMc+9q7KLveLI5cTLEe7JgxUFO/0oIgHmarFW0/c=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:88:f0:64:62:d3:d7:fc:82:0b:4e:2a:b7:96:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1858caa6832aa2a3e7cc6d144515f8f431b66762
        Validity
            Not Before: Apr 13 11:01:14 2025 GMT
            Not After : Apr 14 11:01:14 2025 GMT
        Subject: CN=a02c318806fe404c68d79dd4ad91f68b4412774c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:34:c3:80:1a:8d:46:36:4d:27:34:cc:2f:df:
                    ad:26:5c:b9:8a:b9:55:1a:24:8c:9a:6f:9b:02:10:
                    67:be:6e:dd:90:cf:a8:98:95:66:f3:65:9a:13:6b:
                    22:d4:e6:4b:1a:cd:2d:32:9c:29:b2:f6:5c:b7:c2:
                    e4:cc:54:c1:39:5f:63:60:46:11:7a:00:2e:f8:99:
                    7e:bb:e2:80:0c:66:bb:ce:4a:ee:78:bc:21:3c:9b:
                    b2:25:0b:7c:fc:6d:cf:57:25:24:c0:82:b4:ec:46:
                    3f:e8:e0:b9:a3:ec:ef:f6:1c:60:d0:cd:36:65:68:
                    47:fe:1d:5e:10:a9:a6:0e:86:b9:e1:24:7e:53:3c:
                    16:e4:c5:d8:d7:80:df:3e:dd:f8:a0:8c:91:c2:52:
                    cf:9e:68:65:4e:06:ce:2b:a4:44:07:63:95:3d:64:
                    ef:4d:23:c8:12:8f:39:0b:c7:6d:c6:f3:be:70:59:
                    48:c7:5d:8c:67:22:5b:e3:7c:57:af:de:c1:61:99:
                    27:80:9c:81:78:d4:63:fb:1d:f7:62:10:ef:0a:7b:
                    db:ea:5e:42:f3:f7:70:81:2d:c7:08:91:a2:d6:0b:
                    06:8c:33:4d:ec:b5:c2:f0:3d:a9:57:b2:1e:1e:20:
                    14:ab:b0:e2:3c:6d:f9:6e:67:a0:0a:66:9c:3c:f7:
                    c6:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:2C:31:88:06:FE:40:4C:68:D7:9D:D4:AD:91:F6:8B:44:12:77:4C
            X509v3 Authority Key Identifier:
                keyid:18:58:CA:A6:83:2A:A2:A3:E7:CC:6D:14:45:15:F8:F4:31:B6:67:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GFjKpoMqoqPnzG0URRX49DG2Z2I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/7926b8-6ea7-45b4-953e-aab7fc3f8ac5/1/GFjKpoMqoqPnzG0URRX49DG2Z2I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/7926b8-6ea7-45b4-953e-aab7fc3f8ac5/1/GFjKpoMqoqPnzG0URRX49DG2Z2I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:c6:fd:45:94:e2:e5:2d:f7:16:71:e0:d6:5a:54:3f:6e:62:
         e4:bc:63:29:28:c2:63:36:2a:64:26:df:2c:bd:fc:5e:9a:bc:
         fd:27:02:c2:2a:76:f0:55:8f:07:a2:8d:1f:5e:7a:f2:c7:ed:
         e1:da:c4:22:c6:8b:e6:51:c8:26:66:f2:55:46:06:e2:04:a2:
         81:7e:4f:00:4c:33:2b:96:92:5a:58:b8:35:72:e1:b3:41:15:
         01:e8:e8:e6:f1:6d:a0:ff:ce:c1:7e:0e:b8:b3:4a:d5:cc:67:
         bc:5e:04:02:01:ba:1b:32:56:d7:fe:98:ee:d8:fe:aa:9f:c6:
         04:79:7b:56:7e:e2:57:fe:3d:ef:b8:f3:e0:fa:3c:2d:90:af:
         24:52:d4:05:4a:f8:82:50:c7:5a:cd:3f:97:69:54:e3:b2:2a:
         2f:46:f7:89:ac:d9:87:1d:db:fa:cb:d0:d6:ce:7b:b2:86:05:
         1a:90:aa:f7:53:48:8f:92:33:32:5a:01:90:a3:5c:76:17:bc:
         9b:9c:ab:2c:97:d4:43:d3:e4:39:86:f2:e8:c7:c4:11:df:6b:
         1a:46:fa:a8:39:95:20:01:44:5d:18:0b:fe:f9:ce:fa:9e:ab:
         4c:83:73:f7:2c:f1:f0:76:ff:aa:e3:3f:da:0a:02:4d:50:3f:
         88:fe:e1:04
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYuz4jwZGLT1/yCC04qt5ZOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE4NThjYWE2ODMyYWEyYTNlN2NjNmQxNDQ1MTVmOGY0MzFi
NjY3NjIwHhcNMjUwNDEzMTEwMTE0WhcNMjUwNDE0MTEwMTE0WjAzMTEwLwYDVQQD
EyhhMDJjMzE4ODA2ZmU0MDRjNjhkNzlkZDRhZDkxZjY4YjQ0MTI3NzRjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqDTDgBqNRjZNJzTML9+tJly5irlV
GiSMmm+bAhBnvm7dkM+omJVm82WaE2si1OZLGs0tMpwpsvZct8LkzFTBOV9jYEYR
egAu+Jl+u+KADGa7zkrueLwhPJuyJQt8/G3PVyUkwIK07EY/6OC5o+zv9hxg0M02
ZWhH/h1eEKmmDoa54SR+UzwW5MXY14DfPt34oIyRwlLPnmhlTgbOK6REB2OVPWTv
TSPIEo85C8dtxvO+cFlIx12MZyJb43xXr97BYZkngJyBeNRj+x33YhDvCnvb6l5C
8/dwgS3HCJGi1gsGjDNN7LXC8D2pV7IeHiAUq7DiPG35bmegCmacPPfGWQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKAsMYgG/kBMaNed1K2R9otEEndMMB8GA1UdIwQY
MBaAFBhYyqaDKqKj58xtFEUV+PQxtmdiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR0ZqS3BvTXFvcVBuekcwVVJSWDQ5REcyWjJJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC83OTI2YjgtNmVhNy00NWI0LTk1M2Ut
YWFiN2ZjM2Y4YWM1LzEvR0ZqS3BvTXFvcVBuekcwVVJSWDQ5REcyWjJJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMC83OTI2YjgtNmVhNy00NWI0LTk1M2UtYWFiN2ZjM2Y4YWM1
LzEvR0ZqS3BvTXFvcVBuekcwVVJSWDQ5REcyWjJJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAN8b9RZTi
5S33FnHg1lpUP25i5LxjKSjCYzYqZCbfLL38Xpq8/ScCwip28FWPB6KNH1568sft
4drEIsaL5lHIJmbyVUYG4gSigX5PAEwzK5aSWli4NXLhs0EVAejo5vFtoP/OwX4O
uLNK1cxnvF4EAgG6GzJW1/6Y7tj+qp/GBHl7Vn7iV/4977jz4Po8LZCvJFLUBUr4
glDHWs0/l2lU47IqL0b3iazZhx3b+svQ1s57soYFGpCq91NIj5IzMloBkKNcdhe8
m5yrLJfUQ9PkOYby6MfEEd9rGkb6qDmVIAFEXRgL/vnO+p6rTINz9yzx8Hb/quM/
2goCTVA/iP7hBA==
-----END CERTIFICATE-----