Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/100c81-56f5-4db6-a66a-b1043b635a1e/1/1GL5scD2-pylMXZOJtOu0hG_7YE.mft
File:                     1GL5scD2-pylMXZOJtOu0hG_7YE.mft (raw, json)
Hash identifier:          ewQpdRaKa/UyE52Ii6wDVPb6iG6gL7IDcS14tbs8/Hw=
Subject key identifier:   99:5A:C9:BE:F0:09:B9:7E:23:D6:50:65:D7:F7:E3:31:1D:D7:9A:C5
Authority key identifier: D4:62:F9:B1:C0:F6:FA:9C:A5:31:76:4E:26:D3:AE:D2:11:BF:ED:81
Certificate issuer:       /CN=d462f9b1c0f6fa9ca531764e26d3aed211bfed81
Certificate serial:       01962FAB4A668FB4630F3596D65C5D9D1238
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1GL5scD2-pylMXZOJtOu0hG_7YE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bb/100c81-56f5-4db6-a66a-b1043b635a1e/1/1GL5scD2-pylMXZOJtOu0hG_7YE.mft
Manifest number:          0B09
Signing time:             Sun 13 Apr 2025 15:01:16 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:16 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:16 +0000
Files and hashes:         1: 1GL5scD2-pylMXZOJtOu0hG_7YE.crl (hash: sd3Ln7fSFja1EUEcoY8puuU+CIqUj7fRZESDgWpNRls=)
                          2: CzS60ntrl-ifakYiPMHnNys_2hg.roa (hash: gJEVLSYuR5fsAEatKrGL8Os1DpygWBOtVxsvnHWW9x0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:4a:66:8f:b4:63:0f:35:96:d6:5c:5d:9d:12:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d462f9b1c0f6fa9ca531764e26d3aed211bfed81
        Validity
            Not Before: Apr 13 15:01:16 2025 GMT
            Not After : Apr 14 15:01:16 2025 GMT
        Subject: CN=995ac9bef009b97e23d65065d7f7e3311dd79ac5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:67:73:07:4f:47:ab:cf:fd:e3:37:30:1c:b9:
                    50:77:ba:9b:69:3e:c1:01:4b:f9:cb:7f:35:2f:31:
                    6e:f7:4a:52:69:d2:65:4e:9f:ea:0e:d4:46:4b:ab:
                    87:4d:77:f8:0c:a7:21:9c:d3:b0:03:fd:58:01:11:
                    95:5a:4b:aa:4a:9f:a9:0a:da:0d:44:55:76:36:59:
                    cf:ff:2b:b5:f0:c5:13:37:6f:e3:d0:20:be:b4:bd:
                    fb:41:e8:0c:92:a0:b4:ed:ab:7d:3f:27:db:9f:56:
                    54:3a:93:82:03:b2:51:21:51:74:df:39:9b:cd:d1:
                    82:bb:e1:04:e2:1d:56:60:d0:22:99:b1:66:5f:65:
                    91:e3:50:98:d8:20:f6:37:84:90:93:e4:df:ca:38:
                    82:b3:c5:91:fa:4d:76:ab:1e:f5:39:a2:a8:5a:d0:
                    8b:e9:e8:f8:51:19:a9:cb:fe:bd:24:41:c6:be:85:
                    af:bc:f7:64:7a:de:0a:6e:a7:8e:22:d9:83:6a:fc:
                    9f:43:20:9b:13:3e:a9:c0:d4:fa:0a:5f:a0:06:4b:
                    cc:0d:6a:1c:52:4d:1a:54:39:b5:dc:93:ea:1f:9f:
                    26:1c:df:7e:2a:c9:d0:6a:43:1d:45:49:c4:2d:6f:
                    97:92:d2:b5:bf:f6:34:fa:80:5d:68:ea:2e:4f:20:
                    40:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:5A:C9:BE:F0:09:B9:7E:23:D6:50:65:D7:F7:E3:31:1D:D7:9A:C5
            X509v3 Authority Key Identifier:
                keyid:D4:62:F9:B1:C0:F6:FA:9C:A5:31:76:4E:26:D3:AE:D2:11:BF:ED:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1GL5scD2-pylMXZOJtOu0hG_7YE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/100c81-56f5-4db6-a66a-b1043b635a1e/1/1GL5scD2-pylMXZOJtOu0hG_7YE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/100c81-56f5-4db6-a66a-b1043b635a1e/1/1GL5scD2-pylMXZOJtOu0hG_7YE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8f:a4:e1:8c:63:da:94:79:1b:7f:5a:ef:8f:ce:7f:36:56:78:
         53:78:ba:b2:fa:50:f4:5c:25:0f:d9:4c:b4:b9:b1:14:98:ad:
         62:18:47:26:d4:fd:54:f8:74:2a:8b:4d:5e:9f:63:f7:bf:b5:
         15:7b:94:e0:2c:76:b5:80:7c:57:d8:83:d5:f3:d3:f9:54:96:
         b7:8b:3a:77:ad:3d:aa:8e:27:16:8e:89:61:bb:f1:54:f4:55:
         31:84:95:87:d2:32:11:84:6f:1f:24:36:df:1f:64:dc:10:5e:
         eb:2a:dd:de:f5:d4:d5:f1:17:b7:19:0a:2c:f4:2b:b9:ec:e4:
         78:c0:15:4f:da:c1:3a:e0:76:30:f8:97:b3:5b:4c:e5:e8:f5:
         52:12:c3:96:19:31:5d:d6:c8:5f:a7:f8:6d:fe:c2:79:37:4e:
         df:05:e5:50:e7:9d:91:59:22:43:56:88:35:87:83:3b:3b:48:
         4f:c9:02:fb:53:d8:a4:e8:2a:79:3c:70:f8:eb:0f:2d:b1:bb:
         80:8c:47:0e:e3:1a:d5:d8:50:c0:77:30:31:f7:3c:8a:0b:02:
         b2:10:3d:59:bb:bd:c7:7b:d9:d8:a6:3c:9e:52:d4:c8:34:4a:
         7d:86:1f:30:5e:49:72:c8:04:cf:de:eb:53:19:ff:1f:05:2c:
         09:f2:f3:9b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvq0pmj7RjDzWW1lxdnRI4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ0NjJmOWIxYzBmNmZhOWNhNTMxNzY0ZTI2ZDNhZWQyMTFi
ZmVkODEwHhcNMjUwNDEzMTUwMTE2WhcNMjUwNDE0MTUwMTE2WjAzMTEwLwYDVQQD
Eyg5OTVhYzliZWYwMDliOTdlMjNkNjUwNjVkN2Y3ZTMzMTFkZDc5YWM1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv2dzB09Hq8/94zcwHLlQd7qbaT7B
AUv5y381LzFu90pSadJlTp/qDtRGS6uHTXf4DKchnNOwA/1YARGVWkuqSp+pCtoN
RFV2NlnP/yu18MUTN2/j0CC+tL37QegMkqC07at9Pyfbn1ZUOpOCA7JRIVF03zmb
zdGCu+EE4h1WYNAimbFmX2WR41CY2CD2N4SQk+TfyjiCs8WR+k12qx71OaKoWtCL
6ej4URmpy/69JEHGvoWvvPdket4KbqeOItmDavyfQyCbEz6pwNT6Cl+gBkvMDWoc
Uk0aVDm13JPqH58mHN9+KsnQakMdRUnELW+XktK1v/Y0+oBdaOouTyBAtwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJlayb7wCbl+I9ZQZdf34zEd15rFMB8GA1UdIwQY
MBaAFNRi+bHA9vqcpTF2TibTrtIRv+2BMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMUdMNXNjRDItcHlsTVhaT0p0T3UwaEdfN1lFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYi8xMDBjODEtNTZmNS00ZGI2LWE2NmEt
YjEwNDNiNjM1YTFlLzEvMUdMNXNjRDItcHlsTVhaT0p0T3UwaEdfN1lFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYi8xMDBjODEtNTZmNS00ZGI2LWE2NmEtYjEwNDNiNjM1YTFl
LzEvMUdMNXNjRDItcHlsTVhaT0p0T3UwaEdfN1lFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAj6ThjGPa
lHkbf1rvj85/NlZ4U3i6svpQ9FwlD9lMtLmxFJitYhhHJtT9VPh0KotNXp9j97+1
FXuU4Cx2tYB8V9iD1fPT+VSWt4s6d609qo4nFo6JYbvxVPRVMYSVh9IyEYRvHyQ2
3x9k3BBe6yrd3vXU1fEXtxkKLPQruezkeMAVT9rBOuB2MPiXs1tM5ej1UhLDlhkx
XdbIX6f4bf7CeTdO3wXlUOedkVkiQ1aINYeDOztIT8kC+1PYpOgqeTxw+OsPLbG7
gIxHDuMa1dhQwHcwMfc8igsCshA9Wbu9x3vZ2KY8nlLUyDRKfYYfMF5JcsgEz97r
Uxn/HwUsCfLzmw==
-----END CERTIFICATE-----