Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/729f92-5f03-4158-90ac-6d428f1c15fd/1/GJlHqaXYjMYsyJgmjyvK_Wp__Fs.mft
File:                     GJlHqaXYjMYsyJgmjyvK_Wp__Fs.mft (raw, json)
Hash identifier:          KObjssC/jeVu8ZRIQc0XRZ5c8e7OwcfRdVZaN0uZ37E=
Subject key identifier:   D7:B4:42:A9:13:31:F9:87:56:90:E4:F4:89:72:BD:7C:A0:6E:76:69
Authority key identifier: 18:99:47:A9:A5:D8:8C:C6:2C:C8:98:26:8F:2B:CA:FD:6A:7F:FC:5B
Certificate issuer:       /CN=189947a9a5d88cc62cc898268f2bcafd6a7ffc5b
Certificate serial:       01962E98B5B687936D98BC1F338695431B69
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GJlHqaXYjMYsyJgmjyvK_Wp__Fs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/be/729f92-5f03-4158-90ac-6d428f1c15fd/1/GJlHqaXYjMYsyJgmjyvK_Wp__Fs.mft
Manifest number:          14EB
Signing time:             Sun 13 Apr 2025 10:01:21 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:21 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:21 +0000
Files and hashes:         1: GJlHqaXYjMYsyJgmjyvK_Wp__Fs.crl (hash: eqKkqTXcR3aXhgmvXybEmyylcy5uwRu6m9fwbxh3/7s=)
                          2: YuDsO55F13UZ0cxSF251Oa2EzOk.roa (hash: E2zFm6YI+MUI5s6ZcM5A4TjlG7YlaadinjimTXzpUsc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:b5:b6:87:93:6d:98:bc:1f:33:86:95:43:1b:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=189947a9a5d88cc62cc898268f2bcafd6a7ffc5b
        Validity
            Not Before: Apr 13 10:01:21 2025 GMT
            Not After : Apr 14 10:01:21 2025 GMT
        Subject: CN=d7b442a91331f9875690e4f48972bd7ca06e7669
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:a9:5f:85:94:b2:a0:a7:5c:50:03:21:c4:ed:
                    e5:5a:0e:aa:e9:6c:40:16:95:df:46:16:af:d1:44:
                    29:c1:cf:e7:b9:c0:eb:49:36:9f:76:85:2c:f0:97:
                    72:70:92:34:3f:d5:1b:4e:ec:25:d3:73:80:f1:c4:
                    a2:c0:92:04:b6:19:cd:eb:6c:0a:f5:7a:60:f8:e3:
                    da:eb:6b:2c:ae:49:30:7a:98:50:63:47:82:7c:1f:
                    04:37:11:0f:c2:99:63:08:3a:ba:2b:fc:97:db:41:
                    20:4d:c6:d5:c7:34:3d:e6:fe:35:b0:b2:5d:10:c0:
                    78:99:6f:60:90:81:51:da:86:14:3b:28:e5:a1:d8:
                    3b:a9:92:5f:c4:2b:45:fa:34:8f:76:8c:97:83:3a:
                    8e:63:62:62:5e:0c:56:8d:a3:58:0d:6c:f9:69:5f:
                    a6:d2:2d:53:fd:ca:26:52:de:9e:ae:68:f3:d0:c5:
                    68:ef:53:8f:6a:0a:43:89:6c:cc:c5:21:ee:0e:70:
                    7e:a5:1a:c9:a0:15:b1:18:98:d1:e4:9b:79:62:3d:
                    a5:17:3e:2d:bf:68:44:8b:62:07:5a:35:b4:56:64:
                    7d:c1:b4:b7:34:05:9a:92:c5:89:39:f3:a7:01:fd:
                    99:36:0f:31:5e:f2:e4:ce:e5:65:20:5c:84:34:15:
                    6c:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:B4:42:A9:13:31:F9:87:56:90:E4:F4:89:72:BD:7C:A0:6E:76:69
            X509v3 Authority Key Identifier:
                keyid:18:99:47:A9:A5:D8:8C:C6:2C:C8:98:26:8F:2B:CA:FD:6A:7F:FC:5B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GJlHqaXYjMYsyJgmjyvK_Wp__Fs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/729f92-5f03-4158-90ac-6d428f1c15fd/1/GJlHqaXYjMYsyJgmjyvK_Wp__Fs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/be/729f92-5f03-4158-90ac-6d428f1c15fd/1/GJlHqaXYjMYsyJgmjyvK_Wp__Fs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:ce:0f:62:c0:a3:01:c7:8c:78:a1:b3:05:fb:92:c0:9e:70:
         8e:b7:38:2a:d4:40:a0:03:75:63:0c:27:21:ff:aa:e3:35:ff:
         d9:4d:a9:29:8a:8b:a2:fb:ee:93:7d:8e:a0:63:2a:00:3e:af:
         aa:c4:01:b5:17:3e:d1:5d:c7:61:c8:3a:b4:a5:e8:4a:e1:b3:
         7a:4f:0a:01:f1:e1:d4:6e:36:e8:78:ee:db:17:8e:1f:dd:49:
         ff:76:78:3d:1f:da:a7:1c:bf:15:c4:c6:98:23:e6:43:ab:e5:
         3b:c8:0f:b1:e9:d2:b1:d2:64:38:6d:bf:3b:50:cf:2e:d7:fa:
         7b:7d:a5:4f:a1:06:3f:7e:9b:f6:ca:d5:fc:16:18:aa:a3:8e:
         fe:3f:70:91:61:53:fe:ab:c9:3a:f1:ff:1e:fe:da:5a:df:a5:
         5f:51:ec:7f:70:8c:b1:0d:59:c0:64:35:61:a1:d4:51:45:94:
         0d:4a:03:13:fc:f3:9c:2f:24:9e:50:ef:9b:8f:8f:24:38:39:
         da:1e:67:8b:a5:b2:b1:36:86:5d:38:11:dd:d3:c7:67:be:7c:
         5a:f6:0b:c3:43:e3:77:87:a1:65:59:27:8a:61:b4:ce:c0:db:
         5a:a9:fb:4b:fa:8d:c8:c0:ca:0e:77:cd:d0:02:0a:dd:f0:4a:
         49:58:df:15
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYumLW2h5NtmLwfM4aVQxtpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE4OTk0N2E5YTVkODhjYzYyY2M4OTgyNjhmMmJjYWZkNmE3
ZmZjNWIwHhcNMjUwNDEzMTAwMTIxWhcNMjUwNDE0MTAwMTIxWjAzMTEwLwYDVQQD
EyhkN2I0NDJhOTEzMzFmOTg3NTY5MGU0ZjQ4OTcyYmQ3Y2EwNmU3NjY5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApqlfhZSyoKdcUAMhxO3lWg6q6WxA
FpXfRhav0UQpwc/nucDrSTafdoUs8JdycJI0P9UbTuwl03OA8cSiwJIEthnN62wK
9Xpg+OPa62ssrkkwephQY0eCfB8ENxEPwpljCDq6K/yX20EgTcbVxzQ95v41sLJd
EMB4mW9gkIFR2oYUOyjlodg7qZJfxCtF+jSPdoyXgzqOY2JiXgxWjaNYDWz5aV+m
0i1T/comUt6ermjz0MVo71OPagpDiWzMxSHuDnB+pRrJoBWxGJjR5Jt5Yj2lFz4t
v2hEi2IHWjW0VmR9wbS3NAWaksWJOfOnAf2ZNg8xXvLkzuVlIFyENBVsZwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNe0QqkTMfmHVpDk9IlyvXygbnZpMB8GA1UdIwQY
MBaAFBiZR6ml2IzGLMiYJo8ryv1qf/xbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR0psSHFhWFlqTVlzeUpnbWp5dktfV3BfX0ZzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS83MjlmOTItNWYwMy00MTU4LTkwYWMt
NmQ0MjhmMWMxNWZkLzEvR0psSHFhWFlqTVlzeUpnbWp5dktfV3BfX0ZzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZS83MjlmOTItNWYwMy00MTU4LTkwYWMtNmQ0MjhmMWMxNWZk
LzEvR0psSHFhWFlqTVlzeUpnbWp5dktfV3BfX0ZzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABs4PYsCj
AceMeKGzBfuSwJ5wjrc4KtRAoAN1YwwnIf+q4zX/2U2pKYqLovvuk32OoGMqAD6v
qsQBtRc+0V3HYcg6tKXoSuGzek8KAfHh1G426Hju2xeOH91J/3Z4PR/apxy/FcTG
mCPmQ6vlO8gPsenSsdJkOG2/O1DPLtf6e32lT6EGP36b9srV/BYYqqOO/j9wkWFT
/qvJOvH/Hv7aWt+lX1Hsf3CMsQ1ZwGQ1YaHUUUWUDUoDE/zznC8knlDvm4+PJDg5
2h5ni6WysTaGXTgR3dPHZ758WvYLw0Pjd4ehZVknimG0zsDbWqn7S/qNyMDKDnfN
0AIK3fBKSVjfFQ==
-----END CERTIFICATE-----