Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/e5e2d0-f439-45e4-8540-f19600c7ad54/1/gQYKUYUo6GqOp38YigJjeQwI9rk.mft
File:                     gQYKUYUo6GqOp38YigJjeQwI9rk.mft (raw, json)
Hash identifier:          Ubqk8T1lXHfLoSngeOcS053NpVOEh1nYFkAQdAWdvSo=
Subject key identifier:   E0:4B:F7:80:9A:B8:CC:4D:0E:53:FF:E6:E0:E1:D0:1A:37:38:FB:57
Authority key identifier: 81:06:0A:51:85:28:E8:6A:8E:A7:7F:18:8A:02:63:79:0C:08:F6:B9
Certificate issuer:       /CN=81060a518528e86a8ea77f188a0263790c08f6b9
Certificate serial:       01962E61BFD31E9B516290D0F214C2B7FC83
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gQYKUYUo6GqOp38YigJjeQwI9rk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c3/e5e2d0-f439-45e4-8540-f19600c7ad54/1/gQYKUYUo6GqOp38YigJjeQwI9rk.mft
Manifest number:          0EE4
Signing time:             Sun 13 Apr 2025 09:01:20 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:20 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:20 +0000
Files and hashes:         1: gQYKUYUo6GqOp38YigJjeQwI9rk.crl (hash: FGslGq8CUZ5vQW5wYuJ8t7MLzBQ1/1jK9Wg64KUjPsQ=)
                          2: mzS0mg7LzekXtU0-AI8vjQNsdnI.roa (hash: W1Odlm/4gNw2/x1K4BE4WalP/0rHvCKJa9lik2Xno0U=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:bf:d3:1e:9b:51:62:90:d0:f2:14:c2:b7:fc:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=81060a518528e86a8ea77f188a0263790c08f6b9
        Validity
            Not Before: Apr 13 09:01:20 2025 GMT
            Not After : Apr 14 09:01:20 2025 GMT
        Subject: CN=e04bf7809ab8cc4d0e53ffe6e0e1d01a3738fb57
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:3a:83:db:dd:fe:99:46:7d:6d:6e:a8:9b:c2:
                    a9:9b:63:77:2c:45:b4:32:af:62:a1:07:d4:8c:98:
                    0e:a9:2f:7c:bb:29:26:d3:eb:57:e4:5e:55:b9:05:
                    88:a1:c9:c2:c2:55:b2:62:b3:fe:d3:9d:8b:c2:80:
                    f4:d3:93:6b:fd:93:cb:07:01:b0:cf:88:50:00:db:
                    3e:a7:f2:0d:28:1f:67:27:ef:6a:e4:b9:49:96:99:
                    53:5a:92:49:c4:ab:c6:ff:c5:17:cd:c9:5d:a7:f7:
                    f5:b9:46:ff:8f:bd:35:1d:aa:af:cf:22:fd:e8:22:
                    c7:c1:d8:95:80:f1:91:87:fd:e4:ca:8f:9b:f7:6a:
                    03:9f:dc:f1:cc:f4:04:dc:ad:b5:ca:c4:73:99:b3:
                    27:36:3b:a1:f6:65:15:cf:ca:09:a9:3e:db:0b:83:
                    fa:b2:7f:e9:56:26:71:90:a0:b0:40:58:05:63:69:
                    94:ad:3b:66:df:53:d9:32:59:be:c8:87:e6:1b:4b:
                    ff:20:3f:d5:6f:73:31:33:a2:f3:d3:c3:82:3f:4d:
                    81:75:95:d6:61:a8:44:14:e2:f0:fd:e3:85:38:0b:
                    28:7d:c5:d1:d8:a5:1a:39:a8:48:8a:d2:84:d7:01:
                    30:f6:26:08:81:70:0d:5c:94:9d:55:9d:d9:d9:52:
                    3e:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:4B:F7:80:9A:B8:CC:4D:0E:53:FF:E6:E0:E1:D0:1A:37:38:FB:57
            X509v3 Authority Key Identifier:
                keyid:81:06:0A:51:85:28:E8:6A:8E:A7:7F:18:8A:02:63:79:0C:08:F6:B9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gQYKUYUo6GqOp38YigJjeQwI9rk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/e5e2d0-f439-45e4-8540-f19600c7ad54/1/gQYKUYUo6GqOp38YigJjeQwI9rk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/e5e2d0-f439-45e4-8540-f19600c7ad54/1/gQYKUYUo6GqOp38YigJjeQwI9rk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:f0:2c:44:b7:c8:6f:b1:cb:67:8b:6d:bb:89:43:4e:20:3a:
         b8:56:10:6c:23:7c:39:6b:2d:83:91:66:8b:33:c5:eb:3e:87:
         24:c1:bb:2e:00:84:dd:c1:a1:21:c9:32:43:fd:bf:8e:2a:2e:
         63:32:e3:93:3c:05:e3:32:29:98:0d:23:8f:57:25:e1:9b:62:
         be:16:12:02:50:cb:f9:f6:18:75:bf:51:fd:12:28:82:f2:1c:
         91:76:cf:8a:c1:c3:46:5e:36:46:e7:f6:fc:7b:dd:37:8b:b0:
         18:73:5a:66:dd:a5:86:49:d3:0a:9e:ef:da:9e:39:37:34:76:
         96:71:a0:f8:1a:f9:7c:b2:1e:11:a3:c2:3d:47:59:7e:de:85:
         72:97:53:97:3b:56:f7:f5:69:4a:e9:64:a4:c3:76:45:56:a6:
         0c:c6:30:5e:17:c7:3d:e1:43:53:f9:2a:48:8b:d2:2d:94:d9:
         9b:97:24:76:e4:22:bd:26:02:a2:64:c2:bc:10:bc:b6:43:94:
         9e:f1:e5:c1:7c:d2:ff:35:c7:1e:2c:01:75:b7:6f:6d:05:08:
         92:c8:7d:0f:b7:4f:65:bf:0a:be:eb:d7:86:f9:be:be:c2:1d:
         68:3e:cf:49:2c:c2:35:07:c7:1f:82:83:d7:f1:b3:74:5a:5a:
         28:5f:81:ca
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYuYb/THptRYpDQ8hTCt/yDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgxMDYwYTUxODUyOGU4NmE4ZWE3N2YxODhhMDI2Mzc5MGMw
OGY2YjkwHhcNMjUwNDEzMDkwMTIwWhcNMjUwNDE0MDkwMTIwWjAzMTEwLwYDVQQD
EyhlMDRiZjc4MDlhYjhjYzRkMGU1M2ZmZTZlMGUxZDAxYTM3MzhmYjU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwzqD293+mUZ9bW6om8Kpm2N3LEW0
Mq9ioQfUjJgOqS98uykm0+tX5F5VuQWIocnCwlWyYrP+052LwoD005Nr/ZPLBwGw
z4hQANs+p/INKB9nJ+9q5LlJlplTWpJJxKvG/8UXzcldp/f1uUb/j701HaqvzyL9
6CLHwdiVgPGRh/3kyo+b92oDn9zxzPQE3K21ysRzmbMnNjuh9mUVz8oJqT7bC4P6
sn/pViZxkKCwQFgFY2mUrTtm31PZMlm+yIfmG0v/ID/Vb3MxM6Lz08OCP02BdZXW
YahEFOLw/eOFOAsofcXR2KUaOahIitKE1wEw9iYIgXANXJSdVZ3Z2VI+fwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOBL94CauMxNDlP/5uDh0Bo3OPtXMB8GA1UdIwQY
MBaAFIEGClGFKOhqjqd/GIoCY3kMCPa5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ1FZS1VZVW82R3FPcDM4WWlnSmplUXdJOXJrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy9lNWUyZDAtZjQzOS00NWU0LTg1NDAt
ZjE5NjAwYzdhZDU0LzEvZ1FZS1VZVW82R3FPcDM4WWlnSmplUXdJOXJrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMy9lNWUyZDAtZjQzOS00NWU0LTg1NDAtZjE5NjAwYzdhZDU0
LzEvZ1FZS1VZVW82R3FPcDM4WWlnSmplUXdJOXJrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHfAsRLfI
b7HLZ4ttu4lDTiA6uFYQbCN8OWstg5FmizPF6z6HJMG7LgCE3cGhIckyQ/2/jiou
YzLjkzwF4zIpmA0jj1cl4ZtivhYSAlDL+fYYdb9R/RIogvIckXbPisHDRl42Ruf2
/HvdN4uwGHNaZt2lhknTCp7v2p45NzR2lnGg+Br5fLIeEaPCPUdZft6FcpdTlztW
9/VpSulkpMN2RVamDMYwXhfHPeFDU/kqSIvSLZTZm5ckduQivSYComTCvBC8tkOU
nvHlwXzS/zXHHiwBdbdvbQUIksh9D7dPZb8KvuvXhvm+vsIdaD7PSSzCNQfHH4KD
1/GzdFpaKF+Byg==
-----END CERTIFICATE-----