Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/10dd7f-5ed7-44dd-beb2-cffad53292ce/1/GAkO0AJ_DjOnVMJZ99yIu3py_6g.mft
File:                     GAkO0AJ_DjOnVMJZ99yIu3py_6g.mft (raw, json)
Hash identifier:          W1Jree9ud+51l/1MaYSRYYZFVL1Nh3axlsAHodq2IxE=
Subject key identifier:   3E:8F:7E:9B:5C:00:90:88:6A:91:0F:A3:35:C5:B7:01:BD:D3:E1:FF
Authority key identifier: 18:09:0E:D0:02:7F:0E:33:A7:54:C2:59:F7:DC:88:BB:7A:72:FF:A8
Certificate issuer:       /CN=18090ed0027f0e33a754c259f7dc88bb7a72ffa8
Certificate serial:       01962F0654DB4B0DBE50A940347AD531E8D8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GAkO0AJ_DjOnVMJZ99yIu3py_6g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c5/10dd7f-5ed7-44dd-beb2-cffad53292ce/1/GAkO0AJ_DjOnVMJZ99yIu3py_6g.mft
Manifest number:          147D
Signing time:             Sun 13 Apr 2025 12:01:06 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:06 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:06 +0000
Files and hashes:         1: GAkO0AJ_DjOnVMJZ99yIu3py_6g.crl (hash: QfvCpoDyAkiLjtHH4Qi1fy3pVlF91l8oDkY+KFjadc8=)
                          2: g9iZztKhPBfdB3SMkUVgLaoGa6I.roa (hash: 3cdl1mhf1MuyZrBGoECoS2FydheWQgVhXvTorzFZles=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:54:db:4b:0d:be:50:a9:40:34:7a:d5:31:e8:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18090ed0027f0e33a754c259f7dc88bb7a72ffa8
        Validity
            Not Before: Apr 13 12:01:06 2025 GMT
            Not After : Apr 14 12:01:06 2025 GMT
        Subject: CN=3e8f7e9b5c0090886a910fa335c5b701bdd3e1ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:24:55:93:53:3f:64:90:b8:3b:a0:0f:f4:0a:
                    2c:86:93:c7:64:ea:c7:ae:40:b0:b4:99:89:c1:db:
                    27:e4:dd:28:90:d7:f0:0e:d4:f0:60:bb:c1:51:b6:
                    ca:60:8c:b2:3c:f8:8b:5c:2a:b8:13:6e:f4:08:1e:
                    22:7c:9e:e6:e8:51:36:b0:ce:6c:63:e2:0e:9f:8f:
                    b5:63:12:72:5b:4e:73:1c:ac:48:12:3f:53:ca:b0:
                    4e:c1:92:06:4b:dc:3f:c8:6f:a1:65:5e:bb:52:21:
                    fd:72:54:e4:5c:47:9e:a9:30:9f:02:fb:7d:e3:d5:
                    82:ba:ab:e7:8a:29:05:e6:58:39:b5:35:0e:e6:f8:
                    dc:6f:25:68:3c:a9:8d:36:2c:1a:40:2a:3c:e5:eb:
                    53:7d:ae:3e:ae:c1:34:f9:e8:f2:ed:4d:bd:23:54:
                    e3:9f:a2:cc:f1:09:8d:4f:14:b8:bb:e2:bd:8b:d3:
                    60:3c:d1:58:d9:3b:ae:2c:a2:57:9a:97:e1:bd:d3:
                    c9:cc:24:17:e9:d4:c0:a2:62:37:5e:5c:7d:35:77:
                    8e:ef:bf:b0:f7:aa:1f:e2:14:de:12:db:72:50:3d:
                    e6:42:44:b4:71:db:9c:3f:57:ab:a4:00:23:07:ff:
                    ec:29:58:37:ab:e5:c8:8f:47:9f:b4:a9:e0:02:b9:
                    5f:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:8F:7E:9B:5C:00:90:88:6A:91:0F:A3:35:C5:B7:01:BD:D3:E1:FF
            X509v3 Authority Key Identifier:
                keyid:18:09:0E:D0:02:7F:0E:33:A7:54:C2:59:F7:DC:88:BB:7A:72:FF:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GAkO0AJ_DjOnVMJZ99yIu3py_6g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/10dd7f-5ed7-44dd-beb2-cffad53292ce/1/GAkO0AJ_DjOnVMJZ99yIu3py_6g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/10dd7f-5ed7-44dd-beb2-cffad53292ce/1/GAkO0AJ_DjOnVMJZ99yIu3py_6g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:d0:5c:65:20:03:5e:c5:93:73:5c:3f:88:cd:83:7d:b1:73:
         3d:bb:28:2e:d9:67:90:5c:60:0a:48:34:6d:8a:5f:7f:99:0a:
         e4:d1:8a:9a:60:7d:27:40:c7:a9:87:eb:ac:cd:89:92:f2:6d:
         e9:34:bf:a7:2b:17:97:a4:1e:95:f6:29:56:e3:80:aa:67:13:
         18:a2:0e:03:7c:80:6f:6d:81:1a:b8:d0:49:c9:f9:ab:89:43:
         30:99:4f:28:cd:53:e8:bd:2f:26:9c:aa:d7:f3:7e:d3:ac:f5:
         bc:87:39:ce:89:55:1f:db:38:09:20:53:47:49:34:0c:4e:72:
         23:74:11:dd:8f:3f:29:11:cc:65:f9:e3:31:a4:64:6c:e1:8b:
         b6:db:6a:a9:5e:ac:40:89:a2:20:7f:26:15:bb:e5:15:1f:c8:
         ae:7e:08:a7:6a:25:40:4c:c9:0f:1e:41:3c:62:68:dc:80:4f:
         70:4a:0c:21:24:38:b6:bb:98:ef:c2:fe:3b:72:61:68:84:6f:
         2f:ee:ab:c8:aa:48:fe:b4:8c:dc:e2:24:1e:9a:c0:20:2e:69:
         4a:27:a5:1f:d7:f1:87:05:8c:62:2b:06:36:a8:38:ea:9f:f4:
         36:fe:89:b3:27:b8:b9:a0:96:d0:48:3f:f3:4a:0f:c2:24:f5:
         74:8b:a3:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----