Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/c0b283-88b9-43cd-b08f-a8ea43253ed5/1/G6jqOiKIpq-PZKg4MALHQIVXmgc.mft
File:                     G6jqOiKIpq-PZKg4MALHQIVXmgc.mft (raw, json)
Hash identifier:          a6DjMKy9CLDSHvDytzkTDT/3pDaXX/6EYIFfvKaj8BE=
Subject key identifier:   2E:D6:4B:1C:FB:DF:F6:4B:EA:7A:9C:D7:5E:CF:8D:C0:21:B8:03:47
Authority key identifier: 1B:A8:EA:3A:22:88:A6:AF:8F:64:A8:38:30:02:C7:40:85:57:9A:07
Certificate issuer:       /CN=1ba8ea3a2288a6af8f64a8383002c74085579a07
Certificate serial:       01962FAB8346E979A86FE91A6B76C83641CA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/G6jqOiKIpq-PZKg4MALHQIVXmgc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c7/c0b283-88b9-43cd-b08f-a8ea43253ed5/1/G6jqOiKIpq-PZKg4MALHQIVXmgc.mft
Manifest number:          1385
Signing time:             Sun 13 Apr 2025 15:01:31 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:31 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:31 +0000
Files and hashes:         1: G6jqOiKIpq-PZKg4MALHQIVXmgc.crl (hash: XfaXfpo2GHuq9CfDU9KrPhKG38VrEhRhORdbOoWsy7I=)
                          2: awSvsuAzEkNxIrYxJqTZDb_nVnE.roa (hash: 3jZ+yIojuG+AZ6SFsISQRAEfZSYSxHFN/YCIQpbx+o8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:83:46:e9:79:a8:6f:e9:1a:6b:76:c8:36:41:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1ba8ea3a2288a6af8f64a8383002c74085579a07
        Validity
            Not Before: Apr 13 15:01:31 2025 GMT
            Not After : Apr 14 15:01:31 2025 GMT
        Subject: CN=2ed64b1cfbdff64bea7a9cd75ecf8dc021b80347
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:8d:05:09:be:ed:01:d6:23:d6:29:26:68:32:
                    3d:a1:0b:d7:1f:6d:9b:57:8f:ff:74:57:f9:f3:eb:
                    79:c9:bc:37:a8:a2:bf:75:32:dc:5e:66:9c:04:2e:
                    99:bb:bc:b3:d4:3c:5e:87:dd:70:61:32:ea:82:9d:
                    65:7e:da:3d:e7:31:6c:54:58:8b:fc:49:2e:da:08:
                    be:32:da:21:02:6d:6a:1a:d5:89:c2:a6:05:5d:5d:
                    dd:ce:80:64:d0:f7:8c:ef:25:e8:de:b1:91:b2:42:
                    84:d9:f1:7f:5b:14:61:72:6e:01:44:11:d6:4a:34:
                    a4:19:db:16:66:22:7d:12:58:d0:14:ab:82:7c:d0:
                    36:c1:b1:54:d1:82:20:c5:03:7d:6b:dd:0f:c7:43:
                    a8:d7:0a:5f:09:3b:07:c8:66:f1:d4:40:4c:2b:cb:
                    b4:f3:d6:de:7f:94:f6:38:c0:9a:7c:e0:7b:41:6e:
                    fe:13:25:8a:00:e3:57:66:41:5f:79:4f:df:58:90:
                    3b:73:69:cf:c0:5a:b1:d3:ee:31:cb:9c:80:23:43:
                    2b:4a:56:db:64:3c:d1:ff:c9:6c:1d:56:ce:66:d7:
                    f8:bd:24:cd:df:cc:21:0d:13:52:b8:19:bb:83:e1:
                    35:8b:48:88:bc:61:c1:56:57:0f:5a:e9:20:38:47:
                    0b:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:D6:4B:1C:FB:DF:F6:4B:EA:7A:9C:D7:5E:CF:8D:C0:21:B8:03:47
            X509v3 Authority Key Identifier:
                keyid:1B:A8:EA:3A:22:88:A6:AF:8F:64:A8:38:30:02:C7:40:85:57:9A:07

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G6jqOiKIpq-PZKg4MALHQIVXmgc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/c0b283-88b9-43cd-b08f-a8ea43253ed5/1/G6jqOiKIpq-PZKg4MALHQIVXmgc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/c0b283-88b9-43cd-b08f-a8ea43253ed5/1/G6jqOiKIpq-PZKg4MALHQIVXmgc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:9f:af:3a:7e:2c:3f:91:d6:e8:83:ff:a8:2c:c8:ef:59:10:
         49:f8:d7:83:a1:a6:f2:43:85:5f:2e:37:e3:5a:b0:0c:2a:76:
         14:c0:3c:21:6a:57:96:82:e2:01:dc:39:1b:ea:b5:2a:0d:c3:
         a0:3b:9b:64:ba:11:e8:be:a4:76:fe:05:8e:d1:64:62:31:3e:
         66:6d:85:79:f1:aa:76:6e:46:2f:34:6d:e6:15:0d:5f:1a:77:
         af:bd:c5:05:3b:01:c6:9e:72:ed:73:d6:62:b3:69:9e:66:0c:
         75:ab:a9:92:b8:20:5f:6f:d9:5e:88:55:4f:02:6a:45:1e:7c:
         9a:57:b7:ac:1f:1b:1c:2d:d6:71:d8:29:08:fa:2a:ed:25:3c:
         b1:90:9c:f2:bf:6e:a8:76:2a:34:78:e5:62:3e:26:42:22:53:
         c1:7c:b5:89:ed:85:e8:a8:6f:ff:6b:f7:0d:44:16:72:d6:d5:
         ff:98:e3:b0:29:ae:22:04:87:b8:ef:c8:e2:a0:8d:b9:6b:bb:
         77:fb:9f:75:96:41:0c:7f:7c:e1:50:56:16:21:22:17:b5:48:
         5d:a4:4a:42:f0:80:6f:d3:48:d0:49:90:d8:37:f3:d5:8f:36:
         6b:0b:81:0d:eb:25:81:14:d0:91:bf:ba:f1:31:07:84:89:af:
         d3:15:22:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----