Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/0fef71-922e-4448-b37d-f740b9e1c480/1/Gc5Ijvo8GE9Kyy_DDrGnH6EW-bQ.mft
File:                     Gc5Ijvo8GE9Kyy_DDrGnH6EW-bQ.mft (raw, json)
Hash identifier:          V3/+fuxkEPBIQt32NWPTChPd+f7c8jk43X9UzT8FNAU=
Subject key identifier:   9B:45:44:3F:C5:D8:A9:46:9E:93:DB:58:E8:72:0F:57:C0:AE:5D:DA
Authority key identifier: 19:CE:48:8E:FA:3C:18:4F:4A:CB:2F:C3:0E:B1:A7:1F:A1:16:F9:B4
Certificate issuer:       /CN=19ce488efa3c184f4acb2fc30eb1a71fa116f9b4
Certificate serial:       01962E2B45A010A9D11A52BE17FB4137FDDF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Gc5Ijvo8GE9Kyy_DDrGnH6EW-bQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cb/0fef71-922e-4448-b37d-f740b9e1c480/1/Gc5Ijvo8GE9Kyy_DDrGnH6EW-bQ.mft
Manifest number:          0933
Signing time:             Sun 13 Apr 2025 08:01:49 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:49 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:49 +0000
Files and hashes:         1: Gc5Ijvo8GE9Kyy_DDrGnH6EW-bQ.crl (hash: AEpYPaN/9Z56fPRDN2thoit5nRdIOangZG9f+C1JHiw=)
                          2: vczBs4Goi10ecTWa3tK1YBxJ8fE.roa (hash: gc2DMvIse8l38XyQwNHPrj9Yz7w21wzufb/ypACqbDU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2b:45:a0:10:a9:d1:1a:52:be:17:fb:41:37:fd:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=19ce488efa3c184f4acb2fc30eb1a71fa116f9b4
        Validity
            Not Before: Apr 13 08:01:49 2025 GMT
            Not After : Apr 14 08:01:49 2025 GMT
        Subject: CN=9b45443fc5d8a9469e93db58e8720f57c0ae5dda
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:c9:06:24:4f:a4:51:65:5c:69:ba:a5:7f:f1:
                    d5:a5:93:d0:c7:ec:3d:f5:b4:e7:fb:df:80:f1:3f:
                    ab:41:c5:71:41:8a:b5:80:90:c0:51:b1:79:6a:9b:
                    f5:b4:8f:7c:1b:ab:c2:d7:83:18:c0:cc:db:0f:23:
                    34:2a:08:78:d6:89:b3:c8:b6:bb:fd:db:c3:37:24:
                    29:0c:93:a8:e5:61:e6:57:4f:ec:02:82:7b:24:f4:
                    28:5e:41:2c:fb:33:66:ea:69:72:f2:9a:18:53:fe:
                    39:75:5d:45:a0:de:a9:ff:9f:2b:2e:61:f2:92:12:
                    9f:42:3f:5d:02:3f:68:62:7d:9d:0b:49:18:0d:ea:
                    1a:93:33:0e:2a:58:bc:7f:1f:bb:60:c4:49:5a:3e:
                    c5:a6:bb:14:67:1d:a7:e6:7b:cc:7d:22:43:ee:11:
                    d4:b8:9b:da:0d:62:06:de:ed:88:15:3f:9d:38:11:
                    79:7e:c7:c4:d9:8a:40:a0:d4:e5:39:f5:50:8a:be:
                    87:7e:fb:74:1a:f0:6a:81:cb:67:6c:db:f0:dd:37:
                    72:43:b1:3f:21:33:9c:c8:bd:41:e7:e3:57:01:f5:
                    83:1b:68:66:b4:53:3b:68:9a:2e:10:a3:da:93:67:
                    e9:bc:f6:8a:c7:13:f7:df:9f:99:60:0e:a2:db:ed:
                    ee:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:45:44:3F:C5:D8:A9:46:9E:93:DB:58:E8:72:0F:57:C0:AE:5D:DA
            X509v3 Authority Key Identifier:
                keyid:19:CE:48:8E:FA:3C:18:4F:4A:CB:2F:C3:0E:B1:A7:1F:A1:16:F9:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gc5Ijvo8GE9Kyy_DDrGnH6EW-bQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/0fef71-922e-4448-b37d-f740b9e1c480/1/Gc5Ijvo8GE9Kyy_DDrGnH6EW-bQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/0fef71-922e-4448-b37d-f740b9e1c480/1/Gc5Ijvo8GE9Kyy_DDrGnH6EW-bQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:bd:07:2f:5b:94:17:65:9d:39:ed:e4:92:86:52:7d:1d:aa:
         0f:ef:2f:bc:f8:06:71:db:89:8a:23:12:29:52:9a:0c:04:3a:
         59:fd:99:39:8e:43:3b:a1:5c:0f:16:48:e2:c2:24:1d:84:f9:
         62:0f:71:38:9e:94:ce:ce:ce:df:98:ac:80:55:29:6b:4a:23:
         f9:3b:18:dd:7c:da:3f:e4:66:20:f3:25:d3:9a:b6:75:a6:9e:
         24:b8:23:8f:e2:00:54:71:7f:02:a0:85:60:42:f5:55:32:7b:
         b3:10:15:c4:9a:f1:e1:8a:fe:bc:bd:a4:be:5e:8d:50:63:0f:
         39:c0:ff:80:20:e1:cd:9c:01:83:ae:05:01:7d:85:7b:f9:bf:
         9b:e4:eb:31:7d:94:b2:14:fd:c4:a6:80:0a:8b:6d:90:be:d8:
         2f:0f:30:a2:75:2d:5e:19:ed:f5:ee:3b:78:3a:5b:16:da:13:
         38:3a:cb:18:f2:ce:a9:fa:58:d4:78:22:62:1f:2c:a3:d4:cf:
         b8:92:ec:65:99:3e:0b:c2:9a:83:7a:59:fd:59:52:4e:3e:d3:
         28:25:9f:b7:2f:08:bd:05:10:97:ba:af:ec:bf:13:30:00:0a:
         68:e4:18:4d:5d:05:5f:2f:53:51:74:d4:a5:cc:77:96:bd:3c:
         0e:ce:56:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----