Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/ae18aa-7c15-4775-8fc5-772dcd3af5f6/1/GWENY44qL5Wj2Q5M_5lZqFn6xPA.mft
File:                     GWENY44qL5Wj2Q5M_5lZqFn6xPA.mft (raw, json)
Hash identifier:          9kAYtF8F8XYDJb8EsvOSK/LTeNSJeTVE31PGRpCHtyg=
Subject key identifier:   DA:A7:A4:12:57:C4:AE:E9:2C:EB:F9:5E:E0:1C:80:E8:B5:ED:75:EF
Authority key identifier: 19:61:0D:63:8E:2A:2F:95:A3:D9:0E:4C:FF:99:59:A8:59:FA:C4:F0
Certificate issuer:       /CN=19610d638e2a2f95a3d90e4cff9959a859fac4f0
Certificate serial:       01962F06CDE5F258927AB234483C44A0C5EC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GWENY44qL5Wj2Q5M_5lZqFn6xPA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cd/ae18aa-7c15-4775-8fc5-772dcd3af5f6/1/GWENY44qL5Wj2Q5M_5lZqFn6xPA.mft
Manifest number:          0111
Signing time:             Sun 13 Apr 2025 12:01:37 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:37 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:37 +0000
Files and hashes:         1: GWENY44qL5Wj2Q5M_5lZqFn6xPA.crl (hash: kfN/F33kjZIWobpybDIJ8yHmggW58UikVhZVM+kLz5E=)
                          2: SFyTfsWyq2coBx8ydbZroSS50xQ.roa (hash: ZZpymtBw1D9nPwu2cf1P4YkyaGccufHXZlJkybCGFMw=)
                          3: TNkzBPyNieqNtFJ7OZ5WQ2BFAFM.roa (hash: yD3hqpWrk6f2s5tXbai7Hu4KRhgeNHLLkovFRVk/JKU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:cd:e5:f2:58:92:7a:b2:34:48:3c:44:a0:c5:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=19610d638e2a2f95a3d90e4cff9959a859fac4f0
        Validity
            Not Before: Apr 13 12:01:37 2025 GMT
            Not After : Apr 14 12:01:37 2025 GMT
        Subject: CN=daa7a41257c4aee92cebf95ee01c80e8b5ed75ef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:20:7e:59:05:c0:c8:12:51:40:2d:b6:c4:c8:
                    7b:d6:7c:52:fe:f1:33:52:8e:90:f1:ba:fa:97:34:
                    da:9e:a9:83:10:fe:ac:fd:a9:e2:80:11:b0:75:0e:
                    e0:a9:29:22:c9:08:52:b3:83:9a:61:ee:50:8c:ab:
                    5f:38:40:5c:5b:a8:51:44:fa:36:32:a2:7b:b3:45:
                    25:80:21:1a:8f:d6:b4:2f:41:1f:96:ec:3c:43:f2:
                    e2:f3:c3:7a:73:67:2b:fc:e7:6a:b6:ce:56:db:29:
                    8d:f3:11:14:24:dd:0c:43:b3:58:f6:a0:94:50:e5:
                    94:59:b1:8f:d8:15:fb:57:72:9c:8a:a6:a9:e7:4a:
                    12:3e:65:9c:90:9e:48:25:56:1d:8f:37:0b:79:1e:
                    b1:dd:db:f6:e2:8a:f2:11:ca:6f:7f:66:ba:f3:30:
                    7b:d1:b4:f0:47:90:76:32:43:bb:ce:dd:b4:55:9c:
                    5a:cd:ef:ae:64:50:85:18:ee:64:06:e1:e7:5f:47:
                    34:44:30:93:fd:15:2c:58:8d:d1:a7:94:02:42:86:
                    c0:53:2b:36:d0:0e:58:d9:dd:f8:78:95:10:79:a5:
                    a1:8c:6f:f2:b6:8d:71:87:37:d3:10:6c:71:d6:14:
                    de:85:d3:8c:51:3d:c1:12:3d:83:f8:07:b0:06:57:
                    d1:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:A7:A4:12:57:C4:AE:E9:2C:EB:F9:5E:E0:1C:80:E8:B5:ED:75:EF
            X509v3 Authority Key Identifier:
                keyid:19:61:0D:63:8E:2A:2F:95:A3:D9:0E:4C:FF:99:59:A8:59:FA:C4:F0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GWENY44qL5Wj2Q5M_5lZqFn6xPA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/ae18aa-7c15-4775-8fc5-772dcd3af5f6/1/GWENY44qL5Wj2Q5M_5lZqFn6xPA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/ae18aa-7c15-4775-8fc5-772dcd3af5f6/1/GWENY44qL5Wj2Q5M_5lZqFn6xPA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:ed:aa:73:fa:4d:14:0d:bc:5a:d7:4b:c3:77:e2:2c:4f:87:
         b3:2b:ed:c6:05:37:64:63:1f:ec:e4:91:64:29:71:73:ba:18:
         15:0e:a9:4a:1c:bf:4e:b3:1c:20:c5:a5:39:ff:e3:65:b0:e5:
         3e:b6:e2:84:73:bc:08:ff:4e:55:a5:83:64:62:b8:3a:b3:9d:
         f9:f5:ae:ce:96:03:b9:83:b6:1c:11:09:32:47:2c:3c:35:1f:
         05:3c:fb:c0:ea:e3:ba:b2:c4:9e:e1:b1:c2:a1:17:c0:d9:d6:
         4a:8b:c2:03:b6:7a:79:ca:06:fe:b7:ad:82:af:69:63:9d:1f:
         25:c4:12:5f:ca:87:b7:cf:52:c2:da:8e:8d:af:3c:57:8a:58:
         cf:cd:cf:7e:f3:82:ef:2e:82:60:23:bd:1c:72:e2:6c:15:da:
         83:fd:ad:29:d0:91:ea:84:bf:46:8a:40:3b:fe:14:5d:42:66:
         3b:60:c1:aa:09:6a:9d:c7:2a:bc:ec:9f:84:c4:5b:25:65:0e:
         15:49:0e:4d:17:b8:d3:b0:7d:3c:fa:2c:e3:c9:e5:44:7f:cb:
         33:19:f4:ce:9d:90:87:d7:26:56:52:f3:a0:2d:d6:91:7f:97:
         4c:42:5a:e7:46:0e:5c:db:91:69:6b:17:58:6e:7f:71:d4:5a:
         64:34:47:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----