Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/ee66fb-5dc0-4122-9bc7-b27d8730a270/1/gafOi6y-zusW9gC2B9G_0IAzswI.mft
File:                     gafOi6y-zusW9gC2B9G_0IAzswI.mft (raw, json)
Hash identifier:          7idww3m8BGIdJD2ijOIgT4MVoPVvPzEr77JqpMwcM1o=
Subject key identifier:   AA:5A:E3:55:92:79:16:CA:D2:8B:2D:B9:B5:FC:F9:A2:F0:6E:F1:0E
Authority key identifier: 81:A7:CE:8B:AC:BE:CE:EB:16:F6:00:B6:07:D1:BF:D0:80:33:B3:02
Certificate issuer:       /CN=81a7ce8bacbeceeb16f600b607d1bfd08033b302
Certificate serial:       01962DF3B94E41FAF4A1A1A7DFF115873581
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gafOi6y-zusW9gC2B9G_0IAzswI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d0/ee66fb-5dc0-4122-9bc7-b27d8730a270/1/gafOi6y-zusW9gC2B9G_0IAzswI.mft
Manifest number:          08A6
Signing time:             Sun 13 Apr 2025 07:01:09 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:09 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:09 +0000
Files and hashes:         1: 0x8juoo7AM8ugf31uQycejLtims.roa (hash: sJQg/bbbZFsef+zbbHa9OzqRT4fumHdl0Xl81Is/6E0=)
                          2: Nzh8YLpNUF4cU0rzBjfGCERDcYE.roa (hash: i2B2OXXjCTbw2kGS650IvMFo0E46R+ycXmvCyPDbizQ=)
                          3: foz-XGD-1ugjMs0Fiq2Vqd2Q6oA.roa (hash: ck4+NfPkU8wvZrU6NwgK2YYCM2pv6EA8TqrJialxWbg=)
                          4: gafOi6y-zusW9gC2B9G_0IAzswI.crl (hash: x96fZKtOEt+Eed8s3uD0HBfa846wu4HbccdPj474+24=)
                          5: i4pBlijYu7sjz616Su8j6sEp0KM.roa (hash: uHKnyOrHeN8Niu67x/4Qi3vMRGo0ABBXAuttwGbGRuk=)
                          6: ln-K5Ow9TejgLd4PysWSoQKqiZ4.roa (hash: 6WaUskC8pwU9MAQIbeJthvJXrFOJkM+1fup3ku3957c=)
                          7: sizZNRJeMyfvZoIYAB6UC-zVc7U.roa (hash: Hn9xitBE6shoqbTIVL8aOgZmfrDePFpERxPmyPyqVEs=)
                          8: vywQrYyohPA7HiVpUnZvxi_OkIw.roa (hash: 9ddLtzX64XyzhFvBqGsy3QFMWw7/oarf8SrkFQVzpQI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f3:b9:4e:41:fa:f4:a1:a1:a7:df:f1:15:87:35:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=81a7ce8bacbeceeb16f600b607d1bfd08033b302
        Validity
            Not Before: Apr 13 07:01:09 2025 GMT
            Not After : Apr 14 07:01:09 2025 GMT
        Subject: CN=aa5ae355927916cad28b2db9b5fcf9a2f06ef10e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:19:4d:ab:50:43:c8:5e:66:14:54:1d:7f:a8:
                    8c:5a:ae:b0:25:6d:77:1e:7c:80:36:8e:48:5a:31:
                    bf:13:ae:e3:70:72:66:d1:8d:61:81:85:15:a2:fb:
                    f5:a7:04:0a:63:70:ea:8f:c0:35:8d:1b:8f:9f:0e:
                    10:b7:18:36:b4:8e:2e:8b:be:63:14:5a:c9:a6:8a:
                    1d:79:61:46:6b:b0:74:16:4c:9f:0f:73:da:16:c5:
                    35:b8:a1:18:c1:4a:42:f4:75:a4:a7:ca:fc:78:6b:
                    28:c1:d3:da:e6:45:13:20:e7:91:c5:ee:a5:42:53:
                    79:80:8a:e6:b1:a1:df:1e:23:20:35:c8:16:85:a6:
                    66:ea:b8:c2:b6:c0:c9:61:42:40:3d:0d:63:d3:33:
                    ae:83:df:5e:77:79:90:c2:23:4b:16:7d:d0:d6:61:
                    09:51:fe:d8:2f:8d:10:d3:24:c7:e7:e6:7e:3b:2f:
                    83:27:2c:ae:71:57:6c:ed:2b:e8:43:0c:42:28:8f:
                    43:5e:e6:e2:5a:b7:e1:31:25:bb:fa:34:c3:ff:33:
                    39:15:03:d9:e1:3d:72:a9:bf:08:c3:f5:c9:c0:87:
                    ec:e1:c4:1a:6b:98:30:02:62:69:8b:d8:b5:4a:8c:
                    db:8b:81:1a:73:c6:fa:65:15:54:31:45:b8:38:77:
                    d3:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:5A:E3:55:92:79:16:CA:D2:8B:2D:B9:B5:FC:F9:A2:F0:6E:F1:0E
            X509v3 Authority Key Identifier:
                keyid:81:A7:CE:8B:AC:BE:CE:EB:16:F6:00:B6:07:D1:BF:D0:80:33:B3:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gafOi6y-zusW9gC2B9G_0IAzswI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/ee66fb-5dc0-4122-9bc7-b27d8730a270/1/gafOi6y-zusW9gC2B9G_0IAzswI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/ee66fb-5dc0-4122-9bc7-b27d8730a270/1/gafOi6y-zusW9gC2B9G_0IAzswI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bd:67:eb:d1:09:c0:48:32:16:c8:46:66:96:83:df:17:85:56:
         e2:47:00:b3:e5:42:e6:df:a1:65:20:c2:32:29:18:cd:67:d9:
         2a:2b:da:c9:32:8b:63:53:db:93:59:e8:82:35:95:a5:5b:ab:
         fe:02:04:c3:2c:88:30:e3:4e:33:b2:0a:6b:8e:12:90:49:16:
         45:f9:41:b9:2c:eb:53:c9:ae:d7:4f:22:f4:c8:17:a7:27:e7:
         94:4a:c0:d4:80:6b:21:2e:14:bf:3e:a4:14:fe:82:75:ef:53:
         1b:0c:8b:3c:dd:e2:5f:ce:83:f0:8d:71:32:a4:51:c1:25:76:
         82:f0:f9:cd:bb:51:4d:3e:1f:e9:c6:62:9c:d7:22:0d:90:7f:
         bf:9d:58:81:a7:7d:63:86:dd:12:72:d5:ac:b9:4c:8c:13:c5:
         0d:f7:bd:2c:b2:28:cf:3f:84:44:3a:93:1b:18:51:58:6a:dc:
         f2:0b:78:c2:c2:3a:5f:22:d4:ad:83:91:d0:60:75:11:6f:5a:
         08:69:44:b4:84:65:a4:b9:cc:58:7d:ea:cc:ea:ef:ec:40:c0:
         c3:d2:37:87:7d:46:9e:d7:31:81:9f:74:cc:00:55:e1:77:c7:
         22:c0:7e:7b:b9:f1:81:49:1d:d8:4e:3e:06:ae:a3:39:3a:c6:
         28:75:ec:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----