Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/e7b1d7-3d7a-46ab-810f-eddf23c1ba6d/1/GMrrFKAe4W2DZWXhT6U7SrPDzSY.mft
File:                     GMrrFKAe4W2DZWXhT6U7SrPDzSY.mft (raw, json)
Hash identifier:          tU+kPC0WyuV/zZtyqIu8ZjDfHjoxv7BEdTqQ0Ta07+Q=
Subject key identifier:   DB:7F:7B:63:53:C7:A7:10:77:D0:D6:C4:48:D5:2B:FE:53:34:A7:9D
Authority key identifier: 18:CA:EB:14:A0:1E:E1:6D:83:65:65:E1:4F:A5:3B:4A:B3:C3:CD:26
Certificate issuer:       /CN=18caeb14a01ee16d836565e14fa53b4ab3c3cd26
Certificate serial:       01962F3D831CA6C1E42727215528C2CDABBA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GMrrFKAe4W2DZWXhT6U7SrPDzSY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d5/e7b1d7-3d7a-46ab-810f-eddf23c1ba6d/1/GMrrFKAe4W2DZWXhT6U7SrPDzSY.mft
Manifest number:          14ED
Signing time:             Sun 13 Apr 2025 13:01:22 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:22 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:22 +0000
Files and hashes:         1: Co6M_nxOxRb4ejhwPMZFPOzlY1U.roa (hash: sSWEBAjRZaqtAdwjOfykVqgf7b7OWWPQ8cRcY8XqZmU=)
                          2: GMrrFKAe4W2DZWXhT6U7SrPDzSY.crl (hash: bgCOospVlz3ojFLfDo11h+O67+tRm6eM0ldOgwDHcDE=)
                          3: LASNDVJFR7nISIIuLJuen3qOehA.roa (hash: zvljnKWMuxdFNbiIQd7aWSR9xyeCp6tRJSsTE0UC5w8=)
                          4: y0q_mnHeqqODRkh3mN1XsHcA07o.roa (hash: vPYM1qZGBQlB55R1ITXDPJhnP7mpA1SIlCNpOTcVP6w=)
                          5: zO1aOnWzpH8Vmp45J1jZtXxaKKw.roa (hash: N6qZrGzU3tG6EdhOgnUHNSlOSI1pX79eNnDUPpj91So=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:83:1c:a6:c1:e4:27:27:21:55:28:c2:cd:ab:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18caeb14a01ee16d836565e14fa53b4ab3c3cd26
        Validity
            Not Before: Apr 13 13:01:22 2025 GMT
            Not After : Apr 14 13:01:22 2025 GMT
        Subject: CN=db7f7b6353c7a71077d0d6c448d52bfe5334a79d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:ff:6d:40:d7:95:03:fd:f9:e7:1a:57:cc:6d:
                    22:80:bb:08:30:cd:26:44:eb:2c:97:16:a3:90:3c:
                    c5:14:05:c1:89:75:3d:c2:75:b7:67:dc:ea:87:b9:
                    e5:04:01:bd:d1:2f:56:db:11:e2:c6:ea:78:8c:9b:
                    74:a1:4c:c0:14:ea:60:f2:cb:b8:18:30:45:6a:f6:
                    60:79:59:84:1b:55:03:e1:84:6a:f1:a2:ab:3b:0c:
                    58:9b:23:de:ca:67:d4:a6:ed:17:bb:e9:b2:40:80:
                    9f:8a:72:25:d7:45:e4:f0:4e:e5:c1:34:e5:95:9b:
                    e7:d6:31:0d:c2:be:c4:1e:50:87:3b:88:cd:0f:68:
                    3b:e3:fd:07:66:57:f4:51:7f:78:8c:52:71:c6:eb:
                    5a:c0:d0:15:17:02:43:c8:6a:62:0c:15:e8:d2:24:
                    51:28:01:02:dd:2e:ac:06:dd:44:f2:7a:ff:5b:32:
                    85:f1:11:37:e4:c3:86:51:8b:f8:73:51:25:da:3e:
                    24:e5:0a:cc:5b:fe:4e:f9:c3:00:ee:4e:58:26:f5:
                    da:a4:6a:45:08:5f:4e:59:6b:9e:67:19:b6:90:af:
                    c0:27:bd:51:1d:f6:10:17:72:05:45:0a:c4:88:f2:
                    4e:47:59:33:5e:06:5d:2a:3e:26:85:ba:06:9e:22:
                    2e:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:7F:7B:63:53:C7:A7:10:77:D0:D6:C4:48:D5:2B:FE:53:34:A7:9D
            X509v3 Authority Key Identifier:
                keyid:18:CA:EB:14:A0:1E:E1:6D:83:65:65:E1:4F:A5:3B:4A:B3:C3:CD:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GMrrFKAe4W2DZWXhT6U7SrPDzSY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/e7b1d7-3d7a-46ab-810f-eddf23c1ba6d/1/GMrrFKAe4W2DZWXhT6U7SrPDzSY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/e7b1d7-3d7a-46ab-810f-eddf23c1ba6d/1/GMrrFKAe4W2DZWXhT6U7SrPDzSY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d4:40:bf:56:7d:df:85:16:76:da:c7:cc:af:a0:19:bb:6e:3a:
         80:e8:66:6f:b6:5d:25:f5:fa:b1:63:8a:80:ec:91:e2:19:f4:
         43:0b:d0:9d:a3:7e:fb:c1:bd:21:62:48:01:61:dc:b6:7f:00:
         18:b9:14:b3:49:d3:4c:3a:54:75:4c:60:58:41:73:e9:dd:8b:
         f6:b1:a5:ef:1f:e9:46:c6:52:0f:de:d1:b7:b1:0a:c7:61:1b:
         4c:37:f7:04:1f:7f:50:86:ac:18:18:76:25:ef:4e:e8:8f:7d:
         73:23:34:40:00:6a:b6:d5:63:cc:7b:45:dc:9e:ba:bf:8e:48:
         e6:98:cc:69:54:4a:af:c8:58:73:19:1b:0a:e1:22:6c:48:77:
         6a:5e:a7:a1:f3:a4:9d:31:01:3e:a0:c8:6a:33:2e:d8:4b:bc:
         cb:b6:ad:66:72:7e:1a:db:66:76:a2:64:ca:80:01:78:4d:02:
         a5:19:f0:9e:d0:b2:c2:ca:8c:1d:87:1e:c4:74:43:48:c5:d8:
         0f:0f:e2:9b:1f:f8:6b:e2:22:cd:5a:98:d0:4a:0b:80:f0:6f:
         b9:8c:52:11:f6:c9:aa:22:96:c5:70:dd:55:ea:53:39:b0:8d:
         09:7e:a5:48:bd:aa:dd:c1:d1:d0:ab:69:05:35:45:4e:e6:fd:
         ac:5b:f8:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----