Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/5e6a8f-0b79-4894-b91c-eecee893c527/1/Gwu1GntTK-TUS6YErm4GPwY_N9Q.mft
File:                     Gwu1GntTK-TUS6YErm4GPwY_N9Q.mft (raw, json)
Hash identifier:          AqBNslZ78huuzLkeLMD91iqhrAsJcPeJZhRjg2WrWto=
Subject key identifier:   AC:17:61:50:F7:B3:06:AF:27:71:3D:52:79:29:D8:24:4E:18:49:AC
Authority key identifier: 1B:0B:B5:1A:7B:53:2B:E4:D4:4B:A6:04:AE:6E:06:3F:06:3F:37:D4
Certificate issuer:       /CN=1b0bb51a7b532be4d44ba604ae6e063f063f37d4
Certificate serial:       01962F072005DF14A09D2AE38AFB670C6555
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Gwu1GntTK-TUS6YErm4GPwY_N9Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d6/5e6a8f-0b79-4894-b91c-eecee893c527/1/Gwu1GntTK-TUS6YErm4GPwY_N9Q.mft
Manifest number:          14C3
Signing time:             Sun 13 Apr 2025 12:01:58 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:58 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:58 +0000
Files and hashes:         1: Gwu1GntTK-TUS6YErm4GPwY_N9Q.crl (hash: RSfPxsfbHluP/Vcy2keaSufRhs/Au5P7m8MsDRvZCgQ=)
                          2: aF_43DT8_FuRSeutyPS1ou0Qd_Y.roa (hash: RrbF82KQXt3VwJUd+EvcBbcTN6Aiglh/wvfzSoG8RZ0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:07:20:05:df:14:a0:9d:2a:e3:8a:fb:67:0c:65:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1b0bb51a7b532be4d44ba604ae6e063f063f37d4
        Validity
            Not Before: Apr 13 12:01:58 2025 GMT
            Not After : Apr 14 12:01:58 2025 GMT
        Subject: CN=ac176150f7b306af27713d527929d8244e1849ac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:70:d1:b9:f7:1d:99:85:08:68:8c:09:95:93:
                    ec:f7:21:07:6b:be:ce:5f:78:9d:9f:9b:c0:78:92:
                    d6:fc:a2:ce:6b:a4:40:87:12:40:d5:c8:bf:51:dd:
                    89:98:bb:23:4f:6c:aa:52:43:8f:52:de:b5:4d:15:
                    dd:83:47:3e:77:00:97:1d:c8:ec:b2:80:3e:47:8c:
                    51:4d:80:e0:d1:2b:03:fa:83:bf:10:e8:4e:89:52:
                    08:91:13:c0:56:ac:e1:dd:d9:be:92:66:01:c0:53:
                    c5:16:56:56:f3:02:a2:b9:f7:8a:a4:1b:e3:39:ab:
                    a9:3f:87:55:dd:a3:01:e7:4a:5f:e5:54:de:21:71:
                    c6:e2:af:cd:26:9d:9d:df:66:15:8b:b7:cb:05:29:
                    42:2a:73:df:e9:5b:85:74:42:bd:13:52:ec:84:7c:
                    c0:5f:65:e8:1e:31:54:f3:46:b1:7a:20:72:ea:3c:
                    e7:e0:ba:e6:8f:bd:3d:7a:9c:30:91:d2:8d:d2:5a:
                    5c:51:0b:29:fa:fd:47:7a:63:79:44:38:8e:07:9e:
                    f1:d3:6a:67:09:c1:76:cf:21:67:27:d6:87:05:c4:
                    73:74:47:b3:f0:d7:93:f7:da:23:03:52:b1:6d:83:
                    00:63:a1:02:47:72:87:12:fd:81:05:c1:2f:39:0a:
                    12:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:17:61:50:F7:B3:06:AF:27:71:3D:52:79:29:D8:24:4E:18:49:AC
            X509v3 Authority Key Identifier:
                keyid:1B:0B:B5:1A:7B:53:2B:E4:D4:4B:A6:04:AE:6E:06:3F:06:3F:37:D4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gwu1GntTK-TUS6YErm4GPwY_N9Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/5e6a8f-0b79-4894-b91c-eecee893c527/1/Gwu1GntTK-TUS6YErm4GPwY_N9Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/5e6a8f-0b79-4894-b91c-eecee893c527/1/Gwu1GntTK-TUS6YErm4GPwY_N9Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:41:5e:62:18:df:36:f8:9e:b3:23:59:5b:13:c0:89:21:ae:
         1d:3b:7a:08:b6:38:b3:91:a9:a9:c1:ee:db:7a:6b:01:44:e6:
         d5:a1:7b:76:5b:92:6d:e5:e2:ec:66:1b:b3:de:19:b9:0d:6f:
         d7:31:23:31:ad:b9:16:bb:98:aa:39:19:a3:9b:b0:0d:3f:08:
         14:14:db:15:dc:42:06:05:28:f5:0f:b0:b4:e4:d0:18:0b:67:
         b5:a7:c9:94:39:c6:f8:63:9f:ca:40:de:9b:bc:ce:3a:91:16:
         2d:cc:f0:c2:c4:b6:80:14:5e:00:18:01:80:31:00:53:ea:06:
         14:05:79:bb:da:3f:9a:b3:5a:27:be:4b:18:cd:f1:57:29:68:
         f0:27:43:28:f6:65:7d:9c:d2:e6:ca:fb:f8:7b:57:37:bd:66:
         9c:91:ae:b7:f6:dd:45:5f:1a:9e:ce:45:81:e5:ff:ad:81:bf:
         32:7e:57:78:5e:b7:ab:90:6f:86:66:35:b6:90:1b:6d:55:b4:
         0e:b2:9a:9b:67:3c:29:fd:5a:1e:a6:fb:88:0e:ec:bf:b5:3f:
         dc:69:fc:46:24:af:53:ff:41:52:0f:e2:33:aa:41:8f:bf:fc:
         55:f2:6b:7e:97:fe:74:3b:c8:0e:ae:d2:b7:11:b9:00:d1:28:
         7e:ab:64:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----