Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/721745-cfe5-4161-b405-069996c630f0/1/GKuuDh8hajIZc8zJxlN-xhl9qxg.mft
File:                     GKuuDh8hajIZc8zJxlN-xhl9qxg.mft (raw, json)
Hash identifier:          Zl0SkdnkYRIqb4XH060bS/ZmxPiIeam9PLKVucxANVc=
Subject key identifier:   28:43:05:EC:03:1F:72:90:69:AD:35:85:D1:EB:BF:AA:13:6D:AA:F2
Authority key identifier: 18:AB:AE:0E:1F:21:6A:32:19:73:CC:C9:C6:53:7E:C6:19:7D:AB:18
Certificate issuer:       /CN=18abae0e1f216a321973ccc9c6537ec6197dab18
Certificate serial:       01962E992671E4FC407DDA7CEF911C078901
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GKuuDh8hajIZc8zJxlN-xhl9qxg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d7/721745-cfe5-4161-b405-069996c630f0/1/GKuuDh8hajIZc8zJxlN-xhl9qxg.mft
Manifest number:          0C9A
Signing time:             Sun 13 Apr 2025 10:01:50 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:50 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:50 +0000
Files and hashes:         1: GKuuDh8hajIZc8zJxlN-xhl9qxg.crl (hash: iUMRD/GXsIeLRs+52onMB+BwYfFyneFTsFZxW16OVJQ=)
                          2: UkbqnKEVQc19I4xiaGnllMIeIJM.roa (hash: +7BrsyTUNmPDpU5nT2WX5eEhmb2ft1eu3yDXg9IZfaQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:26:71:e4:fc:40:7d:da:7c:ef:91:1c:07:89:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18abae0e1f216a321973ccc9c6537ec6197dab18
        Validity
            Not Before: Apr 13 10:01:50 2025 GMT
            Not After : Apr 14 10:01:50 2025 GMT
        Subject: CN=284305ec031f729069ad3585d1ebbfaa136daaf2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:44:d2:b2:29:ab:b3:0d:e6:27:38:32:6d:3b:
                    e3:b0:ad:ca:81:61:57:60:2c:c5:1b:d5:f7:68:66:
                    1c:91:91:a2:e6:a0:6d:64:75:8c:40:c7:4c:9e:56:
                    b1:0e:93:ab:08:07:0e:32:cf:c4:4e:0f:14:da:65:
                    df:35:7f:5e:13:db:aa:a8:a3:e1:e2:5c:b5:3f:63:
                    f2:09:e4:4f:62:37:e1:12:7e:b3:8b:4a:7d:9c:4d:
                    89:c1:b4:2d:4f:e8:55:17:b4:51:d1:0f:b3:ed:1d:
                    f4:19:a1:61:53:4d:ce:1f:f3:09:58:b9:ab:9a:5f:
                    bd:9b:b2:08:b0:e9:bf:4b:e2:ff:82:db:70:46:a8:
                    c0:9b:16:24:57:7f:c6:50:8e:59:0b:ec:41:37:58:
                    32:d2:a5:0f:4e:a2:f8:d1:b4:07:3d:6e:ee:36:f3:
                    11:ef:1a:69:20:6e:5e:69:71:09:78:be:3f:2b:27:
                    b3:83:61:c2:36:58:7d:2f:50:a4:92:d3:ef:d7:19:
                    2b:0b:ca:94:61:f0:20:1f:c0:02:0f:fd:d0:d5:14:
                    21:20:49:13:ad:6f:f8:43:9d:4d:cf:0c:3e:1c:9a:
                    07:3d:54:a6:8c:0d:b3:84:70:2d:ce:66:45:6b:d8:
                    f2:93:72:79:6b:22:14:75:07:84:9e:77:0d:6a:65:
                    6e:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:43:05:EC:03:1F:72:90:69:AD:35:85:D1:EB:BF:AA:13:6D:AA:F2
            X509v3 Authority Key Identifier:
                keyid:18:AB:AE:0E:1F:21:6A:32:19:73:CC:C9:C6:53:7E:C6:19:7D:AB:18

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GKuuDh8hajIZc8zJxlN-xhl9qxg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/721745-cfe5-4161-b405-069996c630f0/1/GKuuDh8hajIZc8zJxlN-xhl9qxg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/721745-cfe5-4161-b405-069996c630f0/1/GKuuDh8hajIZc8zJxlN-xhl9qxg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:e0:b1:d7:e0:fb:b7:7a:55:ad:0d:63:98:0f:3a:06:6c:5d:
         34:05:16:07:b1:ba:ad:45:af:13:9e:a8:05:87:f1:88:4f:ea:
         92:13:2f:3e:e4:fa:b5:7d:a7:20:cd:77:c7:43:69:1f:ff:60:
         93:b5:27:1d:6f:74:27:16:8e:1a:ff:c9:e5:78:be:ee:92:c3:
         86:90:5b:ec:fc:d3:c0:89:fe:4c:5d:9a:88:64:e4:03:12:dc:
         a8:54:06:db:96:78:a9:e5:17:3d:e4:d2:2b:fe:38:5a:fb:f1:
         e0:e1:f0:11:92:a1:f7:35:f3:32:9c:92:d7:8f:b7:2a:23:35:
         17:31:93:92:5b:79:f5:61:58:14:7f:79:6e:98:c6:0f:d3:ff:
         14:a6:21:d2:b2:26:71:a4:e2:45:98:0c:30:0a:c6:d9:5b:18:
         68:99:e7:6c:11:fb:ae:77:a1:26:5d:59:6d:a0:b4:8a:cf:a2:
         df:64:8a:02:e9:f8:8d:0a:88:7c:40:8c:2e:f1:6b:31:6d:7e:
         45:cf:2c:82:c8:b0:9f:4b:cf:77:f9:73:e5:c9:cf:1d:8f:6a:
         a5:e0:f0:d7:d4:d9:d1:55:7c:4f:3b:1a:a7:b3:6d:be:dd:f6:
         1f:dd:14:bb:c8:6c:4a:12:ed:20:06:71:75:35:1e:ac:25:40:
         3f:55:a6:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----