Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/ea0d4a-64a0-42ea-8bd7-9c22d04228b2/1/GMSNGzOr3q0gWwqSD7Mzgn4c4VA.mft
File:                     GMSNGzOr3q0gWwqSD7Mzgn4c4VA.mft (raw, json)
Hash identifier:          25Jo7M9zhWFuWL4ym6ekx+F1NXwFdwpeOi3BzJVdGj0=
Subject key identifier:   56:E8:E2:E1:43:27:2D:F1:C8:92:25:DB:7A:6B:20:34:77:B5:2A:A0
Authority key identifier: 18:C4:8D:1B:33:AB:DE:AD:20:5B:0A:92:0F:B3:33:82:7E:1C:E1:50
Certificate issuer:       /CN=18c48d1b33abdead205b0a920fb333827e1ce150
Certificate serial:       01948E87606A47B2B3D3F76E583777933802
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GMSNGzOr3q0gWwqSD7Mzgn4c4VA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dd/ea0d4a-64a0-42ea-8bd7-9c22d04228b2/1/GMSNGzOr3q0gWwqSD7Mzgn4c4VA.mft
Manifest number:          0334
Signing time:             Wed 22 Jan 2025 15:00:24 +0000
Manifest this update:     Wed 22 Jan 2025 15:00:24 +0000
Manifest next update:     Thu 23 Jan 2025 15:00:24 +0000
Files and hashes:         1: GMSNGzOr3q0gWwqSD7Mzgn4c4VA.crl (hash: KSrQqPtv1CvWLMltewuhdInUD/ao21sb1EEVnmE1G0E=)
                          2: s8sgu6g5oSfBqeBmO9x7BWFLEjU.roa (hash: j0S+9g3YLfQD7V09p2CyNtO5mZYs7O1WUXngjI8zqjE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:8e:87:60:6a:47:b2:b3:d3:f7:6e:58:37:77:93:38:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18c48d1b33abdead205b0a920fb333827e1ce150
        Validity
            Not Before: Jan 22 15:00:24 2025 GMT
            Not After : Jan 23 15:00:24 2025 GMT
        Subject: CN=56e8e2e143272df1c89225db7a6b203477b52aa0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:07:fc:d5:21:0d:af:48:b7:a4:01:81:12:22:
                    80:d2:04:8d:b4:6b:3b:1b:17:22:76:80:e4:b5:28:
                    66:7f:56:3c:50:d6:51:be:1f:97:fa:7b:1c:90:1b:
                    de:08:ae:ce:01:e4:a0:94:56:34:67:cb:97:52:a9:
                    ef:6a:20:5f:00:70:3c:f6:82:0a:4e:bf:a9:00:43:
                    a8:7b:9e:32:ad:b0:aa:97:08:ad:96:6e:06:1e:d5:
                    7d:59:84:8e:c1:b3:10:66:06:fd:8b:d4:c3:7b:a6:
                    a2:88:50:e4:ed:70:d1:cd:76:8c:82:99:fc:e7:c9:
                    db:f4:00:2f:c0:05:8d:ea:5f:4f:88:ee:0e:24:48:
                    aa:ae:c5:a7:ae:fd:d9:2c:b2:e3:49:d3:bd:bb:d4:
                    5d:a7:7d:31:06:81:5e:f4:e8:05:03:ba:b6:5f:c3:
                    b5:73:fd:8a:e1:94:cb:3b:9c:26:74:40:b5:70:7a:
                    b8:17:39:f7:b0:b3:8e:eb:37:64:e0:9a:1a:a4:d2:
                    54:2d:ea:f3:aa:3a:01:a5:95:43:96:3b:23:6c:72:
                    90:97:6f:29:87:6a:db:12:f5:d8:f7:02:3c:80:2f:
                    63:12:0a:63:96:7f:9a:af:cf:de:4c:27:13:7f:dc:
                    d2:35:db:3c:9f:83:a6:79:9f:8e:f8:b3:50:1c:1e:
                    da:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:E8:E2:E1:43:27:2D:F1:C8:92:25:DB:7A:6B:20:34:77:B5:2A:A0
            X509v3 Authority Key Identifier:
                keyid:18:C4:8D:1B:33:AB:DE:AD:20:5B:0A:92:0F:B3:33:82:7E:1C:E1:50

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GMSNGzOr3q0gWwqSD7Mzgn4c4VA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/ea0d4a-64a0-42ea-8bd7-9c22d04228b2/1/GMSNGzOr3q0gWwqSD7Mzgn4c4VA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/ea0d4a-64a0-42ea-8bd7-9c22d04228b2/1/GMSNGzOr3q0gWwqSD7Mzgn4c4VA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:40:ac:65:54:0f:08:fd:7d:13:4f:8c:73:0d:c6:e8:47:ac:
         ec:f9:66:25:e7:67:38:79:51:a3:b1:9c:ae:46:b0:52:e5:d0:
         85:55:b2:ba:14:f8:99:91:9f:ad:3f:48:9a:a3:53:f5:b5:da:
         53:7f:ad:15:8e:70:56:70:66:f9:f1:d4:2d:00:54:c6:65:76:
         f7:98:bc:4d:41:22:6a:1c:74:23:32:71:cd:b7:ac:b5:6c:67:
         91:e1:28:c6:c6:e9:7c:58:98:69:32:78:bc:ae:0d:2f:05:58:
         07:40:f1:49:37:ee:d6:81:56:e3:5b:80:07:18:36:a7:77:8d:
         2d:48:42:37:1f:ce:55:d6:cd:d7:b8:b2:5e:3d:90:d9:24:02:
         84:28:f2:41:bb:34:58:cb:58:d2:1e:2b:12:97:57:6b:7d:7d:
         98:6f:51:df:05:3b:13:19:2b:5b:2c:e5:b1:d4:1c:db:c0:ab:
         5e:c2:0d:57:3b:50:88:b0:e3:ca:a4:9e:94:da:98:c5:2b:5e:
         41:7a:a2:47:57:1b:25:29:93:a4:b6:2c:d4:e1:36:d3:1e:13:
         83:b1:91:04:3f:6a:14:45:cf:77:05:1d:72:e6:98:4a:f3:22:
         01:3a:1d:a8:86:78:9e:15:36:20:90:84:0d:c1:34:82:6d:77:
         13:81:14:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 23 19:16:46 2025 by rpki-client on console.sobornost.net