Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/ab9012-bfae-4729-b993-09733cb0269e/1/GrcONIjcgx1Fp1dE4vi7omf9MdY.mft
File:                     GrcONIjcgx1Fp1dE4vi7omf9MdY.mft (raw, json)
Hash identifier:          bLdnkft6y2SoyZSHVi5/HGsOPurUQk8BSCsbV/ovXnw=
Subject key identifier:   B0:49:5B:81:3E:8C:4D:5D:D9:A0:C2:FB:A5:39:91:54:BE:EC:E4:D3
Authority key identifier: 1A:B7:0E:34:88:DC:83:1D:45:A7:57:44:E2:F8:BB:A2:67:FD:31:D6
Certificate issuer:       /CN=1ab70e3488dc831d45a75744e2f8bba267fd31d6
Certificate serial:       01962F747989BDA2A6F26EE41C2FA6874518
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GrcONIjcgx1Fp1dE4vi7omf9MdY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e1/ab9012-bfae-4729-b993-09733cb0269e/1/GrcONIjcgx1Fp1dE4vi7omf9MdY.mft
Manifest number:          14EA
Signing time:             Sun 13 Apr 2025 14:01:24 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:24 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:24 +0000
Files and hashes:         1: GrcONIjcgx1Fp1dE4vi7omf9MdY.crl (hash: YsCPj/SW6gDwoRBKh0yH4RYBT1fsSTDXxTrAvGDg/U0=)
                          2: hRViLioOhxazkHfvXEUqCQoWtcM.roa (hash: UwsVl6zDnCr1HkAOnBnopdZVrNViwXPi8g+Nx+h0Crk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:79:89:bd:a2:a6:f2:6e:e4:1c:2f:a6:87:45:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1ab70e3488dc831d45a75744e2f8bba267fd31d6
        Validity
            Not Before: Apr 13 14:01:24 2025 GMT
            Not After : Apr 14 14:01:24 2025 GMT
        Subject: CN=b0495b813e8c4d5dd9a0c2fba5399154beece4d3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:ab:06:1b:76:61:7f:dd:76:2b:63:f9:1b:45:
                    da:cf:3e:44:4a:2d:5f:98:57:76:a5:9e:90:2c:ef:
                    29:3b:54:04:1f:83:35:59:da:45:82:d4:b6:32:e6:
                    ad:87:b4:39:55:56:96:c4:84:f6:18:57:3f:32:18:
                    34:30:22:4b:8a:0f:73:86:93:b4:b3:fb:da:31:4e:
                    01:6a:2b:58:1f:05:87:cf:c9:a0:04:ac:d6:53:62:
                    39:ff:2f:b2:f8:1e:28:a3:8d:d4:11:94:d2:cd:fb:
                    e7:0f:9f:6c:4a:5b:96:19:b3:9d:9b:45:b3:45:ed:
                    1c:23:03:1c:47:0d:70:4d:73:04:20:58:a8:73:a3:
                    25:13:49:77:90:b3:ee:20:70:54:b0:d8:ee:4a:82:
                    79:a5:eb:ef:e9:16:f9:fd:5a:15:79:7c:91:44:d9:
                    a4:9f:e7:e7:e2:f5:a1:09:59:d1:e0:eb:49:09:bf:
                    3c:ad:54:d1:d8:fd:cd:bc:13:a4:37:4f:17:51:79:
                    e4:e4:de:ce:9a:87:09:9c:89:c0:63:ee:c1:ef:78:
                    9e:0d:bf:fe:2e:63:c8:df:19:07:4e:6d:d6:c2:f9:
                    70:6c:71:17:96:41:ff:61:72:2e:bf:7b:b1:8f:3d:
                    c2:fa:11:20:bb:d0:46:3c:80:8c:a3:fb:8c:ed:bf:
                    94:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:49:5B:81:3E:8C:4D:5D:D9:A0:C2:FB:A5:39:91:54:BE:EC:E4:D3
            X509v3 Authority Key Identifier:
                keyid:1A:B7:0E:34:88:DC:83:1D:45:A7:57:44:E2:F8:BB:A2:67:FD:31:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GrcONIjcgx1Fp1dE4vi7omf9MdY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/ab9012-bfae-4729-b993-09733cb0269e/1/GrcONIjcgx1Fp1dE4vi7omf9MdY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/ab9012-bfae-4729-b993-09733cb0269e/1/GrcONIjcgx1Fp1dE4vi7omf9MdY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:ba:86:67:d4:ce:74:ed:28:8f:b6:db:c3:a3:e3:87:92:76:
         c9:d5:73:e0:4c:e3:05:42:b9:95:26:4e:b7:67:ab:7b:78:8f:
         a1:79:38:7b:75:df:f7:97:9d:38:41:9c:06:c8:21:c3:f4:0c:
         6b:04:c9:d9:7c:25:3f:2f:e7:42:e3:c5:61:5b:22:07:3e:e1:
         da:58:dd:17:a3:47:98:4f:6f:22:6a:01:a3:30:0c:18:ad:f9:
         cf:5e:87:19:0f:b9:2e:28:c1:86:92:e8:e8:4c:2a:50:91:ac:
         73:52:bc:b2:4a:cb:5a:b0:ec:88:99:d4:94:46:1a:2a:9f:1a:
         93:06:e1:f3:a0:b0:f2:b4:19:83:79:dc:b2:19:b0:ab:88:da:
         6c:60:fd:54:59:f2:0a:cc:33:8d:c8:65:3e:96:1a:9b:d6:20:
         3a:c8:34:47:95:12:89:4e:a3:6c:da:f6:6b:d7:23:77:c0:e1:
         00:7d:ff:40:57:9c:8f:0b:f9:a5:8d:d6:f2:87:5b:f6:dc:85:
         26:de:64:f2:d0:92:11:3e:e0:4f:30:f5:b7:28:f5:90:9c:9f:
         32:c5:76:f5:00:11:21:80:ba:35:e6:24:b7:69:36:c1:e2:98:
         26:8c:96:07:b1:ae:53:60:a5:00:f6:32:7d:a6:68:74:9a:94:
         5c:78:4a:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----