Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/d25a72-bbe3-4ab0-9564-fe45d5160c39/1/gaLQ3NUKaC-XXqPYw45eZ7sDIvk.mft
File:                     gaLQ3NUKaC-XXqPYw45eZ7sDIvk.mft (raw, json)
Hash identifier:          cHNb1XODkM2bhQnm24Yh34cmYI8hFIO2G1Kxtnes9a4=
Subject key identifier:   78:3F:C2:E9:D8:13:5C:50:A1:3B:86:06:12:EA:A7:E5:8E:51:8E:38
Authority key identifier: 81:A2:D0:DC:D5:0A:68:2F:97:5E:A3:D8:C3:8E:5E:67:BB:03:22:F9
Certificate issuer:       /CN=81a2d0dcd50a682f975ea3d8c38e5e67bb0322f9
Certificate serial:       01962F070E412AC27E42135CB7D3F23BB4F0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gaLQ3NUKaC-XXqPYw45eZ7sDIvk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e2/d25a72-bbe3-4ab0-9564-fe45d5160c39/1/gaLQ3NUKaC-XXqPYw45eZ7sDIvk.mft
Manifest number:          13A8
Signing time:             Sun 13 Apr 2025 12:01:53 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:53 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:53 +0000
Files and hashes:         1: NNwMFEhxMbRDsRS0Ujs5UcWLoXw.roa (hash: B/gMLVmikacsqiNWPQ61KMiQs160DvW9fNOZyUyFlmw=)
                          2: gaLQ3NUKaC-XXqPYw45eZ7sDIvk.crl (hash: ymXCfWGf54vV4rQGIFtbY10uE1THWmzXpJcmaNibjxY=)
                          3: iu1uLDkjA2lC4iCmh3mgoTg-ECs.roa (hash: J1M6seCPFdUQmcH1n+B1kmRcatuaeOrkFhV5roQrzQ8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:07:0e:41:2a:c2:7e:42:13:5c:b7:d3:f2:3b:b4:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=81a2d0dcd50a682f975ea3d8c38e5e67bb0322f9
        Validity
            Not Before: Apr 13 12:01:53 2025 GMT
            Not After : Apr 14 12:01:53 2025 GMT
        Subject: CN=783fc2e9d8135c50a13b860612eaa7e58e518e38
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:38:2c:af:b7:b9:21:27:82:48:09:93:53:5c:
                    38:46:ac:36:f1:61:a0:cf:ed:31:3d:b7:7f:7e:4b:
                    14:41:ca:10:c3:1e:f4:87:d0:74:04:0e:f2:46:d1:
                    b5:ea:89:38:e4:64:1a:c7:33:66:8b:2c:de:3f:a2:
                    aa:2e:7d:d4:ec:a9:99:6c:09:d8:06:88:3d:04:ff:
                    c7:26:0e:cd:84:ae:0d:35:48:f0:1e:f9:07:0d:ec:
                    d5:3e:9c:86:98:87:f4:7d:0f:25:ce:95:b8:dc:a8:
                    1c:87:34:c8:82:cb:e9:d7:a3:7d:44:e0:7b:8b:3a:
                    1d:51:09:31:36:fe:0d:de:ee:b3:29:85:e2:87:ff:
                    57:78:9c:eb:b6:36:ed:72:6d:e9:cb:55:4e:39:86:
                    55:a1:27:e5:c1:2e:fd:fb:16:a1:b5:34:4f:df:b0:
                    80:4f:c8:83:2c:36:f0:f0:58:de:2d:71:27:43:26:
                    22:1b:61:48:8c:e7:e9:d4:d6:f3:31:1e:9d:55:41:
                    d3:be:b6:37:1f:a8:57:93:06:d7:12:e4:d6:79:5d:
                    03:4f:8e:e7:44:de:14:ab:9c:80:39:a2:b0:e4:c4:
                    76:9f:03:84:8d:1f:00:78:af:9a:92:87:c2:84:b7:
                    a3:a1:99:82:10:2a:98:95:25:1d:c1:49:c3:41:61:
                    76:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:3F:C2:E9:D8:13:5C:50:A1:3B:86:06:12:EA:A7:E5:8E:51:8E:38
            X509v3 Authority Key Identifier:
                keyid:81:A2:D0:DC:D5:0A:68:2F:97:5E:A3:D8:C3:8E:5E:67:BB:03:22:F9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gaLQ3NUKaC-XXqPYw45eZ7sDIvk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/d25a72-bbe3-4ab0-9564-fe45d5160c39/1/gaLQ3NUKaC-XXqPYw45eZ7sDIvk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/d25a72-bbe3-4ab0-9564-fe45d5160c39/1/gaLQ3NUKaC-XXqPYw45eZ7sDIvk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:fa:a2:94:fb:90:26:3e:e7:44:0f:ca:a7:b6:e8:37:5b:c4:
         f6:11:45:ff:78:29:cf:09:6a:25:4f:db:02:cb:9b:72:de:f0:
         45:2d:09:7c:fe:7f:ec:03:4a:68:33:38:22:6f:7b:ab:73:76:
         d3:f1:bb:6a:8f:3a:66:1e:18:ef:cf:71:64:c4:ac:c0:18:97:
         4c:51:8e:ab:89:c9:68:c3:7c:aa:ce:6c:ce:9f:0e:5c:56:e1:
         c8:2f:ef:9d:34:6b:2a:e9:6f:b5:1e:d1:04:75:49:82:a9:fc:
         4f:45:14:c0:ee:7d:7b:69:ad:bb:55:80:2f:9a:42:22:0a:5c:
         d3:11:59:d9:ab:7f:52:84:e9:d0:d0:72:32:67:2b:2e:5c:75:
         46:cd:75:83:de:b6:f9:34:b2:f0:29:a5:90:15:fe:14:5f:60:
         70:27:5e:28:17:d5:5c:55:b0:eb:0b:11:64:d6:b6:c3:ad:36:
         36:fb:fd:d8:db:96:bf:82:e7:2c:d2:92:ba:37:6b:b3:f6:9e:
         2a:d8:a2:de:59:c1:09:09:70:ab:bc:e6:26:2e:7b:fa:7c:07:
         88:26:10:4e:ee:c7:31:9f:1c:cb:6f:0f:cb:ee:46:10:97:4a:
         28:bc:a1:c3:28:d4:c8:bd:c6:83:76:4f:64:d4:80:ab:8c:84:
         34:8a:d4:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----