Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/6007ff-5f0c-4a73-a3f2-ccc5814094ad/1/GQ1bBUO9hajs-WmruFA8nerQ35g.mft
File:                     GQ1bBUO9hajs-WmruFA8nerQ35g.mft (raw, json)
Hash identifier:          KLcz1HjgAfI3hYuHlvkqifQaN/njSMU/FRVOisIWsUk=
Subject key identifier:   83:D0:6F:FF:20:D8:56:80:93:19:21:2E:D1:1C:9E:05:49:AD:5E:C2
Authority key identifier: 19:0D:5B:05:43:BD:85:A8:EC:F9:69:AB:B8:50:3C:9D:EA:D0:DF:98
Certificate issuer:       /CN=190d5b0543bd85a8ecf969abb8503c9dead0df98
Certificate serial:       01962E9934A838A3500A57712354D5991FD0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GQ1bBUO9hajs-WmruFA8nerQ35g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e4/6007ff-5f0c-4a73-a3f2-ccc5814094ad/1/GQ1bBUO9hajs-WmruFA8nerQ35g.mft
Manifest number:          0BCB
Signing time:             Sun 13 Apr 2025 10:01:54 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:54 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:54 +0000
Files and hashes:         1: DRozhMtaZ2qQi39QkdO5G1jc7k0.roa (hash: PuORiX2E31wDt+P9sStv2sIXh7s2xmzWRFumBtIrOBQ=)
                          2: GQ1bBUO9hajs-WmruFA8nerQ35g.crl (hash: D3AcblIyAf3jbt03G1Z/KC1Ga4w4j56RTwyAtN3ou5E=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:34:a8:38:a3:50:0a:57:71:23:54:d5:99:1f:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=190d5b0543bd85a8ecf969abb8503c9dead0df98
        Validity
            Not Before: Apr 13 10:01:54 2025 GMT
            Not After : Apr 14 10:01:54 2025 GMT
        Subject: CN=83d06fff20d856809319212ed11c9e0549ad5ec2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:19:b3:fc:d7:31:23:1c:29:45:f1:ed:2a:ab:
                    2e:fd:78:a2:ca:ef:ce:11:24:24:07:9e:e5:8a:c0:
                    a5:c8:08:14:07:c6:3c:ce:05:d7:d0:80:b4:9d:f9:
                    38:a3:b7:e7:54:4b:8b:8d:a3:d0:46:ab:7c:5b:e4:
                    95:a5:f4:45:33:41:59:0a:f6:ee:b6:b8:80:bb:55:
                    d4:86:08:61:b7:9c:cc:82:ac:ad:23:a9:9c:fa:78:
                    71:fa:78:45:14:34:5d:73:bc:68:9f:ad:6b:8e:a0:
                    5e:c6:83:c8:27:fb:86:8d:a7:3a:83:83:4a:3e:bc:
                    e7:e4:5c:32:e7:05:09:d7:a7:39:a1:83:5e:6a:55:
                    f9:0f:b2:c8:50:28:17:71:2a:3c:ec:18:cc:e1:73:
                    cc:78:7d:94:ba:f8:d1:dc:ca:69:27:b5:81:76:67:
                    5e:16:47:2d:81:87:bc:a5:aa:71:12:b0:3a:ae:db:
                    2d:8c:2c:98:c2:33:39:ec:17:0c:91:fd:4d:ea:51:
                    5a:6c:61:55:5f:a2:99:b5:59:1c:0b:95:37:6b:aa:
                    f9:f5:8c:dd:b9:ed:d4:47:db:d7:a6:86:f7:17:74:
                    9e:7a:da:71:28:f7:af:a0:4c:2d:52:9a:95:68:2c:
                    4d:2c:27:5e:0f:27:6c:10:f0:3b:74:bc:d6:19:b9:
                    d4:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:D0:6F:FF:20:D8:56:80:93:19:21:2E:D1:1C:9E:05:49:AD:5E:C2
            X509v3 Authority Key Identifier:
                keyid:19:0D:5B:05:43:BD:85:A8:EC:F9:69:AB:B8:50:3C:9D:EA:D0:DF:98

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GQ1bBUO9hajs-WmruFA8nerQ35g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/6007ff-5f0c-4a73-a3f2-ccc5814094ad/1/GQ1bBUO9hajs-WmruFA8nerQ35g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/6007ff-5f0c-4a73-a3f2-ccc5814094ad/1/GQ1bBUO9hajs-WmruFA8nerQ35g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:6f:4e:f4:42:18:18:68:71:a4:8b:e6:40:e6:07:ee:0f:9f:
         de:92:42:f9:e2:8d:6b:3a:4a:d4:a4:4e:d0:0a:3b:5b:6a:a9:
         82:70:f4:f1:b4:04:02:7a:80:39:4e:a9:e5:6b:1e:86:e5:a3:
         38:2c:94:1f:49:29:ba:c7:1a:9b:0f:53:73:5b:2a:e3:69:3a:
         4a:0b:f6:f8:cf:73:d2:c5:d6:ac:88:21:5a:0e:28:25:9c:3e:
         8c:a5:8d:00:35:a8:52:b1:8a:d3:fe:cb:cf:8d:2f:c3:76:28:
         02:c6:2f:40:a7:37:fa:d3:38:f4:45:58:0a:86:61:f0:01:43:
         ea:6b:be:2b:b6:38:5f:8f:68:c4:24:43:45:d3:78:05:6b:e0:
         b9:47:73:17:56:43:03:91:76:1c:90:e2:22:34:85:4d:91:4d:
         9e:95:c8:6c:c0:be:61:70:3c:53:b5:74:4e:43:f8:b0:81:e5:
         3f:0a:8e:d8:09:47:32:03:fb:59:0d:8a:64:7b:50:1c:64:ea:
         56:82:a1:75:67:d6:1c:cc:b3:61:9a:40:6a:08:99:00:d4:30:
         ac:2b:0a:74:21:93:8f:f7:28:1c:cb:61:22:b9:bd:16:1c:95:
         38:34:20:d2:d2:e8:7f:f7:c0:be:72:d9:8e:16:9f:99:49:96:
         ce:2c:49:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----