Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/d048f6-341c-4c64-b3d9-15d5deb228dd/1/GQTOKOrmgsl6zS2GL-4ol8Owlv0.mft
File:                     GQTOKOrmgsl6zS2GL-4ol8Owlv0.mft (raw, json)
Hash identifier:          I5c90lXqr5rE4B6fS3TNpY1bPHxhQHq2pY0UkswP0nM=
Subject key identifier:   56:E7:EE:89:04:14:43:6D:5F:D3:BD:83:4D:E9:92:51:3D:4C:1E:F5
Authority key identifier: 19:04:CE:28:EA:E6:82:C9:7A:CD:2D:86:2F:EE:28:97:C3:B0:96:FD
Certificate issuer:       /CN=1904ce28eae682c97acd2d862fee2897c3b096fd
Certificate serial:       01962F7499DD86600244F82AA2A4FF93DF47
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GQTOKOrmgsl6zS2GL-4ol8Owlv0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e6/d048f6-341c-4c64-b3d9-15d5deb228dd/1/GQTOKOrmgsl6zS2GL-4ol8Owlv0.mft
Manifest number:          14F0
Signing time:             Sun 13 Apr 2025 14:01:32 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:32 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:32 +0000
Files and hashes:         1: 1iYEgcqm-mVKBLd2WjzT59pt1Xw.roa (hash: ewHcbw+PNeGShWbnRhXrGjXtzrFjBvJAIqeP6DT6ZjQ=)
                          2: GQTOKOrmgsl6zS2GL-4ol8Owlv0.crl (hash: uho0Rllqpwpfw4/K/O+x44KAJ82ZNtaC3XOL2XcJIiQ=)
                          3: _YBrb9GHmCpqMjy8GFwAvwaPx90.roa (hash: XWiWSnDHqy5A+xwKGiqSBQrfe6N7eyh2EySgoK4VNNw=)
                          4: lCgKihl6lv9I1HmInNqD60nii-E.roa (hash: +eRiAGt7XlmYsCebRhtIL5+eM1SWrg49PToO3o+8iRc=)
                          5: mmY1ARivIWLIbuStJrmVTjbcqd0.roa (hash: pdFIZbB/0pJ15uLsSovmly6F7hKCHQG6LxPg19m7f9U=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:99:dd:86:60:02:44:f8:2a:a2:a4:ff:93:df:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1904ce28eae682c97acd2d862fee2897c3b096fd
        Validity
            Not Before: Apr 13 14:01:32 2025 GMT
            Not After : Apr 14 14:01:32 2025 GMT
        Subject: CN=56e7ee890414436d5fd3bd834de992513d4c1ef5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:cb:b6:88:91:22:f6:6f:1e:02:75:a2:d4:e2:
                    a7:05:c9:49:8d:c9:3c:b9:54:46:f4:38:b9:94:44:
                    52:81:56:56:dc:56:84:19:f3:70:d4:5f:f8:91:59:
                    2a:5e:61:90:76:75:89:f6:36:41:53:df:b6:60:9b:
                    85:0f:b4:73:9f:72:b6:cd:c8:28:be:4f:fc:1b:6e:
                    85:47:42:37:aa:cc:99:76:2f:a5:42:67:9c:1d:af:
                    a7:3a:c4:14:ee:93:bf:0e:4d:03:5c:17:10:cc:d2:
                    5f:62:c4:04:f8:f1:b2:81:2f:3d:d1:42:9b:7a:de:
                    1d:dd:27:b2:d6:75:c0:c2:15:2c:c3:b5:b3:a7:88:
                    f3:29:59:49:6f:e9:d1:3f:bc:f8:3e:70:2c:b0:2f:
                    9c:f7:de:44:42:63:d2:ed:02:95:45:ad:e5:85:78:
                    37:f7:dd:ad:bd:7f:a8:1c:15:47:f5:52:82:c7:6b:
                    fb:75:63:ea:18:46:18:f3:42:31:da:d4:d1:2b:2a:
                    89:2a:d8:19:4f:fb:d0:6d:1a:84:4b:84:fa:af:a7:
                    a4:dc:ea:34:66:80:06:15:14:ff:84:b2:9b:b8:06:
                    24:ec:81:b4:c2:fe:3c:b1:3f:69:8d:c1:ea:ca:8e:
                    34:46:4d:0a:db:31:79:fe:59:68:8a:9e:cc:d6:a3:
                    02:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:E7:EE:89:04:14:43:6D:5F:D3:BD:83:4D:E9:92:51:3D:4C:1E:F5
            X509v3 Authority Key Identifier:
                keyid:19:04:CE:28:EA:E6:82:C9:7A:CD:2D:86:2F:EE:28:97:C3:B0:96:FD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GQTOKOrmgsl6zS2GL-4ol8Owlv0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/d048f6-341c-4c64-b3d9-15d5deb228dd/1/GQTOKOrmgsl6zS2GL-4ol8Owlv0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/d048f6-341c-4c64-b3d9-15d5deb228dd/1/GQTOKOrmgsl6zS2GL-4ol8Owlv0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:dc:cd:81:38:2e:bc:03:c3:03:cf:75:df:c8:db:0e:8b:15:
         9d:52:41:a5:b3:9f:c1:23:aa:ca:19:90:19:a8:d3:f3:86:41:
         8f:d1:14:f5:fa:17:36:7f:b1:bf:de:cf:2f:46:f3:32:9f:dc:
         c6:e7:38:14:5e:19:28:d5:b9:ce:1d:91:2c:32:7e:e7:2b:60:
         6f:78:f1:2e:2b:3a:6f:c5:1f:6d:6d:90:ee:14:82:1e:24:f4:
         86:49:04:3e:aa:8e:bd:f2:21:c2:59:48:5b:cf:9a:ee:fd:05:
         b3:b5:00:30:4d:24:65:a6:0c:e1:2e:ed:8d:43:9f:29:7c:e1:
         61:5f:34:3e:ae:28:cc:5c:ca:46:2d:54:7e:db:93:75:e3:37:
         a1:c2:02:1f:03:f9:34:ba:53:54:1b:13:71:4f:03:da:b5:57:
         35:1a:b5:21:75:e8:7e:fe:86:49:d9:8d:7e:34:fe:4f:57:b5:
         1e:b0:f9:29:89:0e:5b:93:38:c6:59:3e:11:1a:e6:4c:86:a2:
         d5:2c:a1:8c:be:94:92:c0:22:61:76:5b:62:7a:85:d1:3a:23:
         a0:ca:1a:3e:80:71:9e:89:44:12:3b:fe:1c:ff:db:5b:6f:e1:
         70:c3:b5:19:e5:07:19:f6:4b:93:35:f2:de:2d:02:b5:a7:53:
         7d:32:c9:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----