Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/329968-247c-4dea-99d2-60107b4ea4eb/1/GnmgrDMSwWU_MAsEUQ2b8snCpV8.mft
File:                     GnmgrDMSwWU_MAsEUQ2b8snCpV8.mft (raw, json)
Hash identifier:          1/aaim+c8hFwi6jGMK9bfPNAMJUlagKvi1F+Aq8gfXM=
Subject key identifier:   CF:7F:EA:9A:40:4C:DE:C7:07:C0:E9:8B:C4:BF:67:B1:19:5F:B9:E9
Authority key identifier: 1A:79:A0:AC:33:12:C1:65:3F:30:0B:04:51:0D:9B:F2:C9:C2:A5:5F
Certificate issuer:       /CN=1a79a0ac3312c1653f300b04510d9bf2c9c2a55f
Certificate serial:       01962F743AAB3B3EC0A21A4CF5F7061C430F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GnmgrDMSwWU_MAsEUQ2b8snCpV8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ea/329968-247c-4dea-99d2-60107b4ea4eb/1/GnmgrDMSwWU_MAsEUQ2b8snCpV8.mft
Manifest number:          147D
Signing time:             Sun 13 Apr 2025 14:01:08 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:08 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:08 +0000
Files and hashes:         1: GnmgrDMSwWU_MAsEUQ2b8snCpV8.crl (hash: 8/SRyrMMHdEhr5f8XIrXlxzxPwzxGotvgf7gcGKiPTk=)
                          2: TOBAVscU9VJTwLsUhLP0tAjAQi4.roa (hash: IKzhkAp3S93tfIC5ceCBznZ4xMgoDfcxElkoH29JQ+Y=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:3a:ab:3b:3e:c0:a2:1a:4c:f5:f7:06:1c:43:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1a79a0ac3312c1653f300b04510d9bf2c9c2a55f
        Validity
            Not Before: Apr 13 14:01:08 2025 GMT
            Not After : Apr 14 14:01:08 2025 GMT
        Subject: CN=cf7fea9a404cdec707c0e98bc4bf67b1195fb9e9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:b0:11:ee:90:ee:ab:0d:e9:b6:37:07:59:de:
                    f0:36:cc:2d:4c:e0:25:be:63:51:d4:49:40:2d:2c:
                    00:c3:cf:11:c1:ce:53:6c:3a:9f:5e:25:37:aa:60:
                    a9:dd:b3:6c:d3:8b:ad:bc:86:5a:8a:26:6d:54:e7:
                    78:38:ce:fa:fb:51:d2:34:16:fe:6d:c2:00:29:0c:
                    99:81:c3:b2:ce:88:50:fe:05:a7:12:e5:6b:11:fe:
                    0e:7a:28:bf:66:4b:12:27:33:ea:19:c7:a5:1e:1d:
                    8d:80:5c:f5:dc:69:b3:2f:6e:64:23:33:c3:88:e4:
                    38:6b:9c:e5:dd:8c:c3:2e:c2:a1:f9:27:11:33:2a:
                    42:61:8d:08:72:3b:32:91:60:b9:7a:bd:e1:d8:73:
                    e3:1b:e5:1a:a0:c8:64:ab:e0:54:aa:da:55:eb:f5:
                    e4:b0:5f:e9:8f:df:34:79:eb:44:99:84:b4:90:c5:
                    3c:65:ec:16:5d:dd:4d:7a:86:d3:e7:e1:b6:b8:fd:
                    6c:96:a6:33:ac:60:af:df:67:8f:49:20:12:88:62:
                    c7:d1:fb:df:3d:d8:5f:22:50:5c:94:77:bd:c9:7a:
                    91:bb:24:57:7d:b0:77:a8:f0:f3:03:67:0d:f2:2a:
                    81:64:29:08:53:e4:bb:b0:e6:98:6d:bc:0e:07:45:
                    86:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:7F:EA:9A:40:4C:DE:C7:07:C0:E9:8B:C4:BF:67:B1:19:5F:B9:E9
            X509v3 Authority Key Identifier:
                keyid:1A:79:A0:AC:33:12:C1:65:3F:30:0B:04:51:0D:9B:F2:C9:C2:A5:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GnmgrDMSwWU_MAsEUQ2b8snCpV8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/329968-247c-4dea-99d2-60107b4ea4eb/1/GnmgrDMSwWU_MAsEUQ2b8snCpV8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/329968-247c-4dea-99d2-60107b4ea4eb/1/GnmgrDMSwWU_MAsEUQ2b8snCpV8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:50:e1:db:17:b3:7f:a5:7b:51:d6:d1:b5:15:e4:97:41:1f:
         6c:36:c7:9b:28:0c:14:e8:99:eb:e6:1f:f6:16:12:53:1a:c0:
         74:d7:a5:30:87:d9:f6:6f:21:47:ba:0a:ef:86:05:03:5c:3d:
         7a:e8:00:2b:ab:8b:c1:71:7a:74:0e:b0:c1:31:23:1f:73:68:
         65:23:38:b1:23:6d:83:43:ce:a8:c6:ae:02:5e:53:c5:20:d7:
         14:0b:67:0d:b7:52:6e:ac:5c:17:9c:7d:24:48:85:fb:f3:b1:
         55:23:b7:a5:57:3b:5c:ea:a8:23:a1:e3:ed:c3:ba:b3:44:e7:
         10:78:fe:8e:77:a4:6a:e8:e2:86:53:66:14:3a:b4:22:de:c5:
         f4:72:92:fe:51:b4:64:4e:28:33:bb:88:02:7d:74:61:bd:25:
         a9:54:4b:2a:e5:b2:d0:f9:2e:eb:e0:d6:1d:ce:76:04:73:25:
         f4:80:86:5e:ff:2f:05:11:78:5a:63:95:64:8d:70:c9:0d:d7:
         45:25:68:5e:d6:b3:be:4f:d0:e1:3b:fe:2a:f1:70:3a:32:b1:
         d9:17:37:9b:e3:88:d0:1e:f0:02:43:87:ea:ab:58:97:95:29:
         60:f7:61:3d:fe:5a:82:fc:ab:3c:41:bf:27:a4:11:02:44:18:
         32:82:80:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----