Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/de84ce-d704-4766-a388-f8e5b2d8680c/1/gGFTFdx1DAPmD8NqdQxeP_ZurJQ.mft
File:                     gGFTFdx1DAPmD8NqdQxeP_ZurJQ.mft (raw, json)
Hash identifier:          5bxL19xSBrnApU+lywZt65ieLSRIQDZk4cSzAagvObI=
Subject key identifier:   6A:9C:B1:40:12:D3:E1:A8:0C:EB:B1:6A:DB:7B:F7:F1:45:1C:55:06
Authority key identifier: 80:61:53:15:DC:75:0C:03:E6:0F:C3:6A:75:0C:5E:3F:F6:6E:AC:94
Certificate issuer:       /CN=80615315dc750c03e60fc36a750c5e3ff66eac94
Certificate serial:       01962E986CF340F7CC236B63CF0610D173E4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gGFTFdx1DAPmD8NqdQxeP_ZurJQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/eb/de84ce-d704-4766-a388-f8e5b2d8680c/1/gGFTFdx1DAPmD8NqdQxeP_ZurJQ.mft
Manifest number:          14F0
Signing time:             Sun 13 Apr 2025 10:01:03 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:03 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:03 +0000
Files and hashes:         1: gGFTFdx1DAPmD8NqdQxeP_ZurJQ.crl (hash: jl5eiaQXM5WpwsZbmm8DC0V42UDG2Qk0Qw8PnE2bLEw=)
                          2: wnOuzl-IR7vlXr_TnkhmJHC0KcQ.roa (hash: A1fNf8pB5tQL1RUFisCU1kyqkrX8SMY0lp/3rcsduXg=)
                          3: zYcJKaM6JzCKVxiyX4VCo_gC9ZM.roa (hash: mZBVVY1LVqtMV+cGPcfvfBAAoOoYhoi230NuYqjuA4g=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:6c:f3:40:f7:cc:23:6b:63:cf:06:10:d1:73:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=80615315dc750c03e60fc36a750c5e3ff66eac94
        Validity
            Not Before: Apr 13 10:01:03 2025 GMT
            Not After : Apr 14 10:01:03 2025 GMT
        Subject: CN=6a9cb14012d3e1a80cebb16adb7bf7f1451c5506
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:da:d6:2a:d3:88:90:07:4e:40:32:f7:bb:64:
                    a9:d2:f0:8b:64:59:55:ec:02:2a:91:9a:8b:b8:4e:
                    ce:70:66:e5:7e:55:ed:82:c1:71:bd:7e:e6:38:1b:
                    61:21:42:e8:33:ee:c8:62:11:2b:79:8e:ac:e1:d9:
                    ae:6e:5e:cc:e4:45:a1:5a:b6:af:5d:15:20:ba:2f:
                    01:f4:3e:a0:0f:fa:6a:93:72:bc:3e:bc:87:b4:c9:
                    f1:12:f9:81:e4:aa:10:58:c0:5b:2a:87:2b:a9:ea:
                    e6:bb:47:68:e1:83:ba:48:69:46:65:77:26:e5:52:
                    14:cc:f9:2f:eb:71:24:8c:32:ff:24:3b:cc:27:88:
                    a1:ca:36:45:69:a5:d4:81:aa:b0:c2:d8:1b:4d:8f:
                    aa:e8:4a:8e:a5:b1:68:e4:21:2f:30:56:23:b1:3f:
                    7a:ce:7a:9b:1e:7c:d8:65:59:38:02:71:02:a0:1b:
                    af:af:33:89:af:eb:76:ca:9b:57:c0:74:80:1c:96:
                    57:35:f2:93:81:5a:78:ca:75:d7:7a:b4:7b:ef:23:
                    0e:e3:32:db:58:39:4a:a1:f9:ea:1e:10:64:64:83:
                    65:ad:42:0b:cb:ac:16:3d:c5:10:f5:33:d0:f9:2e:
                    90:92:a8:67:e2:33:cc:04:28:87:ad:12:12:80:45:
                    10:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:9C:B1:40:12:D3:E1:A8:0C:EB:B1:6A:DB:7B:F7:F1:45:1C:55:06
            X509v3 Authority Key Identifier:
                keyid:80:61:53:15:DC:75:0C:03:E6:0F:C3:6A:75:0C:5E:3F:F6:6E:AC:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gGFTFdx1DAPmD8NqdQxeP_ZurJQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/de84ce-d704-4766-a388-f8e5b2d8680c/1/gGFTFdx1DAPmD8NqdQxeP_ZurJQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/de84ce-d704-4766-a388-f8e5b2d8680c/1/gGFTFdx1DAPmD8NqdQxeP_ZurJQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:fa:61:c8:7f:e9:02:46:0e:7d:01:0c:a6:81:c9:7f:c0:c0:
         7e:45:4a:2b:6a:45:61:11:1f:24:71:35:08:a1:5d:2a:66:a5:
         ff:cd:17:a3:b6:f1:fa:5d:66:26:5f:0b:12:fb:8d:0b:2f:ba:
         10:77:2d:9e:16:a9:9f:1a:eb:d9:e8:c4:80:fe:89:55:03:58:
         f4:7d:28:d5:ce:75:77:b7:59:ac:03:5b:ae:e2:ca:73:54:53:
         da:13:53:46:e2:b8:c1:8b:15:33:e6:c9:a9:80:63:79:12:27:
         27:3b:94:50:a5:71:fe:fd:75:ea:d4:2d:ac:90:95:d8:10:48:
         ce:f5:98:78:e3:f2:4c:dc:56:17:9d:6d:0e:c7:86:a3:bc:44:
         48:2c:73:cd:5b:c4:98:51:4b:0a:64:de:4f:37:1c:10:2d:08:
         34:25:fb:05:5a:ea:50:06:61:21:b1:fc:9d:67:c1:11:5d:7e:
         1f:9b:60:c5:b4:5d:12:95:6c:4c:6c:aa:49:7f:47:81:17:9b:
         ef:14:11:bf:c4:c4:ce:fb:e4:48:c9:47:1b:9c:b4:1c:d4:dc:
         5d:4f:ab:7c:53:a6:8f:2b:3d:be:00:25:14:fc:6d:70:b2:b5:
         49:15:fb:04:66:f2:e9:da:ed:10:b3:39:28:92:e5:2e:e3:7e:
         15:73:2a:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----