Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/705d00-25a1-4bab-9ba4-4353cd82d57b/1/rpSIkT1zR5eD2nv1axZOXITU_Go.mft
File:                     rpSIkT1zR5eD2nv1axZOXITU_Go.mft (raw, json)
Hash identifier:          LA5wd4GWPOEZXLFSBoFic3mEWhEmz/3vFBI7HCRDvKc=
Subject key identifier:   44:CD:9F:80:F4:5A:64:2F:56:97:0E:95:7A:AC:E1:ED:CC:A4:3D:87
Authority key identifier: AE:94:88:91:3D:73:47:97:83:DA:7B:F5:6B:16:4E:5C:84:D4:FC:6A
Certificate issuer:       /CN=ae9488913d73479783da7bf56b164e5c84d4fc6a
Certificate serial:       01962FAB9221231A54AFB559CB98991C497E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rpSIkT1zR5eD2nv1axZOXITU_Go.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ed/705d00-25a1-4bab-9ba4-4353cd82d57b/1/rpSIkT1zR5eD2nv1axZOXITU_Go.mft
Manifest number:          14EE
Signing time:             Sun 13 Apr 2025 15:01:35 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:35 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:35 +0000
Files and hashes:         1: AYRRAczcbq7u60pHgYeS1szSrpI.roa (hash: HzlS835dTUJE//lhH5z57Uv4DsWgC3yZXjv319hgV3I=)
                          2: rpSIkT1zR5eD2nv1axZOXITU_Go.crl (hash: xhrTFu/SIVpmRf0Qixk8VYaQVMToqTLXczzEotYoliM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:92:21:23:1a:54:af:b5:59:cb:98:99:1c:49:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ae9488913d73479783da7bf56b164e5c84d4fc6a
        Validity
            Not Before: Apr 13 15:01:35 2025 GMT
            Not After : Apr 14 15:01:35 2025 GMT
        Subject: CN=44cd9f80f45a642f56970e957aace1edcca43d87
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:ce:11:b1:3d:46:27:7c:ba:95:33:bc:e3:e8:
                    58:c6:d6:e0:d2:84:e8:54:70:7a:cf:0c:0a:35:7e:
                    80:de:b0:0d:5a:d7:2b:c4:22:58:9c:81:99:cc:c0:
                    1a:4f:7b:2f:64:00:e2:04:d2:10:cd:c9:5c:d3:e0:
                    76:f0:16:2e:43:b6:bd:f5:2a:3d:f8:da:b7:eb:57:
                    54:67:52:31:18:05:12:3c:0a:47:f3:55:a3:08:09:
                    f0:94:38:72:20:1c:ab:00:f0:f2:22:e4:50:f8:4e:
                    a9:d0:86:de:1a:84:2b:ad:ba:fe:48:29:07:46:64:
                    fa:36:55:d4:c1:f1:96:40:d5:df:a8:51:ac:67:69:
                    0e:5b:d9:af:3a:43:23:ac:f3:9e:40:76:e1:1d:58:
                    21:96:ac:8a:b2:c4:8f:db:cf:60:31:82:d8:98:6f:
                    c7:aa:71:f1:ea:c0:6e:58:57:1b:c0:80:ca:d6:57:
                    82:0b:7e:31:19:55:b0:89:ec:51:89:31:cc:59:ff:
                    0a:83:35:7c:60:a6:3c:c0:ab:2e:84:63:fe:55:52:
                    78:60:ba:99:8b:d9:d4:f8:93:81:a0:26:1b:30:5f:
                    2f:af:6d:43:bd:19:44:f1:76:3f:7d:d9:c4:19:ae:
                    8e:3c:0b:3a:c6:6d:93:5e:08:61:2d:ed:cc:19:a2:
                    ab:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:CD:9F:80:F4:5A:64:2F:56:97:0E:95:7A:AC:E1:ED:CC:A4:3D:87
            X509v3 Authority Key Identifier:
                keyid:AE:94:88:91:3D:73:47:97:83:DA:7B:F5:6B:16:4E:5C:84:D4:FC:6A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rpSIkT1zR5eD2nv1axZOXITU_Go.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/705d00-25a1-4bab-9ba4-4353cd82d57b/1/rpSIkT1zR5eD2nv1axZOXITU_Go.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/705d00-25a1-4bab-9ba4-4353cd82d57b/1/rpSIkT1zR5eD2nv1axZOXITU_Go.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:5f:1d:58:bf:95:bb:84:8b:40:5e:49:9a:db:15:b0:98:84:
         6d:34:27:4f:2e:ec:78:fe:af:cf:47:6e:a2:a3:98:08:b8:37:
         ab:ee:5a:8a:a1:55:1f:67:7b:d4:ab:e3:bc:28:a0:f6:fa:37:
         0c:b3:26:53:0e:11:43:46:c5:fd:51:52:3e:f1:2a:39:61:88:
         ff:79:2e:6d:dc:a6:2b:ec:25:7d:53:3e:8e:37:81:30:54:03:
         87:da:25:c1:21:c9:ac:c0:d8:20:ff:28:30:84:07:f7:1a:52:
         ca:e6:9c:4f:2c:69:e8:0e:fe:18:19:7f:ce:c9:07:8c:bb:ca:
         75:fa:e2:32:91:7a:c2:dc:56:d0:9b:63:ae:d9:40:cf:40:c7:
         ed:d6:2b:68:dd:e7:a9:2f:3e:75:69:e2:88:3e:1e:77:b6:45:
         4a:43:4f:17:f6:e4:50:47:4e:47:0d:88:3a:94:0e:51:87:e0:
         e7:15:02:3c:a2:62:8e:ec:51:63:7b:36:35:d9:39:ca:de:6f:
         e1:f6:55:d0:ae:3d:b4:4e:16:0d:ca:65:ee:fa:81:a3:ef:ce:
         70:a2:6a:ea:7c:3c:55:a0:7d:5b:f4:13:f5:1d:11:c4:98:3f:
         19:53:d6:02:e4:bf:e3:88:74:1b:a9:64:05:64:35:5d:3f:a0:
         ff:d6:d2:4d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvq5IhIxpUr7VZy5iZHEl+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFlOTQ4ODkxM2Q3MzQ3OTc4M2RhN2JmNTZiMTY0ZTVjODRk
NGZjNmEwHhcNMjUwNDEzMTUwMTM1WhcNMjUwNDE0MTUwMTM1WjAzMTEwLwYDVQQD
Eyg0NGNkOWY4MGY0NWE2NDJmNTY5NzBlOTU3YWFjZTFlZGNjYTQzZDg3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArs4RsT1GJ3y6lTO84+hYxtbg0oTo
VHB6zwwKNX6A3rANWtcrxCJYnIGZzMAaT3svZADiBNIQzclc0+B28BYuQ7a99So9
+Nq361dUZ1IxGAUSPApH81WjCAnwlDhyIByrAPDyIuRQ+E6p0IbeGoQrrbr+SCkH
RmT6NlXUwfGWQNXfqFGsZ2kOW9mvOkMjrPOeQHbhHVghlqyKssSP289gMYLYmG/H
qnHx6sBuWFcbwIDK1leCC34xGVWwiexRiTHMWf8KgzV8YKY8wKsuhGP+VVJ4YLqZ
i9nU+JOBoCYbMF8vr21DvRlE8XY/fdnEGa6OPAs6xm2TXghhLe3MGaKrGQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFETNn4D0WmQvVpcOlXqs4e3MpD2HMB8GA1UdIwQY
MBaAFK6UiJE9c0eXg9p79WsWTlyE1PxqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcnBTSWtUMXpSNWVEMm52MWF4Wk9YSVRVX0dvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZC83MDVkMDAtMjVhMS00YmFiLTliYTQt
NDM1M2NkODJkNTdiLzEvcnBTSWtUMXpSNWVEMm52MWF4Wk9YSVRVX0dvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZC83MDVkMDAtMjVhMS00YmFiLTliYTQtNDM1M2NkODJkNTdi
LzEvcnBTSWtUMXpSNWVEMm52MWF4Wk9YSVRVX0dvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMF8dWL+V
u4SLQF5JmtsVsJiEbTQnTy7seP6vz0duoqOYCLg3q+5aiqFVH2d71KvjvCig9vo3
DLMmUw4RQ0bF/VFSPvEqOWGI/3kubdymK+wlfVM+jjeBMFQDh9olwSHJrMDYIP8o
MIQH9xpSyuacTyxp6A7+GBl/zskHjLvKdfriMpF6wtxW0JtjrtlAz0DH7dYraN3n
qS8+dWniiD4ed7ZFSkNPF/bkUEdORw2IOpQOUYfg5xUCPKJijuxRY3s2Ndk5yt5v
4fZV0K49tE4WDcpl7vqBo+/OcKJq6nw8VaB9W/QT9R0RxJg/GVPWAuS/44h0G6lk
BWQ1XT+g/9bSTQ==
-----END CERTIFICATE-----