Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/773678-e200-46af-86c1-6bd8022d2eae/1/GBel7BjE8sRHhK3FA4NWvlrolCk.mft
File:                     GBel7BjE8sRHhK3FA4NWvlrolCk.mft (raw, json)
Hash identifier:          Eu/LWUsr9Mbp1JZYvRpuE3QoQlRZ7/UGUdNNPwx2CZE=
Subject key identifier:   2A:C0:D2:AD:F5:1E:1C:42:45:DA:79:02:9A:E0:E4:75:94:14:05:C8
Authority key identifier: 18:17:A5:EC:18:C4:F2:C4:47:84:AD:C5:03:83:56:BE:5A:E8:94:29
Certificate issuer:       /CN=1817a5ec18c4f2c44784adc5038356be5ae89429
Certificate serial:       01962F07078C7345537ACABAE9AC57D2E267
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GBel7BjE8sRHhK3FA4NWvlrolCk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f0/773678-e200-46af-86c1-6bd8022d2eae/1/GBel7BjE8sRHhK3FA4NWvlrolCk.mft
Manifest number:          14EA
Signing time:             Sun 13 Apr 2025 12:01:51 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:51 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:51 +0000
Files and hashes:         1: GBel7BjE8sRHhK3FA4NWvlrolCk.crl (hash: 8FLCM0MRFUx5hrVA1amLNScTSsZ7xL3gWunDPXSthcI=)
                          2: YPZsDLLgzY_7M-GC9SiCWRi1ybo.roa (hash: 9PJDi8b5z4045eOIRy/iUo+ovH8jKNIpIEnuC9ZNGWE=)
                          3: dhax6YlGZdJ59Lja9mjH_mTZXS8.roa (hash: z4HlD8GeanPgFBicLk5Q3SISz2iD/qfFdvuzkfzBoxc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:07:07:8c:73:45:53:7a:ca:ba:e9:ac:57:d2:e2:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1817a5ec18c4f2c44784adc5038356be5ae89429
        Validity
            Not Before: Apr 13 12:01:51 2025 GMT
            Not After : Apr 14 12:01:51 2025 GMT
        Subject: CN=2ac0d2adf51e1c4245da79029ae0e475941405c8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:65:b8:a8:7c:94:c9:a7:03:a6:49:0a:c8:93:
                    25:ff:e4:dc:a2:63:33:83:2d:ef:e8:e7:84:dc:53:
                    34:91:f4:0e:ad:71:e2:12:66:b5:ac:25:9d:cf:bc:
                    55:03:1a:81:46:ca:b8:1f:ac:e0:ef:43:b5:4c:50:
                    0c:bf:d6:af:db:fe:ba:af:01:df:e4:e1:c2:2a:f1:
                    3f:55:1f:8a:0c:cc:16:33:73:73:f2:fe:cb:22:4b:
                    08:1c:31:69:30:eb:c4:9a:1e:53:f2:75:b3:8b:1c:
                    01:64:61:ce:9c:7a:42:66:b5:58:08:36:d3:e8:0b:
                    59:95:2d:45:a6:24:f0:2e:23:ca:e1:fc:f6:31:25:
                    7e:1e:75:0a:35:93:f8:e3:9f:bc:b6:22:e4:57:ed:
                    72:57:46:11:81:c4:12:f8:4e:12:d6:f6:09:76:27:
                    76:ee:66:7d:1a:9b:7b:1c:a6:c9:f4:3c:56:2f:ff:
                    b6:f0:e3:5b:74:75:b5:5a:4b:c9:ef:b3:06:83:24:
                    3b:c9:e2:d1:e0:00:f8:4b:19:68:8b:1e:24:77:2a:
                    82:e2:58:6c:94:72:5a:8f:3b:37:44:bb:00:cb:d1:
                    68:ba:40:d2:e1:ec:c2:e2:15:d0:90:11:c9:b9:c5:
                    98:9f:6e:75:da:d5:24:13:7e:f2:a9:b9:51:3f:92:
                    d0:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:C0:D2:AD:F5:1E:1C:42:45:DA:79:02:9A:E0:E4:75:94:14:05:C8
            X509v3 Authority Key Identifier:
                keyid:18:17:A5:EC:18:C4:F2:C4:47:84:AD:C5:03:83:56:BE:5A:E8:94:29

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GBel7BjE8sRHhK3FA4NWvlrolCk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/773678-e200-46af-86c1-6bd8022d2eae/1/GBel7BjE8sRHhK3FA4NWvlrolCk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/773678-e200-46af-86c1-6bd8022d2eae/1/GBel7BjE8sRHhK3FA4NWvlrolCk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:74:12:a2:87:12:ff:0e:05:b3:5e:75:83:92:5c:f0:c1:50:
         e3:c4:63:43:18:62:65:c8:17:7b:20:09:3b:b3:4a:a9:4e:93:
         2e:4b:f4:fd:27:88:f3:5c:30:80:cb:28:6a:39:17:fc:ea:f7:
         3f:40:81:95:37:a4:42:ef:1b:d6:4e:77:61:fe:87:2e:31:1b:
         11:92:70:10:12:f9:18:cd:ba:f2:9e:22:1c:ad:8e:f3:4f:93:
         e4:ab:90:f8:bb:ae:29:1b:33:f4:1b:bc:63:2f:77:bd:23:8e:
         44:24:48:47:0f:77:28:c7:a1:b9:23:da:b1:0d:70:54:b8:5c:
         f5:91:cb:59:5b:1d:98:09:2e:25:b2:12:e4:81:c8:2b:5e:f9:
         55:52:3f:f2:69:28:26:b6:52:b1:1f:04:fb:ea:66:9e:6f:27:
         2b:a7:f9:f8:28:97:52:12:d4:7f:cd:cd:3a:03:3c:9f:76:45:
         be:ed:d3:92:7f:2e:ee:75:f2:45:91:14:e5:f5:42:ae:f7:7c:
         01:b8:43:7f:36:9a:9e:e1:97:93:24:f4:46:36:7a:76:bc:2b:
         39:73:dc:74:6e:3a:78:c7:ed:c4:5c:f2:f4:0a:5e:87:72:cc:
         b4:32:27:03:f5:21:21:e7:e2:3e:11:ae:73:da:5b:2a:3d:7a:
         62:2c:17:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----