Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/ddac0d-3743-4cd2-a6a3-a1246c67d9de/1/GxtLXC2qpvw1Bx9Dj5aK9v9spNo.mft
File:                     GxtLXC2qpvw1Bx9Dj5aK9v9spNo.mft (raw, json)
Hash identifier:          1LiAKZiZRC/sZ6mdUBRrTOyRAoV/s/UpJLsVX0MCbAI=
Subject key identifier:   B9:41:EF:9A:42:F9:3A:28:91:69:FF:FA:12:02:A7:0D:13:2D:2F:6D
Authority key identifier: 1B:1B:4B:5C:2D:AA:A6:FC:35:07:1F:43:8F:96:8A:F6:FF:6C:A4:DA
Certificate issuer:       /CN=1b1b4b5c2daaa6fc35071f438f968af6ff6ca4da
Certificate serial:       01962F3D4F18B750C72C6AB4995B0821AC7E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GxtLXC2qpvw1Bx9Dj5aK9v9spNo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f3/ddac0d-3743-4cd2-a6a3-a1246c67d9de/1/GxtLXC2qpvw1Bx9Dj5aK9v9spNo.mft
Manifest number:          0DA7
Signing time:             Sun 13 Apr 2025 13:01:09 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:09 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:09 +0000
Files and hashes:         1: GxtLXC2qpvw1Bx9Dj5aK9v9spNo.crl (hash: LsD3fae1z/HDuaMbfZt7K0XPg0IedM3zmJk29tLcVHQ=)
                          2: dhbqsDMCYbdJQ5KWes-T7R0t68c.roa (hash: A26S4K/y1MLobATqv2Mkxdn527XJqQ0E6NlZCnsWU/A=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:4f:18:b7:50:c7:2c:6a:b4:99:5b:08:21:ac:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1b1b4b5c2daaa6fc35071f438f968af6ff6ca4da
        Validity
            Not Before: Apr 13 13:01:09 2025 GMT
            Not After : Apr 14 13:01:09 2025 GMT
        Subject: CN=b941ef9a42f93a289169fffa1202a70d132d2f6d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:48:88:53:68:20:d9:22:4d:b3:4d:68:91:6f:
                    c0:60:4d:31:32:9e:19:72:dd:82:17:36:87:e3:45:
                    7e:23:ac:a7:25:c3:82:ec:e3:8b:06:3a:b9:a7:73:
                    2d:ae:79:74:97:20:d3:89:40:af:df:d6:b4:12:fa:
                    02:d7:4f:64:ba:31:2e:3e:b5:16:37:db:67:76:31:
                    8c:10:1f:5e:04:29:93:26:88:3c:2b:aa:88:3d:ef:
                    6e:1f:5c:3f:95:b0:d8:36:92:24:3a:a1:55:18:04:
                    ab:45:78:0a:8b:ad:76:e8:0a:24:82:50:97:6d:5d:
                    4d:31:8f:63:ea:3b:eb:63:eb:dd:9e:5b:3a:3d:d6:
                    fa:31:04:67:ac:5b:85:23:ff:a8:69:ef:22:52:d8:
                    7e:97:41:19:08:f0:4e:aa:01:1b:28:71:04:9e:b4:
                    f8:a1:c9:06:15:97:5e:dc:0e:f3:9f:fb:69:dc:a2:
                    49:33:95:87:a0:c5:dd:f3:3d:51:a7:d4:cd:56:94:
                    95:0b:ed:15:a3:84:dd:56:ce:b5:db:d7:2a:d8:d6:
                    71:21:50:ff:5e:8b:27:80:06:a8:e7:11:c9:9d:ba:
                    34:9b:62:dc:29:d4:3e:8e:74:69:90:04:36:52:23:
                    19:76:08:78:46:f0:d8:77:65:44:ea:08:18:63:4e:
                    09:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:41:EF:9A:42:F9:3A:28:91:69:FF:FA:12:02:A7:0D:13:2D:2F:6D
            X509v3 Authority Key Identifier:
                keyid:1B:1B:4B:5C:2D:AA:A6:FC:35:07:1F:43:8F:96:8A:F6:FF:6C:A4:DA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GxtLXC2qpvw1Bx9Dj5aK9v9spNo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/ddac0d-3743-4cd2-a6a3-a1246c67d9de/1/GxtLXC2qpvw1Bx9Dj5aK9v9spNo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/ddac0d-3743-4cd2-a6a3-a1246c67d9de/1/GxtLXC2qpvw1Bx9Dj5aK9v9spNo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:8f:b7:55:7c:8e:1c:70:b8:8f:55:df:0b:b5:22:19:2b:37:
         c4:e1:58:ce:d2:b7:c9:6e:2f:f2:86:f1:8e:d6:8c:0d:8a:ae:
         ba:26:ce:bb:c3:f9:a5:0f:d4:e4:b1:fd:92:bf:30:58:51:80:
         1c:78:2d:b2:4d:74:68:87:75:68:e4:78:80:16:4c:55:0d:9e:
         f7:bb:73:1f:3c:01:10:2c:7b:bb:9d:fe:ef:de:c1:38:93:d2:
         6a:60:c3:0b:75:f6:32:86:93:c7:d7:fd:67:a8:e6:3f:19:a5:
         75:c7:d3:ea:bb:31:ca:53:4a:fb:98:99:9f:95:12:28:b8:64:
         f9:66:80:c4:39:e9:8f:84:36:10:da:19:a0:fc:6a:67:2a:9b:
         aa:26:53:8c:a6:95:c3:42:61:cd:bd:e2:5f:1d:6f:3b:3c:d1:
         e4:6a:18:dd:34:74:22:e8:16:a6:1b:5d:3b:71:92:4c:d3:52:
         ca:99:a7:75:4e:fd:70:05:e2:22:d7:bb:21:34:72:5a:3f:7e:
         9e:63:c9:62:6e:13:1e:ae:9a:ff:4e:1c:2a:b1:be:93:fd:72:
         e5:70:5d:91:e3:a1:24:d6:46:b2:79:75:89:c3:f7:85:de:0b:
         57:78:72:bf:69:46:8e:35:90:4d:46:cc:3e:c3:d6:04:d1:a6:
         23:a5:cd:22
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvPU8Yt1DHLGq0mVsIIax+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFiMWI0YjVjMmRhYWE2ZmMzNTA3MWY0MzhmOTY4YWY2ZmY2
Y2E0ZGEwHhcNMjUwNDEzMTMwMTA5WhcNMjUwNDE0MTMwMTA5WjAzMTEwLwYDVQQD
EyhiOTQxZWY5YTQyZjkzYTI4OTE2OWZmZmExMjAyYTcwZDEzMmQyZjZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuEiIU2gg2SJNs01okW/AYE0xMp4Z
ct2CFzaH40V+I6ynJcOC7OOLBjq5p3Mtrnl0lyDTiUCv39a0EvoC109kujEuPrUW
N9tndjGMEB9eBCmTJog8K6qIPe9uH1w/lbDYNpIkOqFVGASrRXgKi6126AokglCX
bV1NMY9j6jvrY+vdnls6Pdb6MQRnrFuFI/+oae8iUth+l0EZCPBOqgEbKHEEnrT4
ockGFZde3A7zn/tp3KJJM5WHoMXd8z1Rp9TNVpSVC+0Vo4TdVs6129cq2NZxIVD/
XosngAao5xHJnbo0m2LcKdQ+jnRpkAQ2UiMZdgh4RvDYd2VE6ggYY04JaQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLlB75pC+TookWn/+hICpw0TLS9tMB8GA1UdIwQY
MBaAFBsbS1wtqqb8NQcfQ4+Wivb/bKTaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR3h0TFhDMnFwdncxQng5RGo1YUs5djlzcE5vLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMy9kZGFjMGQtMzc0My00Y2QyLWE2YTMt
YTEyNDZjNjdkOWRlLzEvR3h0TFhDMnFwdncxQng5RGo1YUs5djlzcE5vLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMy9kZGFjMGQtMzc0My00Y2QyLWE2YTMtYTEyNDZjNjdkOWRl
LzEvR3h0TFhDMnFwdncxQng5RGo1YUs5djlzcE5vLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAO4+3VXyO
HHC4j1XfC7UiGSs3xOFYztK3yW4v8obxjtaMDYquuibOu8P5pQ/U5LH9kr8wWFGA
HHgtsk10aId1aOR4gBZMVQ2e97tzHzwBECx7u53+797BOJPSamDDC3X2MoaTx9f9
Z6jmPxmldcfT6rsxylNK+5iZn5USKLhk+WaAxDnpj4Q2ENoZoPxqZyqbqiZTjKaV
w0Jhzb3iXx1vOzzR5GoY3TR0IugWphtdO3GSTNNSypmndU79cAXiIte7ITRyWj9+
nmPJYm4THq6a/04cKrG+k/1y5XBdkeOhJNZGsnl1icP3hd4LV3hyv2lGjjWQTUbM
PsPWBNGmI6XNIg==
-----END CERTIFICATE-----