Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/e076dc-10d8-44cc-8aa5-5a94ad133118/1/gh9un_H7vyH2QToTfnNn3YqMA1w.mft
File:                     gh9un_H7vyH2QToTfnNn3YqMA1w.mft (raw, json)
Hash identifier:          YRg66ODysQ2WNqDYXxdCKNg3wlLlk6RJuGqbPpXaA9o=
Subject key identifier:   FF:8D:47:7A:11:D8:C8:6F:3B:48:A6:2D:91:8B:83:71:D1:ED:0A:8D
Authority key identifier: 82:1F:6E:9F:F1:FB:BF:21:F6:41:3A:13:7E:73:67:DD:8A:8C:03:5C
Certificate issuer:       /CN=821f6e9ff1fbbf21f6413a137e7367dd8a8c035c
Certificate serial:       01962E2B2F99032FA5E1FEBA426168F22D64
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gh9un_H7vyH2QToTfnNn3YqMA1w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f3/e076dc-10d8-44cc-8aa5-5a94ad133118/1/gh9un_H7vyH2QToTfnNn3YqMA1w.mft
Manifest number:          0D2C
Signing time:             Sun 13 Apr 2025 08:01:44 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:44 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:44 +0000
Files and hashes:         1: LGI_BMqz48rF1CAQFBrnzf381U0.roa (hash: eJvU6iSIuiB2ZVQ2ar/OXbcHw5p8L+QuWzmrOM6M7qg=)
                          2: gh9un_H7vyH2QToTfnNn3YqMA1w.crl (hash: mSCVq8zJpdu03RDGqS1c4Imjgll6AGezi8YYApfaXFo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2b:2f:99:03:2f:a5:e1:fe:ba:42:61:68:f2:2d:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=821f6e9ff1fbbf21f6413a137e7367dd8a8c035c
        Validity
            Not Before: Apr 13 08:01:44 2025 GMT
            Not After : Apr 14 08:01:44 2025 GMT
        Subject: CN=ff8d477a11d8c86f3b48a62d918b8371d1ed0a8d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:e7:cb:9e:40:ad:4d:64:57:87:a4:bf:f2:1e:
                    28:71:1c:06:95:4a:82:35:b1:03:51:b7:29:81:14:
                    b0:a2:38:7a:97:07:87:15:20:5d:38:8c:27:19:15:
                    bd:6d:35:7d:8c:27:98:ee:8e:ba:7c:55:c4:96:a0:
                    d9:58:a9:b5:78:9a:f5:83:e4:e5:b5:26:03:31:ca:
                    1e:3e:26:6e:b1:8e:28:80:0e:ae:89:e3:e5:a2:14:
                    13:46:93:1b:07:f8:ef:51:2b:9f:73:e6:50:92:d3:
                    b5:77:b3:17:47:e3:37:61:a5:95:f6:92:e0:37:b2:
                    24:07:03:db:e2:02:16:cc:4b:85:18:cd:72:91:a4:
                    14:49:9a:ed:5c:03:ed:f7:ce:e7:e1:29:67:1a:45:
                    cc:86:09:3b:aa:7d:cd:4a:6a:28:38:b8:61:99:95:
                    b6:8a:1c:fd:25:79:3a:67:fc:f7:4a:8a:08:57:4a:
                    30:d9:52:05:d9:df:24:58:9e:cb:22:52:2b:64:38:
                    70:ad:cd:5c:18:6d:b2:e9:fd:24:cc:08:f4:da:7c:
                    ba:7c:45:11:9c:5b:23:f2:4a:95:d1:25:ab:2b:8b:
                    3d:8d:f8:10:8f:d6:ea:e5:e4:31:1e:75:72:95:27:
                    cd:bb:58:67:fe:5c:11:ff:f4:85:d7:71:14:5f:d4:
                    87:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:8D:47:7A:11:D8:C8:6F:3B:48:A6:2D:91:8B:83:71:D1:ED:0A:8D
            X509v3 Authority Key Identifier:
                keyid:82:1F:6E:9F:F1:FB:BF:21:F6:41:3A:13:7E:73:67:DD:8A:8C:03:5C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gh9un_H7vyH2QToTfnNn3YqMA1w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/e076dc-10d8-44cc-8aa5-5a94ad133118/1/gh9un_H7vyH2QToTfnNn3YqMA1w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/e076dc-10d8-44cc-8aa5-5a94ad133118/1/gh9un_H7vyH2QToTfnNn3YqMA1w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:48:67:64:b3:89:d1:a4:37:8e:a0:46:9e:31:f5:49:c1:4e:
         f0:12:0a:c5:a2:76:14:2a:bf:0a:9c:ff:98:0f:0b:73:f0:e8:
         00:70:e7:aa:4c:6a:61:7e:e9:1d:e3:24:44:e2:9f:68:5e:04:
         ae:1e:d5:aa:6b:19:b8:7a:39:b3:25:07:e6:18:68:b3:c5:ab:
         18:69:3f:d2:36:9f:6c:93:5f:00:fd:9a:d8:a5:12:e1:e6:78:
         88:1b:1f:17:e5:97:99:42:f7:43:78:f4:a9:01:3f:83:a0:fa:
         79:ba:af:77:d3:57:ac:a5:42:4a:84:f9:00:7a:f0:c0:84:0b:
         74:8e:8d:72:00:1c:8c:41:69:30:20:a1:2d:c9:1f:6b:df:bc:
         28:7f:75:db:0a:22:97:fe:8f:66:b6:8d:f8:85:2c:f5:3d:c8:
         2e:71:84:79:8e:e5:0c:bb:04:2c:34:83:93:30:0e:65:26:e7:
         a4:8c:8d:3d:17:f7:32:00:1f:62:b5:9e:e3:d7:7b:67:c6:b8:
         4e:0c:92:fd:f7:dd:a5:4f:3d:a0:0d:09:82:42:c1:9d:5a:34:
         de:cf:9a:01:13:3d:5c:60:73:30:73:4d:4d:f8:8a:c5:cf:a5:
         c9:31:75:ea:20:49:f6:b2:b9:bd:6f:48:df:c0:41:36:8f:73:
         fb:21:5e:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----