Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/b8d833-f396-4b1f-a0e3-56b8811e4926/1/GTN8pW3nw7l3h1Np7N5ThSUVdG8.mft
File:                     GTN8pW3nw7l3h1Np7N5ThSUVdG8.mft (raw, json)
Hash identifier:          i5BNrjSeCxXUX/CvBACSC1jJ+oe6L2iR0brcv4Im+a8=
Subject key identifier:   AD:B8:51:B0:69:A3:D7:A4:6B:02:68:CB:FA:9F:A0:00:59:C8:D5:01
Authority key identifier: 19:33:7C:A5:6D:E7:C3:B9:77:87:53:69:EC:DE:53:85:25:15:74:6F
Certificate issuer:       /CN=19337ca56de7c3b977875369ecde53852515746f
Certificate serial:       01962DF4554C3F826A33566E0FBBE02D4FCD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GTN8pW3nw7l3h1Np7N5ThSUVdG8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fb/b8d833-f396-4b1f-a0e3-56b8811e4926/1/GTN8pW3nw7l3h1Np7N5ThSUVdG8.mft
Manifest number:          1039
Signing time:             Sun 13 Apr 2025 07:01:49 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:49 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:49 +0000
Files and hashes:         1: GTN8pW3nw7l3h1Np7N5ThSUVdG8.crl (hash: JfsXKRE1eeKecMy8OBpiNO3a4rQ1KMsTOu5cPa+wIZg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f4:55:4c:3f:82:6a:33:56:6e:0f:bb:e0:2d:4f:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=19337ca56de7c3b977875369ecde53852515746f
        Validity
            Not Before: Apr 13 07:01:49 2025 GMT
            Not After : Apr 14 07:01:49 2025 GMT
        Subject: CN=adb851b069a3d7a46b0268cbfa9fa00059c8d501
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:d9:aa:32:bd:40:5a:0b:c4:4a:98:e1:d8:7c:
                    0b:d8:66:8d:fd:7d:5c:38:05:f4:c8:af:85:58:eb:
                    e1:21:f5:19:9b:f3:de:9c:3f:86:90:7c:ef:6e:12:
                    6d:93:6b:e5:ef:b2:8f:09:bc:ee:4e:e6:46:11:12:
                    bc:1a:a8:67:64:55:27:8f:bf:b5:7a:6c:79:89:24:
                    b5:33:2b:09:0b:fd:51:a1:11:0b:1b:d4:45:a1:f9:
                    e9:75:15:78:38:0a:e0:97:8c:62:67:0b:ba:9b:4f:
                    fd:ef:7a:12:d1:6e:00:b4:04:e9:ed:e3:81:f5:d5:
                    1a:b8:91:1c:9e:2c:2c:ae:2e:94:2a:33:05:07:0c:
                    e1:84:c5:c2:9a:da:62:6b:99:43:98:2e:99:5a:82:
                    32:27:81:81:c6:5c:c6:bf:ea:c5:a3:22:3d:e2:44:
                    6d:a1:91:f5:b5:44:8b:cc:1c:07:5e:f9:c1:43:b3:
                    3e:4f:06:87:8c:59:71:30:89:14:7d:4d:bf:22:2e:
                    d2:46:70:37:ac:39:45:f2:0e:68:0f:6c:4b:13:c2:
                    cd:bb:e0:04:4d:1d:9a:1b:fd:a8:a6:10:42:12:84:
                    ab:f2:e9:96:09:76:ed:21:9d:b1:9d:19:30:26:91:
                    1b:39:7a:49:d0:a4:9b:ac:1f:05:41:84:29:3c:71:
                    37:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:B8:51:B0:69:A3:D7:A4:6B:02:68:CB:FA:9F:A0:00:59:C8:D5:01
            X509v3 Authority Key Identifier:
                keyid:19:33:7C:A5:6D:E7:C3:B9:77:87:53:69:EC:DE:53:85:25:15:74:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GTN8pW3nw7l3h1Np7N5ThSUVdG8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/b8d833-f396-4b1f-a0e3-56b8811e4926/1/GTN8pW3nw7l3h1Np7N5ThSUVdG8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/b8d833-f396-4b1f-a0e3-56b8811e4926/1/GTN8pW3nw7l3h1Np7N5ThSUVdG8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:61:02:f2:7b:8e:d3:76:67:12:1d:d4:cf:53:92:c7:53:97:
         0d:3b:e3:0a:14:43:31:2d:c0:f5:12:9c:fb:96:29:22:0d:1c:
         bb:e7:40:e5:87:30:b9:2b:e3:52:11:56:d3:9f:5d:26:07:75:
         88:0c:16:52:c2:4d:77:7f:9b:31:2e:61:ed:9e:03:e1:fb:64:
         3e:2b:c0:98:a5:c8:44:a1:21:57:d6:3c:20:23:af:aa:5f:7f:
         81:a6:ae:53:28:14:a3:ee:9f:66:41:07:20:23:7d:84:eb:fd:
         b1:da:08:19:63:68:c7:36:b2:66:74:ee:af:07:a2:02:b6:49:
         2a:71:4d:14:02:47:a5:ee:41:c3:c7:e3:33:9d:3e:cd:ca:35:
         cb:1c:60:b1:08:50:de:2e:14:f8:e4:0e:74:b9:60:c5:4b:df:
         e1:a6:97:94:c1:a9:77:2c:5d:00:46:ba:be:b3:73:be:f1:c3:
         a3:3f:57:17:63:17:f4:21:fe:4d:7d:0f:61:3f:9b:56:a0:fc:
         af:63:20:bf:f7:e5:de:0f:d3:ee:db:3e:e0:96:fb:e0:63:05:
         36:63:a1:73:af:6c:36:e0:21:88:f2:ad:79:31:7a:cf:70:68:
         a6:fc:0a:87:ed:28:bc:9f:76:9c:3d:38:95:48:f1:c8:0b:8a:
         68:c9:53:76
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYt9FVMP4JqM1ZuD7vgLU/NMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE5MzM3Y2E1NmRlN2MzYjk3Nzg3NTM2OWVjZGU1Mzg1MjUx
NTc0NmYwHhcNMjUwNDEzMDcwMTQ5WhcNMjUwNDE0MDcwMTQ5WjAzMTEwLwYDVQQD
EyhhZGI4NTFiMDY5YTNkN2E0NmIwMjY4Y2JmYTlmYTAwMDU5YzhkNTAxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwdmqMr1AWgvESpjh2HwL2GaN/X1c
OAX0yK+FWOvhIfUZm/PenD+GkHzvbhJtk2vl77KPCbzuTuZGERK8GqhnZFUnj7+1
emx5iSS1MysJC/1RoRELG9RFofnpdRV4OArgl4xiZwu6m0/973oS0W4AtATp7eOB
9dUauJEcniwsri6UKjMFBwzhhMXCmtpia5lDmC6ZWoIyJ4GBxlzGv+rFoyI94kRt
oZH1tUSLzBwHXvnBQ7M+TwaHjFlxMIkUfU2/Ii7SRnA3rDlF8g5oD2xLE8LNu+AE
TR2aG/2ophBCEoSr8umWCXbtIZ2xnRkwJpEbOXpJ0KSbrB8FQYQpPHE3HwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK24UbBpo9ekawJoy/qfoABZyNUBMB8GA1UdIwQY
MBaAFBkzfKVt58O5d4dTaezeU4UlFXRvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR1ROOHBXM253N2wzaDFOcDdONVRoU1VWZEc4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi9iOGQ4MzMtZjM5Ni00YjFmLWEwZTMt
NTZiODgxMWU0OTI2LzEvR1ROOHBXM253N2wzaDFOcDdONVRoU1VWZEc4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYi9iOGQ4MzMtZjM5Ni00YjFmLWEwZTMtNTZiODgxMWU0OTI2
LzEvR1ROOHBXM253N2wzaDFOcDdONVRoU1VWZEc4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAGEC8nuO
03ZnEh3Uz1OSx1OXDTvjChRDMS3A9RKc+5YpIg0cu+dA5YcwuSvjUhFW059dJgd1
iAwWUsJNd3+bMS5h7Z4D4ftkPivAmKXIRKEhV9Y8ICOvql9/gaauUygUo+6fZkEH
ICN9hOv9sdoIGWNoxzayZnTurweiArZJKnFNFAJHpe5Bw8fjM50+zco1yxxgsQhQ
3i4U+OQOdLlgxUvf4aaXlMGpdyxdAEa6vrNzvvHDoz9XF2MX9CH+TX0PYT+bVqD8
r2Mgv/fl3g/T7ts+4Jb74GMFNmOhc69sNuAhiPKteTF6z3BopvwKh+0ovJ92nD04
lUjxyAuKaMlTdg==
-----END CERTIFICATE-----