Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/a8f471-c243-4cc6-970d-ff7dc04ba385/1/gOUG_PHXz2SdOI6XXKJiUuIZ_Hw.mft
File:                     gOUG_PHXz2SdOI6XXKJiUuIZ_Hw.mft (raw, json)
Hash identifier:          6pOzT2G/V4ktaCEn063CEMZ67LzOSw2h2PXEl1mjcWo=
Subject key identifier:   91:60:45:18:AF:83:2C:1B:BA:1D:C5:28:68:A6:54:8A:BA:B0:F8:26
Authority key identifier: 80:E5:06:FC:F1:D7:CF:64:9D:38:8E:97:5C:A2:62:52:E2:19:FC:7C
Certificate issuer:       /CN=80e506fcf1d7cf649d388e975ca26252e219fc7c
Certificate serial:       01962F3D460B0A3FE6720D7F311F8DF7228D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gOUG_PHXz2SdOI6XXKJiUuIZ_Hw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fc/a8f471-c243-4cc6-970d-ff7dc04ba385/1/gOUG_PHXz2SdOI6XXKJiUuIZ_Hw.mft
Manifest number:          108A
Signing time:             Sun 13 Apr 2025 13:01:06 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:06 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:06 +0000
Files and hashes:         1: gOUG_PHXz2SdOI6XXKJiUuIZ_Hw.crl (hash: i2Ch7R5BsUlKku7QFTXY/sMi0Pqv+ioEoudSoc4xkqs=)
                          2: iR_ztCB6R1k94ApZF9GyNibhF8I.roa (hash: YgaarQK+xvFmoK9MLi28PlE1obREeY36cujrYCHGRgg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:46:0b:0a:3f:e6:72:0d:7f:31:1f:8d:f7:22:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=80e506fcf1d7cf649d388e975ca26252e219fc7c
        Validity
            Not Before: Apr 13 13:01:06 2025 GMT
            Not After : Apr 14 13:01:06 2025 GMT
        Subject: CN=91604518af832c1bba1dc52868a6548abab0f826
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:20:6e:af:c0:99:34:14:63:ea:2a:5b:1d:d9:
                    79:f1:57:9b:a9:e3:03:fb:ad:41:2d:78:bc:e8:9d:
                    4b:6b:3c:d0:ca:fd:e1:b7:ae:e7:50:3b:1f:e6:ef:
                    d0:b4:8f:0a:d1:78:57:70:78:9f:48:3c:50:9d:86:
                    f9:6e:ba:66:32:ca:49:dd:ce:ee:64:89:d2:ad:3a:
                    3a:9b:12:cd:92:20:62:81:8e:03:8d:99:23:90:a2:
                    ab:b8:2d:94:a5:74:0c:55:cc:f8:b4:8a:02:1a:67:
                    4c:c9:d3:72:86:3c:09:7d:93:77:73:53:9a:a8:bf:
                    b1:4a:b0:92:b4:0d:26:5a:48:2b:53:c0:f2:36:84:
                    61:e9:4c:21:c5:25:bc:43:55:a9:ba:a3:98:59:10:
                    96:dd:01:f9:f9:94:22:a9:2e:b4:a9:80:1a:4a:0a:
                    2e:ba:52:17:7b:f8:75:58:22:ba:86:d5:bc:c7:8f:
                    8e:4a:2a:ed:67:3c:ce:86:e2:9f:29:89:d5:e2:e3:
                    ca:17:2f:ff:b4:20:51:c7:a5:63:77:7a:69:89:d2:
                    45:49:cd:df:03:bc:b5:82:de:0c:5a:82:1c:1c:b0:
                    dc:cd:9b:e1:4e:0d:87:26:ed:8d:ef:ee:0a:16:7d:
                    3c:95:13:dc:db:3a:14:2a:62:b1:22:bd:8c:19:c0:
                    86:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:60:45:18:AF:83:2C:1B:BA:1D:C5:28:68:A6:54:8A:BA:B0:F8:26
            X509v3 Authority Key Identifier:
                keyid:80:E5:06:FC:F1:D7:CF:64:9D:38:8E:97:5C:A2:62:52:E2:19:FC:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gOUG_PHXz2SdOI6XXKJiUuIZ_Hw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/a8f471-c243-4cc6-970d-ff7dc04ba385/1/gOUG_PHXz2SdOI6XXKJiUuIZ_Hw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/a8f471-c243-4cc6-970d-ff7dc04ba385/1/gOUG_PHXz2SdOI6XXKJiUuIZ_Hw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:af:1b:a5:37:31:18:73:14:73:bc:b2:3d:8f:c2:25:fb:fc:
         f2:6a:c4:ad:66:14:71:61:b0:99:5a:4b:11:66:37:7e:dc:ff:
         49:c2:ab:a0:31:e4:da:73:9b:19:0d:b3:85:03:96:29:6c:5e:
         6d:bd:b5:9e:28:83:80:59:6a:7e:41:33:a7:00:fc:e8:14:a3:
         cf:f9:a1:37:d3:62:80:a7:59:b4:a6:4a:14:6e:16:25:d9:2f:
         c8:e6:c0:5f:88:a8:2e:2f:2c:8f:93:fa:2e:c7:07:41:60:c0:
         49:1c:f0:9f:a0:58:51:cf:14:39:59:5b:95:73:85:3a:4e:cb:
         5c:0e:1a:05:13:b2:9d:ae:b6:26:77:19:98:58:b0:33:20:b1:
         30:20:f1:ac:0c:48:e5:98:a5:e5:bb:35:b3:8c:3a:7f:c7:25:
         18:92:40:11:57:58:2f:10:1a:a5:f3:d8:d2:f8:21:d5:49:45:
         d6:1e:f7:fd:5f:ac:cb:c3:d3:11:1d:9f:6f:c2:94:d6:31:29:
         d9:69:16:d2:c1:6e:92:7e:da:0b:7c:2f:57:08:3d:26:3b:31:
         e4:58:d7:c0:48:85:1b:85:bf:40:25:a6:94:ad:c9:5d:79:97:
         6d:cf:0f:9c:29:4b:e8:94:a8:17:74:3a:00:62:49:54:d6:1b:
         f7:8f:6c:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----