Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/c3daf9-3721-4591-8890-1e7a505864ba/1/GreiV-JheJd0mVL-Vt8ZQMmjhlk.mft
File:                     GreiV-JheJd0mVL-Vt8ZQMmjhlk.mft (raw, json)
Hash identifier:          pODaytx3vIqtyS7ckbafELWoOx8Q5pZhlqek/J/ofJY=
Subject key identifier:   11:0D:1F:93:82:7A:6D:7B:28:6B:59:E3:48:BC:F2:81:0A:FD:36:0F
Authority key identifier: 1A:B7:A2:57:E2:61:78:97:74:99:52:FE:56:DF:19:40:C9:A3:86:59
Certificate issuer:       /CN=1ab7a257e2617897749952fe56df1940c9a38659
Certificate serial:       01962E2AF42BB8A091C3357F0BD30A27336C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GreiV-JheJd0mVL-Vt8ZQMmjhlk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ff/c3daf9-3721-4591-8890-1e7a505864ba/1/GreiV-JheJd0mVL-Vt8ZQMmjhlk.mft
Manifest number:          10A7
Signing time:             Sun 13 Apr 2025 08:01:28 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:28 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:28 +0000
Files and hashes:         1: GreiV-JheJd0mVL-Vt8ZQMmjhlk.crl (hash: vCwvohc+ugIvbeWlR72fZTHw+7wJ9HnklZG8ZSU3CR0=)
                          2: PfFy3e8LNIXwxdL8OuYhM9z12Ws.roa (hash: 8+uM2+g15li/FppVigQneM82V/zGTOIgt52B/js9MAg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2a:f4:2b:b8:a0:91:c3:35:7f:0b:d3:0a:27:33:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1ab7a257e2617897749952fe56df1940c9a38659
        Validity
            Not Before: Apr 13 08:01:28 2025 GMT
            Not After : Apr 14 08:01:28 2025 GMT
        Subject: CN=110d1f93827a6d7b286b59e348bcf2810afd360f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:74:71:a7:3d:5c:95:8e:c5:45:3e:a3:7e:ab:
                    6f:39:ca:33:d0:c0:12:22:92:c4:98:5d:d4:e3:43:
                    2b:cd:cb:c7:3a:01:df:d9:67:2d:b3:c0:6c:84:97:
                    c9:b0:af:60:37:1b:ca:2c:a9:51:61:51:5c:a6:22:
                    83:00:00:1f:c0:e9:e0:e5:94:2e:65:73:9b:9b:b3:
                    ca:5e:1c:f5:2c:c9:d4:68:d5:c2:c6:49:c4:2d:30:
                    4f:52:1e:57:1b:fc:6d:cf:2d:96:f0:fa:d7:4a:27:
                    50:ab:91:db:85:37:9e:5a:a8:34:6f:2a:b8:1a:33:
                    e5:27:e9:35:4f:1c:fa:1a:c2:17:40:aa:d3:cc:32:
                    a0:b2:59:b3:68:fa:af:54:a7:b8:a0:7c:4b:f2:e5:
                    2d:f7:4e:49:92:84:2a:96:f8:9f:5b:81:1f:2f:68:
                    a0:c7:bf:91:74:43:ac:99:46:9d:8c:46:22:2a:c1:
                    58:00:d5:9a:99:04:01:77:cd:6b:2b:68:54:92:c9:
                    4f:8e:c0:68:50:3e:7e:98:64:b9:2f:26:23:46:3b:
                    7c:6d:68:e5:86:d5:63:9f:11:15:6b:51:cc:dc:93:
                    9a:39:78:b3:b2:1c:f2:a4:df:f0:f5:1e:12:e6:8a:
                    24:50:c3:e4:ec:a9:38:a9:e9:eb:54:6b:21:62:3e:
                    c2:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:0D:1F:93:82:7A:6D:7B:28:6B:59:E3:48:BC:F2:81:0A:FD:36:0F
            X509v3 Authority Key Identifier:
                keyid:1A:B7:A2:57:E2:61:78:97:74:99:52:FE:56:DF:19:40:C9:A3:86:59

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GreiV-JheJd0mVL-Vt8ZQMmjhlk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/c3daf9-3721-4591-8890-1e7a505864ba/1/GreiV-JheJd0mVL-Vt8ZQMmjhlk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/c3daf9-3721-4591-8890-1e7a505864ba/1/GreiV-JheJd0mVL-Vt8ZQMmjhlk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:a2:0e:e4:f0:66:1e:0a:4c:b8:bc:66:70:4a:13:48:33:a2:
         23:da:88:0d:43:1c:49:c7:f2:27:a1:12:40:48:4a:32:2a:a5:
         97:85:5e:13:25:50:39:e9:56:56:a6:7c:fb:2f:ec:8e:c6:84:
         36:83:ec:69:39:ea:20:14:d3:fa:f7:4c:0e:21:5b:8a:01:86:
         13:94:75:ed:f6:3b:0c:10:66:fe:91:77:9a:ff:be:e7:93:ad:
         bb:fe:7b:f5:cd:f1:9b:34:7d:18:69:83:0b:1f:e9:03:b4:7a:
         49:b0:28:03:e6:ad:ea:de:e2:8e:1c:fa:f1:4d:a2:0c:14:55:
         9c:fb:68:10:c5:87:f7:07:0b:b7:5f:aa:f7:b5:0a:d1:8b:d7:
         b9:39:95:53:97:a2:a7:a3:0f:68:bb:64:cb:90:34:31:13:ca:
         4b:0d:81:10:c1:7e:6a:2f:81:87:3c:1d:d8:0f:75:e5:fc:e1:
         b1:89:81:ff:5d:4a:7a:53:b4:4e:06:af:b2:fa:3d:46:09:94:
         00:19:04:17:b4:70:46:c3:cc:0a:5f:78:70:33:11:97:18:28:
         5f:52:f7:33:1a:40:cc:9d:de:03:a1:f2:15:f4:d5:19:8d:21:
         12:10:83:45:6e:ab:20:43:d7:49:e8:68:3c:0e:a9:ea:65:14:
         bc:a6:b1:c9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYuKvQruKCRwzV/C9MKJzNsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFhYjdhMjU3ZTI2MTc4OTc3NDk5NTJmZTU2ZGYxOTQwYzlh
Mzg2NTkwHhcNMjUwNDEzMDgwMTI4WhcNMjUwNDE0MDgwMTI4WjAzMTEwLwYDVQQD
EygxMTBkMWY5MzgyN2E2ZDdiMjg2YjU5ZTM0OGJjZjI4MTBhZmQzNjBmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp3Rxpz1clY7FRT6jfqtvOcoz0MAS
IpLEmF3U40MrzcvHOgHf2Wcts8BshJfJsK9gNxvKLKlRYVFcpiKDAAAfwOng5ZQu
ZXObm7PKXhz1LMnUaNXCxknELTBPUh5XG/xtzy2W8PrXSidQq5HbhTeeWqg0byq4
GjPlJ+k1Txz6GsIXQKrTzDKgslmzaPqvVKe4oHxL8uUt905JkoQqlvifW4EfL2ig
x7+RdEOsmUadjEYiKsFYANWamQQBd81rK2hUkslPjsBoUD5+mGS5LyYjRjt8bWjl
htVjnxEVa1HM3JOaOXizshzypN/w9R4S5ookUMPk7Kk4qenrVGshYj7CrQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBENH5OCem17KGtZ40i88oEK/TYPMB8GA1UdIwQY
MBaAFBq3olfiYXiXdJlS/lbfGUDJo4ZZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR3JlaVYtSmhlSmQwbVZMLVZ0OFpRTW1qaGxrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZi9jM2RhZjktMzcyMS00NTkxLTg4OTAt
MWU3YTUwNTg2NGJhLzEvR3JlaVYtSmhlSmQwbVZMLVZ0OFpRTW1qaGxrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZi9jM2RhZjktMzcyMS00NTkxLTg4OTAtMWU3YTUwNTg2NGJh
LzEvR3JlaVYtSmhlSmQwbVZMLVZ0OFpRTW1qaGxrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASqIO5PBm
HgpMuLxmcEoTSDOiI9qIDUMcScfyJ6ESQEhKMiqll4VeEyVQOelWVqZ8+y/sjsaE
NoPsaTnqIBTT+vdMDiFbigGGE5R17fY7DBBm/pF3mv++55Otu/579c3xmzR9GGmD
Cx/pA7R6SbAoA+at6t7ijhz68U2iDBRVnPtoEMWH9wcLt1+q97UK0YvXuTmVU5ei
p6MPaLtky5A0MRPKSw2BEMF+ai+Bhzwd2A915fzhsYmB/11KelO0Tgavsvo9RgmU
ABkEF7RwRsPMCl94cDMRlxgoX1L3MxpAzJ3eA6HyFfTVGY0hEhCDRW6rIEPXSeho
PA6p6mUUvKaxyQ==
-----END CERTIFICATE-----