Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/3a094c-ff8e-4b44-81f0-94c7601aefda/1/GROVdcQBKD__U2E3sOg-VBX-GNA.mft
File:                     GROVdcQBKD__U2E3sOg-VBX-GNA.mft (raw, json)
Hash identifier:          vz+NxaudOROt8scKJXIHVelC5wAm3gujgnzVoNNJjqs=
Subject key identifier:   2A:BC:27:AD:F7:D9:34:9D:C5:73:F6:97:19:2D:E6:AC:64:A1:E0:BD
Authority key identifier: 19:13:95:75:C4:01:28:3F:FF:53:61:37:B0:E8:3E:54:15:FE:18:D0
Certificate issuer:       /CN=19139575c401283fff536137b0e83e5415fe18d0
Certificate serial:       0194BBCEFB9EE0E356C43182038C194CCB99
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GROVdcQBKD__U2E3sOg-VBX-GNA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6f/3a094c-ff8e-4b44-81f0-94c7601aefda/1/GROVdcQBKD__U2E3sOg-VBX-GNA.mft
Manifest number:          08A2
Signing time:             Fri 31 Jan 2025 10:01:31 +0000
Manifest this update:     Fri 31 Jan 2025 10:01:31 +0000
Manifest next update:     Sat 01 Feb 2025 10:01:31 +0000
Files and hashes:         1: 8OOoLJDz_FI_NX92WvwejRS7DhA.roa (hash: +qvS9QKZwMOlAg8I6Vrzt2whC56wBRZ4LOEjIO7SoII=)
                          2: GROVdcQBKD__U2E3sOg-VBX-GNA.crl (hash: CBq/LL7IEjtknSCnF939K5CP0ucko7fzvPT8d1bZ9R0=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bb:ce:fb:9e:e0:e3:56:c4:31:82:03:8c:19:4c:cb:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=19139575c401283fff536137b0e83e5415fe18d0
        Validity
            Not Before: Jan 31 10:01:31 2025 GMT
            Not After : Feb  1 10:01:31 2025 GMT
        Subject: CN=2abc27adf7d9349dc573f697192de6ac64a1e0bd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:59:45:ad:99:ab:b7:fb:35:86:74:99:ef:b1:
                    8b:67:31:3c:40:a1:ce:ca:ac:c4:4a:d9:66:85:89:
                    45:c9:fe:db:05:37:3c:4d:21:0c:f2:ae:db:ca:f5:
                    1b:f5:15:e2:74:47:67:60:bc:6a:94:6c:b2:d0:ba:
                    e0:0e:25:99:5b:56:c5:2e:a3:e8:ad:67:36:64:16:
                    01:ba:36:d4:10:25:4e:7d:c7:03:7f:0b:ce:fc:25:
                    c0:f2:5a:52:81:28:2e:ef:03:fe:0f:f5:ce:2a:ee:
                    03:37:91:2e:45:9c:e8:79:2e:30:93:4c:ed:d2:5a:
                    41:13:34:c3:d5:1c:02:82:97:34:c3:77:e0:d9:a7:
                    15:b5:9a:5c:03:0d:b4:45:c9:56:dc:6d:f3:86:e9:
                    70:e3:17:9f:1f:41:9e:70:e4:ea:bb:1b:b7:2f:4f:
                    fb:4a:e0:d0:27:2d:4b:df:94:f7:cd:f0:12:72:ae:
                    02:75:4d:51:46:14:82:c0:65:a8:8e:84:35:d6:0f:
                    af:a2:7b:b9:a1:cc:da:56:6d:a6:1b:bd:d2:9d:d9:
                    fe:5f:01:2e:7a:16:07:f8:97:f0:84:07:2d:74:f1:
                    36:93:df:9b:7e:04:03:1f:27:49:cd:4b:e2:f0:e5:
                    b3:8d:3c:17:65:6f:59:92:ac:b1:c0:c2:0b:68:fc:
                    ce:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:BC:27:AD:F7:D9:34:9D:C5:73:F6:97:19:2D:E6:AC:64:A1:E0:BD
            X509v3 Authority Key Identifier:
                keyid:19:13:95:75:C4:01:28:3F:FF:53:61:37:B0:E8:3E:54:15:FE:18:D0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GROVdcQBKD__U2E3sOg-VBX-GNA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/3a094c-ff8e-4b44-81f0-94c7601aefda/1/GROVdcQBKD__U2E3sOg-VBX-GNA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/3a094c-ff8e-4b44-81f0-94c7601aefda/1/GROVdcQBKD__U2E3sOg-VBX-GNA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:12:f2:89:69:0c:4e:a4:46:09:30:bd:2b:ec:0e:2b:6e:e0:
         e3:b2:c6:f3:95:83:b2:6f:d3:ef:7c:43:5a:85:ce:d7:ec:d9:
         cc:19:07:f4:a6:a8:fc:5a:5e:99:a9:e3:66:26:0b:d7:8a:d3:
         62:3a:24:cc:fe:ba:cf:d7:60:9d:c2:b6:8e:4f:ab:89:6b:c9:
         00:58:cb:6b:d6:cf:f2:57:9d:74:f6:65:2c:ba:ee:14:5d:0e:
         41:1e:ba:dc:40:59:6d:63:63:bf:c6:3c:8f:f8:cc:ce:fb:31:
         41:ad:ac:5f:d7:94:f5:fc:4f:51:90:96:7d:7e:45:c7:78:c1:
         d4:d1:29:6f:9f:44:06:29:3c:cc:d3:31:eb:65:1d:d1:bb:0e:
         71:a2:17:49:f3:6f:2d:2f:92:e0:07:aa:a1:30:30:f6:aa:41:
         f5:75:9d:de:13:b0:ec:77:10:60:11:c1:a5:d2:8a:3e:80:df:
         b5:38:fc:84:fd:f3:01:21:27:57:1e:59:1e:36:94:83:75:6f:
         a7:53:56:24:cc:80:71:b1:79:50:d3:98:c1:f8:08:1e:e2:03:
         9c:42:49:a4:2b:96:41:ad:61:ae:83:a7:a5:db:45:ce:01:78:
         03:59:1c:ce:60:62:4c:9e:90:08:dd:97:4c:f6:8c:ba:b6:e2:
         18:a9:af:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:41:08 2025 by rpki-client