Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/GBAXciSJlrh9kIQMLSfWJUlFgXM.mft
File:                     GBAXciSJlrh9kIQMLSfWJUlFgXM.mft (raw, json)
Hash identifier:          AKVD7ADHjirCaInAGtWtYzKpQX0eRfKJnkCcsh/ZWGQ=
Subject key identifier:   BA:A9:60:44:65:8D:6A:1C:47:DE:F9:44:C3:93:04:88:F6:F0:E5:02
Authority key identifier: 18:10:17:72:24:89:96:B8:7D:90:84:0C:2D:27:D6:25:49:45:81:73
Certificate issuer:       /CN=18101772248996b87d90840c2d27d62549458173
Certificate serial:       0194BC72D2064BD2C581776BFD1565A1BC2C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GBAXciSJlrh9kIQMLSfWJUlFgXM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/GBAXciSJlrh9kIQMLSfWJUlFgXM.mft
Manifest number:          1423
Signing time:             Fri 31 Jan 2025 13:00:28 +0000
Manifest this update:     Fri 31 Jan 2025 13:00:28 +0000
Manifest next update:     Sat 01 Feb 2025 13:00:28 +0000
Files and hashes:         1: 1-uFGyEDrsJ2Tn-2rEKT_dIMcV7s.roa (hash: VBjHQuaKImGimGPCmnypVNR3O3LL9PxVL9z9KgYtrow=)
                          2: 3RzB5tJS0oiPrnFU1JD80KRBdSM.roa (hash: 7NiLIwQ9kymps4BJ4j5KwlhzIcoENtYuGIE5yKcMeqM=)
                          3: 6dChuohTDCDCdX4xGrGFs8noFQU.roa (hash: xhBX5O5lALmdJBG0Zdk5Gif2Y7IwFUtNAXlVBenOuI0=)
                          4: ADw5ULNp5csIlPVZQfXB8yIQYtU.roa (hash: q0MPcDmug9yHkrtSvpk3xWn1fbFk/3h4YL5GZCs73Bs=)
                          5: CSdBKAAdfW7cwun5izwk606xA6w.roa (hash: Ig/6bzx+3zQBa9AHiPdoQd7yxLAcSLLT7yZ9/s6Z7Bk=)
                          6: CamDV6EMiCzkpjzSA5DCBzSmm88.roa (hash: JV9zqepY4N2AO8yc2eogQKWbkVBXJ8vcgsnMjEIFHUI=)
                          7: F05pDSdP6LoB0OP4bH1TiON5TDE.roa (hash: nXDcHsVqskZHQebgQIJgL/95s4mzZsJSrrip91rsqAc=)
                          8: GBAXciSJlrh9kIQMLSfWJUlFgXM.crl (hash: 4M+n1tUKsVqwXqEsCxkhBm2k/aRd72qr3GB8unaeotU=)
                          9: GxeOyVoZRKlhrsd07uGVymkqXOA.roa (hash: k5o3s2Qgx1UPo1xnCxcu1FDwfEFB39lUl4fyOvt51j8=)
                          10: Ptw4_zFCqPYQUTTCy1dZVQoxg34.roa (hash: YQcEf9Xp4z0ZmiC3BFuGxVR1J9Pf54Lb3C0rUZn2XNM=)
                          11: RGD4J9Y6yTEHY1igLZ-uvYBnces.roa (hash: sduGng/1h4H+ay2Q9Sc4d8D+jCRUFIhG2cnDQt00BLw=)
                          12: XqxEdclaAmRMTPYp41kyOEXD204.roa (hash: x7+bdDrA7xSNj6ohIZwMCkTBUTfDvQ8QVy9Lwv8uwBM=)
                          13: _gpLxW0fzvb5DJJQd0bq0o_QET0.roa (hash: tD3Cm8lKrfj4EtGNAWAxKK6dJmhObO63VITMzdu4Eek=)
                          14: bzxRiVGDHiR68JnnZkEHcQSeEgc.roa (hash: CndFCZaOMfrjRLvio2IIWmDshTZnNq5iyASkAOmKcRo=)
                          15: dSSeeBpgxumBIOIgRUYKo-rlKWo.roa (hash: lmpXcJ+CKLXvZjyKRCwdgP6g8fKXZFHNIaapVhOrY50=)
                          16: gRtu0LUQ36KM73SlUMkc38__UYk.roa (hash: AwJs+C3iqzflDXpMLXTupa1Hnui98iLghZQTs3MlUEo=)
                          17: nXJVBDoTghhlgcnafBRSHmZouZE.roa (hash: xXzsE/ERNc12Y9tGy7/dqjCiaS8wDYYBGzdTk2QGemM=)
                          18: qgPjnbxNpbDqvwf_d4VSEhwjpVU.roa (hash: bNvXj9xQb3LIJevq5+1LF5QI+fNnOyWnvLuoU9F7vcY=)
                          19: rrUNWOAHpdHgyxxJieb0wNdGaqU.roa (hash: njmYuUZq0RHFa7IUQo8a41jl5mw6uDWyn1XW2onkIz4=)
                          20: vAx_VrKuXs6fW_dI0Wfg2zqQKyY.roa (hash: 5ByrVJIYv2RUjs1ehBX3+MAJFx5uaR9Ai9D+J0IoBzs=)
                          21: xWvxYFAZyAYuQbuw5LcBYmpTVhE.roa (hash: jF6nMrItYL3p1nixedbqVRkj6MMqr/ktH4rh4D+Amos=)
                          22: zBB80tlDlWdUGM0XNThH3proqVk.roa (hash: Hpnc7kBqdnVZtObcZbR6l/FES2WWxBkwCVz3pFbI3rM=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:72:d2:06:4b:d2:c5:81:77:6b:fd:15:65:a1:bc:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18101772248996b87d90840c2d27d62549458173
        Validity
            Not Before: Jan 31 13:00:28 2025 GMT
            Not After : Feb  1 13:00:28 2025 GMT
        Subject: CN=baa96044658d6a1c47def944c3930488f6f0e502
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:7a:95:88:06:8d:77:38:51:77:b3:5a:1d:0f:
                    af:ee:e5:6f:1a:e7:45:7e:6d:33:25:7d:1c:3e:53:
                    fa:2d:e7:3a:cf:99:7a:fe:e0:d0:b1:d6:2c:64:cb:
                    e9:8a:1a:19:c7:ef:f3:79:a6:f4:fd:b7:2a:f8:c7:
                    aa:fa:7a:42:1e:2a:b4:5a:74:5e:4d:00:56:c4:70:
                    28:b0:74:20:d8:bb:ec:4c:9f:2e:1e:d1:e4:5d:c8:
                    16:b9:55:5c:2a:44:72:3a:73:ea:08:bb:7d:ba:fb:
                    d8:15:40:a4:a3:fb:8f:87:8d:37:3c:71:dd:0f:89:
                    70:27:39:39:cc:0d:d2:0f:d5:a4:bd:5b:79:d1:e0:
                    8d:38:5e:82:7c:58:4e:33:6a:e3:4f:d1:67:82:f8:
                    10:86:e6:79:38:c5:71:7a:fe:b2:c2:17:e9:ac:a0:
                    23:96:17:fb:1f:cd:59:d4:13:c7:4e:9c:01:cf:eb:
                    1b:38:f0:c1:f8:bb:67:ef:44:3d:a1:73:f2:24:46:
                    2e:8f:29:98:80:d6:25:a2:3b:04:7b:58:3c:63:85:
                    ea:5f:b1:a1:85:da:32:2d:5b:7c:e1:b4:02:8a:dd:
                    7a:cc:59:71:fe:3d:82:af:12:1d:e0:75:f7:c2:b0:
                    ba:10:05:e3:81:b1:3f:d6:6c:9b:51:16:88:ab:74:
                    04:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:A9:60:44:65:8D:6A:1C:47:DE:F9:44:C3:93:04:88:F6:F0:E5:02
            X509v3 Authority Key Identifier:
                keyid:18:10:17:72:24:89:96:B8:7D:90:84:0C:2D:27:D6:25:49:45:81:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GBAXciSJlrh9kIQMLSfWJUlFgXM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/GBAXciSJlrh9kIQMLSfWJUlFgXM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/GBAXciSJlrh9kIQMLSfWJUlFgXM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:71:04:42:7b:4c:3e:03:b3:09:bf:44:80:4d:91:dd:b5:a2:
         63:ee:83:d8:63:e6:c2:0c:dc:21:fc:1b:b9:46:04:50:21:55:
         ef:46:ad:c2:8b:a0:6a:9a:0c:b8:60:80:d7:2b:94:fa:77:65:
         58:54:c0:b6:74:e6:30:7c:94:cb:56:33:02:3f:98:1b:99:1b:
         ae:57:57:1a:be:63:89:c3:77:78:8f:f6:99:fb:13:1d:b7:73:
         5b:d2:1d:21:37:9f:c1:2c:ac:1f:98:7a:18:5c:96:22:4c:c2:
         5d:2f:d6:85:11:63:7c:e3:27:e9:b2:a8:1a:37:a4:17:bd:9a:
         20:b5:a1:fc:b1:a8:47:68:9f:bf:2c:87:d4:c7:c4:79:35:a3:
         3b:3b:7d:ce:98:4b:98:be:05:d8:2c:f3:eb:36:de:70:3b:b4:
         44:33:94:dc:48:42:6a:d6:5f:7d:3a:03:59:b6:84:34:25:b4:
         44:63:7f:7c:18:4c:a4:33:cd:9b:3c:f8:a6:49:89:4a:93:7a:
         cd:e0:07:39:a6:8d:5c:69:97:78:2c:38:87:04:45:91:12:fd:
         a4:9e:6a:85:b4:74:50:84:ca:e4:cd:95:d6:e6:6d:2e:cc:f0:
         e4:6c:a3:93:8a:34:3e:ee:68:60:69:ac:6a:05:f4:72:71:18:
         a6:78:a3:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:01:02 2025 by rpki-client