Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/1371a6-f5f3-43bf-aff4-7685c9670017/1/gvolsvyxRoEUtziSirINh2G_iDE.mft
File:                     gvolsvyxRoEUtziSirINh2G_iDE.mft (raw, json)
Hash identifier:          +RiuzthTSpjfMSOPWRpECpNYoGjgdfbCnyf3+IpwLRo=
Subject key identifier:   7D:5A:96:DC:E2:83:2C:ED:88:B5:51:62:D3:94:8F:5A:B5:F3:FF:CE
Authority key identifier: 82:FA:25:B2:FC:B1:46:81:14:B7:38:92:8A:B2:0D:87:61:BF:88:31
Certificate issuer:       /CN=82fa25b2fcb1468114b738928ab20d8761bf8831
Certificate serial:       0194BD17B9E903A76D4212A81908116600C2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gvolsvyxRoEUtziSirINh2G_iDE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/86/1371a6-f5f3-43bf-aff4-7685c9670017/1/gvolsvyxRoEUtziSirINh2G_iDE.mft
Manifest number:          107D
Signing time:             Fri 31 Jan 2025 16:00:36 +0000
Manifest this update:     Fri 31 Jan 2025 16:00:36 +0000
Manifest next update:     Sat 01 Feb 2025 16:00:36 +0000
Files and hashes:         1: gvolsvyxRoEUtziSirINh2G_iDE.crl (hash: DzGr0BknasOJomxtypqEHrmK2OaNwDNHsd8grS0tt7w=)
                          2: vYeUQvTtmRwFxe2HjEVg0-w3YtY.roa (hash: 5J5aN+7Pc9ymOEzVJcf+044A0ctdwVC0r43YEoVys+8=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bd:17:b9:e9:03:a7:6d:42:12:a8:19:08:11:66:00:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=82fa25b2fcb1468114b738928ab20d8761bf8831
        Validity
            Not Before: Jan 31 16:00:36 2025 GMT
            Not After : Feb  1 16:00:36 2025 GMT
        Subject: CN=7d5a96dce2832ced88b55162d3948f5ab5f3ffce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:ce:34:13:d3:90:f5:a8:53:74:1d:1e:3c:4a:
                    d7:c0:15:ca:97:2e:07:d2:21:e8:07:a7:d1:3f:b8:
                    77:0c:65:d7:82:f3:71:a0:fe:e9:56:37:b3:6f:42:
                    ab:1d:03:40:35:d8:15:67:eb:97:f3:ab:2c:82:fe:
                    b5:5c:c2:51:85:cf:ee:87:74:3a:19:70:e2:1a:0b:
                    2f:48:34:82:f4:78:20:b9:44:13:03:7a:be:ce:ca:
                    7e:8f:c9:aa:42:76:52:f6:5a:a1:97:5c:10:98:f0:
                    b9:09:8e:2f:36:a8:e6:2e:e2:a8:5a:7d:cb:35:f9:
                    97:30:f9:5d:99:85:41:2f:7b:8f:62:ce:eb:5f:27:
                    41:f3:c1:0c:fe:b9:36:ce:52:dd:e3:83:82:64:e9:
                    40:38:d8:7d:8d:ba:ca:d8:a4:12:05:9a:43:e2:18:
                    ec:b7:02:8c:e7:15:ed:23:f6:ee:09:b6:a6:3e:3c:
                    3a:19:37:e3:d6:21:5e:52:af:04:9f:84:87:f1:b8:
                    4d:0f:eb:f0:fa:49:b0:47:1b:12:f8:87:53:d3:b6:
                    eb:a5:4c:58:f6:da:e7:50:10:ac:0d:90:72:37:5b:
                    a8:4f:9d:a1:17:f5:94:c4:3f:a8:ce:31:ec:c3:d9:
                    90:ca:09:d3:d3:a6:46:59:97:f2:8a:56:90:33:28:
                    6c:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:5A:96:DC:E2:83:2C:ED:88:B5:51:62:D3:94:8F:5A:B5:F3:FF:CE
            X509v3 Authority Key Identifier:
                keyid:82:FA:25:B2:FC:B1:46:81:14:B7:38:92:8A:B2:0D:87:61:BF:88:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gvolsvyxRoEUtziSirINh2G_iDE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/1371a6-f5f3-43bf-aff4-7685c9670017/1/gvolsvyxRoEUtziSirINh2G_iDE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/86/1371a6-f5f3-43bf-aff4-7685c9670017/1/gvolsvyxRoEUtziSirINh2G_iDE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:29:92:42:95:5d:e1:bb:f1:cb:0d:4d:ef:dc:f8:a9:9c:ba:
         6c:1b:0d:87:ad:d8:61:b7:59:b1:9b:08:99:f1:5e:fb:c5:b2:
         71:90:f6:83:00:f6:3e:b6:3a:07:ef:0b:7b:fb:71:79:6b:58:
         d3:f7:d5:90:9b:4b:b0:b5:fb:c9:ce:81:a4:2d:d8:61:21:39:
         08:74:32:ff:6b:0a:0c:a5:7b:c8:8f:5d:1d:2e:8c:ec:c1:43:
         7a:6e:1e:01:74:85:03:93:11:79:18:41:da:2f:e9:50:33:87:
         7a:b7:7f:50:a3:93:84:6c:7f:85:b9:ce:04:64:86:18:98:63:
         6f:ac:2e:d0:1c:57:78:bf:54:cc:eb:9d:e7:b3:e3:e1:d3:c3:
         2d:09:02:ac:ae:92:df:76:73:70:bd:27:56:51:82:79:0d:ed:
         4d:eb:bd:89:1c:68:eb:53:7b:55:c3:f7:d8:33:ba:bd:7c:86:
         33:5e:e3:84:a4:e7:f2:3c:3d:cc:33:63:87:ce:dc:08:68:45:
         07:f1:0a:ca:9b:ce:2f:da:30:14:e1:64:c2:df:7b:e8:d9:80:
         5b:ed:99:4f:99:c4:33:31:6d:b1:67:4f:9e:1a:bd:8e:50:67:
         75:e6:84:26:40:57:4d:65:e0:02:0d:d9:df:ed:83:ce:a0:46:
         7e:04:b4:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:44:28 2025 by rpki-client