Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/7247b0-4989-43ea-9350-7a936751db1b/1/GstjdqFkjUnVXk17ATcTZ7DcKvk.mft
File:                     GstjdqFkjUnVXk17ATcTZ7DcKvk.mft (raw, json)
Hash identifier:          XrylvVcJy1x0YdwdxLPPSDBl8rztkoRQs6/fT7fk3Uk=
Subject key identifier:   5B:3C:C4:4A:DF:0A:9E:DA:5E:35:1B:52:84:5F:56:C7:ED:2A:A2:9D
Authority key identifier: 1A:CB:63:76:A1:64:8D:49:D5:5E:4D:7B:01:37:13:67:B0:DC:2A:F9
Certificate issuer:       /CN=1acb6376a1648d49d55e4d7b01371367b0dc2af9
Certificate serial:       0194BCE0C729B5F82218BD4BF776CA58F9ED
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GstjdqFkjUnVXk17ATcTZ7DcKvk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/99/7247b0-4989-43ea-9350-7a936751db1b/1/GstjdqFkjUnVXk17ATcTZ7DcKvk.mft
Manifest number:          0864
Signing time:             Fri 31 Jan 2025 15:00:35 +0000
Manifest this update:     Fri 31 Jan 2025 15:00:35 +0000
Manifest next update:     Sat 01 Feb 2025 15:00:35 +0000
Files and hashes:         1: 2qbv-Pz4jvP3wMojh-nzxxXsgEA.roa (hash: 6+tOpgdGlSlIz8zd2wwUoB5CJwy5U+RYKeXiB03sSqI=)
                          2: 4iz3Hu7F2tbrDoJ4Ra5IwOQBcc8.roa (hash: IuX1GQGX1ljfGB12u2KgCWJaKWaeRSMtVHGJgPlmubc=)
                          3: CIdrqclZnSmjRFuSBAbdKW19zw4.roa (hash: 9geTO1Fm8NuZG2BgvP5/MT++gloTQfJHuTiZpCoTKho=)
                          4: FK7ySAm15wLL-A5orFXHLmT_3-4.roa (hash: euYKdJ6l4Q6ZCJVn8FSzuiK3t+z0DHSmXlQqQRNIQAA=)
                          5: GstjdqFkjUnVXk17ATcTZ7DcKvk.crl (hash: 2F0fj1DmcpUojuVCYRp9PETkLa4i05LexnrvFsMyQxY=)
                          6: m8Tdxvep8gBoC6AvkeleXRfcmoc.roa (hash: JYOwdAc9iDDM7jQ9HDSgVBqUbsa0fTnhwbYX6eo7TMw=)
                          7: mgJS3W7Q1z7oQKmX5lJZfvASfdU.roa (hash: txXvckVXMlcgRykwLcE07dh3QNh7v2yueF/O/NOTi+w=)
                          8: r0MpZWGF2my5L4ptog2DrTmu7No.roa (hash: z4pivdKzari5mOdXF7fYltYsmUc2SDlRQvzzFytcUVQ=)
                          9: r1Iga4svRdXgkzzcH3Kg0RXZCVM.roa (hash: JeLfIM6nAeSe3Dl7vi7FqJjfcjK2HshwWCY2+gwSDpU=)
                          10: xdWwTqIEbBWD-ayZaCrJQr7xhvk.roa (hash: XVK45wg0nZbg1ksXLgfN8TmYvrajdIvWajx9rGkrzcs=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:e0:c7:29:b5:f8:22:18:bd:4b:f7:76:ca:58:f9:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1acb6376a1648d49d55e4d7b01371367b0dc2af9
        Validity
            Not Before: Jan 31 15:00:35 2025 GMT
            Not After : Feb  1 15:00:35 2025 GMT
        Subject: CN=5b3cc44adf0a9eda5e351b52845f56c7ed2aa29d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:15:0e:42:53:c3:10:ff:07:c7:48:a4:29:78:
                    bb:ce:65:dd:f1:b9:f3:09:dd:a5:6b:1a:af:4c:ae:
                    97:3a:e9:59:d9:54:2a:99:20:d7:c0:e5:10:2b:55:
                    5d:9f:84:91:14:76:4f:3c:77:f7:3b:08:f6:5f:7e:
                    96:13:c4:c7:f2:14:4d:fb:1f:1d:de:b8:68:bf:69:
                    c9:8b:3d:83:eb:40:03:9f:3d:10:68:c1:f0:43:ed:
                    f5:d3:88:ef:b0:7b:99:73:c5:75:67:df:26:c4:7f:
                    ec:5c:84:63:28:16:c1:4a:dc:ec:f0:3d:96:e3:42:
                    1d:f1:96:20:51:45:d7:39:27:aa:c5:3e:e9:17:28:
                    6b:9d:67:2e:8b:38:55:c5:be:6b:dc:97:97:fd:28:
                    1e:48:fa:38:f5:46:21:8c:96:0f:8d:4e:5d:c4:81:
                    4c:d8:f6:1d:52:6c:d8:c3:66:fb:43:f0:81:93:ae:
                    a5:e5:5b:5c:f6:ad:36:81:7a:dc:b1:47:0e:89:95:
                    29:69:39:e9:1c:e3:be:b1:25:d3:3b:e8:17:80:37:
                    5d:11:a8:70:96:73:ef:63:e0:26:40:60:08:95:28:
                    c9:57:81:05:54:ad:a4:cd:39:92:01:63:56:83:16:
                    bd:27:b2:5b:34:29:54:4a:c0:a5:28:f6:41:36:31:
                    89:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:3C:C4:4A:DF:0A:9E:DA:5E:35:1B:52:84:5F:56:C7:ED:2A:A2:9D
            X509v3 Authority Key Identifier:
                keyid:1A:CB:63:76:A1:64:8D:49:D5:5E:4D:7B:01:37:13:67:B0:DC:2A:F9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GstjdqFkjUnVXk17ATcTZ7DcKvk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/7247b0-4989-43ea-9350-7a936751db1b/1/GstjdqFkjUnVXk17ATcTZ7DcKvk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/99/7247b0-4989-43ea-9350-7a936751db1b/1/GstjdqFkjUnVXk17ATcTZ7DcKvk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:f9:d9:4f:eb:5e:c0:f0:b2:8f:e8:12:1c:7f:81:74:94:0d:
         e4:02:22:71:a6:fc:ff:b4:59:fd:b9:52:12:2e:97:3d:df:83:
         54:f9:3b:76:62:b8:f2:75:eb:77:17:38:d8:30:2a:1d:47:b0:
         8e:35:e4:08:a7:04:c4:99:6a:45:1f:1f:04:aa:e4:58:f9:be:
         d9:ce:a9:17:1f:15:e1:55:17:70:1f:38:77:3e:5f:c1:8c:80:
         f8:61:fb:dd:a1:c0:87:9a:fe:fe:da:96:46:bc:dd:45:c0:5d:
         eb:a1:01:ea:a5:3e:53:1a:1b:5a:1f:46:7c:77:c5:78:36:4e:
         73:76:7b:bf:9d:45:9e:8f:69:64:01:50:42:0b:bb:04:0a:bc:
         8d:6a:98:74:67:96:02:68:b4:b6:fb:f4:4a:15:99:0c:b9:d4:
         fa:20:e0:55:88:bd:a7:11:e5:9c:a7:9b:a2:de:17:f7:3b:a5:
         f3:56:c0:15:ec:71:d5:15:9a:e2:28:9a:30:d4:6a:5d:15:08:
         39:39:1c:9f:c4:ed:98:02:61:65:65:3f:a6:d6:32:18:4f:09:
         c1:8a:51:1d:7b:83:22:af:99:19:66:5f:03:a0:05:83:05:2b:
         73:d7:e6:fb:ca:0b:52:21:f7:a1:d5:81:ec:4b:9b:57:2f:c0:
         6f:e2:da:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----