Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/533a8e-94fd-4b20-afb6-b3641ccdd4bb/1/GJabxilVETwNBJme7JG92p0vo6U.mft
File:                     GJabxilVETwNBJme7JG92p0vo6U.mft (raw, json)
Hash identifier:          d2NM0eLqGmjkXqgFAUou/o2PI+tsSzqhdizbZuFdIAE=
Subject key identifier:   35:66:09:BD:9E:F0:14:AD:9C:EB:CA:6D:20:8C:1D:BC:94:8A:E1:9F
Authority key identifier: 18:96:9B:C6:29:55:11:3C:0D:04:99:9E:EC:91:BD:DA:9D:2F:A3:A5
Certificate issuer:       /CN=18969bc62955113c0d04999eec91bdda9d2fa3a5
Certificate serial:       019515489B6BCD3F4130D0C792F584BADD65
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GJabxilVETwNBJme7JG92p0vo6U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/52/533a8e-94fd-4b20-afb6-b3641ccdd4bb/1/GJabxilVETwNBJme7JG92p0vo6U.mft
Manifest number:          1459
Signing time:             Mon 17 Feb 2025 19:00:34 +0000
Manifest this update:     Mon 17 Feb 2025 19:00:34 +0000
Manifest next update:     Tue 18 Feb 2025 19:00:34 +0000
Files and hashes:         1: 64hfXKK79DNnwBiHMNhcan7gApw.roa (hash: 1pILT2yG6cl/7OeMa23s3WaOano0QbCAXRD1Tm3/Qkg=)
                          2: GJabxilVETwNBJme7JG92p0vo6U.crl (hash: vQy9ZvU8yTLfLGp/gFaQEpCMv0IEw+/RqhJT35KEgwE=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:15:48:9b:6b:cd:3f:41:30:d0:c7:92:f5:84:ba:dd:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18969bc62955113c0d04999eec91bdda9d2fa3a5
        Validity
            Not Before: Feb 17 19:00:34 2025 GMT
            Not After : Feb 18 19:00:34 2025 GMT
        Subject: CN=356609bd9ef014ad9cebca6d208c1dbc948ae19f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:f0:5a:bb:72:e9:bb:9b:12:27:b3:4c:fb:ca:
                    6e:b8:55:ff:8c:91:89:8d:cf:60:6a:f8:62:34:8c:
                    46:90:d3:55:3f:f6:51:a5:da:8e:7f:4f:6c:b1:97:
                    f3:29:6d:6e:a6:ae:ff:c8:5c:a6:cc:90:ac:68:4b:
                    41:db:d5:de:b5:c4:87:6e:73:70:ce:b0:c5:b5:59:
                    8d:fd:11:dc:bc:95:ec:fa:ed:16:eb:02:7e:ce:cb:
                    0a:5f:48:35:1e:69:e3:cf:2f:7f:e6:fe:2e:71:8e:
                    d3:95:da:82:a9:97:60:79:05:fb:8f:9c:df:3d:5d:
                    a1:98:0b:f9:41:5f:df:16:a6:fc:0d:fe:30:76:58:
                    d1:83:5f:81:1e:a1:77:76:a1:56:4a:c5:34:d2:13:
                    7a:cb:61:f0:ea:74:e7:c4:a0:f3:fd:0a:44:3a:a7:
                    91:77:ea:f1:6d:ff:4c:d4:2b:ef:dc:90:27:8c:93:
                    47:c9:34:2f:f1:f6:2f:1d:0a:96:a0:d8:1c:d2:ea:
                    17:21:f9:d4:3a:09:06:28:7b:f8:ec:17:21:38:41:
                    1c:67:50:e3:74:21:60:b4:67:3f:20:11:2e:29:d7:
                    d8:f2:43:8a:0c:36:59:35:39:29:de:e3:33:c8:0a:
                    86:e6:bf:fe:a0:fe:17:6f:0c:5b:6a:ed:28:69:df:
                    2f:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:66:09:BD:9E:F0:14:AD:9C:EB:CA:6D:20:8C:1D:BC:94:8A:E1:9F
            X509v3 Authority Key Identifier:
                keyid:18:96:9B:C6:29:55:11:3C:0D:04:99:9E:EC:91:BD:DA:9D:2F:A3:A5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GJabxilVETwNBJme7JG92p0vo6U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/533a8e-94fd-4b20-afb6-b3641ccdd4bb/1/GJabxilVETwNBJme7JG92p0vo6U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/52/533a8e-94fd-4b20-afb6-b3641ccdd4bb/1/GJabxilVETwNBJme7JG92p0vo6U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:ad:2f:4e:cf:ee:a3:d8:ea:c1:7d:74:bf:e1:72:77:80:28:
         6b:8e:17:6c:15:31:d0:4e:9e:d5:60:f9:61:a4:31:f2:f1:4b:
         3a:1f:57:9e:70:17:6a:cd:22:e4:65:cb:19:60:bf:29:13:05:
         49:91:90:c0:8e:da:77:9f:93:16:08:9b:4e:69:e4:99:91:16:
         71:6b:1c:2e:57:f4:09:8d:8f:6d:af:a1:98:19:d1:b7:a3:f3:
         fc:bb:9a:05:dd:81:e8:ee:aa:75:97:8d:72:21:4f:1e:74:50:
         c6:67:41:61:ea:db:b5:3b:fb:8e:fc:f1:ef:7e:7d:b1:63:24:
         03:15:da:db:93:c5:44:46:12:3f:2e:b6:42:9b:e3:a5:5c:d8:
         0d:0a:a6:3b:87:be:a1:6b:9c:2b:39:54:2d:cd:59:1f:81:7f:
         d0:4b:a1:a4:cd:da:11:0b:c8:64:c2:71:b0:32:95:ed:93:37:
         0e:10:d4:3f:72:15:10:50:98:78:4e:45:23:7e:ce:f2:7e:b3:
         63:5c:22:85:50:13:9f:4a:b7:62:47:ec:21:9e:71:80:b5:fe:
         26:1b:67:bc:36:da:4a:2e:1c:ea:8c:4b:8b:b1:68:c6:cb:66:
         f8:f7:62:ed:9d:62:0f:b6:ce:d7:6a:31:dc:4c:b0:b9:4b:d3:
         f6:75:ee:c5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZUVSJtrzT9BMNDHkvWEut1lMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE4OTY5YmM2Mjk1NTExM2MwZDA0OTk5ZWVjOTFiZGRhOWQy
ZmEzYTUwHhcNMjUwMjE3MTkwMDM0WhcNMjUwMjE4MTkwMDM0WjAzMTEwLwYDVQQD
EygzNTY2MDliZDllZjAxNGFkOWNlYmNhNmQyMDhjMWRiYzk0OGFlMTlmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1/Bau3Lpu5sSJ7NM+8puuFX/jJGJ
jc9gavhiNIxGkNNVP/ZRpdqOf09ssZfzKW1upq7/yFymzJCsaEtB29XetcSHbnNw
zrDFtVmN/RHcvJXs+u0W6wJ+zssKX0g1Hmnjzy9/5v4ucY7TldqCqZdgeQX7j5zf
PV2hmAv5QV/fFqb8Df4wdljRg1+BHqF3dqFWSsU00hN6y2Hw6nTnxKDz/QpEOqeR
d+rxbf9M1Cvv3JAnjJNHyTQv8fYvHQqWoNgc0uoXIfnUOgkGKHv47BchOEEcZ1Dj
dCFgtGc/IBEuKdfY8kOKDDZZNTkp3uMzyAqG5r/+oP4Xbwxbau0oad8veQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDVmCb2e8BStnOvKbSCMHbyUiuGfMB8GA1UdIwQY
MBaAFBiWm8YpVRE8DQSZnuyRvdqdL6OlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR0phYnhpbFZFVHdOQkptZTdKRzkycDB2bzZVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Mi81MzNhOGUtOTRmZC00YjIwLWFmYjYt
YjM2NDFjY2RkNGJiLzEvR0phYnhpbFZFVHdOQkptZTdKRzkycDB2bzZVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Mi81MzNhOGUtOTRmZC00YjIwLWFmYjYtYjM2NDFjY2RkNGJi
LzEvR0phYnhpbFZFVHdOQkptZTdKRzkycDB2bzZVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeq0vTs/u
o9jqwX10v+Fyd4Aoa44XbBUx0E6e1WD5YaQx8vFLOh9XnnAXas0i5GXLGWC/KRMF
SZGQwI7ad5+TFgibTmnkmZEWcWscLlf0CY2Pba+hmBnRt6Pz/LuaBd2B6O6qdZeN
ciFPHnRQxmdBYerbtTv7jvzx7359sWMkAxXa25PFREYSPy62QpvjpVzYDQqmO4e+
oWucKzlULc1ZH4F/0EuhpM3aEQvIZMJxsDKV7ZM3DhDUP3IVEFCYeE5FI37O8n6z
Y1wihVATn0q3YkfsIZ5xgLX+JhtnvDbaSi4c6oxLi7Foxstm+Pdi7Z1iD7bO12ox
3EywuUvT9nXuxQ==
-----END CERTIFICATE-----