Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/11c52c-41aa-4e95-ad67-a021a63ddfc3/1/GgSJ3JwKdMLtU-HZ4fv92Mh3O5Q.mft
File:                     GgSJ3JwKdMLtU-HZ4fv92Mh3O5Q.mft (raw, json)
Hash identifier:          aSCj+bTsSkshGjhyfHAAMCcPrP3xjKzzoZaiKT6+U28=
Subject key identifier:   13:AA:9E:AE:08:4A:0B:00:57:45:79:09:AB:3B:33:11:EF:DB:7D:75
Authority key identifier: 1A:04:89:DC:9C:0A:74:C2:ED:53:E1:D9:E1:FB:FD:D8:C8:77:3B:94
Certificate issuer:       /CN=1a0489dc9c0a74c2ed53e1d9e1fbfdd8c8773b94
Certificate serial:       0195E0466001801ECCA8FC503D4B4E6AA606
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GgSJ3JwKdMLtU-HZ4fv92Mh3O5Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9a/11c52c-41aa-4e95-ad67-a021a63ddfc3/1/GgSJ3JwKdMLtU-HZ4fv92Mh3O5Q.mft
Manifest number:          0FC3
Signing time:             Sat 29 Mar 2025 05:01:03 +0000
Manifest this update:     Sat 29 Mar 2025 05:01:03 +0000
Manifest next update:     Sun 30 Mar 2025 05:01:03 +0000
Files and hashes:         1: 9anLZpxCdtczPvdlYCXgAxbRs8M.roa (hash: CyG4Wg4fSftiyOPdmKS2+akGyemcGA5SuHd1aeIvuWs=)
                          2: GgSJ3JwKdMLtU-HZ4fv92Mh3O5Q.crl (hash: LIWa1JMmW7M5OCTNPZ/00vSjgXNgZFHH8ReLKet6Jow=)
                          3: wgLpdQzEQiut3zZPkrk2it4-KJM.roa (hash: rQ6r9VvnZsN117x/0JkyHFIrRA5vncbf9BthsT1+A7U=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:e0:46:60:01:80:1e:cc:a8:fc:50:3d:4b:4e:6a:a6:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1a0489dc9c0a74c2ed53e1d9e1fbfdd8c8773b94
        Validity
            Not Before: Mar 29 05:01:03 2025 GMT
            Not After : Mar 30 05:01:03 2025 GMT
        Subject: CN=13aa9eae084a0b0057457909ab3b3311efdb7d75
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:81:82:99:a8:b7:ae:34:62:7e:0d:64:b1:6d:
                    21:68:1b:73:83:f2:02:35:ce:8c:a4:38:60:d7:b0:
                    b8:de:58:2c:3c:c6:45:a1:95:21:33:30:02:d2:e6:
                    9b:81:da:37:e3:12:72:f3:53:78:99:f0:9d:b7:84:
                    f9:00:21:af:5a:8d:18:69:26:e8:1f:79:1e:10:07:
                    64:63:fc:48:bf:9e:18:1d:b1:5b:41:82:ad:09:98:
                    d3:e9:21:41:c0:4f:02:78:47:f0:49:7f:ce:68:34:
                    df:31:55:31:e5:50:a6:c8:d1:24:d7:ed:a2:23:0f:
                    e0:da:14:14:1e:a8:0c:c8:85:84:c8:09:f4:0d:87:
                    dc:18:b1:e7:10:da:75:a4:33:03:de:a1:e4:f4:b5:
                    58:a4:e0:f9:a4:71:1f:7d:48:ad:c0:0a:cf:35:7c:
                    c9:7f:f3:8b:00:31:dc:3b:aa:70:f7:42:af:e3:c5:
                    2c:2e:e6:13:2e:9b:d7:52:8a:86:a8:e4:56:29:f0:
                    d0:5c:5f:9f:d0:44:06:d2:85:ad:a4:70:ee:11:89:
                    c8:a3:98:d3:3c:f8:b5:a8:e9:5d:b6:b3:17:4d:47:
                    c5:1e:5b:4a:17:43:d9:9d:53:3d:4c:a1:47:75:79:
                    e6:1f:b8:cb:53:63:be:aa:40:07:3a:cf:14:f6:7f:
                    ed:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:AA:9E:AE:08:4A:0B:00:57:45:79:09:AB:3B:33:11:EF:DB:7D:75
            X509v3 Authority Key Identifier:
                keyid:1A:04:89:DC:9C:0A:74:C2:ED:53:E1:D9:E1:FB:FD:D8:C8:77:3B:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GgSJ3JwKdMLtU-HZ4fv92Mh3O5Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/11c52c-41aa-4e95-ad67-a021a63ddfc3/1/GgSJ3JwKdMLtU-HZ4fv92Mh3O5Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/11c52c-41aa-4e95-ad67-a021a63ddfc3/1/GgSJ3JwKdMLtU-HZ4fv92Mh3O5Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a5:8f:40:63:25:ad:5e:a2:51:0c:a3:25:de:fb:ca:59:89:73:
         5a:de:cd:ca:d7:b7:65:56:c6:72:20:b6:11:7a:83:c1:02:52:
         f9:b8:23:2a:fa:5f:85:cd:7f:57:78:be:81:dd:bb:44:19:35:
         9f:06:0f:0b:a5:86:63:62:79:96:d8:40:fd:33:84:b9:46:15:
         ee:94:d9:30:27:1e:fb:80:86:dd:8f:54:ac:df:23:3b:2b:5b:
         12:93:fa:9e:5d:1a:4f:74:67:a1:17:59:09:8a:eb:84:50:cc:
         33:21:33:8b:86:3b:12:c6:56:d6:9b:d3:25:fa:85:ad:bc:fc:
         1c:15:d2:27:cb:72:ce:ea:5d:00:f9:8a:e6:80:5c:8e:7b:0e:
         0f:bd:54:12:31:56:ef:10:b0:ee:33:6f:fc:71:f8:c7:9f:81:
         21:b4:fe:74:94:a1:43:52:82:45:13:2a:66:c6:5d:4d:5b:f7:
         57:f6:70:43:6c:7d:89:84:16:36:6f:f7:98:71:37:55:7d:0c:
         6a:50:db:e1:e6:a6:49:bf:72:9d:77:88:1c:30:31:d9:31:97:
         ef:c3:0b:16:39:a1:f5:5a:0d:75:19:c5:6d:c4:10:a3:13:b0:
         d0:1d:f7:2c:38:86:a3:78:fd:80:2a:65:26:9d:3c:99:94:e5:
         44:b6:ae:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----