Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/892a27-fdb6-4285-829a-87f5b6479d1e/1/GKhKjkdfZgbnoS-SszDWPY-IC-A.mft
File:                     GKhKjkdfZgbnoS-SszDWPY-IC-A.mft (raw, json)
Hash identifier:          kiiH4YXw7FF62vXcrRd2fz+QZnzBu01OPI/Xn1leyS4=
Subject key identifier:   EA:60:42:3E:AD:12:FD:74:13:3A:00:6A:F4:94:9E:D6:B3:F3:61:7B
Authority key identifier: 18:A8:4A:8E:47:5F:66:06:E7:A1:2F:92:B3:30:D6:3D:8F:88:0B:E0
Certificate issuer:       /CN=18a84a8e475f6606e7a12f92b330d63d8f880be0
Certificate serial:       0195E0EB014539B7118878A6DFED8840AD3F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GKhKjkdfZgbnoS-SszDWPY-IC-A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d8/892a27-fdb6-4285-829a-87f5b6479d1e/1/GKhKjkdfZgbnoS-SszDWPY-IC-A.mft
Manifest number:          0D1A
Signing time:             Sat 29 Mar 2025 08:00:52 +0000
Manifest this update:     Sat 29 Mar 2025 08:00:52 +0000
Manifest next update:     Sun 30 Mar 2025 08:00:52 +0000
Files and hashes:         1: GKhKjkdfZgbnoS-SszDWPY-IC-A.crl (hash: IeXzwYJ4dL6vtZDu/XqwfdDfnqw1CZJiNc3dyWb6TXU=)
                          2: Kot_9W-z5W9clQssyO_RwTkY8os.roa (hash: RiAmjKyPe+jYgz0emcbcNd9sovJ3TU3wuyEDxRv4KU8=)
                          3: T8wfyMdVYO2pjTxLu-sXHav7xb4.roa (hash: wl6nwJQYbPdR2wx0aUH8mDWuK+w6c/DDvIQ/E5ZhcW8=)
                          4: f1RZXAhEg31a-K2NYzsPeQqdHwI.roa (hash: 08m92bP9sI2GbA9p2mUsOu1DMSTzd+WdkX5Gq/lzuNo=)
                          5: tm430U4MT2PCSKOqthlACUfwpXU.roa (hash: oQ5muHmRQJQhR0gSulEeCf46ida6cl+Es7PcXAkB/VU=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:e0:eb:01:45:39:b7:11:88:78:a6:df:ed:88:40:ad:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18a84a8e475f6606e7a12f92b330d63d8f880be0
        Validity
            Not Before: Mar 29 08:00:52 2025 GMT
            Not After : Mar 30 08:00:52 2025 GMT
        Subject: CN=ea60423ead12fd74133a006af4949ed6b3f3617b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:48:41:b3:a9:a3:6a:cd:d2:cd:4f:66:f2:3f:
                    98:35:84:48:24:c7:c1:76:92:4b:b0:ec:c7:fc:6a:
                    52:e3:04:dc:d2:58:6f:a9:91:a1:23:cb:13:5d:5c:
                    42:0b:b5:28:22:4d:42:f6:d4:48:08:38:35:34:c3:
                    fb:7f:31:99:de:34:3c:c5:1a:03:e0:a0:72:7e:7a:
                    fa:73:1a:9b:7b:bb:c3:e4:28:a6:bd:1b:ae:e5:2d:
                    42:89:4a:60:c7:27:4b:d7:86:9d:cc:b4:4e:52:f8:
                    3f:ad:56:97:44:d7:07:cf:a6:3e:7c:87:0e:fc:75:
                    a0:72:9f:b3:1b:bb:b2:2d:e1:3e:ca:55:81:18:22:
                    f9:a5:e0:18:6e:85:21:c4:b6:45:fc:ed:40:8f:c7:
                    e1:7f:67:f8:ea:80:54:d7:26:2a:91:96:15:69:c5:
                    51:30:e9:23:68:1d:9c:59:7e:e6:ce:35:87:92:fb:
                    f6:33:a3:f7:99:9b:7b:a0:cf:e2:fe:10:a0:e1:0e:
                    86:2d:88:82:22:7b:8a:57:dc:88:de:9c:2d:ad:89:
                    17:e0:3d:62:25:30:c0:32:3a:cc:e5:70:9d:e6:ba:
                    f8:95:56:a1:f0:1c:78:d4:1e:d6:38:10:55:21:f3:
                    75:10:ed:1b:cf:f3:99:62:eb:d0:9b:26:3d:de:29:
                    51:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:60:42:3E:AD:12:FD:74:13:3A:00:6A:F4:94:9E:D6:B3:F3:61:7B
            X509v3 Authority Key Identifier:
                keyid:18:A8:4A:8E:47:5F:66:06:E7:A1:2F:92:B3:30:D6:3D:8F:88:0B:E0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GKhKjkdfZgbnoS-SszDWPY-IC-A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/892a27-fdb6-4285-829a-87f5b6479d1e/1/GKhKjkdfZgbnoS-SszDWPY-IC-A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/892a27-fdb6-4285-829a-87f5b6479d1e/1/GKhKjkdfZgbnoS-SszDWPY-IC-A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:ea:9b:f0:05:13:61:80:50:8b:92:1f:af:83:4d:2f:62:49:
         3b:e4:60:27:fa:e2:8c:2d:5c:65:12:0d:ca:b4:b9:22:0d:ec:
         21:b0:db:ca:cf:2d:e1:95:c6:d8:e0:cc:4f:35:35:65:03:6a:
         5b:06:b8:c3:b4:ca:cf:8f:2d:e4:67:04:b3:cd:0c:55:3f:3e:
         e8:d8:57:b5:d5:b2:2e:d9:08:ea:42:5a:34:11:fb:b5:ab:7d:
         88:af:83:18:c8:67:a5:5f:6a:0a:c0:f2:7d:1a:ec:0a:c7:39:
         f4:fc:2b:d3:84:87:56:61:9b:92:07:fc:77:a1:65:eb:50:2f:
         34:04:a6:8e:23:be:1d:d0:f5:c4:4f:59:57:d0:fb:48:0f:3a:
         93:cd:77:da:2a:31:42:ad:fe:f5:cd:ac:f0:06:d0:91:cf:43:
         bd:5a:ca:4e:3b:3e:a9:e3:cb:cf:ba:8c:76:c0:36:32:87:13:
         77:3b:52:3d:e4:a2:84:33:d3:c5:3d:93:56:83:31:76:f0:07:
         6b:d1:51:e7:ea:51:4d:c8:b8:d1:66:d8:cb:4f:08:cd:79:73:
         d3:b8:01:43:7b:6e:13:5d:4d:47:aa:52:f6:aa:8d:3c:e0:aa:
         f0:56:3b:f9:2f:67:a8:82:9a:bb:2e:1d:43:a3:ac:b2:fe:08:
         a7:cd:48:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----