Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/e5ef45-e91a-4581-88d5-c97f079eb47e/1/Gk5J_8lNNSDAPxh7HAvGE3IFuL4.mft
File:                     Gk5J_8lNNSDAPxh7HAvGE3IFuL4.mft (raw, json)
Hash identifier:          OZrcOBpQgAwDkdvKr1IZMzrfLykE/hliSA3camktxXs=
Subject key identifier:   2D:AB:C3:D2:53:F8:51:CE:01:0B:34:A9:FD:BF:DB:9E:7B:FB:3B:FB
Authority key identifier: 1A:4E:49:FF:C9:4D:35:20:C0:3F:18:7B:1C:0B:C6:13:72:05:B8:BE
Certificate issuer:       /CN=1a4e49ffc94d3520c03f187b1c0bc6137205b8be
Certificate serial:       0192E0BB262134C6D255CFEF984973BE9CF3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Gk5J_8lNNSDAPxh7HAvGE3IFuL4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e1/e5ef45-e91a-4581-88d5-c97f079eb47e/1/Gk5J_8lNNSDAPxh7HAvGE3IFuL4.mft
Manifest number:          07
Signing time:             Thu 31 Oct 2024 04:00:14 +0000
Manifest this update:     Thu 31 Oct 2024 04:00:14 +0000
Manifest next update:     Fri 01 Nov 2024 04:00:14 +0000
Files and hashes:         1: 5VACnYMCfOSl5kfv9jwSE2a3TfM.roa (hash: ohDLl7POfjlQGxNWLmKZfIRa2wPAKIl3SJ++CBDH1LE=)
                          2: Gk5J_8lNNSDAPxh7HAvGE3IFuL4.crl (hash: vDDbYN0+Uza6aDJ70JCfNdDkl8R1+9i4C4f3b/fXkSc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:92:e0:bb:26:21:34:c6:d2:55:cf:ef:98:49:73:be:9c:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1a4e49ffc94d3520c03f187b1c0bc6137205b8be
        Validity
            Not Before: Oct 31 04:00:14 2024 GMT
            Not After : Nov  1 04:00:14 2024 GMT
        Subject: CN=2dabc3d253f851ce010b34a9fdbfdb9e7bfb3bfb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:2f:e2:de:0d:26:79:09:f9:e5:4e:57:91:04:
                    f1:79:ad:62:aa:9a:1e:a5:4d:50:6d:eb:06:93:78:
                    a8:61:b1:fd:05:21:b8:1e:a2:78:90:39:d5:f6:7f:
                    5a:41:ed:b5:f0:5d:c6:d9:38:1e:7d:b7:d6:66:16:
                    65:ff:6f:77:ff:a0:1b:3e:9e:73:2b:c8:62:44:80:
                    1d:c6:23:10:92:ab:65:a4:3b:b6:f3:12:65:25:4e:
                    f0:60:a7:76:31:e0:49:90:30:d8:fd:cc:35:3e:68:
                    0f:75:3b:bc:5f:f1:1f:ca:48:9c:61:65:3d:5a:5f:
                    d3:5b:3c:d8:b1:09:ac:c5:d7:2d:c1:37:61:8f:f5:
                    d5:6e:89:3a:64:54:1f:f1:8a:6b:e9:03:7a:0b:c3:
                    ee:e5:2b:4a:6e:59:42:8e:ba:88:d8:18:e0:53:6d:
                    bf:e5:99:e3:ff:77:aa:54:ce:1f:51:53:ea:0f:6a:
                    c1:bb:3f:9a:fe:ea:27:0e:57:ed:61:37:c1:99:c7:
                    3d:ba:3c:ac:0b:a6:75:8b:7e:31:d9:aa:a3:c5:53:
                    2b:cd:2b:79:e7:79:88:45:d2:f7:a5:e6:d8:40:36:
                    93:26:dd:22:2c:6f:65:84:da:c7:a5:42:db:19:ad:
                    09:27:06:98:e3:ea:07:6f:1c:52:5d:bc:9e:cc:42:
                    e9:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:AB:C3:D2:53:F8:51:CE:01:0B:34:A9:FD:BF:DB:9E:7B:FB:3B:FB
            X509v3 Authority Key Identifier:
                keyid:1A:4E:49:FF:C9:4D:35:20:C0:3F:18:7B:1C:0B:C6:13:72:05:B8:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gk5J_8lNNSDAPxh7HAvGE3IFuL4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/e5ef45-e91a-4581-88d5-c97f079eb47e/1/Gk5J_8lNNSDAPxh7HAvGE3IFuL4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/e5ef45-e91a-4581-88d5-c97f079eb47e/1/Gk5J_8lNNSDAPxh7HAvGE3IFuL4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:74:e5:09:a4:a1:80:6f:ac:e5:46:36:cf:b3:f8:7c:f6:be:
         97:2b:d6:63:48:55:38:56:7d:79:d4:30:f9:9f:6e:ed:cd:de:
         1b:29:ab:82:26:c0:db:7c:9d:d4:a3:e0:b6:83:8c:87:31:d9:
         54:23:fc:ae:a9:0c:17:3d:04:c9:f0:b9:ed:0e:df:55:04:49:
         e5:11:7f:1b:5b:28:72:58:8e:ec:46:53:1f:83:76:48:28:24:
         b1:df:72:5b:76:7a:e2:05:6c:7e:06:90:90:b7:db:99:c0:26:
         ee:74:47:86:bf:85:43:6c:b1:25:55:7f:16:1a:3f:b2:bf:1b:
         59:c4:2e:e3:3f:d0:f6:67:87:e7:b4:2c:20:42:df:48:c6:9c:
         ff:5f:f7:09:31:4f:8a:69:5e:30:dd:7a:2a:90:6b:c8:ac:ed:
         15:4c:95:0e:f1:df:d5:7e:95:c3:11:6c:19:42:ef:aa:a4:0f:
         31:1e:6d:32:23:c3:09:4f:45:c9:16:72:f5:f3:7f:ce:b6:cc:
         db:b3:41:97:e2:8d:42:89:ac:83:df:9d:77:22:57:cc:b9:57:
         35:09:ec:59:7a:83:04:14:33:32:8b:69:b8:24:18:a9:97:56:
         ec:28:88:7d:56:85:83:81:dd:a7:d3:6f:ec:7f:4a:16:17:9d:
         f0:27:60:2f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZLguyYhNMbSVc/vmElzvpzzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFhNGU0OWZmYzk0ZDM1MjBjMDNmMTg3YjFjMGJjNjEzNzIw
NWI4YmUwHhcNMjQxMDMxMDQwMDE0WhcNMjQxMTAxMDQwMDE0WjAzMTEwLwYDVQQD
EygyZGFiYzNkMjUzZjg1MWNlMDEwYjM0YTlmZGJmZGI5ZTdiZmIzYmZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAny/i3g0meQn55U5XkQTxea1iqpoe
pU1QbesGk3ioYbH9BSG4HqJ4kDnV9n9aQe218F3G2TgefbfWZhZl/293/6AbPp5z
K8hiRIAdxiMQkqtlpDu28xJlJU7wYKd2MeBJkDDY/cw1PmgPdTu8X/EfykicYWU9
Wl/TWzzYsQmsxdctwTdhj/XVbok6ZFQf8Ypr6QN6C8Pu5StKbllCjrqI2BjgU22/
5Znj/3eqVM4fUVPqD2rBuz+a/uonDlftYTfBmcc9ujysC6Z1i34x2aqjxVMrzSt5
53mIRdL3pebYQDaTJt0iLG9lhNrHpULbGa0JJwaY4+oHbxxSXbyezELpzQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFC2rw9JT+FHOAQs0qf2/2557+zv7MB8GA1UdIwQY
MBaAFBpOSf/JTTUgwD8YexwLxhNyBbi+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR2s1Sl84bE5OU0RBUHhoN0hBdkdFM0lGdUw0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMS9lNWVmNDUtZTkxYS00NTgxLTg4ZDUt
Yzk3ZjA3OWViNDdlLzEvR2s1Sl84bE5OU0RBUHhoN0hBdkdFM0lGdUw0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMS9lNWVmNDUtZTkxYS00NTgxLTg4ZDUtYzk3ZjA3OWViNDdl
LzEvR2s1Sl84bE5OU0RBUHhoN0hBdkdFM0lGdUw0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASXTlCaSh
gG+s5UY2z7P4fPa+lyvWY0hVOFZ9edQw+Z9u7c3eGymrgibA23yd1KPgtoOMhzHZ
VCP8rqkMFz0EyfC57Q7fVQRJ5RF/G1socliO7EZTH4N2SCgksd9yW3Z64gVsfgaQ
kLfbmcAm7nRHhr+FQ2yxJVV/Fho/sr8bWcQu4z/Q9meH57QsIELfSMac/1/3CTFP
imleMN16KpBryKztFUyVDvHf1X6VwxFsGULvqqQPMR5tMiPDCU9FyRZy9fN/zrbM
27NBl+KNQomsg9+ddyJXzLlXNQnsWXqDBBQzMotpuCQYqZdW7CiIfVaFg4Hdp9Nv
7H9KFhed8CdgLw==
-----END CERTIFICATE-----