Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/20d6a8-c4e2-47e3-90df-1c8ed36d2566/1/GyceKuYih3VSuJ28R016EwWEpI4.mft
File:                     GyceKuYih3VSuJ28R016EwWEpI4.mft (raw, json)
Hash identifier:          rOq1uM/LIZkGWk0B9jqW79GHblDt8E8L9og+AhszCkA=
Subject key identifier:   14:5D:29:4F:4A:3A:90:D6:5D:BE:D9:4B:0D:1B:EF:A9:52:61:20:A2
Authority key identifier: 1B:27:1E:2A:E6:22:87:75:52:B8:9D:BC:47:4D:7A:13:05:84:A4:8E
Certificate issuer:       /CN=1b271e2ae622877552b89dbc474d7a130584a48e
Certificate serial:       01962F74D3359658508BBAD12C192D7577EA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GyceKuYih3VSuJ28R016EwWEpI4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/02/20d6a8-c4e2-47e3-90df-1c8ed36d2566/1/GyceKuYih3VSuJ28R016EwWEpI4.mft
Manifest number:          08F7
Signing time:             Sun 13 Apr 2025 14:01:47 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:47 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:47 +0000
Files and hashes:         1: GyceKuYih3VSuJ28R016EwWEpI4.crl (hash: 4jGZVdEXcEVdOvpGbPfON8K27yh5cRwirzCx0HvFOa8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:d3:35:96:58:50:8b:ba:d1:2c:19:2d:75:77:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1b271e2ae622877552b89dbc474d7a130584a48e
        Validity
            Not Before: Apr 13 14:01:47 2025 GMT
            Not After : Apr 14 14:01:47 2025 GMT
        Subject: CN=145d294f4a3a90d65dbed94b0d1befa9526120a2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:99:df:87:e0:dc:1f:33:00:c6:99:f3:9b:3c:
                    40:d4:c5:9a:36:8d:c0:bb:42:f4:a4:c9:d4:76:f0:
                    d5:f9:fb:5d:23:3c:19:6c:14:34:37:cb:c0:36:84:
                    7f:83:5d:c6:76:2d:2e:74:bc:f2:37:dc:f0:3b:6b:
                    57:42:20:fc:9b:f7:f3:1b:8e:27:b0:f6:76:3b:26:
                    f8:0a:55:63:47:2f:7a:b0:04:23:11:37:9a:75:a0:
                    f0:92:cc:9a:89:55:9a:64:46:f3:46:67:68:b3:23:
                    27:23:7a:70:5c:84:0a:a4:42:f2:32:61:aa:74:68:
                    ab:47:cb:5d:8c:18:41:b4:1a:24:03:bd:30:b9:3f:
                    c8:d8:8b:91:1a:b7:a3:bb:0f:09:29:87:02:27:bf:
                    c9:9d:22:bc:6f:b3:56:7e:c7:5b:58:94:91:77:df:
                    46:f3:11:3c:37:eb:c3:ff:08:1d:63:63:e5:d3:03:
                    86:25:01:4a:47:e9:2d:f0:90:da:65:cd:a2:60:b6:
                    c0:08:a1:33:ae:29:2f:41:69:34:19:69:5f:50:fa:
                    59:bd:e7:3a:5d:27:ea:24:35:28:c6:a6:1c:c8:19:
                    0f:5e:dc:eb:38:7e:54:52:f8:9e:b4:9c:f0:29:c9:
                    5a:30:06:e1:b4:34:e8:d5:20:7e:13:b9:fe:18:25:
                    1c:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:5D:29:4F:4A:3A:90:D6:5D:BE:D9:4B:0D:1B:EF:A9:52:61:20:A2
            X509v3 Authority Key Identifier:
                keyid:1B:27:1E:2A:E6:22:87:75:52:B8:9D:BC:47:4D:7A:13:05:84:A4:8E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GyceKuYih3VSuJ28R016EwWEpI4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/20d6a8-c4e2-47e3-90df-1c8ed36d2566/1/GyceKuYih3VSuJ28R016EwWEpI4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/02/20d6a8-c4e2-47e3-90df-1c8ed36d2566/1/GyceKuYih3VSuJ28R016EwWEpI4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:92:d4:13:3f:67:09:13:90:a1:8d:78:49:1e:a4:65:92:3d:
         90:65:e4:62:9d:60:3c:a7:25:43:8a:cf:a5:e5:d4:31:11:6e:
         de:f5:5c:3b:a3:79:3a:31:01:8a:37:00:2e:1d:c7:c2:6d:94:
         1a:e3:d4:58:f1:23:0f:21:1a:cb:be:a6:e3:5f:94:00:3b:10:
         b9:04:99:1b:1a:53:a4:9a:76:ff:a5:bb:b9:84:c0:f8:aa:dc:
         50:32:a5:fb:dd:4e:a2:28:ca:cb:b5:c5:32:4e:f8:d3:19:c3:
         21:af:ca:0f:61:4d:76:64:1e:f0:7a:f3:75:f2:ae:56:22:9d:
         59:72:5a:5c:73:b4:e7:82:dd:1a:d3:f2:43:0b:d2:0c:d9:5e:
         31:45:51:9c:c4:78:4e:8a:70:c3:bb:f3:dd:3a:89:a0:f1:6c:
         45:be:97:9f:c2:ae:cf:35:a3:d2:e6:da:0c:5b:d1:99:00:05:
         26:dc:3e:cc:35:a5:7c:01:43:98:65:ed:1f:6a:eb:84:82:3d:
         5c:36:6b:d8:34:56:7e:71:04:f4:5b:95:90:e1:3c:4a:eb:f9:
         16:e1:75:d6:02:fb:a4:1b:6b:f2:68:5e:0b:e5:8d:26:c4:66:
         9e:eb:e6:75:c2:3e:6a:86:a9:e0:db:79:2d:df:9b:3e:e4:f6:
         d5:34:74:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----