Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/d88e87-62f9-475b-a84d-036e7efc9aca/1/gLonv9hqgQoXlX0fcm_hYNTrMiU.mft
File:                     gLonv9hqgQoXlX0fcm_hYNTrMiU.mft (raw, json)
Hash identifier:          52+c5zlwF/N3rsuUUpb5NFFc08RRNUch5i7V0nEoDAg=
Subject key identifier:   9E:A6:EB:9A:62:F8:22:87:AD:79:AF:01:82:BA:1D:15:C9:CE:61:1F
Authority key identifier: 80:BA:27:BF:D8:6A:81:0A:17:95:7D:1F:72:6F:E1:60:D4:EB:32:25
Certificate issuer:       /CN=80ba27bfd86a810a17957d1f726fe160d4eb3225
Certificate serial:       01962DF3B25D3E71076AF25C7FCB30773F93
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gLonv9hqgQoXlX0fcm_hYNTrMiU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0f/d88e87-62f9-475b-a84d-036e7efc9aca/1/gLonv9hqgQoXlX0fcm_hYNTrMiU.mft
Manifest number:          14E5
Signing time:             Sun 13 Apr 2025 07:01:07 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:07 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:07 +0000
Files and hashes:         1: gLonv9hqgQoXlX0fcm_hYNTrMiU.crl (hash: A1yP6kUf1BkVA2o08jcdJxSXZhnJu4vCBZQRzMWZGhQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f3:b2:5d:3e:71:07:6a:f2:5c:7f:cb:30:77:3f:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=80ba27bfd86a810a17957d1f726fe160d4eb3225
        Validity
            Not Before: Apr 13 07:01:07 2025 GMT
            Not After : Apr 14 07:01:07 2025 GMT
        Subject: CN=9ea6eb9a62f82287ad79af0182ba1d15c9ce611f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:08:2d:2a:7f:09:63:28:ce:0e:4d:31:71:99:
                    3d:a8:d6:6f:48:dd:e9:0f:81:35:70:f4:27:e7:e9:
                    65:26:ab:1f:bf:df:f5:f6:77:26:8e:f7:bb:6d:82:
                    25:eb:36:f1:c7:a7:7e:3f:44:2c:f5:fd:aa:3c:40:
                    cd:84:30:52:7b:31:69:72:b4:54:7c:2c:cb:ed:1f:
                    62:29:51:3d:dc:bb:15:c8:ed:0e:2e:d2:12:65:52:
                    aa:bf:b7:94:30:5f:b0:71:1e:7c:d2:df:df:90:17:
                    93:07:dc:ea:66:8b:fe:8d:ad:70:21:15:d4:23:fc:
                    89:14:e1:0b:93:48:cb:30:21:24:fb:bb:e2:9b:27:
                    a3:d2:07:87:a1:fc:9a:2f:e3:90:d3:11:7b:0f:fc:
                    cf:a3:90:55:75:6b:17:84:ae:2a:95:0d:5b:94:4f:
                    b0:49:6c:f3:0e:20:d9:22:d3:a7:c5:69:ea:68:16:
                    89:5c:50:61:5d:7e:fe:cd:02:84:16:73:f7:7b:38:
                    bf:52:a7:98:74:ab:84:f3:8c:43:0d:f5:62:62:0f:
                    eb:cb:fd:82:85:40:09:b8:88:90:6b:63:50:5f:97:
                    d1:8e:ff:bf:23:b5:27:73:cb:43:32:9a:30:61:5b:
                    db:aa:e6:36:04:eb:80:5f:5b:3d:59:b1:f9:0d:de:
                    d7:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:A6:EB:9A:62:F8:22:87:AD:79:AF:01:82:BA:1D:15:C9:CE:61:1F
            X509v3 Authority Key Identifier:
                keyid:80:BA:27:BF:D8:6A:81:0A:17:95:7D:1F:72:6F:E1:60:D4:EB:32:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gLonv9hqgQoXlX0fcm_hYNTrMiU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/d88e87-62f9-475b-a84d-036e7efc9aca/1/gLonv9hqgQoXlX0fcm_hYNTrMiU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/d88e87-62f9-475b-a84d-036e7efc9aca/1/gLonv9hqgQoXlX0fcm_hYNTrMiU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:bd:4a:aa:df:63:4f:63:21:29:8c:ae:e6:dc:48:c7:48:4c:
         71:d2:41:59:43:06:e1:43:b5:60:29:a8:38:0a:57:08:72:69:
         d9:90:54:e4:b9:e1:ae:e7:ad:14:c5:b5:0c:3d:34:2a:7c:2d:
         b4:1e:90:d3:54:35:66:27:17:6b:ac:cd:f2:ca:38:a1:9a:5e:
         55:a7:0f:3b:6f:ea:39:46:c4:3d:c2:cf:28:f2:88:dc:09:88:
         ce:c1:2d:eb:fa:62:f8:15:3b:e6:36:48:df:b8:3f:fb:c4:dc:
         ed:91:03:76:40:8a:32:5c:71:36:36:66:94:a9:1d:9c:2b:28:
         67:05:91:ef:72:f0:bd:f5:0d:6a:93:fc:fa:cf:d4:85:3c:34:
         a6:3b:f3:d2:37:d1:81:d4:49:a4:85:df:71:b4:31:fe:be:60:
         0a:de:41:16:ef:c4:db:1d:60:e0:bc:28:93:36:6d:ce:be:25:
         d2:7d:75:71:ac:4c:bb:ef:dc:27:47:72:c5:89:bc:a0:6d:93:
         f5:26:8c:84:b4:67:b7:43:eb:b1:53:a6:57:ab:02:4e:58:37:
         ee:bc:60:7f:50:7f:7d:3c:db:01:78:9e:3c:74:6c:32:03:dd:
         2d:33:7b:33:5f:a9:83:8b:d0:dd:d5:0a:62:fd:92:2c:25:f8:
         5f:ca:97:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----