Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/aaaec0-0fba-4efc-98b6-c6a16de442bf/1/GUoR_la49HpaFBUDK3f_n7CC4D8.mft
File:                     GUoR_la49HpaFBUDK3f_n7CC4D8.mft (raw, json)
Hash identifier:          wDDtG0xdfMGmisPpF540c/ASqilO3T3b84fYAvUw6eU=
Subject key identifier:   D6:20:FA:10:4E:2A:48:44:27:69:5F:4C:85:6D:0D:56:5C:FC:DB:7A
Authority key identifier: 19:4A:11:FE:56:B8:F4:7A:5A:14:15:03:2B:77:FF:9F:B0:82:E0:3F
Certificate issuer:       /CN=194a11fe56b8f47a5a1415032b77ff9fb082e03f
Certificate serial:       01962E99A4345996FAB3542C90D8B7B63636
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GUoR_la49HpaFBUDK3f_n7CC4D8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1a/aaaec0-0fba-4efc-98b6-c6a16de442bf/1/GUoR_la49HpaFBUDK3f_n7CC4D8.mft
Manifest number:          0FA8
Signing time:             Sun 13 Apr 2025 10:02:22 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:22 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:22 +0000
Files and hashes:         1: GUoR_la49HpaFBUDK3f_n7CC4D8.crl (hash: ZiBtPTrMFsmbW4vV/HD95LTTVFUKK79HX1LauO8k0hM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:a4:34:59:96:fa:b3:54:2c:90:d8:b7:b6:36:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=194a11fe56b8f47a5a1415032b77ff9fb082e03f
        Validity
            Not Before: Apr 13 10:02:22 2025 GMT
            Not After : Apr 14 10:02:22 2025 GMT
        Subject: CN=d620fa104e2a484427695f4c856d0d565cfcdb7a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:f9:00:3b:31:00:97:22:fc:65:c8:5a:1d:8a:
                    ba:77:82:71:72:29:27:84:42:80:76:a6:8d:f1:df:
                    95:ce:81:6a:ae:c2:ef:20:19:88:38:ec:40:b0:16:
                    f5:df:39:92:8a:41:15:2b:e8:f0:7f:f1:2b:69:60:
                    e9:f2:98:2e:d6:0c:fd:61:8d:4e:a2:0d:f7:fb:14:
                    81:21:a4:31:00:7a:6e:2e:f0:dc:50:8b:49:1f:58:
                    7f:16:83:7c:70:b7:32:1c:21:21:63:af:bc:3e:8f:
                    64:39:ef:7d:94:62:b0:58:2c:09:b5:b5:21:9d:f7:
                    3b:2b:51:43:62:00:1e:a5:5d:2e:ff:3f:c3:5f:dc:
                    06:1a:84:01:3a:ec:0a:30:78:b6:18:2d:75:86:1c:
                    94:fc:70:28:52:a4:0b:a4:73:12:d0:8f:39:9c:cc:
                    77:1a:f4:82:fe:41:02:6e:07:35:ce:1d:fe:48:33:
                    58:f7:e2:cd:5b:35:9a:53:c6:f3:0d:46:91:21:af:
                    f9:e4:c1:a9:1e:60:db:51:82:f2:db:a0:f3:d9:5f:
                    92:3b:25:c0:f4:e8:ff:91:5c:39:7b:c4:f0:c1:67:
                    9a:36:84:7a:07:30:0f:ab:73:7e:57:ce:d2:68:bd:
                    66:ce:6b:2c:78:6d:fd:be:25:25:5e:e0:10:23:c9:
                    8a:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:20:FA:10:4E:2A:48:44:27:69:5F:4C:85:6D:0D:56:5C:FC:DB:7A
            X509v3 Authority Key Identifier:
                keyid:19:4A:11:FE:56:B8:F4:7A:5A:14:15:03:2B:77:FF:9F:B0:82:E0:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GUoR_la49HpaFBUDK3f_n7CC4D8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/aaaec0-0fba-4efc-98b6-c6a16de442bf/1/GUoR_la49HpaFBUDK3f_n7CC4D8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/aaaec0-0fba-4efc-98b6-c6a16de442bf/1/GUoR_la49HpaFBUDK3f_n7CC4D8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a6:49:ca:1e:30:be:8c:4c:3a:f8:aa:a1:f2:0d:9d:57:bc:08:
         5c:86:0c:fd:c0:ac:4d:89:8b:9d:8b:eb:d0:df:1a:19:04:99:
         a4:4c:83:57:c5:16:61:73:fe:23:0d:c3:cb:ed:7e:70:7e:aa:
         f5:6a:20:01:73:4e:27:ad:49:f3:82:71:9b:57:d8:c7:2c:ff:
         ec:09:59:06:7b:ca:78:94:32:97:22:7b:c9:aa:a9:b2:ad:f0:
         26:b2:ce:70:49:de:96:41:bb:77:a6:7c:d6:b5:30:68:fd:18:
         24:0c:12:7e:0e:90:4a:6b:fc:95:c6:1c:0a:b4:08:83:5a:0d:
         c2:c7:d0:1c:60:e0:52:df:65:58:05:6e:4e:9b:31:2d:b8:a1:
         b1:ef:27:64:54:ad:89:36:ea:75:c5:45:b6:86:7b:b0:67:4b:
         0c:f2:47:01:cf:98:88:ce:e5:bf:dd:ab:83:73:e7:f9:64:0d:
         d5:a5:fa:66:e9:5c:49:96:93:58:1a:01:61:40:5a:74:37:ed:
         bb:e1:cd:5c:e2:5d:15:6f:82:93:a0:15:46:43:72:b7:d0:99:
         e5:a9:3f:03:13:93:3c:d7:e5:ce:e5:ae:42:bc:5e:dc:72:24:
         6b:09:0a:99:52:cc:29:12:7d:dc:6c:f1:8d:1f:66:45:ca:29:
         fd:61:bc:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----