Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/2d2c57-0fa5-43e6-b7b1-f99c33d6a60f/1/gdEcnUAuEuqUrqjRPVNgyvfEOyE.mft
File:                     gdEcnUAuEuqUrqjRPVNgyvfEOyE.mft (raw, json)
Hash identifier:          1ldkYaFA77JnOYrCZXbwE44+AVNo/f7bA/kfe5j/A2Y=
Subject key identifier:   20:26:B2:56:5C:67:2A:39:50:FD:4C:AF:10:4C:C5:F3:2D:00:C4:E5
Authority key identifier: 81:D1:1C:9D:40:2E:12:EA:94:AE:A8:D1:3D:53:60:CA:F7:C4:3B:21
Certificate issuer:       /CN=81d11c9d402e12ea94aea8d13d5360caf7c43b21
Certificate serial:       01962E9955F4322892AF8440E77A9A545BA9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gdEcnUAuEuqUrqjRPVNgyvfEOyE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1c/2d2c57-0fa5-43e6-b7b1-f99c33d6a60f/1/gdEcnUAuEuqUrqjRPVNgyvfEOyE.mft
Manifest number:          0815
Signing time:             Sun 13 Apr 2025 10:02:03 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:03 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:03 +0000
Files and hashes:         1: gdEcnUAuEuqUrqjRPVNgyvfEOyE.crl (hash: 72LvwXpmE6U8rW+h9amJ6EPmvhteA5lxbrnJJOM7ygE=)
                          2: h8JOFdoRpj6qGDNJuivBHNvrSRk.roa (hash: Vj2EQ4BWrvbCavVD4y/JlI7mb4cVKOnw+wqYqtWQ88Y=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:55:f4:32:28:92:af:84:40:e7:7a:9a:54:5b:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=81d11c9d402e12ea94aea8d13d5360caf7c43b21
        Validity
            Not Before: Apr 13 10:02:03 2025 GMT
            Not After : Apr 14 10:02:03 2025 GMT
        Subject: CN=2026b2565c672a3950fd4caf104cc5f32d00c4e5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:82:88:a6:18:f7:2d:b1:db:86:79:56:82:c1:
                    3b:69:4d:ce:a1:ea:6d:59:09:0b:ff:5a:19:98:b6:
                    a8:db:de:66:35:98:58:a3:20:66:ab:f7:e8:35:96:
                    1d:a9:68:ac:6e:6d:88:bc:9b:f2:4d:0a:f0:9b:89:
                    1f:dd:08:48:5e:74:88:79:4d:94:2d:3c:85:dc:d5:
                    de:9a:78:95:6a:b1:a3:85:8e:86:07:23:9b:14:33:
                    0f:86:9c:dc:d3:31:b2:68:36:5f:54:08:65:58:4e:
                    f0:ca:51:6f:66:81:3f:7b:d4:7f:28:b5:73:41:a3:
                    f5:10:2b:9e:73:b4:7b:b0:6e:34:ab:0e:2b:c1:e8:
                    ef:e6:67:5f:d8:9b:61:0f:3e:7c:78:21:7e:3f:37:
                    01:c0:0d:d0:b5:ba:f3:9f:70:10:b7:0d:71:bf:cf:
                    e3:8a:9b:81:b9:bb:f2:c9:b3:67:57:c9:84:b2:c9:
                    9c:4f:0e:2d:5f:77:6d:63:76:4f:9b:71:52:fb:1f:
                    76:1a:aa:e4:08:87:60:67:c0:ce:8f:79:01:ba:bb:
                    e4:e1:dd:3a:6b:c9:03:a7:82:4b:8f:d2:74:cc:ba:
                    f8:57:ad:c1:8f:65:b0:1e:52:5b:bf:20:17:5d:de:
                    ee:34:56:93:fb:0c:4d:1a:17:76:2b:67:30:e9:80:
                    98:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:26:B2:56:5C:67:2A:39:50:FD:4C:AF:10:4C:C5:F3:2D:00:C4:E5
            X509v3 Authority Key Identifier:
                keyid:81:D1:1C:9D:40:2E:12:EA:94:AE:A8:D1:3D:53:60:CA:F7:C4:3B:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gdEcnUAuEuqUrqjRPVNgyvfEOyE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/2d2c57-0fa5-43e6-b7b1-f99c33d6a60f/1/gdEcnUAuEuqUrqjRPVNgyvfEOyE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/2d2c57-0fa5-43e6-b7b1-f99c33d6a60f/1/gdEcnUAuEuqUrqjRPVNgyvfEOyE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:ee:dd:c3:01:31:16:fe:d9:0f:9d:b4:3b:91:0f:98:f9:5a:
         83:e4:88:c2:29:2c:a4:02:c3:c4:5f:67:d9:ee:19:0f:b5:d7:
         11:30:aa:e6:c8:7f:a7:dc:08:f4:7b:96:4f:a0:41:a2:13:77:
         d6:a8:b9:41:21:b1:3e:22:9a:0c:0e:04:7d:95:00:78:74:b4:
         db:cb:f3:53:2d:e5:2c:6b:8c:dc:7f:78:68:23:33:58:4d:90:
         b5:68:65:87:34:70:56:7e:1f:e0:09:03:ff:5e:fc:46:8d:19:
         73:84:e5:30:87:87:51:b8:5f:22:63:22:33:b2:de:3e:aa:16:
         a3:43:84:f0:86:d0:ba:9e:9e:50:e6:45:4a:e9:a6:83:5c:cb:
         17:be:f8:b9:72:ef:06:6b:16:4c:79:e1:5e:f5:57:36:de:de:
         69:5d:5a:fa:82:72:37:dd:7e:8c:17:af:34:5c:e7:80:25:14:
         c1:c3:db:2c:ec:b9:a1:87:6d:aa:dc:ce:e0:cf:5b:b8:74:6f:
         89:e7:92:87:e5:a6:4f:f7:84:81:91:42:5e:d5:09:d8:2b:4c:
         45:83:9c:48:58:cf:72:d3:7d:a3:41:a0:fb:0e:02:7e:8d:ba:
         0b:47:b0:2e:c6:61:c5:6b:d9:7e:d5:dc:09:e4:b5:7d:23:48:
         68:b8:a0:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----