Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/8b46fb-0317-443a-b615-3d419ed4312d/1/GlW6tCXqxLaoJMZRY_qe9QDp-MY.mft
File:                     GlW6tCXqxLaoJMZRY_qe9QDp-MY.mft (raw, json)
Hash identifier:          Qhj6xp4pmYbnGZ2boflrvghH/MP1/0P18uPU6sFgxgI=
Subject key identifier:   97:45:B0:83:5F:BC:F3:13:FD:69:09:C1:92:E9:01:56:2F:79:50:70
Authority key identifier: 1A:55:BA:B4:25:EA:C4:B6:A8:24:C6:51:63:FA:9E:F5:00:E9:F8:C6
Certificate issuer:       /CN=1a55bab425eac4b6a824c65163fa9ef500e9f8c6
Certificate serial:       01962E98AD10533CBEC7AEB2A036D09DC900
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GlW6tCXqxLaoJMZRY_qe9QDp-MY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1f/8b46fb-0317-443a-b615-3d419ed4312d/1/GlW6tCXqxLaoJMZRY_qe9QDp-MY.mft
Manifest number:          102E
Signing time:             Sun 13 Apr 2025 10:01:19 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:19 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:19 +0000
Files and hashes:         1: GlW6tCXqxLaoJMZRY_qe9QDp-MY.crl (hash: BidP2KtoqgOo+Bbs4zV5/lWIVKxSOXM0z/5fwuYKw5c=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:ad:10:53:3c:be:c7:ae:b2:a0:36:d0:9d:c9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1a55bab425eac4b6a824c65163fa9ef500e9f8c6
        Validity
            Not Before: Apr 13 10:01:19 2025 GMT
            Not After : Apr 14 10:01:19 2025 GMT
        Subject: CN=9745b0835fbcf313fd6909c192e901562f795070
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:82:24:25:bf:4b:94:0b:ff:e1:57:21:53:da:
                    97:cf:21:87:0d:bf:e1:41:67:7f:d7:5f:39:3c:37:
                    4c:61:f7:f2:f7:04:18:be:94:5a:a0:50:8f:d8:6d:
                    f8:17:7b:a5:9d:a4:c1:27:98:d5:d2:aa:7a:ec:70:
                    da:c5:d8:cd:3e:e1:1a:93:27:fa:83:12:0e:f1:6b:
                    dd:10:3e:39:1b:14:66:41:bf:fc:a3:ad:44:bb:09:
                    6c:eb:7f:eb:c7:65:97:f0:57:47:11:c7:21:1a:ca:
                    c7:82:5b:42:da:29:36:26:eb:f9:6e:b4:bf:64:aa:
                    c0:53:11:43:5e:71:39:80:8a:6c:7a:cd:5b:a2:a8:
                    0d:e7:c9:4f:c0:20:19:3a:ce:f3:0d:3a:02:58:09:
                    a4:eb:9f:c2:6c:73:25:a8:56:eb:e1:1f:9d:bf:28:
                    fb:7b:48:7a:65:93:dc:4c:f6:bb:e9:bd:76:8d:4f:
                    aa:77:ee:e6:e5:8f:5a:23:69:6b:93:e7:d5:0d:4b:
                    f4:b5:77:25:8d:b6:49:15:ae:4b:da:d2:f1:2f:28:
                    14:9a:d1:22:a0:f6:1e:7c:3d:41:ad:da:c7:6b:be:
                    df:c0:2d:0b:b6:7a:4c:e9:ad:75:83:3f:37:58:20:
                    77:6b:24:47:80:43:f4:6b:5a:d9:09:3d:7e:85:3a:
                    55:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:45:B0:83:5F:BC:F3:13:FD:69:09:C1:92:E9:01:56:2F:79:50:70
            X509v3 Authority Key Identifier:
                keyid:1A:55:BA:B4:25:EA:C4:B6:A8:24:C6:51:63:FA:9E:F5:00:E9:F8:C6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GlW6tCXqxLaoJMZRY_qe9QDp-MY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/8b46fb-0317-443a-b615-3d419ed4312d/1/GlW6tCXqxLaoJMZRY_qe9QDp-MY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/8b46fb-0317-443a-b615-3d419ed4312d/1/GlW6tCXqxLaoJMZRY_qe9QDp-MY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:6b:3d:69:cb:e5:1b:e6:49:28:e0:14:23:4f:c8:b7:4b:4e:
         d9:54:7f:81:5f:b5:f7:09:2e:f9:0e:91:1c:94:1b:1d:af:e8:
         16:bc:02:48:93:1b:a9:15:80:d1:98:66:81:8c:7e:11:10:d8:
         8e:a5:f6:1a:b4:ac:3c:c6:58:82:9f:c9:6f:69:02:b0:a1:a5:
         02:b3:93:c5:0b:4d:0f:25:d2:ae:9c:0c:98:32:34:d1:e5:3a:
         de:1a:49:9a:c2:0a:a1:b1:a1:6c:f5:51:8c:af:1b:fe:26:f4:
         a6:9d:53:18:23:ce:66:ee:17:c3:1f:8a:62:4d:72:9d:65:66:
         5d:43:62:d1:2b:a1:4d:32:9a:fa:4e:05:0a:20:67:3c:cc:b9:
         2c:c3:59:da:dc:fb:98:50:45:7e:56:9e:4d:74:2e:99:f5:94:
         cb:e7:2e:1c:05:d0:c5:59:95:a4:64:bd:7c:c0:ad:27:d9:0f:
         7f:de:e7:de:a1:d6:06:de:bd:ba:a7:89:5e:98:b6:aa:7c:cb:
         f9:6a:68:14:cd:07:d1:54:45:0f:33:ee:1e:76:bf:5b:83:92:
         86:fd:8e:39:99:98:4f:8a:03:85:cf:f9:fc:2f:14:ec:08:a0:
         35:34:2f:ac:50:53:88:c4:ef:50:12:12:9d:f0:b3:ec:6c:9a:
         cd:a6:a5:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----