Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/9575d0-9c7c-4571-863a-555130a57041/1/gXNntPK_jrMfbhYk7Vbtq6nwITs.mft
File:                     gXNntPK_jrMfbhYk7Vbtq6nwITs.mft (raw, json)
Hash identifier:          sZjC6C2Zx/wLKSMkgQAfcpwiNTevazavgnv+q1/D2VE=
Subject key identifier:   50:B2:BB:00:DF:13:70:B2:2C:81:3C:E5:B6:E8:3D:E6:0C:78:00:AC
Authority key identifier: 81:73:67:B4:F2:BF:8E:B3:1F:6E:16:24:ED:56:ED:AB:A9:F0:21:3B
Certificate issuer:       /CN=817367b4f2bf8eb31f6e1624ed56edaba9f0213b
Certificate serial:       01962F066B28DEC12A589DD2ACCA7994B392
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gXNntPK_jrMfbhYk7Vbtq6nwITs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2c/9575d0-9c7c-4571-863a-555130a57041/1/gXNntPK_jrMfbhYk7Vbtq6nwITs.mft
Manifest number:          0C05
Signing time:             Sun 13 Apr 2025 12:01:11 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:11 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:11 +0000
Files and hashes:         1: gXNntPK_jrMfbhYk7Vbtq6nwITs.crl (hash: 6lt4DgJHYaUIDttijsLxMwYqlTT7lR8fpQfNFeGZDyw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:6b:28:de:c1:2a:58:9d:d2:ac:ca:79:94:b3:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=817367b4f2bf8eb31f6e1624ed56edaba9f0213b
        Validity
            Not Before: Apr 13 12:01:11 2025 GMT
            Not After : Apr 14 12:01:11 2025 GMT
        Subject: CN=50b2bb00df1370b22c813ce5b6e83de60c7800ac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:49:fd:bf:5c:75:5b:7e:a2:89:3f:fd:bf:11:
                    99:98:5e:4c:8c:10:63:31:fe:57:57:84:19:51:07:
                    6b:d6:e9:bf:fc:21:28:c1:c2:4e:61:b2:eb:b6:59:
                    e6:a9:fd:fd:01:da:b5:0b:1c:94:c0:5d:4b:27:82:
                    df:11:b5:f3:b3:75:20:99:fa:7a:4a:fe:71:17:0e:
                    79:ce:8a:7b:79:7a:54:59:2a:22:32:55:3d:7f:d5:
                    1c:22:d4:e5:0d:56:dc:0f:f9:78:67:18:dc:54:96:
                    f9:7c:27:b5:c0:24:13:44:cb:07:fa:9a:bd:7e:35:
                    8e:e0:be:57:67:be:62:aa:a1:43:07:e7:07:bf:71:
                    98:a9:69:9f:43:b6:09:df:be:1f:dd:51:02:15:29:
                    34:2c:49:c7:b2:0a:b0:b1:63:b7:69:08:0c:7d:bb:
                    84:46:c6:42:82:6f:c5:92:c3:d4:f6:cb:6b:a9:e7:
                    f5:81:7c:ce:f6:89:b4:b3:11:ea:16:bd:94:b0:ab:
                    c2:8d:d5:97:9d:99:b9:1d:da:dd:ca:bf:3b:52:f7:
                    cb:29:62:7d:b6:ff:60:62:dd:2b:7a:38:e0:46:ba:
                    ed:36:eb:bd:c1:5e:ec:ef:07:00:19:ed:13:e8:c9:
                    6e:2f:63:38:80:cb:85:b2:fa:52:86:dd:37:7c:c6:
                    3f:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:B2:BB:00:DF:13:70:B2:2C:81:3C:E5:B6:E8:3D:E6:0C:78:00:AC
            X509v3 Authority Key Identifier:
                keyid:81:73:67:B4:F2:BF:8E:B3:1F:6E:16:24:ED:56:ED:AB:A9:F0:21:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gXNntPK_jrMfbhYk7Vbtq6nwITs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/9575d0-9c7c-4571-863a-555130a57041/1/gXNntPK_jrMfbhYk7Vbtq6nwITs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/9575d0-9c7c-4571-863a-555130a57041/1/gXNntPK_jrMfbhYk7Vbtq6nwITs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:db:8e:d0:12:20:b7:a5:f9:b1:da:4c:47:2a:74:5b:07:53:
         d1:9e:3d:67:77:46:dc:3a:1f:e9:dc:05:4e:77:06:13:69:9d:
         a8:aa:e2:a7:32:ac:26:a4:b5:db:a0:c6:88:d9:ae:a5:ff:9c:
         ba:78:0b:ce:a4:19:ce:22:41:ba:49:bb:f0:2a:22:ab:f6:6e:
         ce:54:a5:db:20:90:7e:cb:b6:78:aa:0e:ea:b1:c1:8f:0b:e5:
         a6:84:ba:c8:2c:30:e9:96:69:16:53:96:3d:f6:64:29:c7:d6:
         9b:ab:f4:e8:9f:e6:b0:6c:e5:3b:f2:82:79:34:ec:17:58:ef:
         e2:2a:fe:09:e0:4f:15:14:08:39:c7:1f:ef:20:86:c6:69:e1:
         b9:26:84:7a:b4:8e:c2:a4:7a:db:78:5c:5b:2a:19:c3:01:52:
         1f:f8:3d:46:12:80:5f:92:2f:3b:0d:c5:94:f1:a3:74:d7:f9:
         61:93:2c:ca:5f:31:5c:95:fd:9a:91:d9:6c:7a:ec:7b:bb:33:
         5b:24:05:9d:99:a9:bb:80:0a:f1:ac:4e:bb:80:2c:29:d7:95:
         90:ca:ca:ec:ae:c9:4e:7b:3a:47:f7:66:2d:45:cd:48:1d:18:
         ae:54:35:81:2d:09:a9:77:3d:24:0d:5e:6c:3c:4f:45:8a:5b:
         8a:1f:fb:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----