Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/ef22db-e3b0-439f-a0c2-bf4d457e9518/1/GYe7aFnJOMi2PlqqVtkHvQRE484.mft
File:                     GYe7aFnJOMi2PlqqVtkHvQRE484.mft (raw, json)
Hash identifier:          3wLMk7glnPBlbPmJuIJpsGryp7Hssk63RvlDMUl/8Fs=
Subject key identifier:   24:BC:34:F3:33:B8:C6:D1:7F:EF:1A:3D:70:D1:71:63:8E:BE:8F:21
Authority key identifier: 19:87:BB:68:59:C9:38:C8:B6:3E:5A:AA:56:D9:07:BD:04:44:E3:CE
Certificate issuer:       /CN=1987bb6859c938c8b63e5aaa56d907bd0444e3ce
Certificate serial:       01962DF43B2499C15389C39B518462DC17D0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GYe7aFnJOMi2PlqqVtkHvQRE484.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/32/ef22db-e3b0-439f-a0c2-bf4d457e9518/1/GYe7aFnJOMi2PlqqVtkHvQRE484.mft
Manifest number:          1428
Signing time:             Sun 13 Apr 2025 07:01:42 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:42 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:42 +0000
Files and hashes:         1: GYe7aFnJOMi2PlqqVtkHvQRE484.crl (hash: yySKwrYf4kIN7W5z9arx8ijd8wnr7tQ4+fZlMgNxDbM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f4:3b:24:99:c1:53:89:c3:9b:51:84:62:dc:17:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1987bb6859c938c8b63e5aaa56d907bd0444e3ce
        Validity
            Not Before: Apr 13 07:01:42 2025 GMT
            Not After : Apr 14 07:01:42 2025 GMT
        Subject: CN=24bc34f333b8c6d17fef1a3d70d171638ebe8f21
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:8f:a8:68:14:44:11:85:e4:9f:99:2f:17:24:
                    3a:e1:7e:b7:7f:9a:2b:15:89:4d:73:2e:17:d2:18:
                    0d:05:8c:0b:37:3a:fa:01:df:38:c7:fe:ce:33:9d:
                    c9:db:9d:80:cd:6a:c2:81:6c:25:1b:f4:55:4d:ef:
                    44:b2:21:fc:0f:51:f0:91:71:c5:28:d1:64:48:09:
                    13:91:a1:cc:22:55:d9:50:51:4d:96:70:c8:b6:26:
                    46:7a:27:fa:cb:97:2b:4c:85:88:ae:2e:87:ef:11:
                    9e:f9:18:5d:a4:48:11:87:62:83:06:36:6f:96:57:
                    3e:76:b2:76:36:95:5a:a6:27:e6:37:c1:71:22:cd:
                    9c:4d:2e:79:e1:53:85:be:1d:a7:9f:69:1e:a4:35:
                    74:89:8d:2e:b3:9e:25:9f:42:ee:00:cf:07:99:46:
                    58:bb:c2:8c:f1:84:0a:4a:98:e9:db:07:fb:b6:35:
                    4e:76:51:da:42:73:3b:ca:1c:24:cb:22:af:d2:22:
                    1b:40:25:90:c3:e6:52:f8:dd:c9:f8:cc:28:c0:5c:
                    2a:b5:51:8d:a9:a7:f9:9b:b5:55:87:44:8c:47:1d:
                    56:49:46:2a:63:df:05:f5:35:ba:d7:81:28:fb:36:
                    08:d6:2f:df:2c:92:a8:6d:a7:26:7a:75:43:ab:ea:
                    2c:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:BC:34:F3:33:B8:C6:D1:7F:EF:1A:3D:70:D1:71:63:8E:BE:8F:21
            X509v3 Authority Key Identifier:
                keyid:19:87:BB:68:59:C9:38:C8:B6:3E:5A:AA:56:D9:07:BD:04:44:E3:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GYe7aFnJOMi2PlqqVtkHvQRE484.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/ef22db-e3b0-439f-a0c2-bf4d457e9518/1/GYe7aFnJOMi2PlqqVtkHvQRE484.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/32/ef22db-e3b0-439f-a0c2-bf4d457e9518/1/GYe7aFnJOMi2PlqqVtkHvQRE484.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a4:6f:cc:bd:90:b5:ef:b1:39:2e:fe:a7:9e:9d:a0:76:7a:0e:
         c3:99:b6:d3:83:97:68:8e:7d:51:0b:0f:a6:45:b9:aa:4f:b4:
         3d:68:13:a7:e3:55:bf:2d:aa:b5:f4:41:36:3f:f9:a8:b4:3d:
         84:42:b6:46:57:37:46:ca:9b:c8:ac:c1:2e:d6:ab:d0:51:a8:
         2f:e4:73:88:89:8f:e9:af:35:e2:dd:eb:0d:f7:44:94:6b:e5:
         33:bd:31:4d:91:c6:6e:dd:36:dd:fc:c8:bf:ef:98:bf:7e:50:
         d9:79:06:1e:eb:c5:a5:f9:7f:61:7d:cf:71:8a:c8:64:f0:d2:
         3d:1e:41:f8:30:84:0b:5d:63:e9:7e:64:96:4f:b1:d3:c8:1b:
         a7:4b:4f:2b:00:df:dd:e2:81:bb:2c:cf:de:8d:99:9e:06:fc:
         9a:3e:f2:b1:eb:3e:6e:28:12:c6:b9:42:ca:7a:28:82:d1:3a:
         90:44:29:db:fc:5e:f7:b4:c7:fd:b6:f5:1c:47:5d:91:c5:58:
         54:fc:cf:73:14:6b:79:70:b0:51:58:f6:03:b9:f5:d4:8b:7d:
         df:2c:a3:72:bc:fd:27:0c:e0:0e:ed:f6:cf:64:65:0f:00:b5:
         61:df:90:c9:74:ca:da:13:61:7f:ff:07:6b:8f:2c:a0:aa:ff:
         3c:77:3d:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----