Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/c8a404-5e76-4ef4-bb07-026c26b5d395/1/G04-M_1PbZy08TyiI3HjCzbPp3Y.mft
File:                     G04-M_1PbZy08TyiI3HjCzbPp3Y.mft (raw, json)
Hash identifier:          e6R37UzRRPyDUhGT+0Z08TfQlNrRCGT/KKeQ6z/3axg=
Subject key identifier:   03:E3:3B:59:0A:C6:9D:13:C8:7C:B9:16:B1:75:4A:BD:3E:07:0B:FD
Authority key identifier: 1B:4E:3E:33:FD:4F:6D:9C:B4:F1:3C:A2:23:71:E3:0B:36:CF:A7:76
Certificate issuer:       /CN=1b4e3e33fd4f6d9cb4f13ca22371e30b36cfa776
Certificate serial:       01962F065026E30AF4E3B1E61E57BDB7E846
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/G04-M_1PbZy08TyiI3HjCzbPp3Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/39/c8a404-5e76-4ef4-bb07-026c26b5d395/1/G04-M_1PbZy08TyiI3HjCzbPp3Y.mft
Manifest number:          14E6
Signing time:             Sun 13 Apr 2025 12:01:04 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:04 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:04 +0000
Files and hashes:         1: G04-M_1PbZy08TyiI3HjCzbPp3Y.crl (hash: Ie8hb/RwytaGhY9bFvdHftxuXSSKyu5AjoW1Llf+Pis=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:50:26:e3:0a:f4:e3:b1:e6:1e:57:bd:b7:e8:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1b4e3e33fd4f6d9cb4f13ca22371e30b36cfa776
        Validity
            Not Before: Apr 13 12:01:04 2025 GMT
            Not After : Apr 14 12:01:04 2025 GMT
        Subject: CN=03e33b590ac69d13c87cb916b1754abd3e070bfd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:d2:4b:aa:a0:f5:2c:7b:a3:f6:23:d2:0d:95:
                    1a:e9:04:03:31:1e:9f:ee:f7:4b:e3:26:d9:a8:34:
                    4d:c2:5e:87:b0:6d:56:7f:41:05:b9:d6:69:2e:65:
                    5b:80:f5:10:05:2a:7e:0f:87:70:db:1a:d2:b3:e2:
                    a2:ec:06:cf:68:f3:a0:e7:26:f6:fc:bb:39:2b:62:
                    73:59:85:6b:33:fe:7f:3b:53:93:46:66:c0:fb:df:
                    2f:8c:e4:6a:0e:93:66:96:cc:ef:58:98:46:1d:cd:
                    6d:3c:7e:bd:cb:ee:14:14:e4:54:9b:2f:30:df:75:
                    30:99:d1:3d:96:71:7d:a8:2a:c4:1c:15:b1:31:48:
                    6c:4d:75:15:97:1d:20:fa:92:00:f5:57:be:54:af:
                    04:2c:7d:7d:fb:89:4f:68:73:d8:66:d3:fa:80:45:
                    18:72:ef:9c:9c:be:08:e1:90:1f:74:96:9f:3f:02:
                    f1:9b:81:a6:8c:2a:63:3f:14:b1:3c:53:65:8a:0d:
                    c9:e2:4a:b2:7a:a5:9f:7d:ea:80:9c:38:86:24:b9:
                    fb:12:54:e4:1b:b2:58:39:9f:bb:9a:ed:c5:ee:73:
                    87:b0:60:fa:00:2f:ea:db:5e:a3:8f:0c:0d:1f:42:
                    22:fe:54:8e:60:ea:06:99:1c:a3:77:3e:36:35:79:
                    08:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:E3:3B:59:0A:C6:9D:13:C8:7C:B9:16:B1:75:4A:BD:3E:07:0B:FD
            X509v3 Authority Key Identifier:
                keyid:1B:4E:3E:33:FD:4F:6D:9C:B4:F1:3C:A2:23:71:E3:0B:36:CF:A7:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G04-M_1PbZy08TyiI3HjCzbPp3Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/c8a404-5e76-4ef4-bb07-026c26b5d395/1/G04-M_1PbZy08TyiI3HjCzbPp3Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/39/c8a404-5e76-4ef4-bb07-026c26b5d395/1/G04-M_1PbZy08TyiI3HjCzbPp3Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:dc:e7:be:b6:0a:8e:76:3f:d0:47:af:8a:fc:3d:21:d1:bd:
         c5:c1:f4:08:79:b7:f4:05:42:9f:73:05:05:0e:4c:f0:2d:7e:
         53:5c:8b:38:33:bd:c5:08:af:c5:b2:d5:8a:16:45:2f:df:1e:
         36:53:73:4e:48:f4:c4:5a:0d:3d:c6:bd:8d:13:26:a5:27:86:
         c8:01:cb:62:2f:6f:22:5f:c3:58:ea:ac:6e:72:70:37:1e:02:
         15:d8:96:3f:79:d9:be:6b:2e:4e:4b:63:06:dc:e0:ba:37:3b:
         77:f5:85:30:ba:f6:07:99:45:2c:47:25:64:99:a1:b5:8d:84:
         84:af:fd:ed:0b:84:4f:f5:5d:70:b3:49:4a:28:de:72:3f:9f:
         78:ce:c2:f8:50:07:d5:0b:1c:4e:9c:5f:e4:27:5b:fd:38:a6:
         28:f1:f9:26:99:04:7d:0a:53:59:5c:da:68:44:b8:87:8e:1e:
         51:20:39:b0:67:bc:e0:bf:23:be:ef:6e:37:9e:58:bc:11:7c:
         c1:56:3e:69:ec:0c:a6:12:54:1b:6f:25:30:68:73:e4:aa:09:
         c5:9a:45:b6:9d:16:28:90:41:a6:04:5c:43:33:bd:26:c1:6b:
         63:93:9c:4b:4b:ae:60:e1:0a:ae:51:6e:3f:22:ec:68:77:d5:
         d9:76:39:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----