Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/34dfe0-9206-41df-ba01-a9ff7a53753a/1/GUwuZp9lV99OPUmk8mW1QReS_6A.mft
File:                     GUwuZp9lV99OPUmk8mW1QReS_6A.mft (raw, json)
Hash identifier:          4VkiuvmBD+Brneq1NS1phx2sJ6H7Dh9izSNlBgSsMok=
Subject key identifier:   EF:FB:AA:CF:1A:41:01:F5:D4:B2:C1:2A:5B:30:35:0D:E2:08:03:7C
Authority key identifier: 19:4C:2E:66:9F:65:57:DF:4E:3D:49:A4:F2:65:B5:41:17:92:FF:A0
Certificate issuer:       /CN=194c2e669f6557df4e3d49a4f265b5411792ffa0
Certificate serial:       01962F070E16A687430447413E744F519541
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GUwuZp9lV99OPUmk8mW1QReS_6A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3a/34dfe0-9206-41df-ba01-a9ff7a53753a/1/GUwuZp9lV99OPUmk8mW1QReS_6A.mft
Manifest number:          0C48
Signing time:             Sun 13 Apr 2025 12:01:53 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:53 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:53 +0000
Files and hashes:         1: GUwuZp9lV99OPUmk8mW1QReS_6A.crl (hash: Ie/bzQfuNLV1SIK277H/JNiSHf34HyRuSZI8tDmq3l0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:07:0e:16:a6:87:43:04:47:41:3e:74:4f:51:95:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=194c2e669f6557df4e3d49a4f265b5411792ffa0
        Validity
            Not Before: Apr 13 12:01:53 2025 GMT
            Not After : Apr 14 12:01:53 2025 GMT
        Subject: CN=effbaacf1a4101f5d4b2c12a5b30350de208037c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:91:77:34:a5:d1:9c:76:1c:3c:e0:a8:e3:ae:
                    1d:85:a1:28:ef:3d:d3:ba:05:0d:3f:cd:38:df:96:
                    f7:b8:70:5c:22:48:b6:cf:49:6f:48:c8:02:bf:b0:
                    18:fe:ec:d7:16:41:1a:82:a8:02:2d:d3:b1:04:88:
                    39:0e:1f:d6:d3:b4:38:ac:39:2e:39:14:16:05:11:
                    38:d8:22:41:b7:4d:27:fd:80:0f:cc:ca:2f:fe:3b:
                    3c:00:ac:2b:89:a5:fd:e3:e9:8d:42:ae:df:8c:b4:
                    42:b7:60:a4:79:d8:39:dc:48:a3:6c:ab:03:3e:7b:
                    1d:00:d0:01:46:17:10:11:71:f0:f4:94:79:fa:1e:
                    76:10:29:fa:a2:dd:ee:18:fa:a4:d1:a2:af:a5:da:
                    dc:4e:59:e2:cc:e0:41:48:95:ca:d8:7e:4d:ef:c4:
                    a2:cb:33:87:da:5a:2f:46:94:67:c8:68:b1:e8:24:
                    a9:c3:a3:3b:bd:ac:01:02:54:ca:ba:13:74:4b:b4:
                    a3:43:4d:ad:81:14:a9:cb:f3:69:9d:00:60:64:31:
                    e7:cb:72:58:de:0b:3f:d5:57:ba:07:b4:c8:a8:a1:
                    f3:ad:25:66:c3:62:be:75:ca:09:44:4d:6c:ae:2c:
                    d2:b0:00:70:b5:05:91:d5:5c:cb:1c:9e:67:47:08:
                    a6:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:FB:AA:CF:1A:41:01:F5:D4:B2:C1:2A:5B:30:35:0D:E2:08:03:7C
            X509v3 Authority Key Identifier:
                keyid:19:4C:2E:66:9F:65:57:DF:4E:3D:49:A4:F2:65:B5:41:17:92:FF:A0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GUwuZp9lV99OPUmk8mW1QReS_6A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/34dfe0-9206-41df-ba01-a9ff7a53753a/1/GUwuZp9lV99OPUmk8mW1QReS_6A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/34dfe0-9206-41df-ba01-a9ff7a53753a/1/GUwuZp9lV99OPUmk8mW1QReS_6A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:ae:b1:5b:a0:14:54:e8:e8:15:f1:d8:90:95:6e:30:4c:7b:
         9a:4d:32:d7:27:48:65:fa:02:9d:2a:c1:11:d2:a5:56:d0:47:
         7c:a7:7a:d6:93:e5:dd:d8:2a:a3:36:6c:3b:e0:65:e5:c1:cf:
         a3:1e:41:25:f9:f6:b0:02:61:99:10:1d:7b:fc:41:15:fb:d5:
         d7:94:4d:65:cf:4b:74:2a:31:79:77:76:70:af:a7:6f:c2:d4:
         b1:64:07:68:ff:f4:de:c1:5a:cb:20:b0:d5:fd:81:cd:cb:a0:
         a9:ea:99:5b:c9:6f:89:21:b4:b8:11:5d:52:f2:7f:1f:4b:71:
         a1:9b:07:ea:77:bc:fb:5e:07:33:61:41:f9:f4:9f:c5:62:d6:
         d4:3e:15:1c:1f:44:66:63:18:6f:80:f7:a3:7f:96:8c:0a:5a:
         36:07:e1:97:1e:de:00:a1:f4:e0:ae:23:ca:e4:51:c7:f8:0d:
         50:25:45:79:f6:20:3d:53:53:44:82:fc:be:ea:11:f1:0e:33:
         21:0a:0e:97:1d:16:c5:22:7c:43:0a:77:0e:6d:78:e6:34:4d:
         ff:f5:dc:2b:ed:dc:43:d6:06:fc:f4:22:f1:72:9c:65:cb:70:
         34:bb:bc:69:72:f7:71:59:5e:61:91:07:8b:b3:c9:19:39:3d:
         be:24:4f:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----