Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/7b1848-74f1-497d-9ff6-5d21348a63c8/1/GBcXXqrhCxakFTtwpc_XaMe1GZA.mft
File:                     GBcXXqrhCxakFTtwpc_XaMe1GZA.mft (raw, json)
Hash identifier:          HIUzbEvfvL7MoLnkKBKUNuN995F/KLcdn9FBym6F5Xc=
Subject key identifier:   1E:5B:30:FB:15:AE:E2:6C:EB:36:59:7B:8D:B0:9A:30:B9:85:54:61
Authority key identifier: 18:17:17:5E:AA:E1:0B:16:A4:15:3B:70:A5:CF:D7:68:C7:B5:19:90
Certificate issuer:       /CN=1817175eaae10b16a4153b70a5cfd768c7b51990
Certificate serial:       01962E99307594F794A101DB9FB8D04ED34C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GBcXXqrhCxakFTtwpc_XaMe1GZA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/47/7b1848-74f1-497d-9ff6-5d21348a63c8/1/GBcXXqrhCxakFTtwpc_XaMe1GZA.mft
Manifest number:          1119
Signing time:             Sun 13 Apr 2025 10:01:53 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:53 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:53 +0000
Files and hashes:         1: GBcXXqrhCxakFTtwpc_XaMe1GZA.crl (hash: DB/qzzffBDNCZuCIzhpAjVDgrnw8e47J08YFB6W4BWE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:30:75:94:f7:94:a1:01:db:9f:b8:d0:4e:d3:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1817175eaae10b16a4153b70a5cfd768c7b51990
        Validity
            Not Before: Apr 13 10:01:53 2025 GMT
            Not After : Apr 14 10:01:53 2025 GMT
        Subject: CN=1e5b30fb15aee26ceb36597b8db09a30b9855461
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:f8:42:85:0b:7d:5e:21:f5:49:c6:3d:50:9a:
                    eb:a5:31:d2:95:a8:e7:3c:1b:c7:3c:56:a7:e8:fb:
                    cc:15:3b:da:b3:88:a1:e6:c2:9b:0c:ce:b7:58:9a:
                    c6:ec:fe:53:cc:7f:b4:a0:88:e9:26:c3:81:a6:50:
                    b0:24:b7:9b:9c:97:ae:6b:5f:e9:d7:a8:3f:82:ea:
                    17:ed:10:99:bc:44:ba:d4:56:aa:15:75:1d:d4:5c:
                    2e:a8:1d:d4:45:31:b2:f1:df:48:85:40:51:e9:98:
                    d2:0f:08:7a:e1:bd:49:d3:47:30:b6:5d:0c:71:84:
                    9c:7a:48:f9:c7:cb:e7:39:ed:64:2d:15:c1:99:8f:
                    a7:25:b2:32:3b:89:e8:3f:cc:8a:c8:ea:21:2c:e2:
                    1b:79:ee:05:20:3b:11:dc:69:76:15:1c:c9:cd:ba:
                    95:59:32:3d:6a:af:7b:36:27:c2:7a:99:e1:8d:01:
                    a7:51:f7:c6:e1:c4:f2:4c:57:72:71:33:f8:a4:97:
                    d5:8f:78:7e:e3:f5:94:46:7e:ee:8d:95:51:be:fd:
                    12:bd:05:85:f2:09:7a:cd:ff:0a:84:81:1b:b4:de:
                    c2:eb:cf:a1:22:51:5c:d3:9a:d0:fe:b0:9c:a7:c2:
                    fe:9e:0d:bf:77:30:f4:e7:b5:b8:b9:fc:e6:ab:2a:
                    6a:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:5B:30:FB:15:AE:E2:6C:EB:36:59:7B:8D:B0:9A:30:B9:85:54:61
            X509v3 Authority Key Identifier:
                keyid:18:17:17:5E:AA:E1:0B:16:A4:15:3B:70:A5:CF:D7:68:C7:B5:19:90

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GBcXXqrhCxakFTtwpc_XaMe1GZA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/7b1848-74f1-497d-9ff6-5d21348a63c8/1/GBcXXqrhCxakFTtwpc_XaMe1GZA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/47/7b1848-74f1-497d-9ff6-5d21348a63c8/1/GBcXXqrhCxakFTtwpc_XaMe1GZA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:ad:b5:bc:ac:f9:52:26:9b:fd:16:e8:3f:d6:b3:3e:fa:c6:
         1e:36:c7:50:20:89:0e:ad:ad:93:71:b4:9d:55:8f:49:0c:25:
         23:8a:df:c3:f0:f6:05:36:3b:cd:6e:81:31:36:a5:2f:63:ea:
         1a:4b:b7:42:3f:92:1f:51:9b:b2:f2:12:91:b4:d9:fc:dd:10:
         ad:fd:60:cd:bf:33:b1:40:cd:9a:f3:d6:f0:a2:53:3c:83:30:
         16:d1:d9:27:14:5a:5e:9c:07:fb:0a:7b:77:29:0d:e5:fb:bc:
         4f:a3:1b:1c:96:e3:af:29:30:0b:69:cc:c4:3a:19:1d:71:26:
         7f:87:7c:40:33:74:89:83:c4:44:b0:86:10:22:86:28:c1:d4:
         fa:35:63:4d:a2:62:4b:d8:24:2b:09:e8:48:64:fd:0f:7b:61:
         df:43:48:6e:1e:94:cd:ef:98:26:10:e6:37:ce:53:96:00:ff:
         02:15:9e:36:c7:de:de:25:1e:f8:62:25:fa:1b:00:7a:67:e9:
         82:a3:dc:b3:f1:80:45:da:fa:be:65:93:e9:ad:45:d5:32:05:
         fd:bf:2e:71:a9:16:84:9c:d9:a1:94:13:35:e9:cd:46:ef:94:
         0d:14:fc:21:45:f8:26:c6:a0:55:33:7c:c8:48:a7:7d:80:25:
         54:fd:fe:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----