Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/c24635-209c-4e6e-b877-e685a73bd7d9/1/GVD3RTAkOmSxG7IywDjVdOf8TSA.mft
File:                     GVD3RTAkOmSxG7IywDjVdOf8TSA.mft (raw, json)
Hash identifier:          YgrnSGdx32lJO7w73A1Hu+a83q+6EKy0BLuqXFtPj6I=
Subject key identifier:   C6:A1:92:18:07:2E:E8:9B:15:17:8A:32:86:92:B6:C8:3A:CF:00:E7
Authority key identifier: 19:50:F7:45:30:24:3A:64:B1:1B:B2:32:C0:38:D5:74:E7:FC:4D:20
Certificate issuer:       /CN=1950f74530243a64b11bb232c038d574e7fc4d20
Certificate serial:       01962F0680A374AA503032594F9C4199B4FC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GVD3RTAkOmSxG7IywDjVdOf8TSA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5c/c24635-209c-4e6e-b877-e685a73bd7d9/1/GVD3RTAkOmSxG7IywDjVdOf8TSA.mft
Manifest number:          07D1
Signing time:             Sun 13 Apr 2025 12:01:17 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:17 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:17 +0000
Files and hashes:         1: GVD3RTAkOmSxG7IywDjVdOf8TSA.crl (hash: 0XPIijYKzfbBsFZT4j3jYZRSIEDGGLAjVail+rdqI3s=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:80:a3:74:aa:50:30:32:59:4f:9c:41:99:b4:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1950f74530243a64b11bb232c038d574e7fc4d20
        Validity
            Not Before: Apr 13 12:01:17 2025 GMT
            Not After : Apr 14 12:01:17 2025 GMT
        Subject: CN=c6a19218072ee89b15178a328692b6c83acf00e7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:76:4c:dc:76:f7:0a:a2:5e:ae:dc:54:5f:e1:
                    b2:79:2b:cc:8a:a0:7d:97:ec:cd:68:60:69:af:3c:
                    cd:73:a7:47:41:1a:f0:f3:b5:40:09:89:10:b3:f9:
                    aa:3a:f7:46:1c:7a:a6:9b:f2:19:9c:6a:4d:30:3b:
                    17:94:73:9f:41:be:c4:70:a8:1b:b0:d9:8b:8a:09:
                    a3:25:aa:f3:80:47:51:cf:83:bb:29:78:d1:34:87:
                    76:4b:66:5e:b3:df:ed:d5:29:86:2c:16:4b:ac:ef:
                    ef:46:0b:a1:2e:b7:b1:a2:8c:33:2f:c6:41:d8:01:
                    ab:42:6d:60:27:56:ca:63:54:fa:2a:6d:81:4e:cc:
                    64:2c:82:10:30:e3:4a:13:82:07:05:e3:cf:31:cf:
                    d5:07:8c:6f:24:c5:16:87:21:7b:5a:99:04:c3:3b:
                    01:c2:00:80:b1:66:37:ef:3b:58:c1:6c:15:c2:9f:
                    9e:44:bc:a3:ca:34:cb:03:dd:ee:15:08:76:57:50:
                    ee:48:c4:44:58:85:90:49:64:31:fb:f6:b1:00:4a:
                    fe:7f:2b:37:ac:ff:d7:ff:02:b6:68:7e:1a:5c:12:
                    42:5b:85:fb:0a:87:42:d6:70:b8:a0:51:44:2f:55:
                    14:5d:e8:d8:b1:e8:47:52:39:bb:fe:19:22:10:92:
                    b4:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:A1:92:18:07:2E:E8:9B:15:17:8A:32:86:92:B6:C8:3A:CF:00:E7
            X509v3 Authority Key Identifier:
                keyid:19:50:F7:45:30:24:3A:64:B1:1B:B2:32:C0:38:D5:74:E7:FC:4D:20

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GVD3RTAkOmSxG7IywDjVdOf8TSA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/c24635-209c-4e6e-b877-e685a73bd7d9/1/GVD3RTAkOmSxG7IywDjVdOf8TSA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/c24635-209c-4e6e-b877-e685a73bd7d9/1/GVD3RTAkOmSxG7IywDjVdOf8TSA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:b1:c0:66:12:8a:8b:0f:5a:70:08:78:da:39:7f:1d:09:3c:
         40:8b:3c:3a:52:80:be:24:22:da:3e:16:67:3c:95:e4:83:95:
         c5:6b:11:4b:a2:89:1d:1d:9d:44:fe:19:e5:f5:a3:92:85:8d:
         c4:0b:80:0d:d4:39:ae:db:c5:f3:45:5e:16:c9:ee:24:8d:a6:
         53:64:39:ab:39:26:0f:68:78:87:26:50:a9:14:ec:1b:d9:d2:
         80:16:1b:a8:c6:6f:a7:8c:23:c9:d6:51:5c:9a:7f:54:7d:dc:
         59:e9:64:eb:9f:d2:3a:6e:43:ac:85:37:33:b3:91:df:25:cd:
         3f:0f:db:64:7a:8f:0d:0f:74:14:27:49:bf:8f:72:d8:0e:f3:
         aa:07:76:f1:76:98:a7:2f:cb:ca:c5:c9:e1:47:a6:a1:64:52:
         4f:80:19:40:fc:2a:9a:29:c2:61:c6:d6:fe:15:94:6a:03:46:
         cc:af:3e:a3:a0:12:00:29:d2:4a:07:de:e0:22:61:a9:dc:81:
         1d:04:8a:31:d3:a1:f9:09:e8:86:c7:28:80:1a:be:4d:63:1b:
         67:5c:36:f5:22:e3:f6:31:93:b1:8c:85:1f:dd:78:a2:48:d1:
         3a:c9:c8:db:c6:da:8d:eb:37:05:0e:e1:7a:59:68:75:4a:bc:
         dd:7a:5e:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----