Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/e73f16-45d2-43c1-a4af-5cf9194d1702/1/gyP0nWzGUM1tZUgjSOHW0Lj9fqo.mft
File:                     gyP0nWzGUM1tZUgjSOHW0Lj9fqo.mft (raw, json)
Hash identifier:          7YusLWTv/16nI8XTaZSuDHLWc8dFYEiauYnTq385clE=
Subject key identifier:   EF:3E:CB:27:A4:D2:71:2F:10:75:FB:B2:59:54:C9:A3:75:0E:B2:75
Authority key identifier: 83:23:F4:9D:6C:C6:50:CD:6D:65:48:23:48:E1:D6:D0:B8:FD:7E:AA
Certificate issuer:       /CN=8323f49d6cc650cd6d65482348e1d6d0b8fd7eaa
Certificate serial:       01962E98B7240A0A8EEA6194762A9041646F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gyP0nWzGUM1tZUgjSOHW0Lj9fqo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/60/e73f16-45d2-43c1-a4af-5cf9194d1702/1/gyP0nWzGUM1tZUgjSOHW0Lj9fqo.mft
Manifest number:          14E9
Signing time:             Sun 13 Apr 2025 10:01:22 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:22 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:22 +0000
Files and hashes:         1: gyP0nWzGUM1tZUgjSOHW0Lj9fqo.crl (hash: FvYLhoJLvbw669pvRVjscj//YQ2wsxTSVs4xMee5adY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:b7:24:0a:0a:8e:ea:61:94:76:2a:90:41:64:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8323f49d6cc650cd6d65482348e1d6d0b8fd7eaa
        Validity
            Not Before: Apr 13 10:01:22 2025 GMT
            Not After : Apr 14 10:01:22 2025 GMT
        Subject: CN=ef3ecb27a4d2712f1075fbb25954c9a3750eb275
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:18:bd:8c:78:34:f4:8b:40:42:42:16:be:21:
                    52:92:ee:f5:c0:13:6d:2d:67:ff:13:7a:93:e3:b4:
                    90:13:8d:3f:8e:0f:50:f7:a4:8b:bd:ef:ba:9b:9d:
                    5b:5b:d6:26:c2:40:60:79:5a:06:94:ab:91:55:87:
                    dc:6a:04:74:4e:37:17:ca:3f:7c:2b:54:f6:d2:1d:
                    3c:c9:73:cc:d8:94:bf:45:69:f8:48:bf:47:b4:bb:
                    1a:13:ae:b2:3a:dc:cb:73:d1:6a:c6:71:f0:1a:ee:
                    7d:ae:ff:7b:56:69:1b:a2:9d:f6:45:a9:26:00:20:
                    73:27:ae:3e:97:f7:03:b3:9a:06:52:f8:df:3d:f8:
                    de:9a:f0:7f:08:dc:46:ea:ca:03:8e:9f:9e:59:ef:
                    3f:1c:d6:5a:1d:7e:c5:48:2e:e6:d1:4f:97:4f:c8:
                    8b:59:32:d7:3a:ed:c7:3b:ac:ea:04:41:c3:9d:95:
                    a8:e0:7f:a9:a3:c4:ff:cd:73:29:f6:2b:ed:aa:15:
                    1e:21:32:05:77:a7:14:32:9c:ec:7b:d7:be:3e:ea:
                    f7:98:21:05:95:03:56:ac:63:d8:06:5c:a6:6b:cf:
                    96:e6:f5:f3:72:20:1a:1f:e6:7d:cf:f1:d6:b5:42:
                    ba:ae:ff:54:f7:fb:75:a0:6e:d9:60:d4:66:5c:e3:
                    be:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:3E:CB:27:A4:D2:71:2F:10:75:FB:B2:59:54:C9:A3:75:0E:B2:75
            X509v3 Authority Key Identifier:
                keyid:83:23:F4:9D:6C:C6:50:CD:6D:65:48:23:48:E1:D6:D0:B8:FD:7E:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gyP0nWzGUM1tZUgjSOHW0Lj9fqo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/e73f16-45d2-43c1-a4af-5cf9194d1702/1/gyP0nWzGUM1tZUgjSOHW0Lj9fqo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/60/e73f16-45d2-43c1-a4af-5cf9194d1702/1/gyP0nWzGUM1tZUgjSOHW0Lj9fqo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:05:26:34:22:6b:67:78:69:18:af:a9:17:77:9a:ee:49:00:
         75:1c:23:d7:d2:48:b7:b4:cf:df:6e:70:31:4d:d0:fc:41:c9:
         5b:4d:9c:8f:85:48:ee:f0:11:03:97:bc:0e:6e:5c:83:9a:04:
         66:52:2f:c1:f2:aa:f4:fc:db:ca:e0:d6:71:51:4e:6b:a3:f4:
         74:bd:2b:07:e4:63:c5:c6:37:39:5c:d2:75:c4:4e:f0:87:b2:
         77:ac:66:5b:06:9d:3c:cc:e3:19:db:5b:8b:19:6f:85:3b:82:
         dd:9a:3c:38:89:d8:20:a2:aa:e0:9f:10:68:a4:30:e1:c4:1a:
         dd:b3:1f:d7:4b:20:43:d5:7e:83:ff:b4:b0:bb:29:80:c4:b8:
         a7:b0:58:c2:6a:42:09:8d:e8:f5:8c:52:de:51:a1:3d:6e:f4:
         57:a9:d9:fe:5f:e7:ad:5a:4b:78:17:41:f4:3f:45:bb:4a:87:
         38:7f:c5:bf:25:a4:4b:10:57:5f:11:54:29:7f:c9:85:d8:ab:
         de:56:ea:be:af:55:01:c7:39:d8:82:01:43:4b:30:c3:9f:27:
         9e:16:38:08:e6:11:a2:2f:e9:44:5a:b3:4f:1d:c7:38:cc:a5:
         60:55:76:01:09:a8:1f:aa:03:9c:d3:b4:c7:a0:e5:ca:d1:79:
         60:1d:94:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----