Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/2effbe-109c-4956-b4a0-4c8365515965/1/Gldj1Bu1M1WKhSDeWpbrIlgGiUE.mft
File:                     Gldj1Bu1M1WKhSDeWpbrIlgGiUE.mft (raw, json)
Hash identifier:          u8fYIwuJ0LsNjKFD0h3715GVEE+/Pbrens7AMG+up/Y=
Subject key identifier:   16:C6:0D:1F:26:BB:29:DB:4B:A9:96:E9:67:11:5D:05:E7:1C:06:E3
Authority key identifier: 1A:57:63:D4:1B:B5:33:55:8A:85:20:DE:5A:96:EB:22:58:06:89:41
Certificate issuer:       /CN=1a5763d41bb533558a8520de5a96eb2258068941
Certificate serial:       01962E9890903157ABFC7BBF1B3883DDED63
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Gldj1Bu1M1WKhSDeWpbrIlgGiUE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6c/2effbe-109c-4956-b4a0-4c8365515965/1/Gldj1Bu1M1WKhSDeWpbrIlgGiUE.mft
Manifest number:          102E
Signing time:             Sun 13 Apr 2025 10:01:12 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:12 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:12 +0000
Files and hashes:         1: Gldj1Bu1M1WKhSDeWpbrIlgGiUE.crl (hash: nsjNS81qc5eLjRAYMK48IH1XRGjqT6+m1o13jhjJNZw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:90:90:31:57:ab:fc:7b:bf:1b:38:83:dd:ed:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1a5763d41bb533558a8520de5a96eb2258068941
        Validity
            Not Before: Apr 13 10:01:12 2025 GMT
            Not After : Apr 14 10:01:12 2025 GMT
        Subject: CN=16c60d1f26bb29db4ba996e967115d05e71c06e3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:9d:c4:0e:15:5e:1e:d4:98:ca:96:e3:05:00:
                    aa:68:ef:91:87:e4:6d:a7:f2:21:89:14:fc:95:fa:
                    bd:e6:a5:6f:37:36:cd:ab:7b:28:fd:89:d5:86:3e:
                    52:de:d1:28:40:17:a4:27:b7:cb:6f:28:c7:d7:fd:
                    5d:78:1e:ce:5f:c3:e6:01:24:f6:06:aa:dc:9e:6e:
                    09:1c:4a:f7:b5:40:f3:00:7b:f7:31:0a:8e:e9:e8:
                    6e:c0:f9:65:37:f0:e8:05:c5:44:43:1d:2f:f8:fe:
                    3b:a5:30:74:f4:5e:6e:f7:5b:67:df:0a:78:ea:ef:
                    90:15:05:8b:f0:60:60:2a:16:18:ba:cb:bf:99:c0:
                    ac:dd:eb:9b:c7:02:b4:65:13:65:36:6e:97:55:cd:
                    1b:85:38:5d:0d:72:bd:1a:61:12:42:bd:c7:00:c5:
                    33:5e:dc:03:18:ad:73:23:26:a9:9c:15:42:d6:0a:
                    81:e6:a1:1d:2e:ba:10:fb:9c:26:2b:51:ec:6b:8f:
                    b2:de:63:74:16:6a:56:85:34:96:e8:95:c7:81:32:
                    4f:fb:47:14:0b:70:2c:b2:2a:be:92:0c:85:34:9a:
                    36:1d:b8:60:fe:01:40:3d:78:48:d3:f7:d0:26:98:
                    91:3d:48:4d:20:43:a3:f4:20:c2:f1:2c:34:13:24:
                    f6:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:C6:0D:1F:26:BB:29:DB:4B:A9:96:E9:67:11:5D:05:E7:1C:06:E3
            X509v3 Authority Key Identifier:
                keyid:1A:57:63:D4:1B:B5:33:55:8A:85:20:DE:5A:96:EB:22:58:06:89:41

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gldj1Bu1M1WKhSDeWpbrIlgGiUE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/2effbe-109c-4956-b4a0-4c8365515965/1/Gldj1Bu1M1WKhSDeWpbrIlgGiUE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/2effbe-109c-4956-b4a0-4c8365515965/1/Gldj1Bu1M1WKhSDeWpbrIlgGiUE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d4:45:08:ff:13:65:59:85:a5:72:d5:d0:3f:65:3c:2e:93:50:
         31:2f:61:90:89:81:69:60:0c:f2:18:3e:33:7e:86:87:36:71:
         c3:af:f4:11:4d:60:bb:62:ae:7e:0e:ef:66:af:a3:97:20:a5:
         b3:a2:ed:ea:41:e8:dc:fb:41:dc:2b:be:16:ab:4a:61:3f:a3:
         35:f3:76:4c:cb:f6:2e:15:3e:ca:3c:3f:33:d1:9f:af:9f:9d:
         dd:17:2c:96:48:a8:6b:29:10:67:bc:55:3f:ea:ed:17:02:b1:
         be:3a:f3:fb:b5:86:bc:48:31:bb:ed:53:d8:25:61:f0:7b:69:
         e3:5d:e5:d8:89:d2:cc:f4:12:43:36:fb:1e:35:e8:77:0f:38:
         8c:e2:75:e0:25:91:3c:c2:4d:bb:b8:03:8f:8a:d2:ff:ab:a3:
         e5:2e:36:07:03:de:fc:69:28:fc:5d:68:c5:c5:bc:50:a5:2d:
         f7:7c:22:88:be:a3:0c:e1:e5:5b:7a:e0:be:18:55:56:b2:56:
         1a:a4:3e:9c:8b:4a:19:d6:41:34:0a:9c:46:ec:e6:d8:3c:e9:
         51:f9:1c:d3:6e:a2:75:84:cd:e8:03:80:bf:f4:31:b0:25:d3:
         31:6f:c2:75:a2:dd:4b:81:4e:c1:01:85:6d:c9:5a:17:b4:5c:
         42:6d:ce:6d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYumJCQMVer/Hu/GziD3e1jMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFhNTc2M2Q0MWJiNTMzNTU4YTg1MjBkZTVhOTZlYjIyNTgw
Njg5NDEwHhcNMjUwNDEzMTAwMTEyWhcNMjUwNDE0MTAwMTEyWjAzMTEwLwYDVQQD
EygxNmM2MGQxZjI2YmIyOWRiNGJhOTk2ZTk2NzExNWQwNWU3MWMwNmUzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvp3EDhVeHtSYypbjBQCqaO+Rh+Rt
p/IhiRT8lfq95qVvNzbNq3so/YnVhj5S3tEoQBekJ7fLbyjH1/1deB7OX8PmAST2
Bqrcnm4JHEr3tUDzAHv3MQqO6ehuwPllN/DoBcVEQx0v+P47pTB09F5u91tn3wp4
6u+QFQWL8GBgKhYYusu/mcCs3eubxwK0ZRNlNm6XVc0bhThdDXK9GmESQr3HAMUz
XtwDGK1zIyapnBVC1gqB5qEdLroQ+5wmK1Hsa4+y3mN0FmpWhTSW6JXHgTJP+0cU
C3Assiq+kgyFNJo2Hbhg/gFAPXhI0/fQJpiRPUhNIEOj9CDC8Sw0EyT22wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBbGDR8muynbS6mW6WcRXQXnHAbjMB8GA1UdIwQY
MBaAFBpXY9QbtTNVioUg3lqW6yJYBolBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR2xkajFCdTFNMVdLaFNEZVdwYnJJbGdHaVVFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yy8yZWZmYmUtMTA5Yy00OTU2LWI0YTAt
NGM4MzY1NTE1OTY1LzEvR2xkajFCdTFNMVdLaFNEZVdwYnJJbGdHaVVFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Yy8yZWZmYmUtMTA5Yy00OTU2LWI0YTAtNGM4MzY1NTE1OTY1
LzEvR2xkajFCdTFNMVdLaFNEZVdwYnJJbGdHaVVFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA1EUI/xNl
WYWlctXQP2U8LpNQMS9hkImBaWAM8hg+M36GhzZxw6/0EU1gu2Kufg7vZq+jlyCl
s6Lt6kHo3PtB3Cu+FqtKYT+jNfN2TMv2LhU+yjw/M9Gfr5+d3RcslkioaykQZ7xV
P+rtFwKxvjrz+7WGvEgxu+1T2CVh8Htp413l2InSzPQSQzb7HjXodw84jOJ14CWR
PMJNu7gDj4rS/6uj5S42BwPe/Gko/F1oxcW8UKUt93wiiL6jDOHlW3rgvhhVVrJW
GqQ+nItKGdZBNAqcRuzm2DzpUfkc026idYTN6AOAv/QxsCXTMW/CdaLdS4FOwQGF
bclaF7RcQm3ObQ==
-----END CERTIFICATE-----