Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/d2310f-2438-475a-b391-7cd613a527d1/1/ggA1PrKBit3XElx4FCFDMUneb2I.mft
File:                     ggA1PrKBit3XElx4FCFDMUneb2I.mft (raw, json)
Hash identifier:          J3/bMhht9ANFG4LwcUJMIPnFi8uQyrUBPywxz20SnXs=
Subject key identifier:   A4:53:5F:E2:A7:51:DF:D3:36:17:28:68:9F:73:D0:28:A3:D3:C7:CB
Authority key identifier: 82:00:35:3E:B2:81:8A:DD:D7:12:5C:78:14:21:43:31:49:DE:6F:62
Certificate issuer:       /CN=8200353eb2818addd7125c781421433149de6f62
Certificate serial:       01962E990F15E0E82EEE82B8E96958721380
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ggA1PrKBit3XElx4FCFDMUneb2I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6d/d2310f-2438-475a-b391-7cd613a527d1/1/ggA1PrKBit3XElx4FCFDMUneb2I.mft
Manifest number:          0460
Signing time:             Sun 13 Apr 2025 10:01:44 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:44 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:44 +0000
Files and hashes:         1: ggA1PrKBit3XElx4FCFDMUneb2I.crl (hash: NNKmqTAsXB9yb1sMs/zqEYEOrEP3eeVe+a5YrYJ+QSg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:0f:15:e0:e8:2e:ee:82:b8:e9:69:58:72:13:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8200353eb2818addd7125c781421433149de6f62
        Validity
            Not Before: Apr 13 10:01:44 2025 GMT
            Not After : Apr 14 10:01:44 2025 GMT
        Subject: CN=a4535fe2a751dfd3361728689f73d028a3d3c7cb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:ab:71:f7:53:7a:25:8e:04:71:aa:23:43:4c:
                    e6:c1:bd:fb:1b:d0:4a:c4:a0:1c:ae:5a:25:7c:38:
                    90:f8:e4:90:9b:4c:77:08:ba:49:c7:d4:42:58:7a:
                    5a:a8:9a:a3:b0:3c:b8:76:f1:9c:15:73:39:42:56:
                    d8:13:61:b1:4d:70:2a:e2:c9:6f:4a:51:41:bc:15:
                    f8:a7:43:43:7b:e2:23:53:ea:ac:92:89:2c:4f:4e:
                    f9:6f:56:55:41:ce:b1:94:01:af:eb:d7:63:9a:38:
                    94:e8:9e:18:aa:34:a4:b6:66:24:48:44:ac:98:26:
                    91:8e:5d:0d:fa:95:d4:b9:55:6a:dc:3d:11:ef:1b:
                    9e:3a:7f:97:d4:1b:a2:f5:ba:a6:f4:82:88:fb:a6:
                    7e:ac:04:e3:ba:a3:03:7e:84:3f:75:d1:19:13:28:
                    30:2f:67:9e:6b:c3:1f:50:cb:ea:2d:b1:9a:64:1f:
                    e3:7f:ee:b5:8e:ee:f5:86:ce:f6:de:3e:fb:50:01:
                    28:46:64:cf:00:ab:53:85:20:3f:5f:8b:54:57:b0:
                    2e:16:27:8e:04:c1:d3:f0:8f:8c:f0:22:36:a6:5d:
                    f4:e4:af:3c:42:18:56:4d:a1:c0:3c:16:75:bc:8a:
                    36:f7:56:e9:9e:16:91:3f:cd:80:6c:fe:b6:5d:d1:
                    db:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:53:5F:E2:A7:51:DF:D3:36:17:28:68:9F:73:D0:28:A3:D3:C7:CB
            X509v3 Authority Key Identifier:
                keyid:82:00:35:3E:B2:81:8A:DD:D7:12:5C:78:14:21:43:31:49:DE:6F:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ggA1PrKBit3XElx4FCFDMUneb2I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/d2310f-2438-475a-b391-7cd613a527d1/1/ggA1PrKBit3XElx4FCFDMUneb2I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/d2310f-2438-475a-b391-7cd613a527d1/1/ggA1PrKBit3XElx4FCFDMUneb2I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:2b:9a:e1:23:d4:b1:11:d6:45:73:6e:5b:7c:4e:9f:ef:ac:
         08:e1:15:7c:d8:c0:dd:60:11:22:d3:74:a9:f2:09:99:4a:85:
         ee:67:50:62:7c:a4:1c:97:b7:da:25:9f:6f:72:69:2e:d2:72:
         06:e8:26:8c:71:30:29:0d:da:90:8b:06:15:24:7c:0c:76:79:
         58:0a:9c:ae:d3:3a:dc:c8:14:0d:40:e7:86:9f:41:38:bc:56:
         cb:3e:31:90:70:11:c6:55:74:d8:a8:70:da:d7:42:5a:ea:52:
         21:cc:05:da:3e:e1:58:59:66:f4:bb:fc:a0:11:1f:c0:76:e1:
         04:e3:4e:5c:38:fb:c8:70:c7:ae:a4:89:75:84:70:c7:2f:4d:
         3c:db:fc:25:a1:96:e3:89:9b:cb:10:8e:78:2e:6f:23:ac:15:
         87:12:2f:17:6a:b1:15:62:3e:67:c1:97:40:6f:ce:8e:08:65:
         68:52:e8:96:98:e1:e8:af:09:f1:e0:0c:3b:ec:98:e8:18:df:
         7c:2b:7c:b8:c7:c5:28:5a:b5:92:c6:29:10:8d:99:0e:0b:32:
         e7:a3:6c:92:87:a3:af:6f:1e:13:85:19:06:f7:7f:ac:b3:bf:
         ba:b5:9d:c1:9d:e8:ca:56:85:5b:7f:df:1e:4e:94:73:8a:e1:
         b9:69:e0:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----