Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/6bde9e-6ed8-47d5-9d9c-54d784efbb7a/1/Gcxj87NPFwGJ0HPIi31lL3Azofw.mft
File:                     Gcxj87NPFwGJ0HPIi31lL3Azofw.mft (raw, json)
Hash identifier:          Q6eNzN5xWCKlAnIt/s6UX6v+EBDK43ozFZ5MwR5I3vY=
Subject key identifier:   DB:BC:5A:8A:D6:29:7A:16:11:91:F6:17:F9:E3:F6:41:9A:D7:B1:11
Authority key identifier: 19:CC:63:F3:B3:4F:17:01:89:D0:73:C8:8B:7D:65:2F:70:33:A1:FC
Certificate issuer:       /CN=19cc63f3b34f170189d073c88b7d652f7033a1fc
Certificate serial:       01962F3D968E7248723FD254E5F080A838A0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Gcxj87NPFwGJ0HPIi31lL3Azofw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/75/6bde9e-6ed8-47d5-9d9c-54d784efbb7a/1/Gcxj87NPFwGJ0HPIi31lL3Azofw.mft
Manifest number:          026E
Signing time:             Sun 13 Apr 2025 13:01:27 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:27 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:27 +0000
Files and hashes:         1: Gcxj87NPFwGJ0HPIi31lL3Azofw.crl (hash: TkER1iUcLGxyhbZHaO8urFrWH54efd7szjUDDtNYZu8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:96:8e:72:48:72:3f:d2:54:e5:f0:80:a8:38:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=19cc63f3b34f170189d073c88b7d652f7033a1fc
        Validity
            Not Before: Apr 13 13:01:27 2025 GMT
            Not After : Apr 14 13:01:27 2025 GMT
        Subject: CN=dbbc5a8ad6297a161191f617f9e3f6419ad7b111
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:0f:39:01:42:ef:a9:74:ac:eb:02:f6:00:bf:
                    16:46:dd:92:eb:20:e1:24:46:9f:75:60:61:13:e2:
                    c6:ef:1b:2b:19:ea:2f:42:cf:ad:2d:23:ba:4d:46:
                    28:e0:53:02:d3:83:19:91:b2:aa:c3:14:2c:9a:a2:
                    ab:fe:48:76:c2:b8:d4:a5:43:ef:4e:b9:b3:93:19:
                    73:90:b2:52:27:66:1a:40:3b:8b:ee:d6:9d:ad:b7:
                    67:62:04:fe:ec:7b:2c:1c:5f:e3:aa:03:97:84:d5:
                    5e:11:2c:96:fd:2d:aa:0e:54:fc:48:44:bd:dc:c5:
                    78:26:1c:19:2c:a4:7e:35:16:df:8c:47:ca:cb:5d:
                    3a:43:18:59:4a:d3:45:99:2f:92:41:21:aa:00:8e:
                    f3:c2:7a:98:de:b8:66:3a:c6:b5:3a:3e:11:67:d9:
                    0c:0e:a3:8e:8b:f4:af:ba:76:1d:8c:30:a8:11:c9:
                    d2:e3:21:fe:36:62:24:69:63:fc:33:78:b6:1c:bd:
                    95:d1:04:ed:13:87:80:16:17:2a:3a:73:3f:d5:e8:
                    5a:09:9e:ab:ca:10:a6:95:82:8c:81:1b:5e:3f:5e:
                    3b:20:fe:10:81:2a:df:ed:d3:d0:78:44:05:c0:66:
                    07:0e:a4:a4:53:a7:ad:7d:bf:58:37:3b:ff:6b:a1:
                    be:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:BC:5A:8A:D6:29:7A:16:11:91:F6:17:F9:E3:F6:41:9A:D7:B1:11
            X509v3 Authority Key Identifier:
                keyid:19:CC:63:F3:B3:4F:17:01:89:D0:73:C8:8B:7D:65:2F:70:33:A1:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gcxj87NPFwGJ0HPIi31lL3Azofw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/6bde9e-6ed8-47d5-9d9c-54d784efbb7a/1/Gcxj87NPFwGJ0HPIi31lL3Azofw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/75/6bde9e-6ed8-47d5-9d9c-54d784efbb7a/1/Gcxj87NPFwGJ0HPIi31lL3Azofw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:6e:15:b8:99:98:6a:29:2a:1f:99:54:6a:29:a4:dd:b2:e9:
         0c:32:67:69:1c:02:c3:1f:5c:71:64:99:52:39:62:81:17:5a:
         8a:1d:64:03:53:f1:d7:e0:63:ce:10:24:11:da:6a:87:a1:30:
         19:c9:e9:dd:74:41:c3:49:66:d1:99:21:08:17:a5:85:11:ba:
         d4:83:40:be:a0:88:44:70:37:49:e9:4e:79:c8:c1:fc:32:18:
         91:47:12:ba:07:ad:2f:20:21:ac:74:a6:ee:7c:92:a9:88:6c:
         e4:f3:11:94:ff:5f:c3:e1:83:2a:7e:de:4b:77:60:66:f5:5f:
         b6:ba:ee:52:d9:08:d3:20:a5:38:27:a7:d1:ab:8a:6b:0e:b7:
         c6:74:d4:99:ee:02:0c:73:5d:9f:1d:22:be:12:77:7f:db:2f:
         d2:0c:e3:65:f2:56:ae:79:aa:93:80:21:f2:22:92:6b:cc:43:
         f7:b2:a8:51:ca:67:5b:5a:8a:91:8e:64:6e:c7:6d:be:e2:c7:
         4d:db:52:57:f5:7b:64:4e:86:50:45:ed:02:7e:bd:01:26:3d:
         09:37:28:e7:85:52:45:eb:7e:3a:dc:16:4b:9a:89:1b:61:f0:
         86:e4:83:18:35:4a:a4:e8:57:bc:1c:88:65:ab:99:1d:c2:aa:
         23:70:08:aa
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvPZaOckhyP9JU5fCAqDigMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE5Y2M2M2YzYjM0ZjE3MDE4OWQwNzNjODhiN2Q2NTJmNzAz
M2ExZmMwHhcNMjUwNDEzMTMwMTI3WhcNMjUwNDE0MTMwMTI3WjAzMTEwLwYDVQQD
EyhkYmJjNWE4YWQ2Mjk3YTE2MTE5MWY2MTdmOWUzZjY0MTlhZDdiMTExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3Q85AULvqXSs6wL2AL8WRt2S6yDh
JEafdWBhE+LG7xsrGeovQs+tLSO6TUYo4FMC04MZkbKqwxQsmqKr/kh2wrjUpUPv
TrmzkxlzkLJSJ2YaQDuL7tadrbdnYgT+7HssHF/jqgOXhNVeESyW/S2qDlT8SES9
3MV4JhwZLKR+NRbfjEfKy106QxhZStNFmS+SQSGqAI7zwnqY3rhmOsa1Oj4RZ9kM
DqOOi/SvunYdjDCoEcnS4yH+NmIkaWP8M3i2HL2V0QTtE4eAFhcqOnM/1ehaCZ6r
yhCmlYKMgRteP147IP4QgSrf7dPQeEQFwGYHDqSkU6etfb9YNzv/a6G+NQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNu8WorWKXoWEZH2F/nj9kGa17ERMB8GA1UdIwQY
MBaAFBnMY/OzTxcBidBzyIt9ZS9wM6H8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR2N4ajg3TlBGd0dKMEhQSWkzMWxMM0F6b2Z3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NS82YmRlOWUtNmVkOC00N2Q1LTlkOWMt
NTRkNzg0ZWZiYjdhLzEvR2N4ajg3TlBGd0dKMEhQSWkzMWxMM0F6b2Z3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83NS82YmRlOWUtNmVkOC00N2Q1LTlkOWMtNTRkNzg0ZWZiYjdh
LzEvR2N4ajg3TlBGd0dKMEhQSWkzMWxMM0F6b2Z3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADG4VuJmY
aikqH5lUaimk3bLpDDJnaRwCwx9ccWSZUjligRdaih1kA1Px1+BjzhAkEdpqh6Ew
Gcnp3XRBw0lm0ZkhCBelhRG61INAvqCIRHA3SelOecjB/DIYkUcSugetLyAhrHSm
7nySqYhs5PMRlP9fw+GDKn7eS3dgZvVftrruUtkI0yClOCen0auKaw63xnTUme4C
DHNdnx0ivhJ3f9sv0gzjZfJWrnmqk4Ah8iKSa8xD97KoUcpnW1qKkY5kbsdtvuLH
TdtSV/V7ZE6GUEXtAn69ASY9CTco54VSRet+OtwWS5qJG2HwhuSDGDVKpOhXvByI
ZauZHcKqI3AIqg==
-----END CERTIFICATE-----