Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/bb85d7-7cde-4e1c-b9df-79eeb6321eb7/1/GeBhVfweN2UrK3nJpTbS5hRNBPc.mft
File:                     GeBhVfweN2UrK3nJpTbS5hRNBPc.mft (raw, json)
Hash identifier:          sfrmeknSrQuOdXukft8fGXchDIfMH7nkXla2BXVE0q0=
Subject key identifier:   EC:80:D8:98:8D:F1:0D:97:2D:7B:FB:55:0E:B3:78:F4:1D:A6:CB:F9
Authority key identifier: 19:E0:61:55:FC:1E:37:65:2B:2B:79:C9:A5:36:D2:E6:14:4D:04:F7
Certificate issuer:       /CN=19e06155fc1e37652b2b79c9a536d2e6144d04f7
Certificate serial:       01962E99E36BB9EF9FD3087D31C943C7F606
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GeBhVfweN2UrK3nJpTbS5hRNBPc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9a/bb85d7-7cde-4e1c-b9df-79eeb6321eb7/1/GeBhVfweN2UrK3nJpTbS5hRNBPc.mft
Manifest number:          0D52
Signing time:             Sun 13 Apr 2025 10:02:39 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:39 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:39 +0000
Files and hashes:         1: GeBhVfweN2UrK3nJpTbS5hRNBPc.crl (hash: RdO3+F8JtBQJPTfN9DSWb3Pl0EYrc+DVjfJsBL1pMeQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:e3:6b:b9:ef:9f:d3:08:7d:31:c9:43:c7:f6:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=19e06155fc1e37652b2b79c9a536d2e6144d04f7
        Validity
            Not Before: Apr 13 10:02:39 2025 GMT
            Not After : Apr 14 10:02:39 2025 GMT
        Subject: CN=ec80d8988df10d972d7bfb550eb378f41da6cbf9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:c5:fd:96:67:5c:67:23:91:e6:69:d0:89:46:
                    5b:8f:4f:d2:81:0e:4a:2b:35:d2:c4:24:8b:42:4f:
                    b7:83:54:e0:cf:08:a7:f7:0b:a3:e0:35:47:43:50:
                    0a:57:14:a3:00:51:e9:4b:18:c9:fb:50:4a:68:b4:
                    5b:d1:eb:ea:dd:8f:46:be:7b:04:44:d7:f0:7e:d5:
                    15:67:5f:d6:67:1c:cf:ac:14:c6:df:8a:f8:12:13:
                    f9:ff:ae:03:a2:01:3e:4f:18:55:54:08:b3:a6:dc:
                    b5:56:a6:a2:6d:51:23:1b:8e:e8:c6:7b:27:ec:7b:
                    0a:c4:55:ec:95:90:76:55:4b:b2:0f:be:6e:3f:e5:
                    96:f1:fc:ae:73:d3:b1:d5:0b:75:51:4f:47:eb:db:
                    28:99:77:12:4f:9e:5e:6d:64:f5:f5:fc:2a:02:c0:
                    60:cf:eb:34:72:84:3c:72:d2:d8:93:e3:a0:ea:9c:
                    31:2f:97:33:23:6b:47:20:bc:e1:6f:3e:da:8c:0b:
                    39:6a:b1:9d:05:59:21:6a:d3:15:66:ee:a7:be:b6:
                    9f:45:b4:f1:60:32:7f:bc:dd:37:61:48:a0:fd:e3:
                    18:61:b9:44:f0:35:25:a9:df:ca:9a:1d:94:cf:68:
                    b7:68:05:b9:de:d8:19:cc:fe:8b:1f:44:81:b7:71:
                    b6:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:80:D8:98:8D:F1:0D:97:2D:7B:FB:55:0E:B3:78:F4:1D:A6:CB:F9
            X509v3 Authority Key Identifier:
                keyid:19:E0:61:55:FC:1E:37:65:2B:2B:79:C9:A5:36:D2:E6:14:4D:04:F7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GeBhVfweN2UrK3nJpTbS5hRNBPc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/bb85d7-7cde-4e1c-b9df-79eeb6321eb7/1/GeBhVfweN2UrK3nJpTbS5hRNBPc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/bb85d7-7cde-4e1c-b9df-79eeb6321eb7/1/GeBhVfweN2UrK3nJpTbS5hRNBPc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         55:e1:12:15:f5:75:0f:67:43:b9:1d:09:4f:18:88:b0:08:61:
         0e:23:12:43:01:3a:60:1a:84:a6:8b:5a:d4:1c:4c:5b:89:f0:
         9e:6b:6b:42:67:d6:a2:a6:32:63:b9:ec:6d:d6:f9:b9:64:45:
         72:2a:ed:82:cb:db:cb:c1:dc:1c:c0:02:bb:c0:dc:cc:8d:71:
         2e:05:6b:2a:8f:cc:5c:e9:51:fe:67:cc:ac:2b:9e:b6:b0:1f:
         84:14:98:6a:58:47:47:e1:2f:25:1f:ca:de:fd:36:69:19:2d:
         39:28:1e:4f:52:55:c0:d8:c6:3b:f4:88:08:3a:50:2e:dc:af:
         d6:a3:6a:f7:91:3d:76:10:56:01:e8:bc:08:64:a8:39:75:b1:
         e1:dc:14:85:68:db:4d:8b:8a:4f:82:7d:be:f6:82:e9:50:60:
         76:98:37:ad:f6:27:8d:0d:63:f5:18:f4:b4:e2:11:95:db:fc:
         8d:3d:ee:80:72:31:a7:ad:a5:20:f3:cb:1a:36:36:b9:f7:68:
         26:a8:48:0d:10:d8:0f:64:53:36:1c:dc:02:87:ea:a0:e5:bd:
         38:2f:ba:fb:e2:83:25:dd:46:f6:bd:5d:97:4f:fc:3c:74:93:
         91:c0:d8:51:c9:7f:33:36:03:46:8a:e7:bc:7f:0e:c2:59:dc:
         12:68:8b:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----