Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/1b7d08-92f9-4ed1-b78e-033042e88d18/1/gdTqRN6eWaF8ki9uBBcTu8SvCjM.mft
File:                     gdTqRN6eWaF8ki9uBBcTu8SvCjM.mft (raw, json)
Hash identifier:          FNndrM2F+nkgu6huLkN4CiYVVbWCDTqdfk8TBE1B4B4=
Subject key identifier:   41:E3:59:BB:DB:A2:48:33:5C:8F:8A:51:C9:19:99:45:64:C7:5B:A1
Authority key identifier: 81:D4:EA:44:DE:9E:59:A1:7C:92:2F:6E:04:17:13:BB:C4:AF:0A:33
Certificate issuer:       /CN=81d4ea44de9e59a17c922f6e041713bbc4af0a33
Certificate serial:       01962F74A06FA3FE4FF0B6C53E32E892B533
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gdTqRN6eWaF8ki9uBBcTu8SvCjM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ad/1b7d08-92f9-4ed1-b78e-033042e88d18/1/gdTqRN6eWaF8ki9uBBcTu8SvCjM.mft
Manifest number:          0321
Signing time:             Sun 13 Apr 2025 14:01:34 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:34 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:34 +0000
Files and hashes:         1: gdTqRN6eWaF8ki9uBBcTu8SvCjM.crl (hash: 5YC1AX8iLC00URGPDE6Ml5gZyi9W0sZmtI86LpAdN6A=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:a0:6f:a3:fe:4f:f0:b6:c5:3e:32:e8:92:b5:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=81d4ea44de9e59a17c922f6e041713bbc4af0a33
        Validity
            Not Before: Apr 13 14:01:34 2025 GMT
            Not After : Apr 14 14:01:34 2025 GMT
        Subject: CN=41e359bbdba248335c8f8a51c919994564c75ba1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:3e:ef:75:31:bc:74:42:2d:21:7c:a8:ec:3e:
                    de:eb:54:1b:ae:3e:8a:24:de:df:a6:ff:86:7c:44:
                    1e:9b:ce:de:73:6d:7f:78:20:d2:5b:a5:f9:c0:26:
                    07:aa:f0:2a:ad:11:8a:2f:e3:25:06:2a:6b:6b:fe:
                    66:bb:b1:58:23:47:05:ae:87:c5:8a:60:f4:c9:ca:
                    e0:f8:ff:ad:91:c8:21:4c:3a:ad:20:41:e4:99:a2:
                    c7:29:01:ab:88:4f:1f:53:70:cc:83:c6:d7:b7:22:
                    43:ae:3a:cd:91:3a:ff:38:b6:ac:6a:fe:0a:a9:ac:
                    9b:cc:9b:61:46:3f:d7:46:56:e3:fd:87:5d:a3:4a:
                    0a:bd:7e:3d:2b:3c:77:9a:6e:88:90:ae:70:b5:ad:
                    45:15:5e:4b:3c:99:75:f3:d7:e1:5f:c3:df:8e:ad:
                    37:c4:bb:4d:0d:e2:47:f6:99:09:e7:8a:7a:f8:22:
                    10:95:03:09:07:22:b3:5d:8d:a6:ae:b6:c3:ff:88:
                    ec:4d:45:df:1a:a0:b1:14:1f:cf:c2:cc:43:d9:9f:
                    8d:c9:cb:68:50:6b:f0:f3:35:24:90:97:fe:d3:d2:
                    69:a9:5e:ae:7b:9c:27:4d:6d:8d:7b:69:02:b9:3d:
                    f9:5c:dc:3f:5c:e8:96:b0:50:e1:5c:f1:1b:c9:d9:
                    1e:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:E3:59:BB:DB:A2:48:33:5C:8F:8A:51:C9:19:99:45:64:C7:5B:A1
            X509v3 Authority Key Identifier:
                keyid:81:D4:EA:44:DE:9E:59:A1:7C:92:2F:6E:04:17:13:BB:C4:AF:0A:33

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gdTqRN6eWaF8ki9uBBcTu8SvCjM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/1b7d08-92f9-4ed1-b78e-033042e88d18/1/gdTqRN6eWaF8ki9uBBcTu8SvCjM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/1b7d08-92f9-4ed1-b78e-033042e88d18/1/gdTqRN6eWaF8ki9uBBcTu8SvCjM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:92:37:c6:41:17:11:22:1b:4a:2d:5a:0c:ca:4f:6c:ce:fa:
         3c:e6:a0:dd:63:2b:eb:92:f6:24:16:86:fa:36:f2:11:3f:ae:
         e9:8d:03:38:0c:9f:78:c5:76:88:77:e3:0e:ab:a1:3c:fd:a5:
         f9:49:26:25:65:9f:32:1b:7d:d0:e4:36:7a:8d:53:d9:e4:eb:
         e4:44:87:30:df:bd:d6:0d:1c:44:91:7c:c5:a5:4e:a9:b9:0e:
         05:14:f9:bc:fd:a8:fe:03:f5:4e:59:7f:ab:d6:7a:b2:90:6a:
         26:5e:4d:ab:2d:db:36:74:7b:d8:82:e0:23:92:75:ac:91:38:
         7d:90:e4:c5:eb:eb:4b:66:f9:f6:58:a0:8a:d9:6c:56:02:7e:
         a4:e4:04:2c:84:b6:b0:14:fe:5d:c8:6f:11:2a:7c:9e:d1:72:
         ed:d7:bd:88:d0:47:1e:15:7e:cc:1f:86:71:fc:44:79:9c:93:
         54:50:a9:ed:d1:aa:ee:81:6c:b9:46:bf:22:b5:5b:ab:c1:f6:
         0e:bc:67:7b:94:fb:36:28:71:02:bd:a4:14:e7:9d:0c:f9:fa:
         12:06:b5:f9:00:22:c0:2a:70:ca:50:6b:85:9a:09:51:6a:3f:
         f6:50:92:59:d8:3b:db:49:54:19:f6:07:33:6a:39:a5:26:cb:
         17:f7:ab:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----