Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/bec335-5ee0-4c4d-bda7-7e6d12c3736f/1/Gr5e7LI69WmqcBp6sWz3rB-Q-WA.mft
File:                     Gr5e7LI69WmqcBp6sWz3rB-Q-WA.mft (raw, json)
Hash identifier:          5GKOGW0P1CcOCc5sT/A+ti1TpBT7l0hHTG3npVMcFys=
Subject key identifier:   B4:A2:15:23:A3:C8:C3:8A:60:84:3F:3A:A5:27:45:01:AC:68:A6:6C
Authority key identifier: 1A:BE:5E:EC:B2:3A:F5:69:AA:70:1A:7A:B1:6C:F7:AC:1F:90:F9:60
Certificate issuer:       /CN=1abe5eecb23af569aa701a7ab16cf7ac1f90f960
Certificate serial:       01962DF3BF2011060DF94219F965DFC1D894
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Gr5e7LI69WmqcBp6sWz3rB-Q-WA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b1/bec335-5ee0-4c4d-bda7-7e6d12c3736f/1/Gr5e7LI69WmqcBp6sWz3rB-Q-WA.mft
Manifest number:          14E7
Signing time:             Sun 13 Apr 2025 07:01:10 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:10 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:10 +0000
Files and hashes:         1: Gr5e7LI69WmqcBp6sWz3rB-Q-WA.crl (hash: scHdPsoi7j8ietftwcICzy+r9q3yk0XI1WF+vXSr/x4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f3:bf:20:11:06:0d:f9:42:19:f9:65:df:c1:d8:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1abe5eecb23af569aa701a7ab16cf7ac1f90f960
        Validity
            Not Before: Apr 13 07:01:10 2025 GMT
            Not After : Apr 14 07:01:10 2025 GMT
        Subject: CN=b4a21523a3c8c38a60843f3aa5274501ac68a66c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:34:f1:3d:9e:97:dc:6f:83:94:6d:e7:67:43:
                    ca:c0:a6:ac:51:47:75:e2:9d:b5:c2:f0:99:fc:81:
                    60:0d:58:4e:cf:2a:d2:da:c3:cf:f8:18:13:b0:64:
                    93:2c:f5:a1:e7:8f:50:29:85:5a:cf:85:65:84:ac:
                    61:c1:52:35:51:d4:9f:57:18:d0:64:35:29:d8:6c:
                    4d:ce:bc:22:0c:b5:ac:ef:a9:56:d9:26:45:43:41:
                    5e:57:43:a8:fa:7f:d2:12:25:6f:6b:ca:fc:e4:6a:
                    ae:14:48:c7:7c:ff:04:6d:b4:2e:2a:85:1a:4e:1e:
                    42:c0:1f:15:3a:0b:37:c2:5f:e2:dd:56:05:32:df:
                    01:b6:b6:63:81:0e:f5:57:5a:f1:4d:81:d0:34:4c:
                    2e:e7:48:29:db:87:5d:66:ea:56:86:e1:03:f6:a8:
                    1e:60:c2:40:17:b4:56:56:20:39:c2:80:52:7d:76:
                    33:71:09:2b:51:dd:9f:a4:00:ef:96:7f:fd:b6:68:
                    a2:b3:18:2b:67:97:e5:30:ee:42:14:68:ce:82:49:
                    5a:9f:d2:1e:8f:38:6f:17:de:a6:c6:5a:96:ea:71:
                    5f:b2:f7:20:01:c6:80:c2:00:06:5a:98:e8:d5:40:
                    8d:27:e0:51:6f:f0:c2:11:df:50:b4:01:a0:7c:51:
                    74:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:A2:15:23:A3:C8:C3:8A:60:84:3F:3A:A5:27:45:01:AC:68:A6:6C
            X509v3 Authority Key Identifier:
                keyid:1A:BE:5E:EC:B2:3A:F5:69:AA:70:1A:7A:B1:6C:F7:AC:1F:90:F9:60

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gr5e7LI69WmqcBp6sWz3rB-Q-WA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/bec335-5ee0-4c4d-bda7-7e6d12c3736f/1/Gr5e7LI69WmqcBp6sWz3rB-Q-WA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/bec335-5ee0-4c4d-bda7-7e6d12c3736f/1/Gr5e7LI69WmqcBp6sWz3rB-Q-WA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:db:13:a0:25:02:b1:a0:53:d4:43:d1:00:08:f7:9b:83:8d:
         47:60:37:8f:ef:11:9c:39:85:f1:44:c5:c9:14:1a:37:07:d9:
         4e:a2:04:26:cf:bc:0a:c3:04:c1:73:c4:86:fc:fd:bf:17:7c:
         54:ec:de:56:db:8c:ff:fe:2d:92:62:28:ee:05:fc:b7:9e:85:
         61:33:cc:55:c6:ef:8c:c3:75:12:99:10:19:4c:24:b6:f5:bb:
         60:09:0a:76:e8:26:1e:bf:31:e4:2c:59:47:cc:c2:ef:ea:06:
         69:f8:eb:73:3a:6a:f3:5a:1c:5f:d1:a7:10:fc:3f:e8:79:5b:
         18:2f:31:32:b9:7f:7c:c3:5c:97:c5:1b:d5:1b:f8:41:07:a5:
         d8:aa:0c:e8:8d:92:c9:aa:9c:c3:48:34:8a:09:f1:dd:32:ab:
         bc:c4:b6:a7:d1:e7:c9:f2:12:67:01:b0:3a:6c:56:aa:ba:4a:
         c9:60:ff:98:59:96:0f:92:7e:e7:a7:39:c0:26:47:e3:d5:60:
         40:5c:97:b0:9d:58:d2:e4:c5:00:a8:40:6b:a5:17:3c:72:58:
         f3:1a:fe:06:3b:74:a7:7e:6f:0f:13:6d:3b:24:a0:ad:a8:e3:
         14:3d:58:47:80:36:5b:47:98:49:5c:04:a7:4d:27:e9:01:29:
         0d:6c:24:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----