Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/c122a7-5712-4bbd-b638-ac9a93171aa5/1/GHexnUhH_D9JWvk2xbGhkoyRJ0g.mft
File:                     GHexnUhH_D9JWvk2xbGhkoyRJ0g.mft (raw, json)
Hash identifier:          KIM0N3CFSn6Q9sH14YphLtLqtgYizU1RWjSX2i4rnxM=
Subject key identifier:   D6:D0:8F:08:94:50:35:D5:34:C0:25:35:F6:CD:C3:43:3C:E3:1B:0F
Authority key identifier: 18:77:B1:9D:48:47:FC:3F:49:5A:F9:36:C5:B1:A1:92:8C:91:27:48
Certificate issuer:       /CN=1877b19d4847fc3f495af936c5b1a1928c912748
Certificate serial:       01962F06DBC1667D0AB868F43868406ABCFB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GHexnUhH_D9JWvk2xbGhkoyRJ0g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b4/c122a7-5712-4bbd-b638-ac9a93171aa5/1/GHexnUhH_D9JWvk2xbGhkoyRJ0g.mft
Manifest number:          14E7
Signing time:             Sun 13 Apr 2025 12:01:40 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:40 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:40 +0000
Files and hashes:         1: GHexnUhH_D9JWvk2xbGhkoyRJ0g.crl (hash: gLGEecjeNkN6SktMVFy7o58xZCG3ZWIi3RoH+wWgqRw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:db:c1:66:7d:0a:b8:68:f4:38:68:40:6a:bc:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1877b19d4847fc3f495af936c5b1a1928c912748
        Validity
            Not Before: Apr 13 12:01:40 2025 GMT
            Not After : Apr 14 12:01:40 2025 GMT
        Subject: CN=d6d08f08945035d534c02535f6cdc3433ce31b0f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:b0:90:d2:5e:63:7e:29:e8:a5:e4:22:7a:61:
                    7e:a8:b1:7b:00:2d:f6:3a:da:09:48:8d:44:19:85:
                    63:20:49:ff:a8:cb:bc:23:90:30:a8:9b:36:d8:f2:
                    7b:97:fe:9b:74:c7:b2:92:d6:93:0e:2f:c4:ef:e2:
                    c1:29:bd:72:b6:6f:f6:2b:6e:f5:87:f5:e3:3c:d9:
                    bc:ed:8d:9e:9f:97:6d:92:4a:a2:5b:35:cc:8a:43:
                    6d:25:51:c5:bd:8e:5f:dc:ce:26:46:5e:fd:56:34:
                    a0:97:46:1e:45:46:c4:23:38:db:cf:b3:16:4b:ff:
                    a0:ce:3a:dd:ea:44:9d:9a:46:04:7b:71:5c:1c:82:
                    75:74:c7:f2:d1:32:78:8c:6c:bf:2d:4a:12:f4:bd:
                    87:6e:32:e9:a7:f0:33:fc:ab:68:5b:b1:de:f2:72:
                    d5:fb:e6:40:aa:9f:88:92:c2:d4:24:5c:31:90:6c:
                    78:3c:2e:39:a6:04:52:3f:0c:48:12:43:2e:c9:ff:
                    0d:37:d8:c3:55:3c:59:14:4b:7a:44:8c:28:c0:16:
                    f7:2d:4d:3e:da:23:63:1e:0b:ed:2d:a1:52:27:35:
                    0e:4d:4d:a2:48:b5:6d:3b:8d:14:ba:67:62:ac:93:
                    f9:90:38:87:65:56:02:93:39:c5:9d:8a:b6:1d:84:
                    ef:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:D0:8F:08:94:50:35:D5:34:C0:25:35:F6:CD:C3:43:3C:E3:1B:0F
            X509v3 Authority Key Identifier:
                keyid:18:77:B1:9D:48:47:FC:3F:49:5A:F9:36:C5:B1:A1:92:8C:91:27:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GHexnUhH_D9JWvk2xbGhkoyRJ0g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/c122a7-5712-4bbd-b638-ac9a93171aa5/1/GHexnUhH_D9JWvk2xbGhkoyRJ0g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/c122a7-5712-4bbd-b638-ac9a93171aa5/1/GHexnUhH_D9JWvk2xbGhkoyRJ0g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:e3:8d:b1:67:b9:8f:54:43:22:b4:b9:40:70:8f:c1:34:3e:
         d9:43:e1:97:37:e9:b4:8d:43:bd:d7:a8:8a:6b:fd:96:8c:83:
         eb:4d:3b:75:29:b1:b5:cc:6c:4a:7c:02:7c:a5:74:e3:49:04:
         ce:18:1e:dc:6e:08:e1:de:2c:d1:54:83:2b:e6:75:15:f3:e3:
         a3:d2:bf:e5:e6:b0:06:5f:15:ab:54:52:2b:db:24:dd:cb:b8:
         c5:00:f5:86:9c:95:f2:06:94:99:fd:d7:0c:ad:b5:64:5b:1b:
         0f:2f:52:d1:f4:e1:32:00:0a:3a:ca:ba:9b:5b:c8:f3:f9:aa:
         2b:ee:49:4b:8f:5e:10:ff:1d:e4:c3:ae:32:75:82:0e:af:b6:
         70:49:9d:5c:a7:bf:2e:c4:8a:05:b6:89:87:7c:cd:77:94:6d:
         09:28:a2:17:cb:a4:4d:0b:ed:31:3a:a5:13:9a:4a:df:78:72:
         bd:5e:95:82:be:26:d2:aa:3b:ef:0c:a8:1d:1c:5f:63:d8:4a:
         8b:22:b3:68:8d:ad:7d:e0:a0:2a:d0:cb:7b:f2:e9:1b:0c:26:
         a2:90:72:51:91:2b:ea:27:e1:90:7f:fb:f7:6b:2d:2a:b1:ee:
         8a:59:d1:c2:8d:c5:6e:c1:21:fe:bc:b3:0b:e8:ee:04:8d:b9:
         20:13:83:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----