Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/c13029-7a0d-44b2-a37a-b839d9202106/1/g-ULKlHI9a25N7IqkMcg9rBPKXM.mft
File:                     g-ULKlHI9a25N7IqkMcg9rBPKXM.mft (raw, json)
Hash identifier:          TJY/FSGNqNZPyCyeaVKSG+54rVaEmTPGYJOzBBRK7FA=
Subject key identifier:   6A:B4:95:06:93:D7:46:36:9B:19:83:74:69:47:68:A8:9A:F2:5E:20
Authority key identifier: 83:E5:0B:2A:51:C8:F5:AD:B9:37:B2:2A:90:C7:20:F6:B0:4F:29:73
Certificate issuer:       /CN=83e50b2a51c8f5adb937b22a90c720f6b04f2973
Certificate serial:       01962F071D75DA76923C6E57C555469886D1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/g-ULKlHI9a25N7IqkMcg9rBPKXM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b8/c13029-7a0d-44b2-a37a-b839d9202106/1/g-ULKlHI9a25N7IqkMcg9rBPKXM.mft
Manifest number:          12FD
Signing time:             Sun 13 Apr 2025 12:01:57 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:57 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:57 +0000
Files and hashes:         1: g-ULKlHI9a25N7IqkMcg9rBPKXM.crl (hash: QiRyzAcSQM+uiNXA2PLHMwhNRZ4yfaw3OuxnOWW5LoQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:07:1d:75:da:76:92:3c:6e:57:c5:55:46:98:86:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=83e50b2a51c8f5adb937b22a90c720f6b04f2973
        Validity
            Not Before: Apr 13 12:01:57 2025 GMT
            Not After : Apr 14 12:01:57 2025 GMT
        Subject: CN=6ab4950693d746369b198374694768a89af25e20
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:91:d5:4c:5c:3c:0b:65:2e:e3:76:cc:70:3c:
                    9a:4a:b1:6b:6f:eb:32:35:ce:4e:3e:df:a4:40:89:
                    25:0a:e8:fd:15:88:ee:2a:52:b7:e0:2c:85:2f:38:
                    bc:7e:3f:dc:bd:4e:b9:a0:3a:92:23:a2:4e:93:95:
                    1b:f1:76:f0:67:d0:03:28:86:41:6d:61:d1:ac:dd:
                    be:26:dd:9a:19:c9:fe:a8:97:7d:04:83:51:d7:a8:
                    b1:cc:b3:89:fc:0b:4d:2a:0b:1e:6f:77:d0:dd:d9:
                    78:cf:c2:f4:27:12:dd:89:e0:7d:84:61:b7:01:a2:
                    61:6d:c7:7a:c9:4b:27:66:a8:d5:d3:a6:86:c7:63:
                    ff:bd:01:16:93:d5:02:53:0e:05:ab:20:9c:1f:fd:
                    5d:b7:f5:09:8a:e0:6f:f4:c6:c9:98:7b:ab:51:d4:
                    ba:c9:b3:1a:f4:ed:9c:fa:66:83:d0:6b:93:68:29:
                    9e:6f:f3:20:27:49:57:c1:6c:da:f9:cc:18:59:d3:
                    ca:a6:c3:e2:db:9b:3d:cc:24:18:37:16:23:e1:75:
                    c4:bb:53:ec:5a:de:94:52:38:b4:4c:65:8c:b7:a8:
                    5b:11:01:2c:0f:d2:96:59:a5:88:c6:f2:53:b5:06:
                    ec:e9:68:e4:ba:7f:0e:56:57:1f:16:9b:36:7f:82:
                    46:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:B4:95:06:93:D7:46:36:9B:19:83:74:69:47:68:A8:9A:F2:5E:20
            X509v3 Authority Key Identifier:
                keyid:83:E5:0B:2A:51:C8:F5:AD:B9:37:B2:2A:90:C7:20:F6:B0:4F:29:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g-ULKlHI9a25N7IqkMcg9rBPKXM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/c13029-7a0d-44b2-a37a-b839d9202106/1/g-ULKlHI9a25N7IqkMcg9rBPKXM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/c13029-7a0d-44b2-a37a-b839d9202106/1/g-ULKlHI9a25N7IqkMcg9rBPKXM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:d9:c8:37:d4:33:4a:6d:38:91:2c:97:5e:d9:89:54:58:27:
         f2:73:13:13:a0:2d:a4:bb:11:72:b6:56:23:fa:9a:68:ab:10:
         d1:01:a9:57:2f:23:e4:0e:dc:c7:48:9f:f5:e4:26:cb:0c:0f:
         c4:35:d5:f0:9f:cd:07:ee:a3:eb:fe:4f:e5:f4:06:e9:07:32:
         e1:0d:a2:15:a3:51:13:f9:84:7c:8b:19:37:9b:6a:de:c3:ba:
         a2:0e:76:9b:e0:31:0b:b9:0d:1e:dc:c4:cf:ac:e6:34:bd:09:
         6e:af:58:7c:eb:20:5a:ca:aa:ff:9c:d8:96:28:2d:2b:45:d3:
         55:44:7e:9e:43:71:1e:62:d6:1c:b6:87:de:a7:e6:09:e7:59:
         11:36:45:7e:16:1a:41:0a:7e:d8:f8:ed:81:f1:89:1f:5a:41:
         46:4f:c4:e9:c2:ec:61:13:54:9c:b8:c6:d5:a6:f7:c7:6c:af:
         6b:d5:8c:6a:56:47:9b:3c:ff:7d:cd:d2:65:e7:3f:1b:b5:97:
         bf:0f:ee:4a:23:be:87:04:31:bd:eb:08:0d:1f:78:2c:9f:da:
         b6:ca:68:25:43:53:c2:5c:97:7c:a9:62:d9:7c:44:3e:ab:fb:
         ea:d2:ce:56:76:6e:71:68:21:6b:e1:48:61:e8:ad:d7:34:e2:
         ef:3b:15:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----