Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/5140ee-6fef-46ac-be32-d0d2f2ca8cbc/1/gU3w5sDcpazuCDqMcwTUXz0z1W0.mft
File:                     gU3w5sDcpazuCDqMcwTUXz0z1W0.mft (raw, json)
Hash identifier:          mmwMKXvfurS/zUIBoExFmb3y3yTYntecYKgFcUtgqNs=
Subject key identifier:   0C:5C:80:AB:51:5A:AA:89:D2:C2:13:28:27:09:1D:F7:81:63:10:02
Authority key identifier: 81:4D:F0:E6:C0:DC:A5:AC:EE:08:3A:8C:73:04:D4:5F:3D:33:D5:6D
Certificate issuer:       /CN=814df0e6c0dca5acee083a8c7304d45f3d33d56d
Certificate serial:       01962E616FF6525D23BEABBFA5CC3BD09B2C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gU3w5sDcpazuCDqMcwTUXz0z1W0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c6/5140ee-6fef-46ac-be32-d0d2f2ca8cbc/1/gU3w5sDcpazuCDqMcwTUXz0z1W0.mft
Manifest number:          0BCA
Signing time:             Sun 13 Apr 2025 09:00:59 +0000
Manifest this update:     Sun 13 Apr 2025 09:00:59 +0000
Manifest next update:     Mon 14 Apr 2025 09:00:59 +0000
Files and hashes:         1: gU3w5sDcpazuCDqMcwTUXz0z1W0.crl (hash: GwE6OapzhCoWX3wFzHUkkHQ3ZXgm7wC1/W1Trw/18vQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:6f:f6:52:5d:23:be:ab:bf:a5:cc:3b:d0:9b:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=814df0e6c0dca5acee083a8c7304d45f3d33d56d
        Validity
            Not Before: Apr 13 09:00:59 2025 GMT
            Not After : Apr 14 09:00:59 2025 GMT
        Subject: CN=0c5c80ab515aaa89d2c2132827091df781631002
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:de:ac:1a:0c:ee:25:c9:13:f3:ba:af:37:2b:
                    46:9f:47:0d:6e:e5:9e:51:a9:bf:5f:84:81:cc:12:
                    29:d9:b6:8b:2f:4a:ad:31:e7:3f:32:5a:8c:9e:df:
                    ab:2a:2f:d0:b9:86:ea:c8:e2:a5:d3:00:ac:ba:9d:
                    fd:98:7b:d9:b0:c5:8f:eb:a3:c9:33:ce:fd:f3:e9:
                    c2:5a:73:96:c0:da:91:cc:af:38:c1:17:83:79:76:
                    fd:40:c1:29:cf:e4:cb:5e:ec:c4:f2:e9:03:2b:1e:
                    ba:11:8f:8e:91:7f:9e:57:d7:db:46:e1:92:cb:0a:
                    1f:1e:c2:51:78:ec:af:8b:62:01:96:cc:6b:d2:29:
                    7f:f5:c3:0f:63:d3:5c:b1:80:82:78:b5:0a:d6:e9:
                    70:c0:2d:d0:ff:1d:36:95:31:48:b4:c3:d3:6b:34:
                    9c:57:b8:4d:08:e3:c8:12:32:8a:97:d1:de:9e:18:
                    e9:d3:01:43:22:9c:b0:be:bd:36:fc:d9:bd:a1:7b:
                    43:f1:c9:7d:e8:28:72:9c:c1:55:95:52:83:aa:2f:
                    98:22:d4:67:70:f8:de:f5:54:34:35:e5:a8:70:8a:
                    e1:ea:3c:8a:15:bf:8f:5a:a7:4e:61:da:55:c7:ee:
                    96:ad:0b:a1:06:aa:65:58:ff:65:fe:60:5b:af:4d:
                    cb:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:5C:80:AB:51:5A:AA:89:D2:C2:13:28:27:09:1D:F7:81:63:10:02
            X509v3 Authority Key Identifier:
                keyid:81:4D:F0:E6:C0:DC:A5:AC:EE:08:3A:8C:73:04:D4:5F:3D:33:D5:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gU3w5sDcpazuCDqMcwTUXz0z1W0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/5140ee-6fef-46ac-be32-d0d2f2ca8cbc/1/gU3w5sDcpazuCDqMcwTUXz0z1W0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/5140ee-6fef-46ac-be32-d0d2f2ca8cbc/1/gU3w5sDcpazuCDqMcwTUXz0z1W0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a3:ae:cb:12:11:65:13:f1:bc:dd:6f:96:e1:43:e1:9b:1c:96:
         c6:f6:7a:a7:ed:6f:e3:24:67:29:71:c6:92:f2:9b:a6:90:7c:
         7f:dd:93:36:34:9b:35:2d:66:ec:c3:2c:df:43:31:ed:5c:01:
         8b:fa:9e:0e:7a:20:a2:16:c0:a2:ed:f6:1d:26:e0:b4:8b:ac:
         0c:29:e4:6e:5e:54:de:57:08:f5:6d:dd:03:23:0b:16:31:8b:
         c1:17:9a:c4:4f:31:79:2a:69:b2:0b:2f:3f:13:92:78:70:8f:
         d0:2c:ba:2a:52:b0:53:ad:78:3d:98:73:e9:ce:b7:06:ba:da:
         82:af:cb:27:80:e8:b4:70:83:e0:79:0c:74:ab:6d:ac:4c:d2:
         7d:e1:c4:bd:39:f5:3d:50:6e:5c:9a:72:60:75:fe:14:29:18:
         1e:51:de:82:a9:88:5b:32:79:d6:1d:09:fa:85:f3:6c:5a:24:
         71:14:a1:ec:0e:21:36:4e:49:a7:aa:2f:53:c9:db:80:81:80:
         d5:bc:7b:c2:c2:d0:7a:ee:82:be:ff:dc:b7:6c:62:09:a4:4d:
         ed:c6:ca:53:df:00:e1:61:18:ae:d2:8f:0d:fe:b6:61:e8:52:
         e9:04:70:22:b3:ed:bb:24:42:2e:c2:23:f4:b3:1a:20:24:ef:
         de:07:61:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----