Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/7021e2-effe-4163-8bb3-58e7db30ea44/1/GQn2DIuF7-02HfW2tRyf7a4cf5Y.mft
File:                     GQn2DIuF7-02HfW2tRyf7a4cf5Y.mft (raw, json)
Hash identifier:          1/Vc+1LC53OlxJNA0U/buWagcx/PwEGRrxujJLqeomU=
Subject key identifier:   8F:69:F3:3B:46:AB:CB:E4:E9:26:D2:EE:DB:FC:4C:39:A2:B4:9A:AD
Authority key identifier: 19:09:F6:0C:8B:85:EF:ED:36:1D:F5:B6:B5:1C:9F:ED:AE:1C:7F:96
Certificate issuer:       /CN=1909f60c8b85efed361df5b6b51c9fedae1c7f96
Certificate serial:       01962F749620959F2423FD8398475E65FD2F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GQn2DIuF7-02HfW2tRyf7a4cf5Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cc/7021e2-effe-4163-8bb3-58e7db30ea44/1/GQn2DIuF7-02HfW2tRyf7a4cf5Y.mft
Manifest number:          0754
Signing time:             Sun 13 Apr 2025 14:01:31 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:31 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:31 +0000
Files and hashes:         1: GQn2DIuF7-02HfW2tRyf7a4cf5Y.crl (hash: 6/ytO625hQx+mTP4txG7KuLiO5d2szFoQDhvlidCbh0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:96:20:95:9f:24:23:fd:83:98:47:5e:65:fd:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1909f60c8b85efed361df5b6b51c9fedae1c7f96
        Validity
            Not Before: Apr 13 14:01:31 2025 GMT
            Not After : Apr 14 14:01:31 2025 GMT
        Subject: CN=8f69f33b46abcbe4e926d2eedbfc4c39a2b49aad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:ad:8c:8e:53:ea:a7:3c:fc:9f:b4:3d:07:b6:
                    24:3b:50:c1:56:83:ff:17:70:38:f4:f3:65:be:f5:
                    94:0f:b8:46:88:da:d0:86:aa:6b:ef:83:68:59:0b:
                    a7:41:c9:78:f2:82:fa:be:1e:ab:ff:aa:af:75:8e:
                    e8:98:08:6b:77:38:fa:1d:ea:ef:e3:2b:eb:37:95:
                    19:bc:c9:c9:35:cd:8a:53:a3:bd:29:25:27:b3:b3:
                    e8:94:41:a2:18:71:0a:04:25:bc:9c:e4:64:a7:0d:
                    0a:f8:0d:7c:7b:8a:86:54:66:dc:71:89:83:68:bc:
                    af:50:14:81:25:22:ca:21:11:75:eb:f4:15:12:cf:
                    8d:5e:ea:c3:27:d7:4c:40:91:09:5d:90:48:22:6b:
                    b8:cd:05:d0:eb:63:9a:fb:84:94:27:36:03:45:40:
                    d3:2b:68:34:54:0c:2e:c5:4e:ff:ee:31:4f:b6:1b:
                    3c:49:ea:9d:dd:f7:9b:f9:32:20:0d:e8:25:8c:2e:
                    f4:b5:a2:5a:a8:49:ec:7f:ca:c0:40:14:fb:21:91:
                    81:33:87:90:99:22:16:bc:76:86:e8:95:7e:fd:9e:
                    48:ac:fe:8b:6f:29:30:b7:1c:ad:42:94:4f:de:5b:
                    37:99:9b:3c:54:1c:1d:62:73:f9:b1:17:5d:c5:f0:
                    87:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:69:F3:3B:46:AB:CB:E4:E9:26:D2:EE:DB:FC:4C:39:A2:B4:9A:AD
            X509v3 Authority Key Identifier:
                keyid:19:09:F6:0C:8B:85:EF:ED:36:1D:F5:B6:B5:1C:9F:ED:AE:1C:7F:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GQn2DIuF7-02HfW2tRyf7a4cf5Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/7021e2-effe-4163-8bb3-58e7db30ea44/1/GQn2DIuF7-02HfW2tRyf7a4cf5Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/7021e2-effe-4163-8bb3-58e7db30ea44/1/GQn2DIuF7-02HfW2tRyf7a4cf5Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:0a:ce:04:91:09:e9:6b:df:fd:e8:ca:c1:bb:f7:62:c1:15:
         aa:46:31:51:7e:05:b9:17:4f:54:b0:a1:95:01:2c:02:2f:51:
         2b:40:3e:15:c5:c4:f1:a0:a0:33:dc:8c:03:38:6b:73:6f:80:
         8e:ca:91:6d:17:55:27:69:0d:a6:79:cd:8d:1d:61:cf:b5:98:
         c4:bd:81:6d:0a:04:75:17:6d:7a:f6:be:f4:8f:d4:7a:47:3a:
         05:04:90:a9:d3:e9:2c:26:9d:ef:34:1c:a9:9f:1e:2d:73:7b:
         b4:90:25:39:c4:cc:ff:db:25:a4:11:24:a0:22:41:9a:c8:0f:
         92:1e:31:ce:1f:8f:aa:d3:0f:f8:84:43:10:1a:5c:bf:44:ca:
         46:65:f3:29:58:4e:d8:48:79:b5:15:d5:4e:80:2d:8b:6f:c4:
         fe:61:43:0c:84:42:2a:e7:da:d1:6b:78:ee:06:ed:96:c5:31:
         9e:d1:b0:cb:6b:54:0f:96:81:84:25:d6:9e:2d:eb:f4:f0:8d:
         ae:4e:ae:27:35:56:ba:18:d7:09:c0:de:40:e8:7b:a2:8e:8d:
         7d:6b:a9:5c:45:0d:e6:e3:90:35:8d:ad:11:90:7c:e8:a6:cf:
         84:ed:b7:4f:5a:2c:9d:20:c5:4a:23:55:eb:e4:1d:3b:b9:72:
         11:31:0b:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----