Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/e9b0e0-f4b6-46da-aff8-be7087dbf536/1/GV-oMwJSoH8lDlHY5HS7ONfcO5o.mft
File:                     GV-oMwJSoH8lDlHY5HS7ONfcO5o.mft (raw, json)
Hash identifier:          Vik71jKIcApkrPozEgSVQflAf1/9MVBosCFhkOwdWUs=
Subject key identifier:   77:E5:8C:33:3B:D3:C0:9C:58:37:F6:DD:7D:24:95:84:FE:FA:1B:AE
Authority key identifier: 19:5F:A8:33:02:52:A0:7F:25:0E:51:D8:E4:74:BB:38:D7:DC:3B:9A
Certificate issuer:       /CN=195fa8330252a07f250e51d8e474bb38d7dc3b9a
Certificate serial:       01962FAB6BACACC5D93B43985CAD4DA0AAB5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GV-oMwJSoH8lDlHY5HS7ONfcO5o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cd/e9b0e0-f4b6-46da-aff8-be7087dbf536/1/GV-oMwJSoH8lDlHY5HS7ONfcO5o.mft
Manifest number:          0307
Signing time:             Sun 13 Apr 2025 15:01:25 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:25 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:25 +0000
Files and hashes:         1: GV-oMwJSoH8lDlHY5HS7ONfcO5o.crl (hash: 1R5wZ6oJ+YvVgh1w1axrFH0h0NlkOBjslXpW4Mu3zGE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:6b:ac:ac:c5:d9:3b:43:98:5c:ad:4d:a0:aa:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=195fa8330252a07f250e51d8e474bb38d7dc3b9a
        Validity
            Not Before: Apr 13 15:01:25 2025 GMT
            Not After : Apr 14 15:01:25 2025 GMT
        Subject: CN=77e58c333bd3c09c5837f6dd7d249584fefa1bae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:45:6f:80:b9:9d:5c:29:3d:25:fe:ed:20:0f:
                    cc:75:04:1a:d2:83:63:98:77:dc:18:db:c5:b8:10:
                    0f:6c:48:60:ae:1f:08:3f:17:55:dd:d2:f1:73:52:
                    36:95:d4:c2:d2:9e:17:c8:77:e8:94:84:1f:fc:b4:
                    f9:76:e6:71:cf:43:83:35:0d:33:f0:9e:ab:72:fe:
                    d9:b0:1a:73:84:ea:17:43:39:2e:c3:a8:06:f9:0b:
                    fb:1c:d8:0d:64:0e:43:fe:5e:6e:42:ff:af:a3:f6:
                    86:cf:c7:b8:c0:3a:0e:23:37:52:72:3d:4c:46:af:
                    07:79:8b:65:0d:91:ed:a8:d6:02:7a:11:12:43:4c:
                    a0:42:47:74:97:3f:9a:7e:ba:71:8e:81:e1:ed:68:
                    ac:14:65:84:bc:43:6c:df:af:06:42:a8:41:30:d5:
                    87:e4:eb:ab:ac:e0:b2:11:19:e5:95:a8:8a:9b:a8:
                    42:0d:93:72:a4:19:9c:17:4d:95:7b:d7:70:0f:b3:
                    d1:9d:50:53:bc:64:f0:1a:3a:db:30:e1:e6:3a:29:
                    00:09:26:52:63:78:c6:4c:e2:17:4c:12:10:45:8d:
                    a1:95:9d:f0:b6:ff:1d:99:61:b3:dc:d1:3a:ea:6c:
                    51:04:74:fe:a2:e9:42:84:65:ed:b6:e7:8d:ba:17:
                    09:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:E5:8C:33:3B:D3:C0:9C:58:37:F6:DD:7D:24:95:84:FE:FA:1B:AE
            X509v3 Authority Key Identifier:
                keyid:19:5F:A8:33:02:52:A0:7F:25:0E:51:D8:E4:74:BB:38:D7:DC:3B:9A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GV-oMwJSoH8lDlHY5HS7ONfcO5o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/e9b0e0-f4b6-46da-aff8-be7087dbf536/1/GV-oMwJSoH8lDlHY5HS7ONfcO5o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/e9b0e0-f4b6-46da-aff8-be7087dbf536/1/GV-oMwJSoH8lDlHY5HS7ONfcO5o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:a8:96:25:88:b1:99:8a:2c:c3:62:0c:bc:b3:f9:94:71:15:
         5b:0b:00:2d:5b:fd:37:60:3f:f2:66:07:85:19:c3:38:69:7c:
         69:cf:07:f5:4c:00:eb:98:68:f8:a0:ff:67:3b:21:b2:6f:4d:
         45:16:77:32:24:aa:2d:e0:32:f4:26:9d:a1:fb:d2:f9:c0:1c:
         8a:b4:8b:c9:c6:71:c0:99:62:60:0f:44:78:a6:6f:bd:3c:65:
         2d:b1:fc:8c:ba:5e:43:4d:8d:49:94:4f:66:c9:7d:6c:9a:93:
         81:c9:99:7e:78:05:d9:61:89:80:a1:9f:47:2e:1b:5d:c8:82:
         4d:e7:b6:70:f4:78:13:40:24:a8:00:a4:57:d2:b3:61:d5:d8:
         e8:26:1a:8d:89:e8:19:48:51:d0:01:3f:94:f6:20:b1:3f:39:
         f2:65:d5:bb:63:69:37:3f:e6:f5:e7:50:59:5f:37:aa:6c:1e:
         d8:23:b9:c2:5b:7d:ae:a4:98:4a:ec:b2:f7:36:45:47:53:b8:
         3e:ba:d8:87:9c:1d:8d:52:3a:4e:d0:bf:95:71:f1:83:80:95:
         11:b9:d8:62:31:81:9c:bc:61:1a:6a:69:35:8b:30:ae:1c:0a:
         c0:6c:7a:19:83:67:52:16:04:1d:8a:4e:eb:53:b6:04:ac:c6:
         c2:61:40:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----