Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/fdafd2-3dcf-4043-86e6-3e801694e048/1/GxL4tWgfVUoDsw4uT4BcZvgxXgo.mft
File:                     GxL4tWgfVUoDsw4uT4BcZvgxXgo.mft (raw, json)
Hash identifier:          nyUhZBaRBXE9/ssBMWywanKPFJ5m0nLQuBGbN0ztXmY=
Subject key identifier:   62:4E:A5:0E:6C:24:4E:F3:69:95:6E:3E:76:AA:4C:29:12:D8:A4:88
Authority key identifier: 1B:12:F8:B5:68:1F:55:4A:03:B3:0E:2E:4F:80:5C:66:F8:31:5E:0A
Certificate issuer:       /CN=1b12f8b5681f554a03b30e2e4f805c66f8315e0a
Certificate serial:       0193FDB09CAD8FF6857D0A79940C5AE4D0AD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GxL4tWgfVUoDsw4uT4BcZvgxXgo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cf/fdafd2-3dcf-4043-86e6-3e801694e048/1/GxL4tWgfVUoDsw4uT4BcZvgxXgo.mft
Manifest number:          01FA
Signing time:             Wed 25 Dec 2024 12:00:30 +0000
Manifest this update:     Wed 25 Dec 2024 12:00:30 +0000
Manifest next update:     Thu 26 Dec 2024 12:00:30 +0000
Files and hashes:         1: GxL4tWgfVUoDsw4uT4BcZvgxXgo.crl (hash: ee4mCbvAQpoYLILa20gELsT5WkAZQBPvxs1jt/Oxh5Y=)
                          2: NJXziIlJYgbBGydQaQPeI4MJjpI.roa (hash: ujGy/n3hEVnZYpUbwco1uYfl/4NT+/I1rgR6gTcP/pw=)
                          3: QR-zQIVibRJB9ns_9zLe6nWD96k.roa (hash: jMrO0doBp+THPWATLIAWRCiu1D+dZsrkTGuCrPHOfLU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:fd:b0:9c:ad:8f:f6:85:7d:0a:79:94:0c:5a:e4:d0:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1b12f8b5681f554a03b30e2e4f805c66f8315e0a
        Validity
            Not Before: Dec 25 12:00:30 2024 GMT
            Not After : Dec 26 12:00:30 2024 GMT
        Subject: CN=624ea50e6c244ef369956e3e76aa4c2912d8a488
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:cb:0e:18:85:a2:5d:e3:2c:a9:d6:56:af:f5:
                    8d:d6:17:93:98:a8:a7:81:6f:25:d0:7f:57:d2:7f:
                    d2:af:0f:f4:25:69:03:60:36:b1:b5:bd:b6:9a:00:
                    b1:7b:f4:e7:b2:47:05:9f:5a:c5:01:32:10:88:46:
                    5a:94:36:68:e5:06:0e:7f:e0:12:68:85:42:c0:4c:
                    fc:1c:e7:55:ca:6a:09:e5:92:3e:aa:a4:9d:cc:34:
                    39:8d:0f:06:9e:d8:f1:1a:0f:f0:96:d3:57:18:9d:
                    cd:13:10:43:0d:e9:9b:84:ad:80:bc:dd:61:e2:32:
                    59:8d:0c:3a:38:38:53:cc:f8:cd:51:29:b2:69:09:
                    42:44:5e:0f:85:d1:42:ed:63:39:1c:7d:97:53:0c:
                    34:e1:4a:12:0a:6c:fe:40:53:11:41:6a:2e:d4:df:
                    94:cc:34:8f:25:5f:d4:9a:d3:6e:fd:46:a4:55:2b:
                    b5:b5:62:9f:33:fa:ed:f7:c6:eb:45:8c:95:e6:69:
                    31:73:35:34:02:66:f8:fe:30:7a:a4:e3:34:c7:91:
                    bf:8b:62:ed:56:c5:b3:7a:e5:ed:66:07:1a:93:b8:
                    53:d5:9f:86:e5:50:7d:0e:e7:a3:04:74:d8:91:11:
                    71:aa:f8:fb:58:12:e5:af:60:47:12:2b:37:8c:cf:
                    66:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:4E:A5:0E:6C:24:4E:F3:69:95:6E:3E:76:AA:4C:29:12:D8:A4:88
            X509v3 Authority Key Identifier:
                keyid:1B:12:F8:B5:68:1F:55:4A:03:B3:0E:2E:4F:80:5C:66:F8:31:5E:0A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GxL4tWgfVUoDsw4uT4BcZvgxXgo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/fdafd2-3dcf-4043-86e6-3e801694e048/1/GxL4tWgfVUoDsw4uT4BcZvgxXgo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/fdafd2-3dcf-4043-86e6-3e801694e048/1/GxL4tWgfVUoDsw4uT4BcZvgxXgo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:16:65:52:59:1d:df:fc:81:35:66:ce:f8:ff:cd:e0:c9:b3:
         d9:94:3f:79:ac:54:31:45:50:15:15:5e:3f:54:a0:0b:f6:57:
         06:02:83:a1:68:c6:4f:64:e2:b3:14:f3:37:0f:04:93:d7:b8:
         3f:4f:89:94:d5:49:55:75:b8:ce:21:e8:e5:93:e7:73:c3:88:
         ac:44:2d:d5:8c:1f:87:6a:e8:2c:a8:55:e4:36:d0:51:f1:ca:
         24:c3:49:85:0d:e6:12:0c:71:3e:97:1e:73:73:d7:66:0e:c3:
         e0:78:06:b9:51:de:84:b2:b2:1d:ff:91:28:51:84:0a:03:dc:
         a6:c0:2d:e0:b6:bb:7a:22:a2:51:59:f8:4b:a4:f3:e2:1a:0a:
         a7:e9:9b:dc:70:61:7d:a0:71:e9:b2:93:19:6f:7b:cc:e7:eb:
         c9:e0:b5:71:69:b2:fc:d6:73:46:b7:bf:d4:56:27:d3:51:c3:
         30:71:ff:b5:63:9e:fe:0d:37:61:1d:43:e5:61:67:39:86:52:
         e1:66:af:c4:14:0e:9e:23:d9:c9:87:ac:7c:6d:64:2e:aa:84:
         a1:66:bf:95:96:20:f5:1f:98:6d:1d:93:e5:34:3b:3a:07:f3:
         55:85:10:e9:a1:82:57:1a:f4:87:15:36:9e:3d:e0:eb:2f:68:
         be:6e:2b:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----