Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/3ac6bd-e57b-4193-aba4-579cd9c7af41/1/GiJsa6b9gxH_DNM7QSFXCbKwJkg.mft
File:                     GiJsa6b9gxH_DNM7QSFXCbKwJkg.mft (raw, json)
Hash identifier:          msZIWIvtZx0fDS3RRk7POW5M2AtxNcwO7wr3Rq0vs0k=
Subject key identifier:   C2:51:42:8D:3A:B7:17:7B:37:30:79:4D:8D:D0:AE:EC:3E:64:22:53
Authority key identifier: 1A:22:6C:6B:A6:FD:83:11:FF:0C:D3:3B:41:21:57:09:B2:B0:26:48
Certificate issuer:       /CN=1a226c6ba6fd8311ff0cd33b41215709b2b02648
Certificate serial:       0193FAAFD6C4E30EAE9EC310A71213D38F9F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GiJsa6b9gxH_DNM7QSFXCbKwJkg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e7/3ac6bd-e57b-4193-aba4-579cd9c7af41/1/GiJsa6b9gxH_DNM7QSFXCbKwJkg.mft
Manifest number:          04E2
Signing time:             Tue 24 Dec 2024 22:00:47 +0000
Manifest this update:     Tue 24 Dec 2024 22:00:47 +0000
Manifest next update:     Wed 25 Dec 2024 22:00:47 +0000
Files and hashes:         1: GiJsa6b9gxH_DNM7QSFXCbKwJkg.crl (hash: ubwzY68A1YJtnPunTnt5SF0upfyhjZcfL+TKk9QZcaY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:fa:af:d6:c4:e3:0e:ae:9e:c3:10:a7:12:13:d3:8f:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1a226c6ba6fd8311ff0cd33b41215709b2b02648
        Validity
            Not Before: Dec 24 22:00:47 2024 GMT
            Not After : Dec 25 22:00:47 2024 GMT
        Subject: CN=c251428d3ab7177b3730794d8dd0aeec3e642253
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:4c:7e:c5:50:84:bc:47:1e:1b:96:69:63:43:
                    3c:f9:a6:d6:cb:28:07:57:39:fc:fd:3f:5b:48:20:
                    de:d1:40:77:5b:e4:d3:d5:b4:bb:53:3f:e4:99:ff:
                    ba:22:7c:cf:17:cf:68:1c:6c:25:31:04:a2:33:b6:
                    9e:8a:7d:da:45:56:b4:1a:fe:90:1f:ce:e9:bb:17:
                    06:a8:09:80:61:42:ed:fa:40:c5:80:1d:1c:de:70:
                    9f:a8:bf:06:5a:4a:df:c8:a1:69:92:cb:7b:f8:ea:
                    d6:95:91:cd:cb:79:2e:cd:00:53:bf:21:f9:b3:93:
                    1f:ee:8a:ea:19:c1:38:33:e6:dc:a0:48:9b:92:6e:
                    0a:02:f0:e7:fc:b3:fb:53:ee:36:92:cf:e0:2d:4a:
                    96:28:60:f1:58:7f:2f:e1:0d:eb:96:e1:4a:31:15:
                    f3:5b:a1:86:11:d1:48:e0:b6:78:86:3b:af:10:24:
                    59:e7:06:30:50:de:04:31:45:15:46:cb:54:07:10:
                    21:4e:44:4a:06:a1:f2:31:9d:d4:ba:a9:d3:67:28:
                    c3:33:cf:81:a9:3d:77:9b:55:21:4b:66:9e:7a:0b:
                    06:fc:1a:9e:da:a7:ab:af:6a:4b:f9:4a:b7:f4:f1:
                    10:64:b9:5c:56:03:4d:7b:a1:e7:48:3e:71:2a:b9:
                    fc:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:51:42:8D:3A:B7:17:7B:37:30:79:4D:8D:D0:AE:EC:3E:64:22:53
            X509v3 Authority Key Identifier:
                keyid:1A:22:6C:6B:A6:FD:83:11:FF:0C:D3:3B:41:21:57:09:B2:B0:26:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GiJsa6b9gxH_DNM7QSFXCbKwJkg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/3ac6bd-e57b-4193-aba4-579cd9c7af41/1/GiJsa6b9gxH_DNM7QSFXCbKwJkg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/3ac6bd-e57b-4193-aba4-579cd9c7af41/1/GiJsa6b9gxH_DNM7QSFXCbKwJkg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:d0:68:79:84:89:3d:3c:4e:4f:12:ef:44:eb:7f:ba:6e:5b:
         95:d9:0e:64:d2:81:61:55:ed:d3:bf:b3:12:f5:9a:89:f2:2b:
         8e:c5:59:3a:ed:98:8a:0d:5a:e6:6b:14:ec:79:cc:a1:e2:b5:
         57:c5:62:ac:f6:69:58:32:08:22:5f:2b:c4:05:c9:49:58:f6:
         9c:ae:d4:a9:2d:9e:2a:79:3c:38:44:06:8b:6e:12:09:b4:b8:
         47:89:9d:3d:75:70:8e:b1:de:0a:8b:36:9e:53:12:3a:3c:34:
         df:48:a7:2a:f2:29:81:8e:ab:c0:77:13:c6:c5:d6:88:67:c2:
         71:eb:f8:07:a0:89:d6:ec:55:78:7f:f6:32:82:1c:9c:f7:bd:
         2c:c1:d3:54:77:69:f6:23:af:ed:c4:36:01:5e:5d:92:be:78:
         fb:c0:34:52:13:1b:2c:59:69:ea:3f:85:8f:16:10:26:be:29:
         4f:a9:51:73:9d:51:ea:fb:2d:d7:55:a7:4a:40:54:60:15:95:
         6f:8c:c2:3d:58:cd:24:06:1c:6e:84:9d:e7:c5:f5:3d:8d:f0:
         c6:28:f7:a1:bf:e8:83:63:2c:ac:b5:c9:e9:e1:0d:c7:db:8a:
         05:0e:c9:82:d7:97:94:63:44:48:24:5c:57:91:7e:1d:2e:6a:
         90:20:27:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----