Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/f50b90-f031-412e-a040-ae6abce59ac1/1/GNl5-JL-uBmXaiX-lH9devN-zH0.mft
File:                     GNl5-JL-uBmXaiX-lH9devN-zH0.mft (raw, json)
Hash identifier:          L+a1n6mlu6d23A6s0GuSZESj/Z86dbs13LILS3+rV1E=
Subject key identifier:   F6:95:82:AA:EF:18:7E:C8:06:72:48:6C:57:4F:16:1D:D0:25:E9:AE
Authority key identifier: 18:D9:79:F8:92:FE:B8:19:97:6A:25:FE:94:7F:5D:7A:F3:7E:CC:7D
Certificate issuer:       /CN=18d979f892feb819976a25fe947f5d7af37ecc7d
Certificate serial:       0195E1591DA6AFAA89C2E7792412B8928C66
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GNl5-JL-uBmXaiX-lH9devN-zH0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9d/f50b90-f031-412e-a040-ae6abce59ac1/1/GNl5-JL-uBmXaiX-lH9devN-zH0.mft
Manifest number:          14BE
Signing time:             Sat 29 Mar 2025 10:01:08 +0000
Manifest this update:     Sat 29 Mar 2025 10:01:08 +0000
Manifest next update:     Sun 30 Mar 2025 10:01:08 +0000
Files and hashes:         1: GNl5-JL-uBmXaiX-lH9devN-zH0.crl (hash: TlIjdOc761NqpLv0UlCNABCa5s9f4KRcyh+cohByseo=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:e1:59:1d:a6:af:aa:89:c2:e7:79:24:12:b8:92:8c:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18d979f892feb819976a25fe947f5d7af37ecc7d
        Validity
            Not Before: Mar 29 10:01:08 2025 GMT
            Not After : Mar 30 10:01:08 2025 GMT
        Subject: CN=f69582aaef187ec80672486c574f161dd025e9ae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:de:7a:f1:a0:a7:0a:5f:df:28:9e:94:69:9f:
                    33:7d:3c:67:ac:96:95:d6:5e:6a:71:bc:ec:81:41:
                    f3:79:57:86:5f:78:5a:21:d2:2c:d3:22:d2:49:a6:
                    c5:ba:d6:9f:f6:8b:04:60:65:e3:1c:67:e3:e4:4d:
                    2d:97:e1:cb:59:48:5a:c2:c3:d0:f7:68:2a:d0:d4:
                    0f:80:14:f3:5c:72:27:38:26:c4:ef:32:ca:03:20:
                    10:00:3b:49:28:11:21:97:37:48:6b:ed:7d:9f:09:
                    9e:6f:20:6e:ee:1b:75:f0:39:ec:59:bb:6d:96:82:
                    0d:d0:3b:06:b7:b0:e5:f3:ca:15:d9:fd:0e:11:8f:
                    a6:29:e7:2b:d5:66:61:84:cf:59:f3:90:eb:25:96:
                    10:fb:e4:31:40:1c:50:34:6b:96:9c:6c:cb:4f:ae:
                    ab:8f:77:13:ad:9e:24:4a:1d:69:f8:81:db:e4:4c:
                    6f:7c:73:4a:fc:85:10:8d:2c:c3:86:3a:e6:08:75:
                    15:42:1a:c9:92:7b:54:cf:df:51:56:3b:86:cb:86:
                    5f:aa:68:26:64:67:1e:27:74:56:4a:c8:de:5a:db:
                    94:cc:18:29:2e:5f:8a:7d:97:08:5b:87:8d:a4:d5:
                    7f:20:d2:65:b4:32:f1:3c:ee:28:f1:9d:3d:07:f5:
                    da:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:95:82:AA:EF:18:7E:C8:06:72:48:6C:57:4F:16:1D:D0:25:E9:AE
            X509v3 Authority Key Identifier:
                keyid:18:D9:79:F8:92:FE:B8:19:97:6A:25:FE:94:7F:5D:7A:F3:7E:CC:7D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GNl5-JL-uBmXaiX-lH9devN-zH0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/f50b90-f031-412e-a040-ae6abce59ac1/1/GNl5-JL-uBmXaiX-lH9devN-zH0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/f50b90-f031-412e-a040-ae6abce59ac1/1/GNl5-JL-uBmXaiX-lH9devN-zH0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9e:71:0d:7d:b9:9f:6d:9e:0e:9d:69:a2:b7:54:d8:3e:32:70:
         89:2c:ed:a7:3c:66:7d:a1:e3:76:ab:01:b6:b4:ed:65:a9:60:
         9d:28:52:d8:5c:1a:ee:e9:6d:5e:01:d1:3d:d2:b3:aa:78:34:
         b9:ad:43:58:e5:67:d1:ee:bb:8c:eb:d5:6d:5d:83:17:dc:37:
         b5:7f:fa:07:9a:94:95:a9:7d:3d:5d:01:72:76:19:e3:30:8c:
         1e:66:ce:5f:d4:2e:a9:00:0f:4d:aa:0a:f9:8b:1a:fd:d1:e6:
         2a:63:9b:19:8d:49:8a:82:5b:ce:af:d7:6b:97:bf:44:61:af:
         4c:9a:95:c1:08:f4:7d:13:67:27:79:b4:6b:6e:a0:d0:68:d7:
         1d:ca:2c:15:3e:0e:ca:d0:84:ba:68:97:0d:8b:2e:03:f1:d1:
         27:c2:0b:a4:f0:2b:5b:b9:34:55:b8:e3:c2:0a:3c:95:bb:0d:
         46:15:e0:8f:af:68:ea:3f:86:36:ee:04:2c:c6:10:df:6e:f3:
         55:14:58:11:ee:38:eb:54:1d:39:f4:4b:77:d5:a9:74:2f:61:
         21:78:0b:a8:7e:65:7c:ab:9a:14:6b:37:0b:f0:56:fc:e6:6f:
         c8:8d:7b:61:cf:e5:7f:a7:a2:f2:23:09:68:c3:b5:b4:96:54:
         2d:14:72:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----