Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/5be5c2-79cc-4a71-aebc-796685bbbd6f/1/1-GNgxLkQAiYeTHaWSc9pcA1zKfg.mft
File:                     1-GNgxLkQAiYeTHaWSc9pcA1zKfg.mft (raw, json)
Hash identifier:          JXSc81G2adWCE2eb1E6yVbWTiy42Ist0OlM0OtlZjAA=
Subject key identifier:   C6:12:B5:9E:4C:2E:16:01:3F:98:A2:78:B5:D2:A5:AE:81:79:99:6A
Authority key identifier: F8:63:60:C4:B9:10:02:26:1E:4C:76:96:49:CF:69:70:0D:73:29:F8
Certificate issuer:       /CN=f86360c4b91002261e4c769649cf69700d7329f8
Certificate serial:       01913DAC1120A951DFBD0A7C62D3B71F1632
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-GNgxLkQAiYeTHaWSc9pcA1zKfg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fb/5be5c2-79cc-4a71-aebc-796685bbbd6f/1/1-GNgxLkQAiYeTHaWSc9pcA1zKfg.mft
Manifest number:          C6
Signing time:             Sat 10 Aug 2024 19:02:52 +0000
Manifest this update:     Sat 10 Aug 2024 19:02:52 +0000
Manifest next update:     Sun 11 Aug 2024 19:02:52 +0000
Files and hashes:         1: 1-GNgxLkQAiYeTHaWSc9pcA1zKfg.crl (hash: a6GqPwG8MV+xK2kpoaxV9AgnetCfjTNJo7GGfEF8vx8=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:91:3d:ac:11:20:a9:51:df:bd:0a:7c:62:d3:b7:1f:16:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f86360c4b91002261e4c769649cf69700d7329f8
        Validity
            Not Before: Aug 10 19:02:52 2024 GMT
            Not After : Aug 11 19:02:52 2024 GMT
        Subject: CN=c612b59e4c2e16013f98a278b5d2a5ae8179996a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:a0:88:b0:52:69:b7:e8:ba:4a:5c:87:0a:cc:
                    a9:55:fe:64:6e:51:fb:8a:33:4a:59:17:45:08:6b:
                    52:61:f4:f1:48:4a:f4:8d:3d:0f:79:7f:17:72:6c:
                    c3:0e:d3:c3:d8:db:e4:70:4a:fe:79:91:28:81:36:
                    14:b3:13:21:38:b3:5d:35:b9:67:35:1c:d3:a5:46:
                    66:59:96:5b:7e:e1:aa:23:12:39:94:e7:78:47:3b:
                    65:46:38:2b:79:7b:26:67:b4:b2:e6:87:c1:14:a3:
                    1e:a6:30:37:29:6c:48:a7:82:79:a9:f4:e7:7d:41:
                    21:58:68:a5:4b:98:cd:81:7c:c8:b0:de:21:cf:3f:
                    18:a2:49:6d:c0:8b:7a:a9:7e:cd:a7:2d:8f:a8:60:
                    6f:81:36:a1:47:c8:d0:8e:c0:7f:7d:41:f5:cf:f5:
                    ae:bf:f8:e3:db:37:32:ae:03:af:db:ff:03:1d:12:
                    35:05:aa:fb:6a:5c:3d:52:f2:a7:0a:69:7b:74:e6:
                    8e:86:c9:0b:95:dd:62:2c:d9:c0:5b:22:fa:1b:76:
                    ca:81:d1:46:76:c1:0f:0d:d6:f1:51:21:83:54:d0:
                    3d:1c:dc:4a:7b:7a:38:77:1f:25:28:05:71:2a:36:
                    10:95:18:5e:03:ea:ef:96:1a:63:a5:77:4a:04:b8:
                    19:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:12:B5:9E:4C:2E:16:01:3F:98:A2:78:B5:D2:A5:AE:81:79:99:6A
            X509v3 Authority Key Identifier:
                keyid:F8:63:60:C4:B9:10:02:26:1E:4C:76:96:49:CF:69:70:0D:73:29:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-GNgxLkQAiYeTHaWSc9pcA1zKfg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/5be5c2-79cc-4a71-aebc-796685bbbd6f/1/1-GNgxLkQAiYeTHaWSc9pcA1zKfg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/5be5c2-79cc-4a71-aebc-796685bbbd6f/1/1-GNgxLkQAiYeTHaWSc9pcA1zKfg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:c4:c0:08:13:7c:1a:38:ed:98:b9:ee:cc:c3:50:2a:10:6c:
         ae:d0:6f:fe:88:cf:71:3d:e6:25:e6:9a:d7:79:6d:15:3b:b0:
         38:16:4b:f3:d9:06:c8:a1:38:33:c1:39:c4:83:c2:22:65:c6:
         a3:58:e4:38:d8:94:81:f1:77:05:55:d6:64:32:7b:73:ba:ef:
         36:ed:0c:d9:62:49:22:de:97:fc:18:10:b8:fa:17:6a:a6:c8:
         4b:6c:2f:7c:0a:a4:6a:8a:52:57:14:e2:82:da:5f:f1:f7:fe:
         ea:ad:6a:20:17:8f:24:8f:24:77:b1:48:ea:76:e6:7d:9f:7b:
         3d:62:06:33:00:e8:ff:c4:04:4f:64:90:24:f5:d7:cc:fb:c9:
         07:c7:f7:28:02:d4:77:51:62:b6:8f:3a:c6:63:54:8c:e2:87:
         29:83:3c:c3:99:97:d4:dd:f8:a8:1f:30:9a:ef:bd:f8:8c:16:
         68:76:d1:c1:08:a4:ec:15:f4:dd:e8:62:28:f9:2d:ea:d4:9b:
         e1:61:e3:83:3b:97:5a:b5:0a:b6:c7:96:a2:f0:21:4b:29:84:
         e5:d6:c3:e8:c4:1e:96:88:cc:32:cf:90:f6:1a:09:dd:24:28:
         2e:77:f7:52:bb:41:f5:91:a9:b2:0d:e6:f3:c4:3b:0f:ed:b8:
         60:f2:41:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----