Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/ad55e4-c0c9-4319-8bd8-04bc87a29e4d/1/Ch_bgO_1vOFlSsjGuSLngf0tNqU.mft
File:                     Ch_bgO_1vOFlSsjGuSLngf0tNqU.mft (raw, json)
Hash identifier:          2tdA4GuweMmGP0oNYzEnzCVBZ900+n7bWYHTOGEX6vw=
Subject key identifier:   2D:68:53:B6:5A:7E:E5:11:D7:5E:DF:71:BA:92:8A:77:05:C3:BB:7E
Authority key identifier: 0A:1F:DB:80:EF:F5:BC:E1:65:4A:C8:C6:B9:22:E7:81:FD:2D:36:A5
Certificate issuer:       /CN=0a1fdb80eff5bce1654ac8c6b922e781fd2d36a5
Certificate serial:       01962F746258DAE68B8E2A1280F12F1E69F7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ch_bgO_1vOFlSsjGuSLngf0tNqU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/08/ad55e4-c0c9-4319-8bd8-04bc87a29e4d/1/Ch_bgO_1vOFlSsjGuSLngf0tNqU.mft
Manifest number:          1373
Signing time:             Sun 13 Apr 2025 14:01:18 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:18 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:18 +0000
Files and hashes:         1: Ch_bgO_1vOFlSsjGuSLngf0tNqU.crl (hash: Lp6k0zuEfPJNPmFsr80hs3o7kJI7aLCj/c9W4pyK0V4=)
                          2: PvWxO00iUa3ctfHwCdtyJD0RWh0.roa (hash: WHY5/KEo1RVdlR9QfwLVXSmW+Ddxfbtak63Ebi49yak=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:62:58:da:e6:8b:8e:2a:12:80:f1:2f:1e:69:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0a1fdb80eff5bce1654ac8c6b922e781fd2d36a5
        Validity
            Not Before: Apr 13 14:01:18 2025 GMT
            Not After : Apr 14 14:01:18 2025 GMT
        Subject: CN=2d6853b65a7ee511d75edf71ba928a7705c3bb7e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:51:df:0c:cb:71:92:b3:9d:6d:c2:03:17:be:
                    db:aa:09:2d:1d:6c:4d:f6:39:72:59:81:e4:05:1a:
                    31:8a:68:7e:d9:c1:7a:dd:80:af:2e:f9:6d:8b:84:
                    69:1f:4b:25:93:39:98:f9:61:dd:ee:c6:e1:83:a6:
                    d0:8c:3f:e1:2e:73:d8:7a:b1:78:a9:cd:41:bd:38:
                    63:83:5c:d8:95:76:ec:07:0a:86:36:59:14:ad:9d:
                    6a:86:69:6f:e5:7a:70:3d:af:f3:07:45:1f:d3:3d:
                    b0:5e:14:e7:68:1c:f3:b3:44:59:ba:d2:57:29:a1:
                    ac:ad:5b:fd:70:e0:29:13:47:6b:b4:c2:86:95:d4:
                    53:8e:67:23:c7:c4:5d:5d:84:3c:6a:0a:ad:47:17:
                    a4:82:6a:ce:67:3c:06:0c:41:af:48:e5:42:1d:79:
                    6c:b8:cc:9f:92:bf:e8:1c:e4:73:d3:cc:57:07:19:
                    8b:2f:ff:04:9a:b1:37:26:ba:5a:8a:7e:44:87:07:
                    62:28:7d:c9:f2:2d:d7:b8:0d:7c:47:be:25:19:9f:
                    b9:1b:d1:d7:3e:dc:5a:c4:68:bd:0c:d4:14:2d:66:
                    d0:3d:9a:3a:ce:42:f5:88:d8:cb:9a:30:a0:fd:aa:
                    5d:4d:fc:7f:66:1e:1e:eb:ed:bd:45:d3:5c:bd:e8:
                    ad:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:68:53:B6:5A:7E:E5:11:D7:5E:DF:71:BA:92:8A:77:05:C3:BB:7E
            X509v3 Authority Key Identifier:
                keyid:0A:1F:DB:80:EF:F5:BC:E1:65:4A:C8:C6:B9:22:E7:81:FD:2D:36:A5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ch_bgO_1vOFlSsjGuSLngf0tNqU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/ad55e4-c0c9-4319-8bd8-04bc87a29e4d/1/Ch_bgO_1vOFlSsjGuSLngf0tNqU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/08/ad55e4-c0c9-4319-8bd8-04bc87a29e4d/1/Ch_bgO_1vOFlSsjGuSLngf0tNqU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:cf:85:3d:39:02:da:5b:0a:ca:8e:ca:08:3f:8c:a5:27:89:
         70:88:a7:84:d7:86:8f:75:72:6b:72:14:f7:a8:0d:6f:69:cc:
         04:7e:70:0d:08:fd:88:00:18:1a:71:7a:45:ef:1d:2a:b3:69:
         cf:97:9f:5e:d9:8f:b8:a3:a3:c2:c8:0d:9d:a3:ae:f6:0d:20:
         d4:45:b6:11:ae:c7:dc:10:f5:a1:9d:d3:f7:df:ce:f1:ee:e9:
         95:48:01:7e:b4:3d:04:3d:7e:38:f0:a6:84:ff:b9:a7:b2:30:
         99:a0:97:c9:71:b2:dc:19:f1:3c:43:69:31:c9:d2:91:a2:f3:
         06:97:74:39:64:21:bc:de:ca:86:b0:c1:60:0e:f8:c0:2d:92:
         1b:1d:4b:99:07:7d:43:7f:6e:80:5c:ce:d3:c8:b8:8b:e9:14:
         19:a0:b8:7c:00:31:63:d1:93:39:86:8e:bb:dc:b7:06:0e:8c:
         9e:ec:2c:71:3a:c7:fc:3c:91:0a:e6:0b:9b:42:26:cf:38:84:
         52:10:99:ca:fa:d2:79:63:0c:8b:60:eb:cb:8d:32:45:47:a7:
         60:a1:a0:49:2e:d9:fa:75:04:7f:e2:83:08:17:b1:2e:bf:42:
         58:f0:e1:9c:17:6f:40:3e:24:96:e5:7d:6d:78:4e:fd:8e:bf:
         44:7c:1a:4e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvdGJY2uaLjioSgPEvHmn3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBhMWZkYjgwZWZmNWJjZTE2NTRhYzhjNmI5MjJlNzgxZmQy
ZDM2YTUwHhcNMjUwNDEzMTQwMTE4WhcNMjUwNDE0MTQwMTE4WjAzMTEwLwYDVQQD
EygyZDY4NTNiNjVhN2VlNTExZDc1ZWRmNzFiYTkyOGE3NzA1YzNiYjdlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy1HfDMtxkrOdbcIDF77bqgktHWxN
9jlyWYHkBRoximh+2cF63YCvLvlti4RpH0slkzmY+WHd7sbhg6bQjD/hLnPYerF4
qc1BvThjg1zYlXbsBwqGNlkUrZ1qhmlv5XpwPa/zB0Uf0z2wXhTnaBzzs0RZutJX
KaGsrVv9cOApE0drtMKGldRTjmcjx8RdXYQ8agqtRxekgmrOZzwGDEGvSOVCHXls
uMyfkr/oHORz08xXBxmLL/8EmrE3Jrpain5EhwdiKH3J8i3XuA18R74lGZ+5G9HX
PtxaxGi9DNQULWbQPZo6zkL1iNjLmjCg/apdTfx/Zh4e6+29RdNcveitzwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFC1oU7ZafuUR117fcbqSincFw7t+MB8GA1UdIwQY
MBaAFAof24Dv9bzhZUrIxrki54H9LTalMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ2hfYmdPXzF2T0ZsU3NqR3VTTG5nZjB0TnFVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC9hZDU1ZTQtYzBjOS00MzE5LThiZDgt
MDRiYzg3YTI5ZTRkLzEvQ2hfYmdPXzF2T0ZsU3NqR3VTTG5nZjB0TnFVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOC9hZDU1ZTQtYzBjOS00MzE5LThiZDgtMDRiYzg3YTI5ZTRk
LzEvQ2hfYmdPXzF2T0ZsU3NqR3VTTG5nZjB0TnFVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUc+FPTkC
2lsKyo7KCD+MpSeJcIinhNeGj3Vya3IU96gNb2nMBH5wDQj9iAAYGnF6Re8dKrNp
z5efXtmPuKOjwsgNnaOu9g0g1EW2Ea7H3BD1oZ3T99/O8e7plUgBfrQ9BD1+OPCm
hP+5p7IwmaCXyXGy3BnxPENpMcnSkaLzBpd0OWQhvN7KhrDBYA74wC2SGx1LmQd9
Q39ugFzO08i4i+kUGaC4fAAxY9GTOYaOu9y3Bg6MnuwscTrH/DyRCuYLm0ImzziE
UhCZyvrSeWMMi2Dry40yRUenYKGgSS7Z+nUEf+KDCBexLr9CWPDhnBdvQD4kluV9
bXhO/Y6/RHwaTg==
-----END CERTIFICATE-----