Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/ae0690-9637-4fc5-b41b-d9d0aa28ab2b/1/ChZ0cBjpROQFptI6VkcBoVX0Nzk.mft
File:                     ChZ0cBjpROQFptI6VkcBoVX0Nzk.mft (raw, json)
Hash identifier:          rBGcLclnebuGLt00fM0QiRQbgslByPQwfggw1WMNdQg=
Subject key identifier:   18:FB:5A:1A:C8:E5:81:6F:FA:46:FD:B2:02:43:FA:53:1A:DE:99:20
Authority key identifier: 0A:16:74:70:18:E9:44:E4:05:A6:D2:3A:56:47:01:A1:55:F4:37:39
Certificate issuer:       /CN=0a16747018e944e405a6d23a564701a155f43739
Certificate serial:       01962DF3A19DFB87D71F474B0A10D5931555
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ChZ0cBjpROQFptI6VkcBoVX0Nzk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/14/ae0690-9637-4fc5-b41b-d9d0aa28ab2b/1/ChZ0cBjpROQFptI6VkcBoVX0Nzk.mft
Manifest number:          0F1F
Signing time:             Sun 13 Apr 2025 07:01:03 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:03 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:03 +0000
Files and hashes:         1: ChZ0cBjpROQFptI6VkcBoVX0Nzk.crl (hash: IevMzXZu29awr5U1kw+O2dtbi1mWex//8lio/X5URI0=)
                          2: ExdpCTXCt8uJ4Z_M2-EkieqhjoE.roa (hash: gUhwwwHnIVltW5e0SpmF0lPF2Gg7aGGIP9a0IVe5wqE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f3:a1:9d:fb:87:d7:1f:47:4b:0a:10:d5:93:15:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0a16747018e944e405a6d23a564701a155f43739
        Validity
            Not Before: Apr 13 07:01:03 2025 GMT
            Not After : Apr 14 07:01:03 2025 GMT
        Subject: CN=18fb5a1ac8e5816ffa46fdb20243fa531ade9920
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:e3:bc:c6:a3:a4:c9:5c:8b:87:9f:5d:2e:51:
                    08:62:da:b1:7d:cd:4e:9a:47:37:85:65:e0:76:81:
                    13:26:3d:d2:14:1c:86:dc:81:ac:90:1b:bb:7b:f4:
                    17:28:07:42:12:b9:b8:7c:4b:93:73:2c:16:27:72:
                    d9:82:60:42:68:49:2d:8e:26:2f:c5:9d:de:d3:6e:
                    84:ae:b9:0f:98:30:93:07:1b:c8:ff:77:84:b6:3b:
                    89:04:8e:bd:ec:57:1b:bd:6d:17:29:01:5d:ec:57:
                    05:71:c7:38:84:01:a4:35:dd:f3:ff:82:a0:aa:65:
                    8e:23:6e:25:ce:c1:a7:75:cd:e4:8d:fb:5e:03:ec:
                    3c:66:0e:c4:7d:93:ff:c6:1d:33:e3:fd:95:a5:6f:
                    9f:ee:07:14:02:91:b3:4e:b1:17:68:1b:8b:d1:bb:
                    1e:6b:24:7d:a8:77:a8:01:4c:68:80:7e:ff:5f:d5:
                    03:af:89:b5:9a:3d:db:12:2a:1c:60:b1:c3:3c:21:
                    6e:67:7c:64:03:46:ca:a1:3a:99:0b:22:5b:d4:9e:
                    9c:e7:65:f1:c7:66:36:43:8f:45:a7:c6:ac:a2:3d:
                    86:78:34:a3:b6:0b:01:f7:12:56:fe:59:50:de:84:
                    16:b2:0b:05:93:90:71:53:ff:84:77:f1:1b:86:ae:
                    95:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:FB:5A:1A:C8:E5:81:6F:FA:46:FD:B2:02:43:FA:53:1A:DE:99:20
            X509v3 Authority Key Identifier:
                keyid:0A:16:74:70:18:E9:44:E4:05:A6:D2:3A:56:47:01:A1:55:F4:37:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ChZ0cBjpROQFptI6VkcBoVX0Nzk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/ae0690-9637-4fc5-b41b-d9d0aa28ab2b/1/ChZ0cBjpROQFptI6VkcBoVX0Nzk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/14/ae0690-9637-4fc5-b41b-d9d0aa28ab2b/1/ChZ0cBjpROQFptI6VkcBoVX0Nzk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:e6:92:38:f0:b9:fb:fd:d2:c6:32:31:08:5b:a3:93:6c:c6:
         40:ab:a0:ff:9a:75:b1:d2:e4:a3:1e:e3:90:4b:ac:ce:60:c6:
         bc:fb:1e:3a:3c:5b:45:71:e2:52:b9:45:38:1b:73:f9:2f:ad:
         36:5e:2d:ef:5f:0f:fa:dd:8d:22:26:59:0c:4b:7f:67:29:9a:
         5b:bd:ba:09:de:a2:d7:4f:66:98:89:bf:ac:39:47:9a:2f:ab:
         12:b2:23:35:bc:31:aa:67:f6:5d:5b:70:fb:83:44:ba:a2:b1:
         56:d0:f1:68:50:7d:0f:2a:b0:56:a6:55:3e:9f:55:31:a2:79:
         b3:29:a3:eb:93:85:0b:f4:fd:15:6f:24:4e:7a:ee:e0:8a:05:
         85:6f:bd:a0:f0:f7:a7:21:92:d2:03:1b:ef:bb:35:fa:b8:a5:
         fd:f2:e4:02:cc:b0:7f:36:1c:89:9d:af:21:2a:cd:c9:ce:4b:
         df:ef:41:55:4a:90:36:8a:2f:88:54:a8:26:de:af:98:64:9c:
         b8:28:69:5a:83:31:06:36:4c:9c:88:33:9c:84:82:d8:67:15:
         36:58:b6:4a:be:20:69:74:de:fd:13:9a:de:5f:62:8d:14:0b:
         57:37:e1:6d:2a:8f:a3:30:94:9f:71:6a:38:56:a6:30:92:fd:
         fd:75:b1:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----