Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/8300f8-9ece-47cd-837d-f1990b0c705a/1/ckgd2Q0QC9W8I8BLEMCoQxzJpbU.mft
File:                     ckgd2Q0QC9W8I8BLEMCoQxzJpbU.mft (raw, json)
Hash identifier:          zOln+E7XNtNlYBevY8LJYUrNp8WdUrER9p8jatEzEW0=
Subject key identifier:   A3:4C:12:8F:78:8C:AB:27:B8:82:87:64:46:C4:4B:A0:55:E5:5C:32
Authority key identifier: 72:48:1D:D9:0D:10:0B:D5:BC:23:C0:4B:10:C0:A8:43:1C:C9:A5:B5
Certificate issuer:       /CN=72481dd90d100bd5bc23c04b10c0a8431cc9a5b5
Certificate serial:       01962FAB2F81600D4CC692B7B9251673CDE4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ckgd2Q0QC9W8I8BLEMCoQxzJpbU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/28/8300f8-9ece-47cd-837d-f1990b0c705a/1/ckgd2Q0QC9W8I8BLEMCoQxzJpbU.mft
Manifest number:          142E
Signing time:             Sun 13 Apr 2025 15:01:09 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:09 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:09 +0000
Files and hashes:         1: ckgd2Q0QC9W8I8BLEMCoQxzJpbU.crl (hash: mfHdNp3aRwSdQZCqi4xeFdyhnXcNOsg/TIFnQbAM4ws=)
                          2: hML-Tag6b9qlpG18VlhLUkClkKg.roa (hash: LEX7BjdOFqa/vQo+qGyu7UsdS3xFcEis6fY7DeQDRek=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:2f:81:60:0d:4c:c6:92:b7:b9:25:16:73:cd:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72481dd90d100bd5bc23c04b10c0a8431cc9a5b5
        Validity
            Not Before: Apr 13 15:01:09 2025 GMT
            Not After : Apr 14 15:01:09 2025 GMT
        Subject: CN=a34c128f788cab27b882876446c44ba055e55c32
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fc:d9:be:af:80:4e:0e:40:1c:ab:f7:79:f6:9d:
                    36:30:31:0e:60:da:f5:2d:7c:49:a9:db:5f:d5:19:
                    83:af:6f:1e:67:3a:9a:7d:8d:a0:74:bf:f3:20:10:
                    f6:33:c9:7d:b4:64:de:ff:cf:a6:cf:a3:c6:72:56:
                    65:a5:9c:2a:67:ca:85:4f:83:67:8c:c6:f7:9e:bc:
                    c7:75:ba:a8:02:6c:d6:7a:ab:7f:f7:3a:77:0a:4f:
                    33:54:70:70:7f:91:a2:15:8c:75:6f:92:5e:66:5f:
                    82:48:a5:f2:51:2b:b4:be:04:ba:14:1f:5a:71:e5:
                    9b:40:2e:d8:9b:b1:11:da:2b:ea:42:80:8a:ee:a1:
                    7e:c7:c9:2f:fe:7b:e5:c7:cc:93:35:c4:7a:e0:ab:
                    b5:17:a9:9f:2d:ba:63:55:57:b3:e2:9f:d4:96:b1:
                    69:9f:53:a2:99:b9:96:eb:0a:de:9b:8b:cd:3f:c5:
                    87:c6:15:c5:67:b6:74:af:6a:e2:82:58:29:50:5b:
                    65:ae:4c:d3:f2:26:a2:c8:e4:cd:df:63:61:50:4b:
                    da:99:3f:3e:7b:4f:73:bd:40:a8:d4:52:67:07:bb:
                    48:18:02:bc:37:a8:d1:7a:bc:75:f1:1e:83:ee:6f:
                    0d:b2:71:b5:16:96:d2:f9:e2:2a:8c:b8:83:75:a5:
                    6b:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:4C:12:8F:78:8C:AB:27:B8:82:87:64:46:C4:4B:A0:55:E5:5C:32
            X509v3 Authority Key Identifier:
                keyid:72:48:1D:D9:0D:10:0B:D5:BC:23:C0:4B:10:C0:A8:43:1C:C9:A5:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ckgd2Q0QC9W8I8BLEMCoQxzJpbU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/8300f8-9ece-47cd-837d-f1990b0c705a/1/ckgd2Q0QC9W8I8BLEMCoQxzJpbU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/28/8300f8-9ece-47cd-837d-f1990b0c705a/1/ckgd2Q0QC9W8I8BLEMCoQxzJpbU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:5e:9d:e6:be:a9:0b:b4:d6:a2:09:fa:16:3c:e9:34:67:db:
         64:3c:92:33:27:77:1a:1d:c3:49:93:69:bf:8d:5f:85:1a:8b:
         a2:9e:ee:09:65:bc:06:7e:92:58:31:c0:2a:7d:37:1a:95:0f:
         8c:76:bd:b8:8d:2d:12:1b:9e:11:f8:2c:db:dc:9b:25:9e:d8:
         05:33:c2:df:32:ae:da:ac:3a:3c:4f:bd:7f:ee:24:29:3c:81:
         c1:ee:3f:64:a5:ce:36:50:ed:69:e1:20:90:eb:fe:5a:d9:2f:
         cd:a9:69:8d:72:ee:29:39:4d:bd:b0:cc:70:37:fb:a0:26:b0:
         16:68:2f:9c:c6:a4:f0:78:27:27:fa:f1:12:aa:b8:10:f5:07:
         e5:0e:1f:59:34:9a:bb:48:96:a1:d3:63:47:5c:51:e4:34:67:
         0a:39:e9:20:9e:71:0b:58:dc:e0:8f:d1:fa:f6:c0:5a:e2:b4:
         b7:c0:cf:a2:a4:ad:f5:06:ad:11:22:e0:46:e8:53:46:2c:a9:
         68:a9:7b:2b:54:af:b6:67:ce:74:89:b9:6b:c6:bb:80:1a:ac:
         32:c7:78:e4:04:01:37:86:68:de:b8:4c:39:ca:eb:bc:bb:11:
         b5:74:04:34:f2:ff:5a:90:03:5b:c9:ab:84:d8:41:a2:25:1d:
         02:fd:c0:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----