Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/c7fb27-1f7e-4ad4-ab84-242301f9aa10/1/Cxki4fchUHXN_Lx0U7vAiGf_0lM.mft
File:                     Cxki4fchUHXN_Lx0U7vAiGf_0lM.mft (raw, json)
Hash identifier:          +WHs25MYiVAZGMYU/P7DLYaWcJ77qGQfehuYZ/iSTdk=
Subject key identifier:   14:4B:A2:4E:E9:93:F8:58:8C:3B:77:60:47:AC:16:21:D3:2A:20:D5
Authority key identifier: 0B:19:22:E1:F7:21:50:75:CD:FC:BC:74:53:BB:C0:88:67:FF:D2:53
Certificate issuer:       /CN=0b1922e1f7215075cdfcbc7453bbc08867ffd253
Certificate serial:       019546D99CF7ED2D8284CD018BE3B2B86A21
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Cxki4fchUHXN_Lx0U7vAiGf_0lM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/37/c7fb27-1f7e-4ad4-ab84-242301f9aa10/1/Cxki4fchUHXN_Lx0U7vAiGf_0lM.mft
Manifest number:          0545
Signing time:             Thu 27 Feb 2025 10:00:21 +0000
Manifest this update:     Thu 27 Feb 2025 10:00:21 +0000
Manifest next update:     Fri 28 Feb 2025 10:00:21 +0000
Files and hashes:         1: Cxki4fchUHXN_Lx0U7vAiGf_0lM.crl (hash: IcEGA3uTHH40uk6/5oOg9lw3eBE5P8J5wkaI96WJJxA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:46:d9:9c:f7:ed:2d:82:84:cd:01:8b:e3:b2:b8:6a:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0b1922e1f7215075cdfcbc7453bbc08867ffd253
        Validity
            Not Before: Feb 27 10:00:21 2025 GMT
            Not After : Feb 28 10:00:21 2025 GMT
        Subject: CN=144ba24ee993f8588c3b776047ac1621d32a20d5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:b7:06:c3:ae:94:ad:26:6e:50:ae:4c:b1:40:
                    37:d3:5d:60:a4:78:72:71:00:67:cc:e1:45:a8:de:
                    b5:66:78:d0:5e:1d:75:ec:ff:e7:41:fe:82:33:ae:
                    40:ed:e1:95:f6:d2:41:f5:6a:09:4a:06:d6:7c:ef:
                    91:71:ab:68:fe:62:19:d8:14:51:35:73:96:fd:12:
                    d6:97:ea:fe:9a:e9:51:01:fc:e8:c8:c1:f9:d7:8b:
                    59:4a:08:d2:e7:2a:61:c9:3e:64:a2:40:4d:bd:d7:
                    a2:6b:77:ef:95:07:25:62:52:5d:1a:c5:d3:bd:4e:
                    d5:b8:6a:54:e2:ec:3d:6e:83:85:53:13:e8:64:2f:
                    cf:91:44:d2:69:32:82:69:25:ac:2a:a9:00:c5:70:
                    d7:cd:77:85:00:76:b7:18:18:e8:df:e3:22:63:ce:
                    90:17:d6:ea:54:ee:50:a6:57:cc:63:57:23:b6:a1:
                    4f:59:5e:c5:55:b9:e4:8d:26:d2:57:8d:cb:8f:b3:
                    92:4a:e3:b8:07:8b:6f:3d:fa:a8:cc:95:bf:7f:77:
                    e3:1e:85:a3:e2:44:84:74:4f:b4:a5:75:35:1d:73:
                    ff:b9:70:8a:5a:eb:65:59:be:2a:1b:aa:18:a7:1b:
                    f0:4c:dc:a3:5c:94:83:32:7c:f0:83:ac:ad:4e:fe:
                    b5:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:4B:A2:4E:E9:93:F8:58:8C:3B:77:60:47:AC:16:21:D3:2A:20:D5
            X509v3 Authority Key Identifier:
                keyid:0B:19:22:E1:F7:21:50:75:CD:FC:BC:74:53:BB:C0:88:67:FF:D2:53

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cxki4fchUHXN_Lx0U7vAiGf_0lM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/c7fb27-1f7e-4ad4-ab84-242301f9aa10/1/Cxki4fchUHXN_Lx0U7vAiGf_0lM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/37/c7fb27-1f7e-4ad4-ab84-242301f9aa10/1/Cxki4fchUHXN_Lx0U7vAiGf_0lM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:d7:43:8d:93:a8:47:f6:8c:65:9a:a3:74:ff:d2:1d:c1:9f:
         d0:24:51:84:3c:f8:c5:14:61:04:fd:58:26:30:8f:66:a4:e5:
         10:42:51:84:8e:db:a4:66:18:26:f2:e8:00:2d:63:5c:ca:1e:
         62:56:d6:32:d7:44:09:69:d9:42:7f:2e:32:34:46:76:5b:6b:
         6a:26:36:cc:54:60:02:97:bd:0f:39:f2:d9:47:82:73:5c:2a:
         9e:d2:9c:87:d6:2a:45:f2:2b:f6:41:0b:c2:77:06:4e:c6:87:
         b2:f0:7b:b0:71:e6:ac:06:f6:e1:42:2c:fe:18:1b:ee:ec:3d:
         24:f3:d1:6c:0d:77:f3:13:d7:09:9b:a6:a4:7b:3d:d9:23:55:
         f1:20:63:49:bf:6c:ea:b7:42:b2:33:78:82:12:ce:84:ee:3f:
         11:38:2e:08:9d:97:91:a6:b8:22:e8:41:7e:2e:b5:9e:68:78:
         b7:c2:11:7f:2c:0e:1f:74:86:13:2c:70:54:ec:02:60:a5:80:
         ab:91:a3:4a:5c:d6:34:f1:72:49:1e:fc:c7:74:75:1c:b0:20:
         80:f9:82:6f:8b:1f:db:f5:fa:15:54:36:8d:c1:77:69:f1:0b:
         e2:b6:90:39:4b:17:80:44:e5:c8:6e:97:ae:4b:3d:cf:93:ad:
         a5:a4:42:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----