Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/13b144-be16-4922-a983-25ae9293f6b4/1/aCHI_wQ39-3YKRZv3gNEb4YQnYA.mft
File:                     aCHI_wQ39-3YKRZv3gNEb4YQnYA.mft (raw, json)
Hash identifier:          +0ZqxoZPcRUOxH4x7MNiEjgULBKisEXIa4ANWF4+IuE=
Subject key identifier:   EF:AA:65:37:20:EA:4A:D0:02:B6:A8:84:E1:D0:2A:EB:6E:21:56:64
Authority key identifier: 68:21:C8:FF:04:37:F7:ED:D8:29:16:6F:DE:03:44:6F:86:10:9D:80
Certificate issuer:       /CN=6821c8ff0437f7edd829166fde03446f86109d80
Certificate serial:       01962F06615EDC2037C4D8F7CAAFB2CFE55B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/aCHI_wQ39-3YKRZv3gNEb4YQnYA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6c/13b144-be16-4922-a983-25ae9293f6b4/1/aCHI_wQ39-3YKRZv3gNEb4YQnYA.mft
Manifest number:          14ED
Signing time:             Sun 13 Apr 2025 12:01:09 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:09 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:09 +0000
Files and hashes:         1: NmoeARNR5KlnZdBERWuM-iNzYM0.roa (hash: HgaWyfSju8BbiVq620WeDucyKoI/pqgp0CZAcN9HrcI=)
                          2: OxQUm2cc932_SbZHxUC7er0Sf-I.roa (hash: j3K3BKXe7Af0d19rliHQJv9FsfvecTZMNvSiBZonE64=)
                          3: ZH-i__Oj4SIwtAOHRRVv0u8J8eI.roa (hash: WEK6Mlk9pLflVadH6HQ/a95uE6G+8NUpMYALAx2797k=)
                          4: aCHI_wQ39-3YKRZv3gNEb4YQnYA.crl (hash: qY0SrawGfFvm99K+xNcZupmDniUrQ0IpnleZpvzONiI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:61:5e:dc:20:37:c4:d8:f7:ca:af:b2:cf:e5:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6821c8ff0437f7edd829166fde03446f86109d80
        Validity
            Not Before: Apr 13 12:01:09 2025 GMT
            Not After : Apr 14 12:01:09 2025 GMT
        Subject: CN=efaa653720ea4ad002b6a884e1d02aeb6e215664
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:87:ae:f4:c6:1e:91:78:e3:54:30:24:ee:f8:
                    e5:4f:f3:8e:d8:7d:80:ff:fd:16:15:b4:2f:2f:9b:
                    c1:c2:5f:ba:22:92:ca:4d:f8:38:65:f3:86:b8:92:
                    39:09:4b:81:47:58:b2:f9:89:2b:e7:1e:e2:58:cf:
                    8a:d0:13:54:a4:e9:0f:01:5a:8c:63:fc:25:a3:d8:
                    34:a5:97:2b:70:a5:dd:01:fb:fe:85:90:d9:f8:8f:
                    10:5e:56:f6:6b:86:05:c2:90:af:7a:df:d7:35:2c:
                    05:8e:7e:64:20:cb:a3:5a:ae:62:c3:39:9e:70:33:
                    b6:3b:1e:35:94:00:b7:09:dc:6b:67:52:23:0a:53:
                    54:ea:37:86:f6:b9:41:a7:00:2f:3e:69:08:83:45:
                    d9:03:bf:83:69:68:2f:a1:60:9f:81:d8:65:8a:4e:
                    b9:23:6f:c9:a0:34:5a:1d:b9:49:a7:5b:16:2a:99:
                    99:57:4a:90:a6:04:b3:1e:55:6c:f5:38:e5:83:ae:
                    65:a8:a2:9d:62:8f:f2:81:a3:50:23:bb:40:da:00:
                    32:64:b4:e2:5a:6b:ac:df:99:95:aa:8a:b4:61:38:
                    c1:5d:58:8c:c6:2d:ce:89:63:a5:0c:6e:eb:f2:c7:
                    4e:1b:31:fb:a0:a7:73:6d:97:59:a3:5f:36:4b:e8:
                    3f:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:AA:65:37:20:EA:4A:D0:02:B6:A8:84:E1:D0:2A:EB:6E:21:56:64
            X509v3 Authority Key Identifier:
                keyid:68:21:C8:FF:04:37:F7:ED:D8:29:16:6F:DE:03:44:6F:86:10:9D:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aCHI_wQ39-3YKRZv3gNEb4YQnYA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/13b144-be16-4922-a983-25ae9293f6b4/1/aCHI_wQ39-3YKRZv3gNEb4YQnYA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/13b144-be16-4922-a983-25ae9293f6b4/1/aCHI_wQ39-3YKRZv3gNEb4YQnYA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:78:bb:45:3e:81:fc:9b:cc:e2:78:ce:ef:e8:2f:d8:4e:15:
         c6:8b:d1:a5:ce:44:00:77:55:42:7b:8d:e4:f0:73:d1:be:77:
         15:e4:b3:4c:51:0e:0e:8b:88:77:d8:b3:89:77:c9:2e:7a:2b:
         2b:bf:56:2e:aa:1a:c8:55:4d:ee:2d:fc:bb:a2:d7:b3:62:31:
         1c:e3:c7:8a:dd:7c:f1:24:42:6d:71:2e:73:fc:5d:44:17:1c:
         3a:44:d2:c8:ee:08:b9:98:85:9e:c9:9b:63:df:ab:ff:97:65:
         66:a2:cf:96:64:43:d2:87:2b:ca:61:b9:e5:59:5a:78:55:72:
         d3:fc:a0:6e:03:ba:49:a1:ab:60:ed:7b:5f:2f:f9:30:46:30:
         df:e1:a9:74:c9:5c:17:b7:14:78:93:0e:7f:5c:57:d6:ca:c6:
         e4:1e:07:49:09:60:9a:64:01:c1:24:54:4c:5a:0d:f4:45:77:
         98:f0:aa:ee:d9:c7:03:ab:6f:1a:c2:46:21:89:ea:31:2c:3f:
         62:39:29:94:8d:99:90:97:20:21:f6:9f:9a:3a:b5:c9:02:7e:
         56:5f:fa:62:20:2b:49:f3:20:90:80:59:e7:10:81:d1:97:e7:
         12:14:77:f1:ee:00:da:05:bd:a3:83:56:c3:96:b5:3c:f1:33:
         ba:cf:03:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----