Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/46c95c-7f21-4cc7-8e8f-b566aeb95f93/1/AQChacjmlsoWm1mcehcRk__wbSo.mft
File:                     AQChacjmlsoWm1mcehcRk__wbSo.mft (raw, json)
Hash identifier:          vwvJdp0QaoRrZgH8q9sELl5ljpAA/mcmk1I7ILyzrjA=
Subject key identifier:   32:7F:6A:C7:68:F7:96:1C:BE:46:9C:29:E4:B3:13:D0:3C:EA:A7:2B
Authority key identifier: 01:00:A1:69:C8:E6:96:CA:16:9B:59:9C:7A:17:11:93:FF:F0:6D:2A
Certificate issuer:       /CN=0100a169c8e696ca169b599c7a171193fff06d2a
Certificate serial:       01962FAB6DC66B8A03D0F0F9DAB7F466E627
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AQChacjmlsoWm1mcehcRk__wbSo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/96/46c95c-7f21-4cc7-8e8f-b566aeb95f93/1/AQChacjmlsoWm1mcehcRk__wbSo.mft
Manifest number:          14EC
Signing time:             Sun 13 Apr 2025 15:01:25 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:25 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:25 +0000
Files and hashes:         1: AQChacjmlsoWm1mcehcRk__wbSo.crl (hash: B3AvI2cO9xs6PMQuA2M1/Mx1spvXbzYD37YXuQXUZzw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:6d:c6:6b:8a:03:d0:f0:f9:da:b7:f4:66:e6:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0100a169c8e696ca169b599c7a171193fff06d2a
        Validity
            Not Before: Apr 13 15:01:25 2025 GMT
            Not After : Apr 14 15:01:25 2025 GMT
        Subject: CN=327f6ac768f7961cbe469c29e4b313d03ceaa72b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:c1:52:71:94:19:d8:8e:f4:52:99:12:8c:d6:
                    e6:c0:ed:5c:7a:a1:d2:76:44:48:41:d1:88:91:9d:
                    22:1b:91:c1:fc:04:d9:1d:01:69:dc:c3:0f:36:47:
                    85:dc:6c:64:44:5f:67:d3:0b:d1:6e:07:f4:7f:34:
                    8a:9d:4e:55:ed:62:a9:03:9a:63:ba:47:de:ac:71:
                    e5:7d:15:83:73:37:b6:e6:8a:df:d7:2c:62:93:cb:
                    00:61:2d:b9:20:4e:44:0a:8e:9f:e7:c7:76:94:17:
                    22:28:fd:92:cd:fb:bc:9a:9e:ba:8d:f9:1e:ed:fb:
                    c3:2d:35:65:bb:be:33:38:e1:b5:9a:bb:a3:dc:f6:
                    f3:a5:de:61:25:00:52:d1:d1:8e:01:a9:99:a3:c7:
                    a4:74:8c:ec:63:e2:30:b6:fd:d1:17:e4:77:49:eb:
                    78:0c:4f:4a:e5:a5:5f:26:7e:19:1e:91:33:88:61:
                    dc:0d:4e:59:02:6d:0e:f1:53:7e:fd:7a:90:80:f2:
                    4d:de:2d:9c:8d:97:7e:57:3b:12:12:42:f7:b3:3b:
                    fb:e1:67:00:cc:12:61:aa:a2:b1:9c:50:bf:6a:ef:
                    cc:61:9a:42:85:81:d5:49:3f:93:32:9c:34:7c:92:
                    06:28:86:3c:20:85:80:03:c6:b3:c4:ac:c3:af:48:
                    90:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:7F:6A:C7:68:F7:96:1C:BE:46:9C:29:E4:B3:13:D0:3C:EA:A7:2B
            X509v3 Authority Key Identifier:
                keyid:01:00:A1:69:C8:E6:96:CA:16:9B:59:9C:7A:17:11:93:FF:F0:6D:2A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AQChacjmlsoWm1mcehcRk__wbSo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/46c95c-7f21-4cc7-8e8f-b566aeb95f93/1/AQChacjmlsoWm1mcehcRk__wbSo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/96/46c95c-7f21-4cc7-8e8f-b566aeb95f93/1/AQChacjmlsoWm1mcehcRk__wbSo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:7f:1f:1e:12:67:07:13:4b:5d:4b:85:f3:a9:22:03:d5:52:
         44:0a:d8:94:a3:33:2a:1d:44:fb:e4:44:8a:62:2d:4d:53:b5:
         66:ee:49:09:8c:66:5f:2d:4f:80:10:a0:0c:43:24:8e:e8:e0:
         00:0e:6a:07:e5:b8:88:ff:b2:e4:38:15:4c:16:09:cb:05:4b:
         de:f9:46:b6:7f:be:4b:5b:a4:d7:5e:d7:8a:6a:78:4b:35:ac:
         82:30:39:bd:fc:96:c2:17:89:b0:ac:02:2e:fb:f8:c1:45:fc:
         c9:57:de:59:98:d9:e3:f6:cc:c7:b6:9a:01:cd:b6:d5:7c:24:
         7e:f4:cf:14:ab:3c:bd:d7:a6:4f:d3:cf:cb:cf:c7:85:9b:67:
         75:c6:80:ae:40:63:bb:c3:ec:48:dd:53:71:c3:a6:85:fe:9b:
         52:be:71:a6:98:96:7a:25:69:72:f6:74:09:f0:21:33:05:d1:
         30:39:d3:50:e9:9c:e7:a9:e3:a0:37:59:48:1a:5e:ef:14:6e:
         f1:77:eb:3a:6c:5c:86:57:c1:fd:bd:da:c8:1b:36:01:2d:bb:
         8b:7c:9b:30:1b:3c:fe:55:20:d1:4a:18:2c:66:80:43:87:c2:
         f0:46:6c:1a:91:5c:55:20:db:fd:a2:d2:b5:ee:c4:ac:58:52:
         0f:45:ce:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----