Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/5f153d-71d9-470a-ba27-971139514bb1/1/CKKX-M-hzm0_4sUmkRxGippjGNA.mft
File:                     CKKX-M-hzm0_4sUmkRxGippjGNA.mft (raw, json)
Hash identifier:          b+eYNoNb4LMtAajmf+ejrm3mw+324vo1DXhHJkZY9is=
Subject key identifier:   76:1B:2B:6A:EE:E4:94:EA:08:6F:B8:3C:D9:44:3A:9C:2D:FC:FF:01
Authority key identifier: 08:A2:97:F8:CF:A1:CE:6D:3F:E2:C5:26:91:1C:46:8A:9A:63:18:D0
Certificate issuer:       /CN=08a297f8cfa1ce6d3fe2c526911c468a9a6318d0
Certificate serial:       0195E159C5A2E2A6D52FCDA051FED125C0EB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CKKX-M-hzm0_4sUmkRxGippjGNA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/71/5f153d-71d9-470a-ba27-971139514bb1/1/CKKX-M-hzm0_4sUmkRxGippjGNA.mft
Manifest number:          14C4
Signing time:             Sat 29 Mar 2025 10:01:51 +0000
Manifest this update:     Sat 29 Mar 2025 10:01:51 +0000
Manifest next update:     Sun 30 Mar 2025 10:01:51 +0000
Files and hashes:         1: 5MRhSgchnAtf4S3HQR8A2P9G7a4.roa (hash: zhfGWwF8FWGDVI625aodd4CNBRsAZhPphxbbSuJ9Gk4=)
                          2: CKKX-M-hzm0_4sUmkRxGippjGNA.crl (hash: zW+Hprvzrhv+QgpQiaZz4QLhTHLu/G4iYlFl7yT5xC0=)
                          3: KBS5ODGVPgLIrn_lzCZVpLCuM_o.roa (hash: tuJiuTZZDp+7DpYOFgzygNPFPeRHjujTGVj2/4ZqQWE=)
                          4: lf4o5O9cdWZQhb3j1ES-63-ld0k.roa (hash: MkYv77LnNtclc+nDDwEnxwywSZw8C8g7xWpLHjYSnn8=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:e1:59:c5:a2:e2:a6:d5:2f:cd:a0:51:fe:d1:25:c0:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08a297f8cfa1ce6d3fe2c526911c468a9a6318d0
        Validity
            Not Before: Mar 29 10:01:51 2025 GMT
            Not After : Mar 30 10:01:51 2025 GMT
        Subject: CN=761b2b6aeee494ea086fb83cd9443a9c2dfcff01
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:6b:de:e4:a5:80:0c:bf:9d:43:dc:46:80:de:
                    5b:d7:71:cd:89:30:59:4e:cf:ec:97:b4:56:85:93:
                    52:0f:cb:c8:84:3c:2d:2b:c2:16:40:a3:cb:2e:3f:
                    67:f0:b1:24:df:28:ae:90:a5:11:45:f8:1d:b2:45:
                    18:7a:73:b8:90:12:ba:80:6e:8a:62:ee:5d:79:86:
                    96:81:65:98:33:bb:80:16:52:25:5a:66:bd:be:80:
                    11:05:1f:00:f3:49:6e:ab:d0:45:21:fe:74:c3:49:
                    05:c7:e7:b9:f3:80:c8:f0:71:78:b9:db:44:e2:8e:
                    23:6e:c9:80:c0:e5:48:53:bd:d0:35:04:10:6d:7f:
                    90:7f:c7:5f:ec:e6:06:0f:ce:e8:2c:29:87:a5:e2:
                    87:34:0e:e2:fb:75:90:c3:9c:47:96:c9:34:85:05:
                    94:1c:a1:05:55:6b:a1:40:5a:64:71:9d:77:20:1b:
                    36:a9:60:c3:84:fa:07:9a:d5:02:ee:bf:85:8f:ae:
                    3f:66:6a:f8:82:49:8c:d4:7c:fa:b7:96:fc:0c:45:
                    62:50:9d:25:a7:df:77:b2:07:82:99:0a:40:3e:8b:
                    f4:39:c9:1e:5e:3c:7e:a7:19:0d:c1:de:29:cb:10:
                    1f:c5:77:d0:1a:77:87:22:3b:c1:1c:2d:33:12:7a:
                    0b:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:1B:2B:6A:EE:E4:94:EA:08:6F:B8:3C:D9:44:3A:9C:2D:FC:FF:01
            X509v3 Authority Key Identifier:
                keyid:08:A2:97:F8:CF:A1:CE:6D:3F:E2:C5:26:91:1C:46:8A:9A:63:18:D0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CKKX-M-hzm0_4sUmkRxGippjGNA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/5f153d-71d9-470a-ba27-971139514bb1/1/CKKX-M-hzm0_4sUmkRxGippjGNA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/71/5f153d-71d9-470a-ba27-971139514bb1/1/CKKX-M-hzm0_4sUmkRxGippjGNA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:cb:31:27:d8:d4:03:36:29:2e:cb:5a:06:61:35:bf:02:ce:
         32:29:44:da:cd:59:c6:64:92:4c:74:8a:53:23:a5:c2:cc:90:
         b1:1c:3d:b7:dc:4a:92:60:0d:f0:ac:de:a9:53:b4:15:9a:2b:
         b7:00:a0:9d:2f:c7:0c:8a:01:12:3c:1c:b7:9f:00:c6:7f:ec:
         8e:85:1e:a7:7e:bc:a5:f0:36:d0:c7:55:a2:c0:a9:30:9c:4a:
         35:3e:bf:61:eb:c4:5d:fb:6f:98:05:dc:ee:fa:e1:05:ef:5b:
         1e:da:e7:af:f9:d0:c1:38:33:e7:22:9d:9b:45:33:3d:d7:d2:
         39:bb:fd:7c:64:f9:fb:cb:b8:a4:55:35:90:ee:88:b5:d3:56:
         1f:48:a1:dd:91:0f:a4:34:c4:06:e2:47:c2:04:f4:09:ac:8b:
         b0:0d:64:86:36:40:c0:ca:3f:e8:01:22:d0:ab:a6:eb:a2:00:
         b3:89:ba:4f:fb:32:9e:d7:40:f4:0e:db:37:6f:ae:38:12:e7:
         d7:49:a4:33:84:dc:d2:8c:c3:42:bc:12:a6:fa:2f:91:be:51:
         aa:37:0d:e5:f6:4b:24:b9:b4:36:73:fe:82:f2:eb:7d:d7:0d:
         c7:0e:b6:39:f8:58:e9:39:26:a0:70:d1:4c:2a:19:e0:18:21:
         d9:18:9c:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----