Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/3d3a2d-a039-46f4-8687-057817ba9fb7/1/BMvltGI9q0LxWpBQAtt85i6FTyk.mft
File:                     BMvltGI9q0LxWpBQAtt85i6FTyk.mft (raw, json)
Hash identifier:          zrtCEyACcwo/GnHK4GG9vI7tjFy9nZKqtD36ZUUGGq4=
Subject key identifier:   08:0F:48:93:A6:40:C7:31:D3:F7:3C:F3:BA:E9:39:A0:54:4E:36:BE
Authority key identifier: 04:CB:E5:B4:62:3D:AB:42:F1:5A:90:50:02:DB:7C:E6:2E:85:4F:29
Certificate issuer:       /CN=04cbe5b4623dab42f15a905002db7ce62e854f29
Certificate serial:       01962F74630EC97B49537C260F0E8DCDF0D6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BMvltGI9q0LxWpBQAtt85i6FTyk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/31/3d3a2d-a039-46f4-8687-057817ba9fb7/1/BMvltGI9q0LxWpBQAtt85i6FTyk.mft
Manifest number:          1248
Signing time:             Sun 13 Apr 2025 14:01:18 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:18 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:18 +0000
Files and hashes:         1: 0-hMkgwH1_6XuPQSyPu-ntwA8r0.roa (hash: 2JzzJnFd9ihkF6y1d6OVxipYN8O/eCmhylMPeyJxI+E=)
                          2: 0xc42d-LDEI-SgAKzo0kBGB10Dc.roa (hash: gb2q4Z8T0zA76PNBgJ68ndUVgrHcH6k39n959MJErWM=)
                          3: 1ilr6zYt5I52EZw1RBDC_QnucBI.roa (hash: 8aVTE2OR/NeC5XrRy2OHucb/MxvIRcv9F4MoSRLn0GY=)
                          4: BMvltGI9q0LxWpBQAtt85i6FTyk.crl (hash: NOIhOJQCn206u/0OS1pQOLcj2Pi/RvVuFtSgOzIuZ4M=)
                          5: BquKat6j82qOS2m8MoMszw9MXhs.roa (hash: U9XpBJ+r0RGAXVAtuptN2ZKIQXtNg60NKIPDHLY7cCk=)
                          6: CJcuaiMpQyoQn46xw-D6Thhavys.roa (hash: 37f0an+cXzNVOgfnUMDCZ1mYljjJ+Pt6QqAPWZ0deas=)
                          7: GJCWcatdPgXKoeROae-Qf22FK_w.roa (hash: k6sICJAet/cN+WLeSoIk4F2tb+lz85AYVDsOZ/R1kEk=)
                          8: KhmVgayahuq_FWEItXRbri4yLjQ.roa (hash: 28u9HZ9E3lxZpHt40G8WE88+hWCSc1oI4DUi9z94/vQ=)
                          9: Q9sEsE6z5GIibO-Hp9GTHh0HWPI.roa (hash: 9CRQgbCX8o+HtsLamnfC8peoHYzNHS3coeIlAetbEPU=)
                          10: QnLL_E3dngBvD7h0E4XLMypXvhg.roa (hash: QSFVe2PF4iSOwOmMgGkwLBrADT1zh8nSTUizWIPHjPg=)
                          11: b2ULSIdH23UusVKGAXuUmJR9P2U.roa (hash: K3WOXBiupreCnjzj2yIYkRDoA8J60T3smFT7czzRwzQ=)
                          12: fhv64bxzWcauBoH7qXIpIF6wjQo.roa (hash: XBOHExDlxcs7IJl8NBFZOTlEqiJsW6a5rBKOKZnQpcM=)
                          13: nz4iWaKhsnj0CBAx2kY6efcjWbI.roa (hash: 3iBcZ9G2X99Gsvoc2t0DW5tmz60vwwpyxEz2zwkXorM=)
                          14: qljIitXk1t3YFV0fw6MoKlVZXlE.roa (hash: ISyBHGAsDRPbjHKqPePZgCBP/vPkmLdOY+Zqx/l5qh4=)
                          15: sOABMeqqwZ1G0D1ULMJHO8KxxxQ.roa (hash: aqn/2HV1SWgZFD22dyBslfrAfJPMn4unQ/xtd1gPhfA=)
                          16: v0B2WJNbU72JzUwEtfsRU9EGr8A.roa (hash: bkZ7vvKmMRttjisw4wz3UjVly/FH8PJFyMj7pePFFkI=)
                          17: ygM2v3yxRCSTta-X-otHAEUh3WI.roa (hash: kk4ythPFf1BolITMKCGLolUQdyXP71slk/H1AY1m7jI=)
                          18: yvd7ROcqjdqfwbqgapXEb-7VUqU.roa (hash: 4MkoXbQ5fkY09pnUUjvZyOYE4o39h9GdJHrXjCu9bik=)
                          19: zY78a5ViA6-TOxTfbPiAJ9Inm_Y.roa (hash: og5b/BcFOY+IjLcDutjJV+OJ1zegWiBInLo9K8sBHic=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:63:0e:c9:7b:49:53:7c:26:0f:0e:8d:cd:f0:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=04cbe5b4623dab42f15a905002db7ce62e854f29
        Validity
            Not Before: Apr 13 14:01:18 2025 GMT
            Not After : Apr 14 14:01:18 2025 GMT
        Subject: CN=080f4893a640c731d3f73cf3bae939a0544e36be
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:0a:1b:ed:f2:85:35:d8:67:89:c0:46:a7:f3:
                    97:16:01:16:60:b1:5f:5d:14:ea:6c:d9:f7:4f:56:
                    e2:74:64:27:f7:e4:30:eb:b5:94:5f:55:51:94:10:
                    06:ae:af:7c:f4:d8:23:35:9f:c2:f6:08:22:98:0b:
                    48:04:52:b2:a6:58:bf:12:99:30:be:60:88:b0:39:
                    9f:db:fe:c5:bf:9c:74:02:a3:e3:51:7c:db:cb:a5:
                    8f:fc:77:1b:91:88:18:ea:6c:6e:1f:d2:33:1b:b5:
                    11:1f:8c:1b:44:d6:aa:60:71:70:6b:70:43:fb:3f:
                    3e:b8:75:93:33:64:75:e8:f1:89:88:2d:de:54:ce:
                    bb:fa:e2:77:c6:96:eb:90:18:d6:09:28:55:43:7f:
                    26:81:f0:11:90:8b:f9:12:6d:9d:1d:73:15:70:92:
                    00:c9:af:33:a6:53:c5:a1:81:6e:20:3b:4d:44:9a:
                    02:77:fd:62:ee:63:da:c6:b3:d9:ed:48:1c:46:4e:
                    38:51:80:91:83:9c:72:78:81:84:76:1e:c5:f4:f1:
                    11:dd:29:1c:63:85:4b:2c:86:81:2f:b5:0c:d9:ac:
                    7c:6c:2f:98:0d:cd:59:5c:2f:b6:0a:b1:fe:2e:fe:
                    4b:77:4f:4f:c0:33:ef:2f:35:70:56:49:50:ff:59:
                    fc:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:0F:48:93:A6:40:C7:31:D3:F7:3C:F3:BA:E9:39:A0:54:4E:36:BE
            X509v3 Authority Key Identifier:
                keyid:04:CB:E5:B4:62:3D:AB:42:F1:5A:90:50:02:DB:7C:E6:2E:85:4F:29

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BMvltGI9q0LxWpBQAtt85i6FTyk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/3d3a2d-a039-46f4-8687-057817ba9fb7/1/BMvltGI9q0LxWpBQAtt85i6FTyk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/31/3d3a2d-a039-46f4-8687-057817ba9fb7/1/BMvltGI9q0LxWpBQAtt85i6FTyk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:c1:bc:ed:d5:77:1d:20:7a:5d:51:20:d6:ef:67:6c:fc:f4:
         ba:42:4d:fa:54:56:12:0f:e2:58:b9:58:e4:7c:28:88:ad:59:
         4c:47:1c:48:28:32:37:2b:19:66:ba:ee:d7:cc:74:36:5a:78:
         a7:0b:1f:b8:2b:1f:1a:f4:dc:89:e5:3d:9f:38:5a:bc:ce:b1:
         5e:6e:a8:54:30:b1:8b:5d:5f:70:76:ed:9c:3d:1e:03:45:79:
         2a:77:28:2a:a0:c9:8a:6d:b1:fe:8a:4a:56:f6:da:fa:4d:02:
         58:b6:6c:bc:f1:3c:6f:2b:b9:4e:44:a6:86:8b:8e:9e:29:57:
         9d:bd:55:91:98:26:b8:6f:a4:9b:a1:dd:ae:82:b5:00:bb:49:
         b9:a3:b6:e0:e0:61:21:54:90:01:97:d0:8a:bc:b6:6f:5a:75:
         5d:a5:8c:14:94:a2:bd:9d:ee:13:e0:ac:e8:cd:de:2d:29:6b:
         26:96:47:95:27:f7:b7:a7:13:6f:7c:6d:38:ec:ac:b8:76:f0:
         89:2e:80:10:a3:25:7f:8f:40:dd:44:74:2b:9b:28:a8:fd:54:
         26:ad:ab:68:b4:ec:c8:56:36:a8:f2:d7:50:eb:78:a9:c4:14:
         b0:4a:10:54:8e:f5:6e:53:62:ed:50:1b:60:01:04:fd:f0:2e:
         15:59:58:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----