Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/be3474-3d78-4bae-96e7-b4a2b49fbc1c/1/bgE5p90AvHR-C-c-5yiIC4FVAIU.mft
File:                     bgE5p90AvHR-C-c-5yiIC4FVAIU.mft (raw, json)
Hash identifier:          HSMveju12ObWNgpDOuLJn1NBMWB5LcEsTkx5Mc1vS9I=
Subject key identifier:   EA:16:D7:59:1E:42:94:A7:A2:ED:E0:FA:BE:A1:D1:71:8E:15:B7:23
Authority key identifier: 6E:01:39:A7:DD:00:BC:74:7E:0B:E7:3E:E7:28:88:0B:81:55:00:85
Certificate issuer:       /CN=6e0139a7dd00bc747e0be73ee728880b81550085
Certificate serial:       01962FAB703120383D9348D7DCDA9BDAED35
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bgE5p90AvHR-C-c-5yiIC4FVAIU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/46/be3474-3d78-4bae-96e7-b4a2b49fbc1c/1/bgE5p90AvHR-C-c-5yiIC4FVAIU.mft
Manifest number:          0480
Signing time:             Sun 13 Apr 2025 15:01:26 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:26 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:26 +0000
Files and hashes:         1: bgE5p90AvHR-C-c-5yiIC4FVAIU.crl (hash: E5mggknNl3SpXeYhTy4Ise9Ng9gRdQsiH2WddRIA3bs=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:70:31:20:38:3d:93:48:d7:dc:da:9b:da:ed:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6e0139a7dd00bc747e0be73ee728880b81550085
        Validity
            Not Before: Apr 13 15:01:26 2025 GMT
            Not After : Apr 14 15:01:26 2025 GMT
        Subject: CN=ea16d7591e4294a7a2ede0fabea1d1718e15b723
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:36:ef:91:a4:49:bd:5c:6b:ac:63:c8:31:8e:
                    ef:e5:3a:1f:a6:e7:ca:ef:3e:4a:fd:58:f1:df:c5:
                    56:0c:48:8b:b4:5d:00:f8:c9:51:25:ac:fb:fb:c5:
                    e6:4e:28:eb:0b:ae:9a:2e:45:6c:a1:ce:d4:00:5e:
                    07:97:1a:91:de:e9:0c:e9:26:84:bc:e3:ce:3e:90:
                    9d:73:9c:18:33:bf:35:13:c5:a8:16:98:ea:9a:4c:
                    28:dc:49:b1:a0:92:3b:f0:94:ee:b9:42:41:2d:37:
                    8e:b2:08:75:c1:27:24:46:27:d7:c8:1f:20:32:2b:
                    d6:06:e7:7b:1e:36:f9:d6:fd:4c:cc:ac:dc:1a:5b:
                    eb:ac:6d:fd:75:b2:b3:b0:47:10:09:af:c2:56:9a:
                    d5:b7:8d:05:26:78:94:6e:2d:a1:83:34:33:89:a8:
                    04:71:01:6d:8b:c1:51:5e:34:0f:b5:e9:90:0c:c9:
                    54:4e:e1:14:27:43:93:32:89:a5:d3:ae:0f:64:1c:
                    36:97:8e:85:07:b7:31:bc:79:bb:9d:43:8e:40:91:
                    d8:34:4d:c9:46:62:34:c3:64:ab:56:17:bd:77:37:
                    12:8d:55:3a:f0:83:1c:38:86:e1:d2:9d:89:4a:b8:
                    c9:10:89:f2:a2:f6:8d:81:a3:8c:33:fa:af:fc:6c:
                    d3:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:16:D7:59:1E:42:94:A7:A2:ED:E0:FA:BE:A1:D1:71:8E:15:B7:23
            X509v3 Authority Key Identifier:
                keyid:6E:01:39:A7:DD:00:BC:74:7E:0B:E7:3E:E7:28:88:0B:81:55:00:85

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bgE5p90AvHR-C-c-5yiIC4FVAIU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/be3474-3d78-4bae-96e7-b4a2b49fbc1c/1/bgE5p90AvHR-C-c-5yiIC4FVAIU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/46/be3474-3d78-4bae-96e7-b4a2b49fbc1c/1/bgE5p90AvHR-C-c-5yiIC4FVAIU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:50:c9:bf:a4:60:d0:07:8b:71:cd:fa:96:75:e4:2f:06:8e:
         53:6a:45:a2:18:80:aa:70:1b:9e:23:02:a4:36:b2:75:30:4c:
         d0:57:85:5d:1f:c9:4e:b2:4a:b5:a1:7a:bb:03:f4:8c:a0:bd:
         f1:13:7c:bd:10:7b:57:27:4e:e8:ef:87:b6:4f:85:f4:ed:cc:
         a6:51:ae:16:d7:3f:d1:52:89:fb:dc:06:49:70:50:ff:cf:bb:
         18:a5:bc:af:fe:c0:48:58:b4:c2:d8:e6:06:65:8a:ed:f0:63:
         31:00:06:6b:40:9c:c3:60:76:01:42:cc:0c:0f:8f:55:c0:62:
         b7:78:2f:b9:c0:06:58:58:1a:cc:05:94:fe:8d:9f:93:82:17:
         0a:74:a2:1b:c3:e0:b7:fc:f8:3e:3b:ba:9b:d4:fa:be:c6:42:
         2e:a7:3a:e7:e8:f6:67:70:4b:44:db:57:fc:4a:15:d2:b2:d7:
         ff:44:fa:b7:29:07:bf:d9:e1:e1:82:64:40:f8:8e:00:48:6d:
         6e:54:45:dd:e3:37:7a:e5:ce:17:b0:18:38:10:39:c2:91:5e:
         c9:77:04:b9:34:f7:e4:6c:b0:55:19:d0:4b:6f:42:ba:d6:f1:
         b8:61:aa:f1:04:d4:ae:03:4a:3b:6d:64:23:7a:31:b8:7d:dc:
         95:55:c0:3d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvq3AxIDg9k0jX3Nqb2u01MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZlMDEzOWE3ZGQwMGJjNzQ3ZTBiZTczZWU3Mjg4ODBiODE1
NTAwODUwHhcNMjUwNDEzMTUwMTI2WhcNMjUwNDE0MTUwMTI2WjAzMTEwLwYDVQQD
EyhlYTE2ZDc1OTFlNDI5NGE3YTJlZGUwZmFiZWExZDE3MThlMTViNzIzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApzbvkaRJvVxrrGPIMY7v5TofpufK
7z5K/Vjx38VWDEiLtF0A+MlRJaz7+8XmTijrC66aLkVsoc7UAF4HlxqR3ukM6SaE
vOPOPpCdc5wYM781E8WoFpjqmkwo3EmxoJI78JTuuUJBLTeOsgh1wSckRifXyB8g
MivWBud7Hjb51v1MzKzcGlvrrG39dbKzsEcQCa/CVprVt40FJniUbi2hgzQziagE
cQFti8FRXjQPtemQDMlUTuEUJ0OTMoml064PZBw2l46FB7cxvHm7nUOOQJHYNE3J
RmI0w2SrVhe9dzcSjVU68IMcOIbh0p2JSrjJEInyovaNgaOMM/qv/GzTBQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOoW11keQpSnou3g+r6h0XGOFbcjMB8GA1UdIwQY
MBaAFG4BOafdALx0fgvnPucoiAuBVQCFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYmdFNXA5MEF2SFItQy1jLTV5aUlDNEZWQUlVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ni9iZTM0NzQtM2Q3OC00YmFlLTk2ZTct
YjRhMmI0OWZiYzFjLzEvYmdFNXA5MEF2SFItQy1jLTV5aUlDNEZWQUlVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ni9iZTM0NzQtM2Q3OC00YmFlLTk2ZTctYjRhMmI0OWZiYzFj
LzEvYmdFNXA5MEF2SFItQy1jLTV5aUlDNEZWQUlVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAH1DJv6Rg
0AeLcc36lnXkLwaOU2pFohiAqnAbniMCpDaydTBM0FeFXR/JTrJKtaF6uwP0jKC9
8RN8vRB7VydO6O+Htk+F9O3MplGuFtc/0VKJ+9wGSXBQ/8+7GKW8r/7ASFi0wtjm
BmWK7fBjMQAGa0Ccw2B2AULMDA+PVcBit3gvucAGWFgazAWU/o2fk4IXCnSiG8Pg
t/z4Pju6m9T6vsZCLqc65+j2Z3BLRNtX/EoV0rLX/0T6tykHv9nh4YJkQPiOAEht
blRF3eM3euXOF7AYOBA5wpFeyXcEuTT35GywVRnQS29CutbxuGGq8QTUrgNKO21k
I3oxuH3clVXAPQ==
-----END CERTIFICATE-----