Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/0df2ef-ffc9-4457-9f4a-7712fbf161c1/1/1-BogUgUmddRTm4f1-5xpTb9DJh4.mft
File:                     1-BogUgUmddRTm4f1-5xpTb9DJh4.mft (raw, json)
Hash identifier:          aKY74KLLZoH2ZdU+6xnF3LAmXkrpD6nuSLLbaX2akjE=
Subject key identifier:   EB:C5:E8:A8:32:19:13:EB:B3:D6:9F:C0:A6:EE:C6:73:FE:BB:E0:31
Authority key identifier: F8:1A:20:52:05:26:75:D4:53:9B:87:F5:FB:9C:69:4D:BF:43:26:1E
Certificate issuer:       /CN=f81a2052052675d4539b87f5fb9c694dbf43261e
Certificate serial:       01962F064C36AAFD60712DFB99529B6E103C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-BogUgUmddRTm4f1-5xpTb9DJh4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/49/0df2ef-ffc9-4457-9f4a-7712fbf161c1/1/1-BogUgUmddRTm4f1-5xpTb9DJh4.mft
Manifest number:          0B3C
Signing time:             Sun 13 Apr 2025 12:01:03 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:03 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:03 +0000
Files and hashes:         1: 1-BogUgUmddRTm4f1-5xpTb9DJh4.crl (hash: YnP+mG19eExqSTIAZkl9ms7EfHva7GvL1lMXZXW71+M=)
                          2: FAKXs32RTJhJGvnWYSpaYh74Joo.roa (hash: GNLsP2LR6gKVvZU85Er+QUF1ICOlY9gVJmojhgR/T8g=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:4c:36:aa:fd:60:71:2d:fb:99:52:9b:6e:10:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f81a2052052675d4539b87f5fb9c694dbf43261e
        Validity
            Not Before: Apr 13 12:01:03 2025 GMT
            Not After : Apr 14 12:01:03 2025 GMT
        Subject: CN=ebc5e8a8321913ebb3d69fc0a6eec673febbe031
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:5d:0a:7d:6d:8c:8d:8b:5d:5a:20:d4:4c:5e:
                    16:50:79:86:e4:0c:d2:1b:3b:25:82:68:7f:d9:69:
                    23:61:b3:82:03:82:ac:9d:e1:84:7a:05:9d:19:bc:
                    ef:99:61:25:78:e0:88:cd:da:0b:a3:55:5b:50:7d:
                    da:a6:e9:fc:3a:55:52:c1:6e:5b:b9:09:52:f8:3d:
                    6d:07:fe:76:ab:4f:a5:3c:d5:34:f1:9e:cd:3e:46:
                    94:e1:c6:ba:10:7c:2b:05:97:52:f0:84:6b:31:97:
                    39:25:86:95:55:12:80:54:c9:0f:aa:fe:36:e1:75:
                    61:81:66:dd:77:92:50:b6:c5:41:76:68:2c:93:bc:
                    72:f5:5a:33:40:fe:88:08:78:93:b5:27:26:63:19:
                    a5:b4:61:74:dc:67:ec:e3:99:b2:f7:5c:c9:46:33:
                    97:db:aa:53:59:27:7d:7e:91:00:89:d0:96:e5:84:
                    7b:e5:3e:09:73:f8:36:92:8f:e8:a2:59:f1:2a:e6:
                    79:5f:37:0b:f4:88:8a:45:6d:99:73:f5:54:f9:57:
                    ea:79:02:ab:d5:de:31:4b:23:64:02:62:dc:e7:f0:
                    c1:12:de:14:43:a6:e1:0a:bb:10:f1:ed:a3:15:e3:
                    84:ac:b5:06:ce:15:da:b0:49:76:95:65:5c:ec:93:
                    6d:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:C5:E8:A8:32:19:13:EB:B3:D6:9F:C0:A6:EE:C6:73:FE:BB:E0:31
            X509v3 Authority Key Identifier:
                keyid:F8:1A:20:52:05:26:75:D4:53:9B:87:F5:FB:9C:69:4D:BF:43:26:1E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-BogUgUmddRTm4f1-5xpTb9DJh4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/0df2ef-ffc9-4457-9f4a-7712fbf161c1/1/1-BogUgUmddRTm4f1-5xpTb9DJh4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/49/0df2ef-ffc9-4457-9f4a-7712fbf161c1/1/1-BogUgUmddRTm4f1-5xpTb9DJh4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:31:55:38:3d:31:8c:f8:4c:30:03:48:d6:ae:d2:e4:48:81:
         5b:bd:c0:c9:66:d7:32:7a:67:30:6f:08:63:b2:55:f4:93:d8:
         43:7b:aa:f7:ae:5e:23:36:f9:f0:0b:10:ec:78:a9:ab:b0:ea:
         eb:12:cb:4c:3c:8c:a9:3e:21:b3:4e:8d:b7:80:51:cd:0e:1e:
         af:68:f0:a4:9b:85:97:ea:3d:c8:08:ac:ae:e9:8b:b4:4a:a6:
         b2:ea:0f:54:a9:81:9e:80:9c:23:69:06:a5:97:ad:17:50:3f:
         17:d7:37:77:3c:e4:d2:73:79:29:7a:91:7a:1f:c3:fd:4c:1b:
         12:52:5e:39:16:43:f2:e7:9b:10:56:52:81:6c:90:db:0d:d3:
         ae:a4:87:91:54:7d:40:92:69:76:ff:be:d9:4b:d4:a6:9e:90:
         b6:d7:e1:60:a4:6b:d3:a6:ae:aa:7c:38:b3:e3:8e:1e:8e:0c:
         9b:80:ee:71:57:f4:63:1d:75:f5:0e:85:cd:b4:d6:41:f3:52:
         fc:28:e0:10:55:a5:9e:92:75:c0:c6:96:92:1c:33:86:f7:4e:
         68:ae:a2:3a:90:c9:a9:87:f2:64:b6:82:a1:ff:56:2a:61:b3:
         4a:7f:20:e9:36:8a:b2:93:11:77:2f:0b:74:4e:15:28:52:a2:
         bd:50:09:a8
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZYvBkw2qv1gcS37mVKbbhA8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY4MWEyMDUyMDUyNjc1ZDQ1MzliODdmNWZiOWM2OTRkYmY0
MzI2MWUwHhcNMjUwNDEzMTIwMTAzWhcNMjUwNDE0MTIwMTAzWjAzMTEwLwYDVQQD
EyhlYmM1ZThhODMyMTkxM2ViYjNkNjlmYzBhNmVlYzY3M2ZlYmJlMDMxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvV0KfW2MjYtdWiDUTF4WUHmG5AzS
Gzslgmh/2WkjYbOCA4KsneGEegWdGbzvmWEleOCIzdoLo1VbUH3apun8OlVSwW5b
uQlS+D1tB/52q0+lPNU08Z7NPkaU4ca6EHwrBZdS8IRrMZc5JYaVVRKAVMkPqv42
4XVhgWbdd5JQtsVBdmgsk7xy9VozQP6ICHiTtScmYxmltGF03Gfs45my91zJRjOX
26pTWSd9fpEAidCW5YR75T4Jc/g2ko/oolnxKuZ5XzcL9IiKRW2Zc/VU+VfqeQKr
1d4xSyNkAmLc5/DBEt4UQ6bhCrsQ8e2jFeOErLUGzhXasEl2lWVc7JNtpwIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFOvF6KgyGRPrs9afwKbuxnP+u+AxMB8GA1UdIwQY
MBaAFPgaIFIFJnXUU5uH9fucaU2/QyYeMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1Cb2dVZ1VtZGRSVG00ZjEtNXhwVGI5REpoNC5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNDkvMGRmMmVmLWZmYzktNDQ1Ny05ZjRh
LTc3MTJmYmYxNjFjMS8xLzEtQm9nVWdVbWRkUlRtNGYxLTV4cFRiOURKaDQubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxULzQ5LzBkZjJlZi1mZmM5LTQ0NTctOWY0YS03NzEyZmJmMTYx
YzEvMS8xLUJvZ1VnVW1kZFJUbTRmMS01eHBUYjlESmg0LmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZzFV
OD0xjPhMMANI1q7S5EiBW73AyWbXMnpnMG8IY7JV9JPYQ3uq965eIzb58AsQ7Hip
q7Dq6xLLTDyMqT4hs06Nt4BRzQ4er2jwpJuFl+o9yAisrumLtEqmsuoPVKmBnoCc
I2kGpZetF1A/F9c3dzzk0nN5KXqReh/D/UwbElJeORZD8uebEFZSgWyQ2w3TrqSH
kVR9QJJpdv++2UvUpp6QttfhYKRr06auqnw4s+OOHo4Mm4DucVf0Yx119Q6FzbTW
QfNS/CjgEFWlnpJ1wMaWkhwzhvdOaK6iOpDJqYfyZLaCof9WKmGzSn8g6TaKspMR
dy8LdE4VKFKivVAJqA==
-----END CERTIFICATE-----