Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/6c7b22-b65f-4f37-a40e-a9917cc15e0a/1/bvqMD-YuxUrMveNcYL2K1LkBT_c.mft
File:                     bvqMD-YuxUrMveNcYL2K1LkBT_c.mft (raw, json)
Hash identifier:          OKlf/ZkqlpZxm/QkPH8AJbkFhaSiwkRZ4CrVd2O2pZI=
Subject key identifier:   62:C9:42:B8:C2:94:13:F3:E3:C3:0D:6D:8D:9A:A5:EB:65:89:F5:2F
Authority key identifier: 6E:FA:8C:0F:E6:2E:C5:4A:CC:BD:E3:5C:60:BD:8A:D4:B9:01:4F:F7
Certificate issuer:       /CN=6efa8c0fe62ec54accbde35c60bd8ad4b9014ff7
Certificate serial:       01962E61DDEE41FF519E7BF26A58DDE1E027
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bvqMD-YuxUrMveNcYL2K1LkBT_c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4f/6c7b22-b65f-4f37-a40e-a9917cc15e0a/1/bvqMD-YuxUrMveNcYL2K1LkBT_c.mft
Manifest number:          1386
Signing time:             Sun 13 Apr 2025 09:01:27 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:27 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:27 +0000
Files and hashes:         1: DW8SHbVlL8Myb-p7QtpBtdE4Fug.roa (hash: yUyTh7meErNXbMRoAKGZB1yTrhp9xLOBqyMiqtl/XxA=)
                          2: bvqMD-YuxUrMveNcYL2K1LkBT_c.crl (hash: 4mlZsIcXu1vGRxZu9aftLe6Apf3obybwOvwlKrkYkKA=)
                          3: uBSOOeaOOAPA_AKPY15x-quda9A.roa (hash: Dt69/ItO+3jelx7+KElGDpHbyUEQGmbIcaxvgmv3LtA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:dd:ee:41:ff:51:9e:7b:f2:6a:58:dd:e1:e0:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6efa8c0fe62ec54accbde35c60bd8ad4b9014ff7
        Validity
            Not Before: Apr 13 09:01:27 2025 GMT
            Not After : Apr 14 09:01:27 2025 GMT
        Subject: CN=62c942b8c29413f3e3c30d6d8d9aa5eb6589f52f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:21:76:ff:17:14:eb:e4:ab:8c:8c:98:05:44:
                    e6:9c:bb:d4:49:4e:6b:9e:62:30:9a:b1:d4:ca:c8:
                    3f:7a:e8:c8:a6:5d:92:c3:83:d5:41:cc:d8:37:ef:
                    12:83:1b:4c:39:53:16:96:1a:b8:b8:11:60:8e:26:
                    f3:ab:fc:a8:7a:1d:f8:8b:ca:d8:84:d8:8d:55:21:
                    78:e7:9b:ed:bd:ce:e5:44:e1:f9:f6:d2:d9:92:d1:
                    08:ab:e0:0b:39:3a:79:1a:e5:7a:45:27:8e:f9:8a:
                    d9:34:cc:3f:76:a8:eb:21:49:b7:74:d6:f7:b6:f3:
                    f8:bc:76:cc:d8:80:80:9c:47:ae:81:61:3b:de:34:
                    79:19:73:54:26:9a:fd:17:98:be:4e:49:80:f7:08:
                    73:77:13:18:a8:8d:48:0c:18:d4:39:3e:4d:ac:fa:
                    44:f9:9f:0a:7a:23:69:bc:5c:73:eb:73:b0:3e:4d:
                    17:be:a8:fb:e3:5b:a3:df:e6:d7:05:f5:40:84:2c:
                    76:b3:a8:93:cf:6f:64:7e:5c:0b:08:63:86:5c:30:
                    cc:52:0a:86:d2:a1:20:d7:ac:1b:eb:43:ab:e5:4d:
                    b1:2c:02:30:cf:54:da:9a:71:82:4c:ce:f1:4f:ea:
                    7a:97:3c:61:c2:ce:bb:be:90:97:35:d0:00:25:ed:
                    55:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:C9:42:B8:C2:94:13:F3:E3:C3:0D:6D:8D:9A:A5:EB:65:89:F5:2F
            X509v3 Authority Key Identifier:
                keyid:6E:FA:8C:0F:E6:2E:C5:4A:CC:BD:E3:5C:60:BD:8A:D4:B9:01:4F:F7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bvqMD-YuxUrMveNcYL2K1LkBT_c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/6c7b22-b65f-4f37-a40e-a9917cc15e0a/1/bvqMD-YuxUrMveNcYL2K1LkBT_c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/6c7b22-b65f-4f37-a40e-a9917cc15e0a/1/bvqMD-YuxUrMveNcYL2K1LkBT_c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:71:48:c2:67:d1:84:0f:28:60:c6:2d:70:10:ca:76:9e:48:
         b6:58:34:85:d2:8b:dd:49:41:80:6c:3d:4b:79:a7:01:08:e9:
         cb:aa:a7:00:37:7f:3e:c1:8f:19:5e:12:28:be:b8:b8:c0:75:
         77:07:61:2e:2b:98:52:bd:c0:6e:d6:69:28:72:81:c7:63:d1:
         a4:48:8a:4d:82:da:65:47:14:6a:0b:6b:b9:94:2b:23:a2:d5:
         d8:93:37:da:08:df:4f:af:e0:3d:bc:fd:28:aa:0f:e7:f4:73:
         ba:6e:32:cb:78:e7:ff:c3:2a:49:81:40:4f:e4:f1:c9:84:ff:
         00:e3:84:3a:ce:a4:e3:01:e3:b6:ae:68:99:51:9c:e6:d0:3d:
         26:ff:cf:14:ab:c9:3e:be:3c:d9:11:79:fc:1d:b3:c6:72:b5:
         cd:43:87:a7:e1:5b:22:2e:b2:65:5f:9e:e3:b4:aa:26:2f:2a:
         5f:e5:7f:48:5f:16:92:84:7d:ae:4c:1c:10:81:42:22:e7:a6:
         16:60:ac:63:d8:23:62:0a:8b:92:da:89:85:28:58:b5:f5:07:
         b1:74:15:ca:d3:a8:f2:e3:f0:84:fb:e8:5c:0e:0d:32:ca:d0:
         31:47:16:28:fe:cb:38:25:d1:15:43:0f:96:e3:60:3b:a7:a8:
         c4:27:34:c5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYuYd3uQf9Rnnvyaljd4eAnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZlZmE4YzBmZTYyZWM1NGFjY2JkZTM1YzYwYmQ4YWQ0Yjkw
MTRmZjcwHhcNMjUwNDEzMDkwMTI3WhcNMjUwNDE0MDkwMTI3WjAzMTEwLwYDVQQD
Eyg2MmM5NDJiOGMyOTQxM2YzZTNjMzBkNmQ4ZDlhYTVlYjY1ODlmNTJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoiF2/xcU6+SrjIyYBUTmnLvUSU5r
nmIwmrHUysg/eujIpl2Sw4PVQczYN+8SgxtMOVMWlhq4uBFgjibzq/yoeh34i8rY
hNiNVSF455vtvc7lROH59tLZktEIq+ALOTp5GuV6RSeO+YrZNMw/dqjrIUm3dNb3
tvP4vHbM2ICAnEeugWE73jR5GXNUJpr9F5i+TkmA9whzdxMYqI1IDBjUOT5NrPpE
+Z8KeiNpvFxz63OwPk0Xvqj741uj3+bXBfVAhCx2s6iTz29kflwLCGOGXDDMUgqG
0qEg16wb60Or5U2xLAIwz1TamnGCTM7xT+p6lzxhws67vpCXNdAAJe1VnwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGLJQrjClBPz48MNbY2apetlifUvMB8GA1UdIwQY
MBaAFG76jA/mLsVKzL3jXGC9itS5AU/3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYnZxTUQtWXV4VXJNdmVOY1lMMksxTGtCVF9jLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Zi82YzdiMjItYjY1Zi00ZjM3LWE0MGUt
YTk5MTdjYzE1ZTBhLzEvYnZxTUQtWXV4VXJNdmVOY1lMMksxTGtCVF9jLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Zi82YzdiMjItYjY1Zi00ZjM3LWE0MGUtYTk5MTdjYzE1ZTBh
LzEvYnZxTUQtWXV4VXJNdmVOY1lMMksxTGtCVF9jLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUHFIwmfR
hA8oYMYtcBDKdp5Itlg0hdKL3UlBgGw9S3mnAQjpy6qnADd/PsGPGV4SKL64uMB1
dwdhLiuYUr3AbtZpKHKBx2PRpEiKTYLaZUcUagtruZQrI6LV2JM32gjfT6/gPbz9
KKoP5/Rzum4yy3jn/8MqSYFAT+TxyYT/AOOEOs6k4wHjtq5omVGc5tA9Jv/PFKvJ
Pr482RF5/B2zxnK1zUOHp+FbIi6yZV+e47SqJi8qX+V/SF8WkoR9rkwcEIFCIuem
FmCsY9gjYgqLktqJhShYtfUHsXQVytOo8uPwhPvoXA4NMsrQMUcWKP7LOCXRFUMP
luNgO6eoxCc0xQ==
-----END CERTIFICATE-----