Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/ef6461-a0ef-4c19-9e1d-f223dacb6017/1/Bc5N0ogBsoO_hRtcANAOuLUUpVo.mft
File:                     Bc5N0ogBsoO_hRtcANAOuLUUpVo.mft (raw, json)
Hash identifier:          nmURLs1Pq10lXE8ssfTDPhsb4HpysrBeQnWgJv9tnuo=
Subject key identifier:   86:CA:A3:BB:05:49:B0:4E:3D:DF:52:BB:EE:34:24:45:D0:67:CE:E8
Authority key identifier: 05:CE:4D:D2:88:01:B2:83:BF:85:1B:5C:00:D0:0E:B8:B5:14:A5:5A
Certificate issuer:       /CN=05ce4dd28801b283bf851b5c00d00eb8b514a55a
Certificate serial:       01962E9905EC92F6DC3A09071788F9249DC9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Bc5N0ogBsoO_hRtcANAOuLUUpVo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5a/ef6461-a0ef-4c19-9e1d-f223dacb6017/1/Bc5N0ogBsoO_hRtcANAOuLUUpVo.mft
Manifest number:          01DC
Signing time:             Sun 13 Apr 2025 10:01:42 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:42 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:42 +0000
Files and hashes:         1: Bc5N0ogBsoO_hRtcANAOuLUUpVo.crl (hash: 6Mzx0Ai6hJR89AbPUK5nUoMcS2wNiOxiAbkDJZNyCOc=)
                          2: x9qgtwMUU_-nMY5SDajHYEXNiCY.roa (hash: 6NC1NBKuG21Mjttmx4hIVvV+xQmoan4Z9cfB+7hjW1E=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:05:ec:92:f6:dc:3a:09:07:17:88:f9:24:9d:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=05ce4dd28801b283bf851b5c00d00eb8b514a55a
        Validity
            Not Before: Apr 13 10:01:42 2025 GMT
            Not After : Apr 14 10:01:42 2025 GMT
        Subject: CN=86caa3bb0549b04e3ddf52bbee342445d067cee8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:a7:40:71:3c:a8:54:25:c9:74:5f:e1:81:c5:
                    b3:da:ca:e2:25:ef:2f:1b:7e:cf:54:64:1e:0e:93:
                    3e:c2:f2:dd:06:0d:36:bf:13:13:f2:ef:aa:92:dc:
                    ff:78:cd:49:c0:9b:d4:03:80:00:41:1d:1a:0c:65:
                    fa:46:9a:c6:f0:47:d7:eb:00:04:ff:4d:34:c9:09:
                    2b:50:31:66:d6:4c:65:8c:aa:38:c0:94:92:e1:cb:
                    fb:d4:34:6c:6e:3b:d1:a1:4d:44:81:90:94:ca:c4:
                    7a:c1:6d:39:6b:83:4b:3a:66:c9:4c:d6:7e:c8:c4:
                    ed:1d:ac:af:44:7f:1a:8f:10:d5:87:d5:65:c5:aa:
                    34:f8:6a:94:ae:53:41:f1:2c:d5:72:a7:a7:58:fc:
                    13:e0:09:70:10:2f:d3:35:f1:e9:7f:ad:06:bf:b1:
                    76:74:c6:c1:5f:a2:76:4d:56:c1:37:e5:17:dc:93:
                    0e:60:ee:35:57:9c:57:65:6f:55:1f:92:37:78:32:
                    80:af:ff:86:a1:7b:78:fb:bf:a5:60:a0:71:98:4c:
                    b6:42:4a:d3:af:32:9c:e1:c0:6c:1e:30:5d:e9:e5:
                    4d:ea:50:4f:3e:3d:da:e8:ad:64:55:14:0d:62:6b:
                    49:81:da:e4:6e:c7:93:34:26:a6:39:04:60:79:bc:
                    54:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:CA:A3:BB:05:49:B0:4E:3D:DF:52:BB:EE:34:24:45:D0:67:CE:E8
            X509v3 Authority Key Identifier:
                keyid:05:CE:4D:D2:88:01:B2:83:BF:85:1B:5C:00:D0:0E:B8:B5:14:A5:5A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Bc5N0ogBsoO_hRtcANAOuLUUpVo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/ef6461-a0ef-4c19-9e1d-f223dacb6017/1/Bc5N0ogBsoO_hRtcANAOuLUUpVo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/ef6461-a0ef-4c19-9e1d-f223dacb6017/1/Bc5N0ogBsoO_hRtcANAOuLUUpVo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:67:ce:4a:8b:4c:5e:49:44:2f:28:8c:7d:f6:1e:6a:af:f4:
         42:0d:e6:72:37:80:4d:bd:22:1a:fb:33:06:b2:52:19:dd:6e:
         4c:ec:42:7d:5f:68:e0:ea:55:8f:15:6b:cb:ae:55:6f:9c:43:
         1f:a0:91:5c:0e:06:70:f2:2a:35:9c:64:47:7e:86:c0:e1:ba:
         d5:98:ca:ec:db:f2:fb:33:58:16:2f:35:ee:87:35:f6:32:f2:
         8a:24:79:a6:1b:af:a2:be:79:d0:11:3b:0e:e6:08:6a:8e:e6:
         14:46:f1:46:fb:3f:8e:f4:87:b4:c4:4f:32:40:68:24:eb:33:
         dc:a4:ed:e8:f4:63:7f:a7:08:5e:61:2a:4b:e3:70:ff:98:e4:
         7d:a0:c2:63:ac:ca:2a:30:b0:93:3b:ab:d0:5c:cd:30:9b:ca:
         96:1f:66:60:0d:97:6f:c2:9b:a6:e5:58:6c:f5:fb:8a:b9:2b:
         37:7f:58:51:af:5e:6f:f6:de:08:cd:39:92:ae:4e:c5:e5:27:
         6f:91:91:0f:a2:d7:2e:1a:fa:fc:5f:44:4c:88:b3:74:3d:af:
         69:5c:53:a0:ba:21:38:30:72:6c:89:49:2c:06:29:17:83:c4:
         60:6c:f7:e3:8b:29:3b:ef:9f:07:18:b4:e4:e4:6f:94:0c:8a:
         2b:df:45:ab
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYumQXskvbcOgkHF4j5JJ3JMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA1Y2U0ZGQyODgwMWIyODNiZjg1MWI1YzAwZDAwZWI4YjUx
NGE1NWEwHhcNMjUwNDEzMTAwMTQyWhcNMjUwNDE0MTAwMTQyWjAzMTEwLwYDVQQD
Eyg4NmNhYTNiYjA1NDliMDRlM2RkZjUyYmJlZTM0MjQ0NWQwNjdjZWU4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlKdAcTyoVCXJdF/hgcWz2sriJe8v
G37PVGQeDpM+wvLdBg02vxMT8u+qktz/eM1JwJvUA4AAQR0aDGX6RprG8EfX6wAE
/000yQkrUDFm1kxljKo4wJSS4cv71DRsbjvRoU1EgZCUysR6wW05a4NLOmbJTNZ+
yMTtHayvRH8ajxDVh9Vlxao0+GqUrlNB8SzVcqenWPwT4AlwEC/TNfHpf60Gv7F2
dMbBX6J2TVbBN+UX3JMOYO41V5xXZW9VH5I3eDKAr/+GoXt4+7+lYKBxmEy2QkrT
rzKc4cBsHjBd6eVN6lBPPj3a6K1kVRQNYmtJgdrkbseTNCamOQRgebxUWQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIbKo7sFSbBOPd9Su+40JEXQZ87oMB8GA1UdIwQY
MBaAFAXOTdKIAbKDv4UbXADQDri1FKVaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQmM1TjBvZ0Jzb09faFJ0Y0FOQU91TFVVcFZvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS9lZjY0NjEtYTBlZi00YzE5LTllMWQt
ZjIyM2RhY2I2MDE3LzEvQmM1TjBvZ0Jzb09faFJ0Y0FOQU91TFVVcFZvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81YS9lZjY0NjEtYTBlZi00YzE5LTllMWQtZjIyM2RhY2I2MDE3
LzEvQmM1TjBvZ0Jzb09faFJ0Y0FOQU91TFVVcFZvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATGfOSotM
XklELyiMffYeaq/0Qg3mcjeATb0iGvszBrJSGd1uTOxCfV9o4OpVjxVry65Vb5xD
H6CRXA4GcPIqNZxkR36GwOG61ZjK7Nvy+zNYFi817oc19jLyiiR5phuvor550BE7
DuYIao7mFEbxRvs/jvSHtMRPMkBoJOsz3KTt6PRjf6cIXmEqS+Nw/5jkfaDCY6zK
KjCwkzur0FzNMJvKlh9mYA2Xb8KbpuVYbPX7irkrN39YUa9eb/beCM05kq5OxeUn
b5GRD6LXLhr6/F9ETIizdD2vaVxToLohODBybIlJLAYpF4PEYGz344spO++fBxi0
5ORvlAyKK99Fqw==
-----END CERTIFICATE-----