Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/324a9d-cf07-4e71-83a1-182512f8bcde/1/BVPEM_bCJQGdnLWkMwAS9Md6Hz4.mft
File:                     BVPEM_bCJQGdnLWkMwAS9Md6Hz4.mft (raw, json)
Hash identifier:          hWVVEbkqICCNCRUKtq2ffmjW9RKfiEkt+GP4jqsXgTs=
Subject key identifier:   10:C0:DE:86:61:14:2E:1D:AA:D6:66:43:20:89:0E:47:8E:43:56:4E
Authority key identifier: 05:53:C4:33:F6:C2:25:01:9D:9C:B5:A4:33:00:12:F4:C7:7A:1F:3E
Certificate issuer:       /CN=0553c433f6c225019d9cb5a4330012f4c77a1f3e
Certificate serial:       01962E98D0AE622B01BC55721FDA3485DCEF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BVPEM_bCJQGdnLWkMwAS9Md6Hz4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/62/324a9d-cf07-4e71-83a1-182512f8bcde/1/BVPEM_bCJQGdnLWkMwAS9Md6Hz4.mft
Manifest number:          14E7
Signing time:             Sun 13 Apr 2025 10:01:28 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:28 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:28 +0000
Files and hashes:         1: BVPEM_bCJQGdnLWkMwAS9Md6Hz4.crl (hash: UBrxNCV2N5413DPpaRzkdb57kr2DHygNivf0kpqgr+8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:d0:ae:62:2b:01:bc:55:72:1f:da:34:85:dc:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0553c433f6c225019d9cb5a4330012f4c77a1f3e
        Validity
            Not Before: Apr 13 10:01:28 2025 GMT
            Not After : Apr 14 10:01:28 2025 GMT
        Subject: CN=10c0de8661142e1daad6664320890e478e43564e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:d8:28:86:1f:f4:b9:9d:0c:09:7b:88:d0:b7:
                    3c:95:75:64:0e:b9:b3:80:65:6b:c5:39:94:3b:50:
                    82:14:62:d8:5a:7b:a3:40:80:ae:0d:2e:03:a4:f6:
                    91:f2:54:2f:65:33:0b:8b:96:8b:1b:36:75:75:e0:
                    61:85:3b:56:69:f8:69:ec:21:15:b0:78:6f:0f:84:
                    af:24:bd:0a:5d:d8:38:f1:44:d5:5a:af:f3:0d:88:
                    33:df:39:95:83:39:a9:5a:1b:57:e2:ee:04:a1:ec:
                    2b:66:83:b5:30:67:f6:bb:2b:d0:63:ca:5e:ba:a0:
                    53:d7:ee:e2:cc:73:be:06:68:c2:d2:c8:16:2d:5a:
                    06:78:a0:af:76:ce:ef:e6:1e:f2:b7:8a:77:55:bd:
                    28:00:d3:eb:bb:a9:02:3b:2b:35:78:0a:f6:d2:62:
                    5a:44:7b:34:1e:83:5b:8d:5b:95:b3:5d:28:5d:d4:
                    a4:a7:88:8d:1c:40:86:20:01:2f:95:0c:fd:38:11:
                    ed:23:63:b3:c3:b7:9d:6d:1b:26:27:74:de:3a:ae:
                    d3:7e:04:41:51:52:82:db:07:50:2f:ba:d3:7d:7f:
                    f9:7f:0e:c5:f5:5c:c1:c8:07:66:23:c6:a0:af:25:
                    9d:fb:24:b0:b1:45:a0:ec:70:6f:f2:19:59:ee:e6:
                    0d:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:C0:DE:86:61:14:2E:1D:AA:D6:66:43:20:89:0E:47:8E:43:56:4E
            X509v3 Authority Key Identifier:
                keyid:05:53:C4:33:F6:C2:25:01:9D:9C:B5:A4:33:00:12:F4:C7:7A:1F:3E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BVPEM_bCJQGdnLWkMwAS9Md6Hz4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/324a9d-cf07-4e71-83a1-182512f8bcde/1/BVPEM_bCJQGdnLWkMwAS9Md6Hz4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/62/324a9d-cf07-4e71-83a1-182512f8bcde/1/BVPEM_bCJQGdnLWkMwAS9Md6Hz4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:9a:97:db:2e:33:a8:6e:10:1d:05:a0:38:2f:84:fd:48:79:
         b6:7f:3d:15:f5:81:87:32:5c:c9:ba:03:98:8e:56:37:c6:f1:
         83:6a:f9:e7:b8:dc:96:e4:74:7b:29:4b:98:3c:51:3c:a2:72:
         27:af:92:a9:5d:0e:99:90:b2:b7:25:97:6b:08:0b:1f:79:97:
         e6:f9:9e:d8:41:1e:de:ed:89:0e:ae:a6:65:26:ff:8b:fc:43:
         9b:a3:e8:02:37:9c:f3:76:8c:c8:22:86:e5:2a:99:71:81:3c:
         18:4c:4e:56:79:c7:c6:e5:3e:51:0c:2f:ff:62:f7:0f:54:a9:
         53:37:fc:33:0d:5e:4f:b4:d9:07:cb:0b:27:15:4a:fa:63:ab:
         fd:e5:79:a1:ac:de:d4:01:70:cf:b6:16:58:53:07:24:cd:d0:
         fe:d3:84:a7:a8:16:c0:00:6f:84:54:5f:bc:c7:64:10:86:89:
         29:08:bf:a1:a7:30:28:99:a0:68:4e:74:c8:37:72:de:ec:d3:
         d2:17:8d:09:7d:b6:6a:61:91:b7:71:7b:45:98:e4:1a:4f:1f:
         ea:67:17:6f:d1:b0:82:7c:51:e2:6d:a8:44:a6:59:b8:de:cf:
         93:93:ea:67:3d:80:5d:64:03:4a:b2:01:0c:8d:7b:f2:e2:e3:
         b7:5a:e3:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----