Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/ae1f3a-65a8-4794-91c8-a5879b69f126/1/BQNlyK9IgTpbq5ft41VTnxFHTcc.mft
File:                     BQNlyK9IgTpbq5ft41VTnxFHTcc.mft (raw, json)
Hash identifier:          vcBv6wccSAw3ozRBWPt6rhzP6w01Z5g6Lc+Y0+T6EpI=
Subject key identifier:   0C:17:BB:C0:2B:7E:36:F7:27:A9:A7:A3:F5:CE:A6:41:1E:C4:FD:EC
Authority key identifier: 05:03:65:C8:AF:48:81:3A:5B:AB:97:ED:E3:55:53:9F:11:47:4D:C7
Certificate issuer:       /CN=050365c8af48813a5bab97ede355539f11474dc7
Certificate serial:       01962FAB3051B9519838159A4C377EB4710E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BQNlyK9IgTpbq5ft41VTnxFHTcc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/62/ae1f3a-65a8-4794-91c8-a5879b69f126/1/BQNlyK9IgTpbq5ft41VTnxFHTcc.mft
Manifest number:          14E9
Signing time:             Sun 13 Apr 2025 15:01:10 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:10 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:10 +0000
Files and hashes:         1: BQNlyK9IgTpbq5ft41VTnxFHTcc.crl (hash: CdH+j73NAoaHCjFWSW4xsC8ZFUllck3493lKdQ9Jip8=)
                          2: oxM6mR0m9rOLSyak3ORyqAg0XsI.roa (hash: mea+PwbnpZFhyRm88cF7gUeBjEiQVDq413u5vrlmXG0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:30:51:b9:51:98:38:15:9a:4c:37:7e:b4:71:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=050365c8af48813a5bab97ede355539f11474dc7
        Validity
            Not Before: Apr 13 15:01:10 2025 GMT
            Not After : Apr 14 15:01:10 2025 GMT
        Subject: CN=0c17bbc02b7e36f727a9a7a3f5cea6411ec4fdec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:47:38:d3:25:29:d3:8f:a6:58:33:49:22:b3:
                    46:e7:a4:a8:a4:30:9e:03:5f:12:51:4c:2c:6f:c6:
                    0f:e2:74:eb:7a:1d:d2:85:63:8c:b9:c3:37:97:cf:
                    4c:0a:f5:38:04:fd:11:81:fe:e6:08:c4:85:51:f4:
                    5b:0d:a6:f1:6a:a0:fe:47:26:54:a0:6e:a3:21:cc:
                    6d:e4:67:8f:e4:c0:b5:a5:12:41:51:f3:fd:3d:70:
                    92:d2:ab:d7:70:89:ef:00:5d:83:c8:55:1e:12:7a:
                    68:a9:d0:80:e5:87:c4:45:05:6d:a8:0c:33:57:76:
                    df:e0:e5:04:b7:d9:9b:09:44:61:ab:f2:74:2d:06:
                    2a:7c:b9:42:db:11:58:4a:4c:63:63:40:db:22:9c:
                    41:09:92:41:6e:43:70:bc:b8:82:45:c0:9a:68:5d:
                    55:df:d1:96:9a:cb:6f:d7:cb:89:45:49:52:ab:8e:
                    18:ba:18:db:6d:8e:61:d1:dd:7e:0b:c2:05:50:8d:
                    c8:09:4d:d1:a8:3e:43:51:6c:91:eb:1b:0d:32:c0:
                    f9:03:4c:19:1f:ff:60:f6:cc:0d:06:eb:8e:64:2a:
                    36:e3:67:5d:8b:1e:c4:08:3c:3a:2e:ac:af:e8:dc:
                    39:5e:f8:a4:3f:5a:40:b7:bd:71:6a:f4:02:28:1a:
                    7e:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:17:BB:C0:2B:7E:36:F7:27:A9:A7:A3:F5:CE:A6:41:1E:C4:FD:EC
            X509v3 Authority Key Identifier:
                keyid:05:03:65:C8:AF:48:81:3A:5B:AB:97:ED:E3:55:53:9F:11:47:4D:C7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BQNlyK9IgTpbq5ft41VTnxFHTcc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/ae1f3a-65a8-4794-91c8-a5879b69f126/1/BQNlyK9IgTpbq5ft41VTnxFHTcc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/62/ae1f3a-65a8-4794-91c8-a5879b69f126/1/BQNlyK9IgTpbq5ft41VTnxFHTcc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:1c:e5:0c:92:ce:b3:1e:67:a5:b8:21:3c:52:ec:38:d8:03:
         b8:2d:86:a1:c4:55:a1:d4:c6:3a:81:c5:a3:6a:b4:cc:b0:50:
         a5:ec:70:1f:e6:aa:d1:ed:d3:64:8d:a6:21:e0:e1:00:64:78:
         b7:30:83:d1:5b:5b:67:d4:f9:32:aa:90:b1:e9:93:02:41:18:
         db:af:54:b8:93:f6:18:cf:6b:fa:d5:c6:4d:50:e4:b2:b9:c1:
         4c:f2:fe:1e:93:47:18:93:da:1c:82:7c:99:3c:e9:9d:82:4a:
         62:54:dd:2e:aa:dd:47:63:22:a1:7b:58:fd:52:64:c8:43:92:
         02:2f:fd:08:e6:8e:4a:15:0e:1d:fa:7d:af:e4:14:24:28:16:
         54:6e:51:c8:40:39:c9:e4:dd:42:1e:b3:f5:62:7b:1e:6d:53:
         0b:d8:89:47:b2:57:ab:f6:8b:df:c4:de:87:bb:0e:26:84:43:
         0d:41:af:3e:cb:b2:f4:3d:c7:00:e2:f9:2f:22:5e:95:66:eb:
         e1:4d:83:e3:1f:05:d9:dc:57:8a:fe:fe:bf:6e:f5:fd:ec:9b:
         65:f9:22:4c:5e:32:b0:96:a7:97:a7:2d:c0:47:7b:f3:75:fb:
         b4:7c:bf:6c:d5:1b:b4:75:3b:5d:12:af:fb:3b:b0:7a:7e:93:
         af:da:aa:f2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvqzBRuVGYOBWaTDd+tHEOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA1MDM2NWM4YWY0ODgxM2E1YmFiOTdlZGUzNTU1MzlmMTE0
NzRkYzcwHhcNMjUwNDEzMTUwMTEwWhcNMjUwNDE0MTUwMTEwWjAzMTEwLwYDVQQD
EygwYzE3YmJjMDJiN2UzNmY3MjdhOWE3YTNmNWNlYTY0MTFlYzRmZGVjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwUc40yUp04+mWDNJIrNG56SopDCe
A18SUUwsb8YP4nTreh3ShWOMucM3l89MCvU4BP0Rgf7mCMSFUfRbDabxaqD+RyZU
oG6jIcxt5GeP5MC1pRJBUfP9PXCS0qvXcInvAF2DyFUeEnpoqdCA5YfERQVtqAwz
V3bf4OUEt9mbCURhq/J0LQYqfLlC2xFYSkxjY0DbIpxBCZJBbkNwvLiCRcCaaF1V
39GWmstv18uJRUlSq44YuhjbbY5h0d1+C8IFUI3ICU3RqD5DUWyR6xsNMsD5A0wZ
H/9g9swNBuuOZCo242ddix7ECDw6Lqyv6Nw5XvikP1pAt71xavQCKBp+9wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAwXu8Arfjb3J6mno/XOpkEexP3sMB8GA1UdIwQY
MBaAFAUDZcivSIE6W6uX7eNVU58RR03HMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQlFObHlLOUlnVHBicTVmdDQxVlRueEZIVGNjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi9hZTFmM2EtNjVhOC00Nzk0LTkxYzgt
YTU4NzliNjlmMTI2LzEvQlFObHlLOUlnVHBicTVmdDQxVlRueEZIVGNjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Mi9hZTFmM2EtNjVhOC00Nzk0LTkxYzgtYTU4NzliNjlmMTI2
LzEvQlFObHlLOUlnVHBicTVmdDQxVlRueEZIVGNjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAExzlDJLO
sx5npbghPFLsONgDuC2GocRVodTGOoHFo2q0zLBQpexwH+aq0e3TZI2mIeDhAGR4
tzCD0VtbZ9T5MqqQsemTAkEY269UuJP2GM9r+tXGTVDksrnBTPL+HpNHGJPaHIJ8
mTzpnYJKYlTdLqrdR2MioXtY/VJkyEOSAi/9COaOShUOHfp9r+QUJCgWVG5RyEA5
yeTdQh6z9WJ7Hm1TC9iJR7JXq/aL38Teh7sOJoRDDUGvPsuy9D3HAOL5LyJelWbr
4U2D4x8F2dxXiv7+v271/eybZfkiTF4ysJanl6ctwEd783X7tHy/bNUbtHU7XRKv
+zuwen6Tr9qq8g==
-----END CERTIFICATE-----