Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/485fb4-3027-46cc-bd67-809a4b7ab4b5/1/BfJ0jLQ4YqEEtW-MYgS2IJcGVYw.mft
File:                     BfJ0jLQ4YqEEtW-MYgS2IJcGVYw.mft (raw, json)
Hash identifier:          6+/MlovhhFiwHQLAeG/fsiO+MZahSIH6EDqV5z6lo/M=
Subject key identifier:   3A:98:E7:9B:B6:68:F2:5A:09:ED:9E:00:C1:C6:AD:D7:E5:FF:50:41
Authority key identifier: 05:F2:74:8C:B4:38:62:A1:04:B5:6F:8C:62:04:B6:20:97:06:55:8C
Certificate issuer:       /CN=05f2748cb43862a104b56f8c6204b6209706558c
Certificate serial:       01962F3D7F579D6F4C621A5C5731EB205CCC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BfJ0jLQ4YqEEtW-MYgS2IJcGVYw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/74/485fb4-3027-46cc-bd67-809a4b7ab4b5/1/BfJ0jLQ4YqEEtW-MYgS2IJcGVYw.mft
Manifest number:          0BD1
Signing time:             Sun 13 Apr 2025 13:01:21 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:21 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:21 +0000
Files and hashes:         1: BfJ0jLQ4YqEEtW-MYgS2IJcGVYw.crl (hash: DvKNZWLHH/p/ULUwOxSp+0sHApdEG1EzS8PvnRgwDdQ=)
                          2: EhPdkmEcd5kZgSYia-f_ZpjHYY0.roa (hash: 3TfVzsPjB0vFUIoLoSrG9hGoNnzjzko9raGZf0VmPMQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:7f:57:9d:6f:4c:62:1a:5c:57:31:eb:20:5c:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=05f2748cb43862a104b56f8c6204b6209706558c
        Validity
            Not Before: Apr 13 13:01:21 2025 GMT
            Not After : Apr 14 13:01:21 2025 GMT
        Subject: CN=3a98e79bb668f25a09ed9e00c1c6add7e5ff5041
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:ef:5a:47:8a:cc:2b:ff:35:e1:bc:74:e4:e2:
                    8c:03:bc:88:0e:1a:bc:10:47:25:02:08:fd:51:7b:
                    35:2e:aa:43:90:da:3d:83:16:4b:e2:58:a8:58:8e:
                    13:5c:a3:1d:59:21:1e:f7:8c:34:2c:7b:76:4a:c0:
                    d6:a3:5f:dc:9b:ef:35:aa:3e:2b:59:3e:04:f7:7b:
                    0c:59:df:41:0f:51:fb:40:42:14:b4:ba:72:f0:9e:
                    a9:70:83:c7:a9:4e:c4:a8:40:bb:da:81:b1:bc:31:
                    38:4d:03:5c:83:b5:22:b9:c8:c9:34:c8:12:9a:e3:
                    63:5e:d0:53:27:3d:02:c8:11:6b:fd:d7:30:96:f8:
                    91:f8:ff:bd:ba:de:f3:41:6a:98:fe:d4:97:d0:54:
                    5f:b8:52:b6:83:b2:b0:30:b0:a9:3b:52:3d:d1:a3:
                    48:6e:9e:5e:11:87:1f:bb:5e:14:4d:4b:03:08:7c:
                    df:e1:3c:2b:4a:ca:54:f7:55:3b:a5:8d:50:34:b3:
                    33:8b:04:25:67:a4:ee:64:83:95:ef:2d:eb:82:10:
                    1f:9f:27:dc:eb:85:fb:dd:98:ea:ff:3b:00:60:0f:
                    06:cc:eb:cf:cf:e4:7b:e9:d2:a4:c8:a8:7e:77:27:
                    51:7d:2e:b2:af:97:50:ed:72:b0:90:d3:27:73:54:
                    d7:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:98:E7:9B:B6:68:F2:5A:09:ED:9E:00:C1:C6:AD:D7:E5:FF:50:41
            X509v3 Authority Key Identifier:
                keyid:05:F2:74:8C:B4:38:62:A1:04:B5:6F:8C:62:04:B6:20:97:06:55:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BfJ0jLQ4YqEEtW-MYgS2IJcGVYw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/485fb4-3027-46cc-bd67-809a4b7ab4b5/1/BfJ0jLQ4YqEEtW-MYgS2IJcGVYw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/74/485fb4-3027-46cc-bd67-809a4b7ab4b5/1/BfJ0jLQ4YqEEtW-MYgS2IJcGVYw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:9f:2e:33:be:bf:db:76:7f:60:f9:99:c3:98:67:38:28:83:
         77:f7:27:0e:52:e6:86:2d:4d:49:19:d8:e0:74:9b:61:a8:e3:
         14:95:67:f9:7c:31:e7:d1:a1:9f:77:ac:be:2b:e6:d1:19:bb:
         5c:95:bc:f7:42:2d:75:b0:44:3a:0c:b7:ea:c4:75:dd:ea:13:
         9c:4a:34:0c:10:aa:54:10:d5:7c:be:00:e5:ef:6b:ef:f8:0f:
         04:72:ae:8f:31:c1:45:6a:1e:6c:f7:c2:12:02:06:87:fd:0d:
         c4:17:ec:cc:c8:77:f9:59:bb:65:8a:05:e7:87:b1:a1:e5:7c:
         7e:70:37:8a:b7:a1:ae:41:96:9b:1f:d2:3a:4a:b3:07:c4:ac:
         35:b3:c5:68:79:ea:7a:e2:0e:5b:76:06:e0:a2:19:35:3d:de:
         d3:24:c0:2c:39:27:69:48:32:fe:71:24:5e:a5:64:96:92:2c:
         cc:88:c2:cd:24:0d:aa:bf:9c:76:e4:2b:dc:eb:b2:72:e6:6f:
         f7:e5:f7:33:76:f8:be:68:c6:25:28:c4:fa:39:1f:e2:32:2e:
         0d:e6:12:c5:c8:54:1d:4c:0f:41:6b:cf:b0:94:3b:08:60:08:
         80:aa:bd:12:10:84:a3:89:92:0d:54:52:0a:1e:8a:f3:99:ec:
         b4:6a:b3:97
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvPX9XnW9MYhpcVzHrIFzMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA1ZjI3NDhjYjQzODYyYTEwNGI1NmY4YzYyMDRiNjIwOTcw
NjU1OGMwHhcNMjUwNDEzMTMwMTIxWhcNMjUwNDE0MTMwMTIxWjAzMTEwLwYDVQQD
EygzYTk4ZTc5YmI2NjhmMjVhMDllZDllMDBjMWM2YWRkN2U1ZmY1MDQxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkO9aR4rMK/814bx05OKMA7yIDhq8
EEclAgj9UXs1LqpDkNo9gxZL4lioWI4TXKMdWSEe94w0LHt2SsDWo1/cm+81qj4r
WT4E93sMWd9BD1H7QEIUtLpy8J6pcIPHqU7EqEC72oGxvDE4TQNcg7UiucjJNMgS
muNjXtBTJz0CyBFr/dcwlviR+P+9ut7zQWqY/tSX0FRfuFK2g7KwMLCpO1I90aNI
bp5eEYcfu14UTUsDCHzf4TwrSspU91U7pY1QNLMziwQlZ6TuZIOV7y3rghAfnyfc
64X73Zjq/zsAYA8GzOvPz+R76dKkyKh+dydRfS6yr5dQ7XKwkNMnc1TX4wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDqY55u2aPJaCe2eAMHGrdfl/1BBMB8GA1UdIwQY
MBaAFAXydIy0OGKhBLVvjGIEtiCXBlWMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQmZKMGpMUTRZcUVFdFctTVlnUzJJSmNHVll3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NC80ODVmYjQtMzAyNy00NmNjLWJkNjct
ODA5YTRiN2FiNGI1LzEvQmZKMGpMUTRZcUVFdFctTVlnUzJJSmNHVll3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83NC80ODVmYjQtMzAyNy00NmNjLWJkNjctODA5YTRiN2FiNGI1
LzEvQmZKMGpMUTRZcUVFdFctTVlnUzJJSmNHVll3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQZ8uM76/
23Z/YPmZw5hnOCiDd/cnDlLmhi1NSRnY4HSbYajjFJVn+Xwx59Ghn3esvivm0Rm7
XJW890ItdbBEOgy36sR13eoTnEo0DBCqVBDVfL4A5e9r7/gPBHKujzHBRWoebPfC
EgIGh/0NxBfszMh3+Vm7ZYoF54exoeV8fnA3irehrkGWmx/SOkqzB8SsNbPFaHnq
euIOW3YG4KIZNT3e0yTALDknaUgy/nEkXqVklpIszIjCzSQNqr+cduQr3OuycuZv
9+X3M3b4vmjGJSjE+jkf4jIuDeYSxchUHUwPQWvPsJQ7CGAIgKq9EhCEo4mSDVRS
Ch6K85nstGqzlw==
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:28:56 2025 by rpki-client on console.sobornost.net