Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/12e679-856c-48ea-a062-959ebb905b3a/1/bBKrcGPIXf4i-nqZ2cb85eYWEDE.mft
File:                     bBKrcGPIXf4i-nqZ2cb85eYWEDE.mft (raw, json)
Hash identifier:          kYeUgb4zOzb2mqC1b5WuWpXxs+NafsSegBZgWKIfoFo=
Subject key identifier:   47:81:63:3F:F7:DA:6E:0C:94:AE:8C:8E:3A:51:18:2A:0F:6D:4F:B0
Authority key identifier: 6C:12:AB:70:63:C8:5D:FE:22:FA:7A:99:D9:C6:FC:E5:E6:16:10:31
Certificate issuer:       /CN=6c12ab7063c85dfe22fa7a99d9c6fce5e6161031
Certificate serial:       01962E61AC89B0A908DF914C659AD4A79F7C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bBKrcGPIXf4i-nqZ2cb85eYWEDE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9e/12e679-856c-48ea-a062-959ebb905b3a/1/bBKrcGPIXf4i-nqZ2cb85eYWEDE.mft
Manifest number:          14EA
Signing time:             Sun 13 Apr 2025 09:01:15 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:15 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:15 +0000
Files and hashes:         1: 4ZrViR6MQ2LLwx-EpgYcmNOkhLU.roa (hash: CcPs0/7vgqCna/xx+mVGMJUsG3faAZo8Ob5SJoRyZWw=)
                          2: bBKrcGPIXf4i-nqZ2cb85eYWEDE.crl (hash: WTpTjEp6yN4nICciPrE9qlBnqor1F5YNEI3FLyoLH4A=)
                          3: rUMFzM_6Km-2DqJ2YTtdSrWtUek.roa (hash: abXfjUUyhIhLutP9c/7/Y4Znd/9ps5Twdqn7uTEich0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:ac:89:b0:a9:08:df:91:4c:65:9a:d4:a7:9f:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6c12ab7063c85dfe22fa7a99d9c6fce5e6161031
        Validity
            Not Before: Apr 13 09:01:15 2025 GMT
            Not After : Apr 14 09:01:15 2025 GMT
        Subject: CN=4781633ff7da6e0c94ae8c8e3a51182a0f6d4fb0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:71:4d:92:db:8f:86:70:a1:10:b1:d9:2b:cd:
                    f5:10:8c:4c:02:f7:c8:28:00:a3:37:b2:d0:48:9d:
                    0f:7a:11:dd:b3:9f:1a:8e:9b:da:d2:89:2e:3c:43:
                    aa:7e:9f:45:7c:2e:65:c8:8e:cf:9a:60:47:20:4c:
                    12:f9:65:be:b2:68:fc:51:8c:67:4b:1b:45:82:fa:
                    f5:84:11:3e:e7:33:37:d4:b6:4c:39:98:be:a3:70:
                    98:1e:91:14:f5:3e:63:f5:2a:20:b8:c1:ff:db:fa:
                    db:9f:71:67:99:04:18:40:3a:e1:a2:f1:09:8f:da:
                    12:d3:6a:e0:04:73:7a:d3:c6:73:d1:58:b6:80:8d:
                    cd:2d:80:d9:aa:93:55:a1:7f:25:98:8b:9d:75:bb:
                    44:fb:5d:21:98:50:93:00:47:c4:47:87:90:49:33:
                    55:ec:fe:e3:27:42:34:1a:46:97:64:74:6e:f1:3b:
                    70:7a:40:c1:6f:a8:23:91:65:0e:e5:78:10:8c:52:
                    37:14:84:2e:9a:58:05:82:a6:5d:88:96:b5:36:ad:
                    45:e6:6e:7c:43:18:dd:7f:1d:2f:5e:5d:ae:8f:47:
                    db:12:e6:55:01:bc:a7:83:e9:39:4c:9f:de:9d:38:
                    73:1e:b5:08:d7:1a:83:99:f8:f8:c2:02:ef:f6:27:
                    28:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:81:63:3F:F7:DA:6E:0C:94:AE:8C:8E:3A:51:18:2A:0F:6D:4F:B0
            X509v3 Authority Key Identifier:
                keyid:6C:12:AB:70:63:C8:5D:FE:22:FA:7A:99:D9:C6:FC:E5:E6:16:10:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bBKrcGPIXf4i-nqZ2cb85eYWEDE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/12e679-856c-48ea-a062-959ebb905b3a/1/bBKrcGPIXf4i-nqZ2cb85eYWEDE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/12e679-856c-48ea-a062-959ebb905b3a/1/bBKrcGPIXf4i-nqZ2cb85eYWEDE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:76:8b:df:70:8e:1a:20:8e:ea:12:4d:ee:05:b4:c8:e0:25:
         a9:1a:db:5f:d7:27:fc:42:54:af:92:46:1f:b0:5e:51:51:91:
         78:84:59:2e:19:9c:62:fe:93:94:00:b3:c1:b5:50:6d:f6:55:
         e3:41:9b:fc:44:e6:6a:04:9f:70:36:ba:4c:10:0b:97:37:c9:
         03:68:03:94:6c:f9:67:60:e5:f7:0d:ff:36:f1:b5:71:f8:3f:
         d2:20:a0:ea:91:70:b6:b9:43:2d:7a:23:ea:05:d7:f4:7b:b7:
         39:60:28:21:d2:51:17:83:d1:cd:93:e8:1a:f8:89:e6:42:79:
         2c:bc:71:9e:fe:97:e1:f3:a3:d9:5f:e2:f9:04:8d:b1:b3:ab:
         a0:39:9d:d9:2e:bb:a0:c9:04:32:c2:10:51:a2:d5:56:7a:e9:
         73:b9:f8:a8:f8:1d:f7:df:31:bd:68:78:fe:cd:fb:a4:45:c5:
         a6:5c:7f:e6:00:ab:c5:b9:39:82:61:87:8c:cb:31:46:91:ad:
         c4:10:33:03:e4:f6:97:f5:48:d3:36:d4:68:7f:60:b0:ee:0a:
         4d:da:7b:d8:62:3c:3f:9d:47:e9:a4:6e:5b:8d:54:00:59:f3:
         07:4b:01:a1:92:8b:28:9f:d2:9d:2a:82:64:15:22:f0:46:48:
         e8:67:8a:09
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYuYayJsKkI35FMZZrUp598MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZjMTJhYjcwNjNjODVkZmUyMmZhN2E5OWQ5YzZmY2U1ZTYx
NjEwMzEwHhcNMjUwNDEzMDkwMTE1WhcNMjUwNDE0MDkwMTE1WjAzMTEwLwYDVQQD
Eyg0NzgxNjMzZmY3ZGE2ZTBjOTRhZThjOGUzYTUxMTgyYTBmNmQ0ZmIwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqHFNktuPhnChELHZK831EIxMAvfI
KACjN7LQSJ0PehHds58ajpva0okuPEOqfp9FfC5lyI7PmmBHIEwS+WW+smj8UYxn
SxtFgvr1hBE+5zM31LZMOZi+o3CYHpEU9T5j9SoguMH/2/rbn3FnmQQYQDrhovEJ
j9oS02rgBHN608Zz0Vi2gI3NLYDZqpNVoX8lmIuddbtE+10hmFCTAEfER4eQSTNV
7P7jJ0I0GkaXZHRu8TtwekDBb6gjkWUO5XgQjFI3FIQumlgFgqZdiJa1Nq1F5m58
Qxjdfx0vXl2uj0fbEuZVAbyng+k5TJ/enThzHrUI1xqDmfj4wgLv9icoNQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEeBYz/32m4MlK6MjjpRGCoPbU+wMB8GA1UdIwQY
MBaAFGwSq3BjyF3+Ivp6mdnG/OXmFhAxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYkJLcmNHUElYZjRpLW5xWjJjYjg1ZVlXRURFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZS8xMmU2NzktODU2Yy00OGVhLWEwNjIt
OTU5ZWJiOTA1YjNhLzEvYkJLcmNHUElYZjRpLW5xWjJjYjg1ZVlXRURFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85ZS8xMmU2NzktODU2Yy00OGVhLWEwNjItOTU5ZWJiOTA1YjNh
LzEvYkJLcmNHUElYZjRpLW5xWjJjYjg1ZVlXRURFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADnaL33CO
GiCO6hJN7gW0yOAlqRrbX9cn/EJUr5JGH7BeUVGReIRZLhmcYv6TlACzwbVQbfZV
40Gb/ETmagSfcDa6TBALlzfJA2gDlGz5Z2Dl9w3/NvG1cfg/0iCg6pFwtrlDLXoj
6gXX9Hu3OWAoIdJRF4PRzZPoGviJ5kJ5LLxxnv6X4fOj2V/i+QSNsbOroDmd2S67
oMkEMsIQUaLVVnrpc7n4qPgd998xvWh4/s37pEXFplx/5gCrxbk5gmGHjMsxRpGt
xBAzA+T2l/VI0zbUaH9gsO4KTdp72GI8P51H6aRuW41UAFnzB0sBoZKLKJ/SnSqC
ZBUi8EZI6GeKCQ==
-----END CERTIFICATE-----