Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/1d57dd-5599-45a7-ab03-4d6ce0766eb5/1/bcDQX47p6Vj8ld5l3FmiFBxfHv0.mft
File:                     bcDQX47p6Vj8ld5l3FmiFBxfHv0.mft (raw, json)
Hash identifier:          Ulu+ZqSGYuM5fDhB+cWIDx0FTUgYuVPN6ILqQDC9fLM=
Subject key identifier:   24:E0:6F:F0:14:C3:15:87:3B:FF:27:22:BF:D3:BB:F5:27:EB:F0:89
Authority key identifier: 6D:C0:D0:5F:8E:E9:E9:58:FC:95:DE:65:DC:59:A2:14:1C:5F:1E:FD
Certificate issuer:       /CN=6dc0d05f8ee9e958fc95de65dc59a2141c5f1efd
Certificate serial:       01948DE2963C57D476B248C2CEC771B17D69
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bcDQX47p6Vj8ld5l3FmiFBxfHv0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a7/1d57dd-5599-45a7-ab03-4d6ce0766eb5/1/bcDQX47p6Vj8ld5l3FmiFBxfHv0.mft
Manifest number:          1417
Signing time:             Wed 22 Jan 2025 12:00:24 +0000
Manifest this update:     Wed 22 Jan 2025 12:00:24 +0000
Manifest next update:     Thu 23 Jan 2025 12:00:24 +0000
Files and hashes:         1: 0uN1IrDa2eHWnvtb7KMgQp7nPd4.roa (hash: a//pwChknU221zS1t/N/7lHWhe2+pDu9+gy9m8WxO1Q=)
                          2: Z95Ygi89f8LPJ06butvXFWvZK_U.roa (hash: o6HwkfxYMUCJNVk0nfNy6db7pO3BIH4cTe1hsU4m0jI=)
                          3: bcDQX47p6Vj8ld5l3FmiFBxfHv0.crl (hash: szytSaFxTiJ5IsVr4qf6mHn97V4DLj6KqH1djLaEH0E=)
                          4: tiyXMKkh1c00WsEaw1I-tE1-ImI.roa (hash: A3wieewQW3Kix1vMGs+UTMXhUvBDH87xFIuGyxaYKk4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:8d:e2:96:3c:57:d4:76:b2:48:c2:ce:c7:71:b1:7d:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6dc0d05f8ee9e958fc95de65dc59a2141c5f1efd
        Validity
            Not Before: Jan 22 12:00:24 2025 GMT
            Not After : Jan 23 12:00:24 2025 GMT
        Subject: CN=24e06ff014c315873bff2722bfd3bbf527ebf089
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:8c:ed:34:bf:87:69:62:de:39:82:0b:e2:2e:
                    68:a2:af:24:61:aa:64:1b:49:9e:bc:53:9e:33:46:
                    02:1a:90:9d:74:0c:fb:eb:a4:d4:b2:57:96:eb:db:
                    33:84:4f:39:68:5b:6f:43:32:fe:fb:5b:ac:73:35:
                    78:6a:ff:4d:0d:be:f6:66:1a:f4:e9:a5:eb:1d:fe:
                    11:03:7c:16:68:10:9f:4c:bb:b4:1d:4b:10:a3:a3:
                    f7:89:c8:1e:2b:b6:13:63:a0:e5:64:9e:2e:44:c8:
                    36:1b:02:5c:dc:f8:2c:ba:8d:20:c9:0b:94:6e:59:
                    a1:56:78:d0:02:32:24:97:7d:45:50:65:b0:11:fc:
                    26:81:ef:16:21:d8:50:76:65:d9:ad:0e:71:18:6b:
                    b4:0b:0d:31:a9:93:f0:a7:0b:87:29:70:c4:c0:64:
                    15:70:b6:2f:5c:5e:7b:fe:ec:9f:26:61:f5:b8:8c:
                    b0:28:fb:a7:c3:26:5d:95:d4:1f:bb:55:2d:e2:0c:
                    f9:bd:28:b1:ee:b8:ca:cf:28:de:3b:20:1c:2b:86:
                    43:29:10:6e:5a:e8:5a:1b:d7:5b:f4:ea:d9:e5:a9:
                    47:25:8b:96:12:e2:90:2d:e6:65:22:0c:09:61:f6:
                    02:df:75:47:ab:a7:90:d3:f1:33:9a:b9:48:72:b7:
                    7f:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:E0:6F:F0:14:C3:15:87:3B:FF:27:22:BF:D3:BB:F5:27:EB:F0:89
            X509v3 Authority Key Identifier:
                keyid:6D:C0:D0:5F:8E:E9:E9:58:FC:95:DE:65:DC:59:A2:14:1C:5F:1E:FD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bcDQX47p6Vj8ld5l3FmiFBxfHv0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/1d57dd-5599-45a7-ab03-4d6ce0766eb5/1/bcDQX47p6Vj8ld5l3FmiFBxfHv0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/1d57dd-5599-45a7-ab03-4d6ce0766eb5/1/bcDQX47p6Vj8ld5l3FmiFBxfHv0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:b5:63:1f:3b:f4:9a:de:5b:7b:93:4d:80:46:cc:c8:e6:36:
         34:32:2f:e8:2b:b0:1a:e6:bb:08:69:8d:1d:cf:12:de:e7:82:
         ce:6f:21:63:f2:08:f8:50:b7:df:4b:77:be:6c:12:84:2b:c5:
         65:04:44:7b:6d:bb:42:46:bf:86:b2:87:59:c4:2d:03:ea:14:
         1d:13:62:f7:fa:4b:35:1c:a1:10:ff:cb:84:47:38:ec:ae:4c:
         c1:4e:92:0e:2d:5d:8f:03:ac:77:a9:5a:52:92:dd:d2:05:56:
         8a:55:07:d3:f6:32:d2:bf:77:ec:3f:5b:83:7c:d3:dd:6a:30:
         2f:06:d5:0b:a7:7c:95:ec:4d:58:df:42:74:fa:92:4a:36:b9:
         2e:df:b6:a0:34:35:f2:c9:26:dd:80:ab:06:c8:74:6e:3a:6b:
         a4:45:be:65:dd:b9:e8:9d:a3:39:fa:17:73:48:0c:b5:46:7d:
         0e:ad:98:47:60:4a:cb:f9:7f:61:84:29:92:4c:c5:c8:14:6a:
         16:4c:fc:57:40:93:7e:8b:08:02:ab:00:7d:40:c9:5f:94:93:
         da:2d:08:6b:73:94:23:b5:52:5a:4b:a1:38:d4:1b:7c:62:6a:
         4e:9e:c4:3d:7a:5e:68:72:e4:07:b4:6d:fc:4c:a0:79:72:5f:
         d3:d5:ed:6a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZSN4pY8V9R2skjCzsdxsX1pMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZkYzBkMDVmOGVlOWU5NThmYzk1ZGU2NWRjNTlhMjE0MWM1
ZjFlZmQwHhcNMjUwMTIyMTIwMDI0WhcNMjUwMTIzMTIwMDI0WjAzMTEwLwYDVQQD
EygyNGUwNmZmMDE0YzMxNTg3M2JmZjI3MjJiZmQzYmJmNTI3ZWJmMDg5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsIztNL+HaWLeOYIL4i5ooq8kYapk
G0mevFOeM0YCGpCddAz766TUsleW69szhE85aFtvQzL++1usczV4av9NDb72Zhr0
6aXrHf4RA3wWaBCfTLu0HUsQo6P3icgeK7YTY6DlZJ4uRMg2GwJc3Pgsuo0gyQuU
blmhVnjQAjIkl31FUGWwEfwmge8WIdhQdmXZrQ5xGGu0Cw0xqZPwpwuHKXDEwGQV
cLYvXF57/uyfJmH1uIywKPunwyZdldQfu1Ut4gz5vSix7rjKzyjeOyAcK4ZDKRBu
WuhaG9db9OrZ5alHJYuWEuKQLeZlIgwJYfYC33VHq6eQ0/EzmrlIcrd/9QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCTgb/AUwxWHO/8nIr/Tu/Un6/CJMB8GA1UdIwQY
MBaAFG3A0F+O6elY/JXeZdxZohQcXx79MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYmNEUVg0N3A2Vmo4bGQ1bDNGbWlGQnhmSHYwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy8xZDU3ZGQtNTU5OS00NWE3LWFiMDMt
NGQ2Y2UwNzY2ZWI1LzEvYmNEUVg0N3A2Vmo4bGQ1bDNGbWlGQnhmSHYwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNy8xZDU3ZGQtNTU5OS00NWE3LWFiMDMtNGQ2Y2UwNzY2ZWI1
LzEvYmNEUVg0N3A2Vmo4bGQ1bDNGbWlGQnhmSHYwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARrVjHzv0
mt5be5NNgEbMyOY2NDIv6CuwGua7CGmNHc8S3ueCzm8hY/II+FC330t3vmwShCvF
ZQREe227Qka/hrKHWcQtA+oUHRNi9/pLNRyhEP/LhEc47K5MwU6SDi1djwOsd6la
UpLd0gVWilUH0/Yy0r937D9bg3zT3WowLwbVC6d8lexNWN9CdPqSSja5Lt+2oDQ1
8skm3YCrBsh0bjprpEW+Zd256J2jOfoXc0gMtUZ9Dq2YR2BKy/l/YYQpkkzFyBRq
Fkz8V0CTfosIAqsAfUDJX5ST2i0Ia3OUI7VSWkuhONQbfGJqTp7EPXpeaHLkB7Rt
/EygeXJf09Xtag==
-----END CERTIFICATE-----