Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.mft
File:                     bocQSk20xGNxp_i2pEH8MOzf4g8.mft (raw, json)
Hash identifier:          5E68Dip03iJ1XqatjCouzQ0RzdAF5GECY1av7buNBeM=
Subject key identifier:   36:7A:46:D9:0A:E1:C0:7A:A4:E5:E3:64:14:2D:99:64:E7:A1:F6:E2
Authority key identifier: 6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
Certificate issuer:       /CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Certificate serial:       0195E121FD4D8B12255EDFA4B14EF564D3A2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.mft
Manifest number:          04A3
Signing time:             Sat 29 Mar 2025 09:00:55 +0000
Manifest this update:     Sat 29 Mar 2025 09:00:55 +0000
Manifest next update:     Sun 30 Mar 2025 09:00:55 +0000
Files and hashes:         1: 1lQ8gh9l3m3k0sNJU2OGXGi_s1M.roa (hash: cGP1padkbbQVYWoE/e/vrGnkmIgEvHGkoKHwvNi2i1Y=)
                          2: 3I5gldML-uQbyv9CkIBz-mgvWWk.roa (hash: eQaCI89QTy4mD37K4tNIxvLzbLgt03MOpzY9mO0sl3s=)
                          3: 52FAWMjukwSClkWfxKSDo4XBBoo.roa (hash: ypKj+SswxrhtvLkdDH0jGSwTM/p8FbWFW1TsPUqiZDY=)
                          4: 53-6v4txkTBlrr4mQ9BEOoOITGQ.roa (hash: /V7dlEX/iodJqJllmpCrS8JubIsPMm3gyCbsrYPAXNQ=)
                          5: DNyiCmbllI62P4e2fFvrufnXXhw.roa (hash: I/eD5S5k79O0q4R1YqX+E0ipH1fvYmuFNyj8c1ibSPY=)
                          6: EQ2IvZUqnVn0lMaxD-2uyfZIE68.roa (hash: Qthm1o1lZVCkgyrZ5XiBtPb86SGLq9HwTrkWvzHtL+4=)
                          7: LztToIfHj5MPHP69zf_0q_SimrU.roa (hash: 0JPoHmLHmn9stIi7tg5FnXzBytZDbUKqcPQHQVNsAoU=)
                          8: RAn-0aZAhXN_H9DvYD6bYNgp32s.roa (hash: ieir54EQY2hQHdftSkxb+5GR7REd+9+NA0K3WqSPUQ0=)
                          9: SF7imhaazuPfEpJBywM_tm8X9mE.roa (hash: 8+reCe3POF1ExZIThV5iCt+eheoTKlzITInNmkvijl4=)
                          10: XYYDIXiK6DLY6uUmH1bLSCpurpI.roa (hash: 2nb9BodFkoof3d5aJD3mP2QX8Y82jT6IwRaoI0HoLFA=)
                          11: ZbHp2Q0SQCE3MMYBAQ4MOMTgPEM.roa (hash: TQP4ZxqijWk9XzygHeIy2mb/KtPqcpn8/1/3cIo31Ss=)
                          12: _TpWPAgVzGQdAu8cjR2Dc6e9ZtA.roa (hash: rOZR+3np3EA3AflU2r578HJgACioxVlkiKkqQOW791k=)
                          13: bocQSk20xGNxp_i2pEH8MOzf4g8.crl (hash: DDcaJ2hjXZsIw1cAkM1JZMXpTuhngU2/pj5FeL+hwwc=)
                          14: f017PzkxNN7Z5ETh0qCvv8t0lNo.roa (hash: RBBJWOHQn7zT4E3wUOt8OhgmQHDecS8xI1YeXa1Jnyc=)
                          15: hu0DNVNBS-52vImMrFag5xmRonA.roa (hash: S+JBIuGEFQfqRFNizmiIiEzsKVPxb9FoL2Uoi+rMdKU=)
                          16: iudiefHZx5HUwQKoQYER4YYlDc8.roa (hash: YWytDM9g9Ys/opbrq54nQL0xNw/mcPS0NgXjBt2p14I=)
                          17: kVb7Jw3eFm0rH_2hI_sFxpUe654.roa (hash: DhV0642v9bLRlCfdgD3Msa05srzFpUmzNDU1xI+EO2k=)
                          18: pTFWP5ts7dNfHyhFc9nDm9T7Shk.roa (hash: KrXatMakUf7FEk5x5p0WIjNpbDIla1OfAVog24ZN1j0=)
                          19: qEE8SDYU5JIB-O7Trc1We8cjPEs.roa (hash: XHzHtADLaVp1ioqOh7kQak2u8fbeDr9tEqrlOIWlYXY=)
                          20: rGOYtq_Thi1bHxPEPh_-1162hwE.roa (hash: sMSgNyPNu+dXEEK26rDJLJvw6klu2nxdHF72XJN9xsY=)
                          21: sYcIUF9JZUL8nalnP6guQpiQpFo.roa (hash: O15muEWAoO/BLk3AT82wezr5i9pcEWqA91vts9pFe9Q=)
                          22: s_SOeCU2ZSlKaABMzyI1A92STj8.roa (hash: 6Ea34PFLl9Lnz9BrVAkfmVoBNWpp0IKT4SIgHazKH4s=)
                          23: sgCCvkuDH7pLONYDGbcyveP1Fns.roa (hash: 6pE2iCGii/sYhcErT76C0r5xU6ShZPkO5zG1gGCULAs=)
                          24: sssWP3djtd6l0GWL_I-wmGeoSjI.roa (hash: 6zyugApApVeFvdjdkS2bSXr4jHljDOC0iTp4kTrBxZ0=)
                          25: vCsrdLZ3sjv7jX0AsouEukps7zI.roa (hash: 0mduqHJYJw2QdsAngOAfbzJ7V4cIEG2VwhLeCMRkpDI=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:e1:21:fd:4d:8b:12:25:5e:df:a4:b1:4e:f5:64:d3:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
        Validity
            Not Before: Mar 29 09:00:55 2025 GMT
            Not After : Mar 30 09:00:55 2025 GMT
        Subject: CN=367a46d90ae1c07aa4e5e364142d9964e7a1f6e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:e3:a5:7f:93:2e:85:d6:d3:43:ef:9e:a5:ed:
                    6e:3c:c1:af:d2:00:1c:71:92:2c:0f:cd:1e:dc:28:
                    8b:70:50:31:4c:15:bb:ff:88:3f:5a:ef:61:9c:20:
                    07:75:24:02:49:ee:62:fd:5e:7c:7c:89:82:3c:dc:
                    2e:b5:6d:46:1e:b1:b5:12:6e:d2:18:86:e7:d1:b5:
                    b0:ba:64:ef:16:90:c0:b1:4c:3c:b9:54:fb:62:39:
                    5c:41:6b:1c:1b:c0:fd:3a:7f:75:5e:e5:df:5a:e3:
                    19:fc:6b:0d:b0:ba:a4:a0:4c:fd:15:19:07:fe:4e:
                    a8:4e:ae:7e:f0:8c:d5:bc:da:18:f6:12:12:32:90:
                    ac:76:be:1d:ed:d2:5c:24:b8:d1:0f:d2:bb:9c:c5:
                    d5:ba:de:26:bc:be:53:a1:74:78:44:80:39:91:4f:
                    2f:08:48:51:9e:e3:cb:7d:fd:31:29:58:30:eb:c1:
                    f2:9e:6a:df:6d:af:c4:ec:0d:d6:90:ad:fd:05:52:
                    2c:60:17:9e:22:1c:b7:ba:47:54:3e:b1:ec:04:cd:
                    87:f3:4b:d9:69:00:c2:69:7d:fe:7a:6a:d3:73:c7:
                    09:f9:a9:80:5f:9a:e7:37:48:f4:00:eb:f3:02:39:
                    69:8d:9f:ad:db:e9:17:c1:3c:e5:0d:35:72:ab:be:
                    57:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:7A:46:D9:0A:E1:C0:7A:A4:E5:E3:64:14:2D:99:64:E7:A1:F6:E2
            X509v3 Authority Key Identifier:
                keyid:6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:19:2f:16:86:e9:f7:99:1d:ec:a9:df:b9:a9:34:b6:b6:29:
         57:ae:32:e6:6a:65:ee:dd:89:c9:3c:e4:ef:b2:29:94:6f:ce:
         1e:14:44:65:93:64:59:a3:c0:47:64:d1:3e:51:3e:bc:22:f4:
         2a:e2:23:22:5f:a6:2a:e6:9c:71:c3:1d:5c:d1:22:68:cd:a8:
         b0:88:ab:b0:b9:c9:a9:a1:65:d2:2d:e1:04:c2:95:da:46:f6:
         73:d1:bf:ff:18:95:e4:8e:1e:e1:79:cd:9b:29:61:0b:de:18:
         fc:7f:ce:47:46:00:b3:48:f0:e8:c3:b3:9e:f7:a5:1f:cf:2d:
         94:9d:ec:3c:f6:ec:89:d3:e6:6c:60:55:b6:e0:c4:e8:ec:0f:
         5d:46:a9:fd:3a:8d:f6:49:97:0a:24:62:27:3b:a3:34:e9:0a:
         62:e6:6d:36:cd:ec:fd:5e:19:e2:91:77:62:9c:38:cc:62:91:
         59:07:75:b6:d0:99:e6:ed:e2:bb:d9:b8:69:f4:46:00:a6:d3:
         6d:0b:b0:bf:86:56:10:0e:76:e7:08:d9:3c:3c:7b:7a:a6:0a:
         ff:1d:0d:f2:cd:34:2d:bc:ac:3b:b0:74:e5:bd:32:5c:ca:13:
         de:7e:df:95:bc:42:5c:ef:cc:5e:ed:59:d8:04:a7:31:9b:10:
         61:81:5a:43
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZXhIf1NixIlXt+ksU71ZNOiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZlODcxMDRhNGRiNGM0NjM3MWE3ZjhiNmE0NDFmYzMwZWNk
ZmUyMGYwHhcNMjUwMzI5MDkwMDU1WhcNMjUwMzMwMDkwMDU1WjAzMTEwLwYDVQQD
EygzNjdhNDZkOTBhZTFjMDdhYTRlNWUzNjQxNDJkOTk2NGU3YTFmNmUyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy+Olf5MuhdbTQ++epe1uPMGv0gAc
cZIsD80e3CiLcFAxTBW7/4g/Wu9hnCAHdSQCSe5i/V58fImCPNwutW1GHrG1Em7S
GIbn0bWwumTvFpDAsUw8uVT7YjlcQWscG8D9On91XuXfWuMZ/GsNsLqkoEz9FRkH
/k6oTq5+8IzVvNoY9hISMpCsdr4d7dJcJLjRD9K7nMXVut4mvL5ToXR4RIA5kU8v
CEhRnuPLff0xKVgw68Hynmrfba/E7A3WkK39BVIsYBeeIhy3ukdUPrHsBM2H80vZ
aQDCaX3+emrTc8cJ+amAX5rnN0j0AOvzAjlpjZ+t2+kXwTzlDTVyq75XyQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDZ6RtkK4cB6pOXjZBQtmWTnofbiMB8GA1UdIwQY
MBaAFG6HEEpNtMRjcaf4tqRB/DDs3+IPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYm9jUVNrMjB4R054cF9pMnBFSDhNT3pmNGc4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy9iODdlYzAtZjc1YS00YmJlLWIwNjct
YjcxNzk4MGU0YWQ2LzEvYm9jUVNrMjB4R054cF9pMnBFSDhNT3pmNGc4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMy9iODdlYzAtZjc1YS00YmJlLWIwNjctYjcxNzk4MGU0YWQ2
LzEvYm9jUVNrMjB4R054cF9pMnBFSDhNT3pmNGc4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWBkvFobp
95kd7Knfuak0trYpV64y5mpl7t2JyTzk77IplG/OHhREZZNkWaPAR2TRPlE+vCL0
KuIjIl+mKuacccMdXNEiaM2osIirsLnJqaFl0i3hBMKV2kb2c9G//xiV5I4e4XnN
mylhC94Y/H/OR0YAs0jw6MOznvelH88tlJ3sPPbsidPmbGBVtuDE6OwPXUap/TqN
9kmXCiRiJzujNOkKYuZtNs3s/V4Z4pF3Ypw4zGKRWQd1ttCZ5u3iu9m4afRGAKbT
bQuwv4ZWEA525wjZPDx7eqYK/x0N8s00LbysO7B05b0yXMoT3n7flbxCXO/MXu1Z
2ASnMZsQYYFaQw==
-----END CERTIFICATE-----
Generated at Fri Apr 4 01:14:09 2025 by rpki-client