Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/c1364a-0501-4faf-bcfa-aae1447603c0/1/BC2fTWr_ODxZ6d54AtvuAk7oh9w.mft
File:                     BC2fTWr_ODxZ6d54AtvuAk7oh9w.mft (raw, json)
Hash identifier:          RGyymLxgLOS3qv+jTPiTmA8OHP+7m1HvIYS8ikMEz6s=
Subject key identifier:   8D:46:44:76:19:96:FD:21:9C:BB:AB:99:F7:FA:80:4D:AA:7F:88:AC
Authority key identifier: 04:2D:9F:4D:6A:FF:38:3C:59:E9:DE:78:02:DB:EE:02:4E:E8:87:DC
Certificate issuer:       /CN=042d9f4d6aff383c59e9de7802dbee024ee887dc
Certificate serial:       0195E046465A2D8F1D5F30839DD3F706470C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BC2fTWr_ODxZ6d54AtvuAk7oh9w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ed/c1364a-0501-4faf-bcfa-aae1447603c0/1/BC2fTWr_ODxZ6d54AtvuAk7oh9w.mft
Manifest number:          03A2
Signing time:             Sat 29 Mar 2025 05:00:56 +0000
Manifest this update:     Sat 29 Mar 2025 05:00:56 +0000
Manifest next update:     Sun 30 Mar 2025 05:00:56 +0000
Files and hashes:         1: 8NoTu3q8IjcyFeSIedZ4Ihj-NDU.roa (hash: /wW2Zq1BGMLL48zxl/CKfKIe0NCGNYrdHYCS8/4pGYw=)
                          2: BC2fTWr_ODxZ6d54AtvuAk7oh9w.crl (hash: cEh3XEug8yWCTAbZtCz5F2AnYuAY8iCaQI1b799Egcg=)
                          3: BvrFfgaOvktjClmF1Y8fP67Mecs.roa (hash: PbuxkncSrl/Kd/73WRwH/QoM5pPO6VdbbF0JBm0KcQM=)
                          4: IlEGs3swTEykFsR9k5C7RdaE6C0.roa (hash: zQZ2kqcVA7iLm2FpONrymzqVeMVyWeuFsep/95FwbMQ=)
                          5: c4e4vqwgZd2ZJ6wIw-pjuHwTcAg.roa (hash: oVdR7HS3XKDpou60JLgnb0pDBzK522Os/r6Pbt/GzeA=)
                          6: ckrq-xWy9dmxHUCFMOdOt359xMc.roa (hash: Rrj1A3kTGmZ6GPx6N9soo7FlfXOroReQlh35Wi3wkRU=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:e0:46:46:5a:2d:8f:1d:5f:30:83:9d:d3:f7:06:47:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=042d9f4d6aff383c59e9de7802dbee024ee887dc
        Validity
            Not Before: Mar 29 05:00:56 2025 GMT
            Not After : Mar 30 05:00:56 2025 GMT
        Subject: CN=8d4644761996fd219cbbab99f7fa804daa7f88ac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:40:58:29:b8:1a:35:1d:d4:1b:46:0b:34:81:
                    e8:e4:ca:14:ff:3a:fb:cf:ff:a0:00:26:cc:14:71:
                    85:2f:b0:50:c3:b1:52:9f:08:b9:a5:02:37:52:71:
                    cd:74:03:82:fe:9c:9f:7c:63:db:ce:aa:57:5c:35:
                    1a:06:53:46:c7:84:b6:70:a3:50:a6:cc:dd:07:46:
                    37:77:78:f5:6d:97:ff:00:f0:2b:4b:84:bc:e5:0c:
                    a3:4d:51:c7:e7:c6:83:f4:20:18:84:19:46:5e:17:
                    64:a5:ad:e5:fd:8c:19:fe:22:7c:35:43:27:e6:2f:
                    eb:c7:5e:c9:d5:37:b9:f5:6d:6a:fd:b8:cc:00:d9:
                    8b:78:5e:8c:7b:68:03:1c:5e:df:13:0f:a1:17:54:
                    79:06:e6:9c:f7:32:59:83:77:ce:ad:fc:f0:5e:35:
                    55:1d:0c:04:a7:57:10:85:e4:67:da:26:12:82:fc:
                    85:d5:0a:8c:20:c1:3b:e5:df:7e:d2:f0:69:b6:85:
                    fd:3c:ad:bb:e6:c8:f2:45:5e:82:13:c6:7e:63:18:
                    09:5a:73:11:f5:92:7c:c9:ba:1d:33:41:15:cb:3a:
                    cb:0c:7c:11:c3:9a:da:6e:60:28:da:f3:08:e1:61:
                    e5:db:3f:62:66:f7:f0:a3:9f:67:99:7c:53:fe:c0:
                    28:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:46:44:76:19:96:FD:21:9C:BB:AB:99:F7:FA:80:4D:AA:7F:88:AC
            X509v3 Authority Key Identifier:
                keyid:04:2D:9F:4D:6A:FF:38:3C:59:E9:DE:78:02:DB:EE:02:4E:E8:87:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BC2fTWr_ODxZ6d54AtvuAk7oh9w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/c1364a-0501-4faf-bcfa-aae1447603c0/1/BC2fTWr_ODxZ6d54AtvuAk7oh9w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/c1364a-0501-4faf-bcfa-aae1447603c0/1/BC2fTWr_ODxZ6d54AtvuAk7oh9w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:51:2b:48:26:78:dc:e5:45:c6:a8:ed:fe:01:4b:a9:e1:a5:
         a7:3a:74:c2:49:52:0d:a3:ac:63:23:24:14:73:d8:e3:96:b3:
         c8:8c:a7:3d:c0:c8:12:18:4b:24:ec:75:20:5d:23:4f:9e:f0:
         70:9d:cf:3b:5d:cc:ea:d7:aa:40:4d:1a:30:7f:9d:8c:e3:65:
         dd:3f:a4:92:d8:8c:de:60:23:f5:a6:fb:03:4c:53:af:cc:c4:
         56:f9:7e:ef:03:6d:12:46:9a:93:03:b4:8d:76:bf:00:40:3d:
         d0:6e:4d:b4:59:3d:5f:d5:a7:bc:41:e5:64:23:91:5a:75:25:
         f2:c8:fc:b8:88:66:ec:07:b8:9e:d6:ac:2f:6d:83:39:67:c1:
         11:4f:12:53:30:2c:7d:f7:88:38:6d:1a:95:b3:65:bc:79:26:
         18:bc:35:7f:0e:92:36:88:4e:e9:c9:a2:41:a5:57:b6:59:4e:
         21:33:d1:8a:aa:54:15:6f:30:ba:a6:87:8f:0f:8d:82:37:ce:
         5c:cc:1d:df:c6:62:d7:45:36:a3:7b:eb:c2:67:f6:5b:6e:32:
         b8:35:d9:59:91:9f:a8:9c:7c:3f:aa:45:ca:6f:1f:2c:e5:9d:
         65:64:66:d4:5f:24:1c:36:db:8c:8e:81:bf:a5:01:8a:6f:35:
         b2:82:e8:9d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZXgRkZaLY8dXzCDndP3BkcMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA0MmQ5ZjRkNmFmZjM4M2M1OWU5ZGU3ODAyZGJlZTAyNGVl
ODg3ZGMwHhcNMjUwMzI5MDUwMDU2WhcNMjUwMzMwMDUwMDU2WjAzMTEwLwYDVQQD
Eyg4ZDQ2NDQ3NjE5OTZmZDIxOWNiYmFiOTlmN2ZhODA0ZGFhN2Y4OGFjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz0BYKbgaNR3UG0YLNIHo5MoU/zr7
z/+gACbMFHGFL7BQw7FSnwi5pQI3UnHNdAOC/pyffGPbzqpXXDUaBlNGx4S2cKNQ
pszdB0Y3d3j1bZf/APArS4S85QyjTVHH58aD9CAYhBlGXhdkpa3l/YwZ/iJ8NUMn
5i/rx17J1Te59W1q/bjMANmLeF6Me2gDHF7fEw+hF1R5Buac9zJZg3fOrfzwXjVV
HQwEp1cQheRn2iYSgvyF1QqMIME75d9+0vBptoX9PK275sjyRV6CE8Z+YxgJWnMR
9ZJ8ybodM0EVyzrLDHwRw5rabmAo2vMI4WHl2z9iZvfwo59nmXxT/sAoHwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI1GRHYZlv0hnLurmff6gE2qf4isMB8GA1UdIwQY
MBaAFAQtn01q/zg8WeneeALb7gJO6IfcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQkMyZlRXcl9PRHhaNmQ1NEF0dnVBazdvaDl3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZC9jMTM2NGEtMDUwMS00ZmFmLWJjZmEt
YWFlMTQ0NzYwM2MwLzEvQkMyZlRXcl9PRHhaNmQ1NEF0dnVBazdvaDl3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZC9jMTM2NGEtMDUwMS00ZmFmLWJjZmEtYWFlMTQ0NzYwM2Mw
LzEvQkMyZlRXcl9PRHhaNmQ1NEF0dnVBazdvaDl3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAF1ErSCZ4
3OVFxqjt/gFLqeGlpzp0wklSDaOsYyMkFHPY45azyIynPcDIEhhLJOx1IF0jT57w
cJ3PO13M6teqQE0aMH+djONl3T+kktiM3mAj9ab7A0xTr8zEVvl+7wNtEkaakwO0
jXa/AEA90G5NtFk9X9WnvEHlZCORWnUl8sj8uIhm7Ae4ntasL22DOWfBEU8SUzAs
ffeIOG0albNlvHkmGLw1fw6SNohO6cmiQaVXtllOITPRiqpUFW8wuqaHjw+NgjfO
XMwd38Zi10U2o3vrwmf2W24yuDXZWZGfqJx8P6pFym8fLOWdZWRm1F8kHDbbjI6B
v6UBim81soLonQ==
-----END CERTIFICATE-----