Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/a68518-4295-4528-8ee6-fabae8d56fc6/1/BpML6MTKaQDu2y8yYNXdeFBXASk.mft
File:                     BpML6MTKaQDu2y8yYNXdeFBXASk.mft (raw, json)
Hash identifier:          fmdm7i6eVnFCJZTaqFO0QWBO7eAFMNvTDvIxpZgCuZo=
Subject key identifier:   41:8B:7A:C3:4E:F0:6A:3D:CF:44:35:C3:69:7D:A2:F8:2D:1D:34:B6
Authority key identifier: 06:93:0B:E8:C4:CA:69:00:EE:DB:2F:32:60:D5:DD:78:50:57:01:29
Certificate issuer:       /CN=06930be8c4ca6900eedb2f3260d5dd7850570129
Certificate serial:       0194BD4E7E55660BD4F543F9F1D868535585
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BpML6MTKaQDu2y8yYNXdeFBXASk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/19/a68518-4295-4528-8ee6-fabae8d56fc6/1/BpML6MTKaQDu2y8yYNXdeFBXASk.mft
Manifest number:          0365
Signing time:             Fri 31 Jan 2025 17:00:25 +0000
Manifest this update:     Fri 31 Jan 2025 17:00:25 +0000
Manifest next update:     Sat 01 Feb 2025 17:00:25 +0000
Files and hashes:         1: 9nUsSsiazLrdPSyOHpx0tHeu8T0.roa (hash: aOQPbmI0wR9H4iha73VqEeKOQwWGbwwLnCJnavvbXrs=)
                          2: BpML6MTKaQDu2y8yYNXdeFBXASk.crl (hash: l0sZLabS+V4ai67xcOCcw088OOmLL41Hh/dfg4x1hOo=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bd:4e:7e:55:66:0b:d4:f5:43:f9:f1:d8:68:53:55:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=06930be8c4ca6900eedb2f3260d5dd7850570129
        Validity
            Not Before: Jan 31 17:00:25 2025 GMT
            Not After : Feb  1 17:00:25 2025 GMT
        Subject: CN=418b7ac34ef06a3dcf4435c3697da2f82d1d34b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:08:d0:a1:43:3e:78:e2:28:cd:94:2c:dd:8a:
                    7d:54:a9:e7:85:fb:8f:20:32:d6:74:fb:aa:0a:1c:
                    32:27:d0:52:34:fe:1b:c6:00:25:0c:83:60:9b:f6:
                    47:ba:13:92:97:75:08:8c:6f:db:e3:c7:12:2e:6c:
                    e0:7b:03:d4:c3:0a:52:6a:58:e0:0b:73:2c:a4:c9:
                    0c:f6:22:a0:82:5e:3a:7d:6d:e0:05:8b:75:58:e9:
                    56:58:6a:bf:d4:6f:7f:3b:39:1c:3d:08:4b:bb:88:
                    f7:08:0e:ef:8e:97:77:65:66:36:00:58:6b:38:2a:
                    67:78:9d:79:05:cd:3c:61:b9:75:40:9e:9a:1d:4d:
                    6b:72:ca:21:08:99:88:99:c0:ed:97:30:b8:d2:a5:
                    d0:91:d6:b5:ab:24:05:8a:c4:81:df:30:4e:61:19:
                    34:d3:c8:25:b2:d8:a4:47:a2:51:06:18:84:4f:b4:
                    5e:ba:a9:de:5f:08:e4:14:60:8c:01:ca:9c:67:22:
                    01:65:0a:1d:93:55:91:90:cc:a4:97:a5:34:d9:84:
                    28:0d:a2:78:cd:f7:b6:c2:39:09:d9:e6:8a:9f:cf:
                    62:24:e5:ad:8e:39:ea:82:da:ef:2f:98:24:81:9e:
                    d3:ba:88:8d:8d:47:57:ae:a4:3f:ac:8b:a0:c7:5f:
                    97:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:8B:7A:C3:4E:F0:6A:3D:CF:44:35:C3:69:7D:A2:F8:2D:1D:34:B6
            X509v3 Authority Key Identifier:
                keyid:06:93:0B:E8:C4:CA:69:00:EE:DB:2F:32:60:D5:DD:78:50:57:01:29

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BpML6MTKaQDu2y8yYNXdeFBXASk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/a68518-4295-4528-8ee6-fabae8d56fc6/1/BpML6MTKaQDu2y8yYNXdeFBXASk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/19/a68518-4295-4528-8ee6-fabae8d56fc6/1/BpML6MTKaQDu2y8yYNXdeFBXASk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:43:75:ca:a1:91:81:30:d8:62:ca:2e:24:6c:5e:a1:bb:83:
         2f:70:e9:91:3f:7e:e7:73:a0:1f:a5:87:6f:df:eb:80:10:88:
         a1:68:b1:21:08:a8:99:f2:99:66:82:00:3c:8d:ed:14:ee:91:
         a9:39:f9:d8:8c:c0:83:13:42:b7:33:be:4e:55:02:b0:1f:fb:
         b9:68:b3:fa:39:c8:22:fd:66:5f:82:99:5a:9f:e3:8b:b1:e3:
         46:4e:b7:b5:a8:16:47:69:fb:42:43:70:91:a3:ef:7d:40:46:
         f7:c1:b5:b2:53:07:e8:43:34:6c:42:77:02:2e:ca:c7:d4:bb:
         a5:83:e3:e2:fb:0b:8c:9e:70:cf:2e:ac:69:51:93:4a:0f:ff:
         c1:b6:b1:e6:d9:33:c7:e3:42:a3:55:26:96:28:55:54:10:ab:
         4e:8a:fd:78:62:e3:55:95:39:ca:b5:b7:1e:81:0d:fd:45:53:
         02:0d:e9:5d:bd:15:d5:7d:46:a2:48:8d:13:fd:4b:80:b4:d8:
         47:56:dc:62:32:62:e9:49:00:a7:58:da:ef:11:a1:3d:a4:f9:
         96:b9:c4:52:e7:96:b3:7c:2e:34:ef:01:da:e4:d5:79:b5:6c:
         b3:b1:b9:04:64:63:6c:b2:e6:80:1b:7b:7b:0d:54:96:c4:0e:
         2e:d1:2f:78
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9Tn5VZgvU9UP58dhoU1WFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA2OTMwYmU4YzRjYTY5MDBlZWRiMmYzMjYwZDVkZDc4NTA1
NzAxMjkwHhcNMjUwMTMxMTcwMDI1WhcNMjUwMjAxMTcwMDI1WjAzMTEwLwYDVQQD
Eyg0MThiN2FjMzRlZjA2YTNkY2Y0NDM1YzM2OTdkYTJmODJkMWQzNGI2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxQjQoUM+eOIozZQs3Yp9VKnnhfuP
IDLWdPuqChwyJ9BSNP4bxgAlDINgm/ZHuhOSl3UIjG/b48cSLmzgewPUwwpSaljg
C3MspMkM9iKggl46fW3gBYt1WOlWWGq/1G9/OzkcPQhLu4j3CA7vjpd3ZWY2AFhr
OCpneJ15Bc08Ybl1QJ6aHU1rcsohCJmImcDtlzC40qXQkda1qyQFisSB3zBOYRk0
08glstikR6JRBhiET7ReuqneXwjkFGCMAcqcZyIBZQodk1WRkMykl6U02YQoDaJ4
zfe2wjkJ2eaKn89iJOWtjjnqgtrvL5gkgZ7TuoiNjUdXrqQ/rIugx1+XkQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEGLesNO8Go9z0Q1w2l9ovgtHTS2MB8GA1UdIwQY
MBaAFAaTC+jEymkA7tsvMmDV3XhQVwEpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQnBNTDZNVEthUUR1Mnk4eVlOWGRlRkJYQVNrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS9hNjg1MTgtNDI5NS00NTI4LThlZTYt
ZmFiYWU4ZDU2ZmM2LzEvQnBNTDZNVEthUUR1Mnk4eVlOWGRlRkJYQVNrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOS9hNjg1MTgtNDI5NS00NTI4LThlZTYtZmFiYWU4ZDU2ZmM2
LzEvQnBNTDZNVEthUUR1Mnk4eVlOWGRlRkJYQVNrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQUN1yqGR
gTDYYsouJGxeobuDL3DpkT9+53OgH6WHb9/rgBCIoWixIQiomfKZZoIAPI3tFO6R
qTn52IzAgxNCtzO+TlUCsB/7uWiz+jnIIv1mX4KZWp/ji7HjRk63tagWR2n7QkNw
kaPvfUBG98G1slMH6EM0bEJ3Ai7Kx9S7pYPj4vsLjJ5wzy6saVGTSg//wbax5tkz
x+NCo1UmlihVVBCrTor9eGLjVZU5yrW3HoEN/UVTAg3pXb0V1X1GokiNE/1LgLTY
R1bcYjJi6UkAp1ja7xGhPaT5lrnEUueWs3wuNO8B2uTVebVss7G5BGRjbLLmgBt7
ew1UlsQOLtEveA==
-----END CERTIFICATE-----
Generated at Thu Apr 24 21:47:15 2025 by rpki-client