Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/3d3a2d-a039-46f4-8687-057817ba9fb7/1/BMvltGI9q0LxWpBQAtt85i6FTyk.mft
File:                     BMvltGI9q0LxWpBQAtt85i6FTyk.mft (raw, json)
Hash identifier:          QTZdnvXh9RZ1s7Eut81Nf3ll4qKCfHGwKiW+6l1TiGI=
Subject key identifier:   7B:BB:3D:D2:5C:64:E4:53:69:71:82:C5:EE:06:CA:F9:BE:D2:4F:F9
Authority key identifier: 04:CB:E5:B4:62:3D:AB:42:F1:5A:90:50:02:DB:7C:E6:2E:85:4F:29
Certificate issuer:       /CN=04cbe5b4623dab42f15a905002db7ce62e854f29
Certificate serial:       0194BCA9EE0710F13505CB00A38E76D427A7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BMvltGI9q0LxWpBQAtt85i6FTyk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/31/3d3a2d-a039-46f4-8687-057817ba9fb7/1/BMvltGI9q0LxWpBQAtt85i6FTyk.mft
Manifest number:          1188
Signing time:             Fri 31 Jan 2025 14:00:40 +0000
Manifest this update:     Fri 31 Jan 2025 14:00:40 +0000
Manifest next update:     Sat 01 Feb 2025 14:00:40 +0000
Files and hashes:         1: 0-hMkgwH1_6XuPQSyPu-ntwA8r0.roa (hash: 2JzzJnFd9ihkF6y1d6OVxipYN8O/eCmhylMPeyJxI+E=)
                          2: 0xc42d-LDEI-SgAKzo0kBGB10Dc.roa (hash: gb2q4Z8T0zA76PNBgJ68ndUVgrHcH6k39n959MJErWM=)
                          3: 1ilr6zYt5I52EZw1RBDC_QnucBI.roa (hash: 8aVTE2OR/NeC5XrRy2OHucb/MxvIRcv9F4MoSRLn0GY=)
                          4: BMvltGI9q0LxWpBQAtt85i6FTyk.crl (hash: G6KVpWxG8Y2nyZH7DG1RHmHmmYwlvdgg3SzM0txo4V4=)
                          5: BquKat6j82qOS2m8MoMszw9MXhs.roa (hash: U9XpBJ+r0RGAXVAtuptN2ZKIQXtNg60NKIPDHLY7cCk=)
                          6: CJcuaiMpQyoQn46xw-D6Thhavys.roa (hash: 37f0an+cXzNVOgfnUMDCZ1mYljjJ+Pt6QqAPWZ0deas=)
                          7: GJCWcatdPgXKoeROae-Qf22FK_w.roa (hash: k6sICJAet/cN+WLeSoIk4F2tb+lz85AYVDsOZ/R1kEk=)
                          8: KhmVgayahuq_FWEItXRbri4yLjQ.roa (hash: 28u9HZ9E3lxZpHt40G8WE88+hWCSc1oI4DUi9z94/vQ=)
                          9: Q9sEsE6z5GIibO-Hp9GTHh0HWPI.roa (hash: 9CRQgbCX8o+HtsLamnfC8peoHYzNHS3coeIlAetbEPU=)
                          10: QnLL_E3dngBvD7h0E4XLMypXvhg.roa (hash: QSFVe2PF4iSOwOmMgGkwLBrADT1zh8nSTUizWIPHjPg=)
                          11: b2ULSIdH23UusVKGAXuUmJR9P2U.roa (hash: K3WOXBiupreCnjzj2yIYkRDoA8J60T3smFT7czzRwzQ=)
                          12: fhv64bxzWcauBoH7qXIpIF6wjQo.roa (hash: XBOHExDlxcs7IJl8NBFZOTlEqiJsW6a5rBKOKZnQpcM=)
                          13: nz4iWaKhsnj0CBAx2kY6efcjWbI.roa (hash: 3iBcZ9G2X99Gsvoc2t0DW5tmz60vwwpyxEz2zwkXorM=)
                          14: qljIitXk1t3YFV0fw6MoKlVZXlE.roa (hash: ISyBHGAsDRPbjHKqPePZgCBP/vPkmLdOY+Zqx/l5qh4=)
                          15: sOABMeqqwZ1G0D1ULMJHO8KxxxQ.roa (hash: aqn/2HV1SWgZFD22dyBslfrAfJPMn4unQ/xtd1gPhfA=)
                          16: v0B2WJNbU72JzUwEtfsRU9EGr8A.roa (hash: bkZ7vvKmMRttjisw4wz3UjVly/FH8PJFyMj7pePFFkI=)
                          17: ygM2v3yxRCSTta-X-otHAEUh3WI.roa (hash: kk4ythPFf1BolITMKCGLolUQdyXP71slk/H1AY1m7jI=)
                          18: yvd7ROcqjdqfwbqgapXEb-7VUqU.roa (hash: 4MkoXbQ5fkY09pnUUjvZyOYE4o39h9GdJHrXjCu9bik=)
                          19: zY78a5ViA6-TOxTfbPiAJ9Inm_Y.roa (hash: og5b/BcFOY+IjLcDutjJV+OJ1zegWiBInLo9K8sBHic=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:a9:ee:07:10:f1:35:05:cb:00:a3:8e:76:d4:27:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=04cbe5b4623dab42f15a905002db7ce62e854f29
        Validity
            Not Before: Jan 31 14:00:40 2025 GMT
            Not After : Feb  1 14:00:40 2025 GMT
        Subject: CN=7bbb3dd25c64e453697182c5ee06caf9bed24ff9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:ea:48:d9:ae:77:f0:d3:f0:1c:a2:9f:3e:40:
                    1f:33:1e:22:8a:35:fe:ac:cf:46:71:60:7c:ee:0e:
                    a2:64:33:50:0f:da:b9:00:d1:33:af:31:56:05:a3:
                    f8:0e:47:1c:66:21:be:40:07:c3:4a:d1:a0:ed:48:
                    26:8d:f9:66:e9:bd:25:37:5f:b0:b2:b7:49:1c:42:
                    1a:22:44:57:32:34:c9:a5:0c:14:e4:4e:e3:cf:23:
                    0c:79:43:cf:38:f0:28:10:39:6a:45:ce:aa:e8:1d:
                    ce:e7:2a:f8:45:eb:f8:42:de:7e:25:be:22:b7:1c:
                    88:a2:71:bc:71:c0:5b:ed:85:13:84:e8:b3:42:31:
                    a5:4a:14:b1:fc:c1:c1:72:4b:df:20:74:c0:43:66:
                    4b:ac:f5:b3:af:19:69:f4:16:63:e9:4c:57:b5:2b:
                    63:cd:b1:13:9d:95:7f:c4:4c:c4:85:9c:67:11:31:
                    70:68:62:ba:73:9a:7c:2c:f7:37:86:49:1a:f7:50:
                    4d:69:bc:f5:1c:07:cd:51:47:c7:af:f4:6f:8b:83:
                    e0:be:4a:77:68:4a:d1:06:3c:76:8c:e0:cd:66:6d:
                    f1:e4:2d:56:a2:2e:53:39:6c:21:f1:b5:d3:e6:08:
                    44:46:7d:d3:80:ce:1e:9b:c6:5d:3f:16:7f:08:70:
                    ff:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:BB:3D:D2:5C:64:E4:53:69:71:82:C5:EE:06:CA:F9:BE:D2:4F:F9
            X509v3 Authority Key Identifier:
                keyid:04:CB:E5:B4:62:3D:AB:42:F1:5A:90:50:02:DB:7C:E6:2E:85:4F:29

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BMvltGI9q0LxWpBQAtt85i6FTyk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/3d3a2d-a039-46f4-8687-057817ba9fb7/1/BMvltGI9q0LxWpBQAtt85i6FTyk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/31/3d3a2d-a039-46f4-8687-057817ba9fb7/1/BMvltGI9q0LxWpBQAtt85i6FTyk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:15:7c:ad:7b:a4:8a:e6:37:60:c7:7b:84:a4:50:59:51:30:
         60:62:06:62:cd:a3:b4:31:79:eb:60:d8:aa:c0:8d:ef:fd:24:
         b9:ac:23:e2:21:79:57:30:93:57:70:bf:6b:76:c4:18:75:bd:
         3b:b6:f4:ed:46:f3:20:ad:f7:d0:63:a3:cd:1b:60:51:85:79:
         01:57:02:0a:cf:2b:9d:26:30:96:e2:bc:29:6d:e2:ca:50:35:
         e9:71:d1:ac:bf:2e:00:23:2c:7e:27:8d:d0:a4:42:b5:21:e9:
         02:26:8c:bb:36:4a:ea:16:e8:35:d1:2d:b8:04:cd:77:9f:24:
         a7:37:53:89:97:e6:c7:5e:c4:aa:8d:9f:a3:55:bd:be:76:c9:
         d6:dd:25:ac:00:96:09:f8:1c:0f:e3:53:b6:fc:e6:23:ad:7a:
         9d:70:51:e0:45:da:a9:76:f6:7e:c6:64:a2:4c:a9:97:36:01:
         b8:8c:83:24:27:03:f4:13:50:91:28:52:af:5d:7f:ab:3f:3e:
         9a:ee:ea:41:f1:d6:18:31:49:3e:2d:5c:99:4e:96:7d:54:f0:
         1e:45:3a:27:52:a7:d6:37:c7:57:1b:0c:eb:a5:0d:13:dd:74:
         27:72:61:1b:ba:bb:45:ab:aa:8d:da:35:70:9a:b1:c7:9e:55:
         72:6d:bd:58
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8qe4HEPE1BcsAo4521CenMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA0Y2JlNWI0NjIzZGFiNDJmMTVhOTA1MDAyZGI3Y2U2MmU4
NTRmMjkwHhcNMjUwMTMxMTQwMDQwWhcNMjUwMjAxMTQwMDQwWjAzMTEwLwYDVQQD
Eyg3YmJiM2RkMjVjNjRlNDUzNjk3MTgyYzVlZTA2Y2FmOWJlZDI0ZmY5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvupI2a538NPwHKKfPkAfMx4iijX+
rM9GcWB87g6iZDNQD9q5ANEzrzFWBaP4DkccZiG+QAfDStGg7Ugmjflm6b0lN1+w
srdJHEIaIkRXMjTJpQwU5E7jzyMMeUPPOPAoEDlqRc6q6B3O5yr4Rev4Qt5+Jb4i
txyIonG8ccBb7YUThOizQjGlShSx/MHBckvfIHTAQ2ZLrPWzrxlp9BZj6UxXtStj
zbETnZV/xEzEhZxnETFwaGK6c5p8LPc3hkka91BNabz1HAfNUUfHr/Rvi4Pgvkp3
aErRBjx2jODNZm3x5C1Woi5TOWwh8bXT5ghERn3TgM4em8ZdPxZ/CHD/kQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHu7PdJcZORTaXGCxe4Gyvm+0k/5MB8GA1UdIwQY
MBaAFATL5bRiPatC8VqQUALbfOYuhU8pMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQk12bHRHSTlxMEx4V3BCUUF0dDg1aTZGVHlrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMS8zZDNhMmQtYTAzOS00NmY0LTg2ODct
MDU3ODE3YmE5ZmI3LzEvQk12bHRHSTlxMEx4V3BCUUF0dDg1aTZGVHlrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMS8zZDNhMmQtYTAzOS00NmY0LTg2ODctMDU3ODE3YmE5ZmI3
LzEvQk12bHRHSTlxMEx4V3BCUUF0dDg1aTZGVHlrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAixV8rXuk
iuY3YMd7hKRQWVEwYGIGYs2jtDF562DYqsCN7/0kuawj4iF5VzCTV3C/a3bEGHW9
O7b07UbzIK330GOjzRtgUYV5AVcCCs8rnSYwluK8KW3iylA16XHRrL8uACMsfieN
0KRCtSHpAiaMuzZK6hboNdEtuATNd58kpzdTiZfmx17Eqo2fo1W9vnbJ1t0lrACW
CfgcD+NTtvzmI616nXBR4EXaqXb2fsZkokyplzYBuIyDJCcD9BNQkShSr11/qz8+
mu7qQfHWGDFJPi1cmU6WfVTwHkU6J1Kn1jfHVxsM66UNE910J3JhG7q7Rauqjdo1
cJqxx55Vcm29WA==
-----END CERTIFICATE-----
Generated at Thu Apr 24 22:38:20 2025 by rpki-client