Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/45c689-afaa-4da3-a942-93194eb6108d/1/bm17yr_MMI1CAFPEgqDVn7EoLjA.mft
File:                     bm17yr_MMI1CAFPEgqDVn7EoLjA.mft (raw, json)
Hash identifier:          lEcF1s2Vi72MPmU5Dq7AV+ly76rnVbMT3/zRS1F3jG4=
Subject key identifier:   67:D3:53:B4:7C:86:0D:4D:A1:E1:C5:13:02:08:58:6D:9D:F9:90:54
Authority key identifier: 6E:6D:7B:CA:BF:CC:30:8D:42:00:53:C4:82:A0:D5:9F:B1:28:2E:30
Certificate issuer:       /CN=6e6d7bcabfcc308d420053c482a0d59fb1282e30
Certificate serial:       0194BCA9893DFCAC2DCC2FAE962C2335CB86
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bm17yr_MMI1CAFPEgqDVn7EoLjA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a3/45c689-afaa-4da3-a942-93194eb6108d/1/bm17yr_MMI1CAFPEgqDVn7EoLjA.mft
Manifest number:          143E
Signing time:             Fri 31 Jan 2025 14:00:14 +0000
Manifest this update:     Fri 31 Jan 2025 14:00:14 +0000
Manifest next update:     Sat 01 Feb 2025 14:00:14 +0000
Files and hashes:         1: GZloKAlNjoz3XqCPEm1hG7NatS4.roa (hash: 8eh4qVR8sPOLuprIgQpWCtpZheryazvSABEayh5f4b8=)
                          2: bm17yr_MMI1CAFPEgqDVn7EoLjA.crl (hash: ltKuHmwwZFSypwyU5cSxzDJWn0jp3stvty9ChlVqF9s=)
                          3: cVY_8rS3kZPDu1e0r3R63BtqpCQ.roa (hash: kfP4tSXYf9NAzPYnY28UC1ftu4NWH1iXr6TiCyzu6Bo=)
                          4: eSp8AI1UZ1ZHG1u2BcfDkkpePCM.roa (hash: wRG3Lif+KDOdrPbOSFcdJXTCfp36yCqfMsVM+rFpRi4=)
                          5: vVfAaVV4RQ-v10Ln3XvS11S8vIQ.roa (hash: pAR+AqdDFp48BMgN58F8Y9CgzqQ/1Cphi0yffPmxt8E=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:a9:89:3d:fc:ac:2d:cc:2f:ae:96:2c:23:35:cb:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6e6d7bcabfcc308d420053c482a0d59fb1282e30
        Validity
            Not Before: Jan 31 14:00:14 2025 GMT
            Not After : Feb  1 14:00:14 2025 GMT
        Subject: CN=67d353b47c860d4da1e1c5130208586d9df99054
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:a4:60:1c:0a:3b:ed:a2:21:c9:08:95:4d:a2:
                    f7:31:ee:77:b4:54:7b:ab:9c:a4:f0:08:a2:f7:bb:
                    6d:75:39:ce:5e:d0:c8:4f:a3:30:b2:56:58:1a:5b:
                    34:04:39:1b:e7:43:bb:17:22:7d:5e:47:8d:e7:a4:
                    1b:91:74:08:6d:b2:82:18:59:74:13:9b:c6:44:4a:
                    ac:01:b9:c2:26:44:ce:ae:1f:56:31:8c:13:30:48:
                    b4:74:3a:27:7b:ba:2e:fb:2b:15:0b:d0:d4:f4:fc:
                    b5:44:8d:ae:ba:d0:1b:ee:fb:1b:83:73:d4:0f:c3:
                    a4:95:4a:72:95:08:07:15:c1:49:c5:65:be:ca:97:
                    46:cf:09:79:50:dc:19:6d:bc:ad:7d:84:95:d9:63:
                    3d:44:16:88:17:96:c4:72:04:a2:5c:36:bc:50:bb:
                    4a:a7:42:52:f2:f4:6a:07:4d:01:2f:f9:90:23:65:
                    57:ab:69:23:91:49:9a:dd:f2:70:99:69:74:83:0c:
                    3d:d9:ee:d0:d1:be:62:87:fb:68:de:10:61:a3:25:
                    97:2d:7f:1d:95:8e:2f:1e:e4:c4:f3:ba:39:02:7c:
                    b4:37:e9:41:5e:9e:ce:ed:c5:ba:e1:ad:e5:8b:6a:
                    d0:42:d5:88:84:de:5e:d1:df:6f:72:97:be:46:3d:
                    89:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:D3:53:B4:7C:86:0D:4D:A1:E1:C5:13:02:08:58:6D:9D:F9:90:54
            X509v3 Authority Key Identifier:
                keyid:6E:6D:7B:CA:BF:CC:30:8D:42:00:53:C4:82:A0:D5:9F:B1:28:2E:30

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bm17yr_MMI1CAFPEgqDVn7EoLjA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/45c689-afaa-4da3-a942-93194eb6108d/1/bm17yr_MMI1CAFPEgqDVn7EoLjA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/45c689-afaa-4da3-a942-93194eb6108d/1/bm17yr_MMI1CAFPEgqDVn7EoLjA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:d4:59:0d:56:42:62:77:09:70:cd:f2:b3:3d:eb:68:95:21:
         2b:a3:bc:81:d0:4a:6f:12:76:4e:d2:a4:28:ee:a4:91:46:f3:
         c1:85:9e:39:ab:0c:7c:ff:bb:5c:7e:aa:ed:88:43:c7:8d:26:
         74:9a:af:eb:3a:cb:48:f6:60:6d:14:00:f5:4e:85:7b:5e:ae:
         14:32:3d:d5:81:3c:ce:26:0c:35:84:26:18:b1:87:05:f0:3d:
         15:eb:49:6b:c9:f5:b4:14:5c:c9:08:02:60:98:21:3e:95:9c:
         16:a4:f3:ef:e6:cf:56:5f:42:8d:42:41:63:fd:65:39:f2:56:
         eb:27:22:2e:f2:d2:7c:c2:7b:61:14:1d:a3:60:cd:0b:8a:99:
         de:5c:21:fc:a3:16:46:f2:f6:5b:99:61:a2:28:b4:d8:cf:48:
         4c:2f:f4:73:2a:a0:64:5c:d4:99:45:dd:b7:11:60:bb:88:af:
         64:33:3e:4d:df:82:9c:bb:6f:00:6b:64:67:a5:25:db:3f:da:
         9e:80:68:7d:a4:e6:9b:4c:89:61:1b:80:9b:ad:d3:84:4b:6d:
         00:82:db:50:bc:01:ef:17:7e:07:1f:3c:fa:1c:d9:6f:d2:96:
         0a:b1:5d:38:6f:b6:ad:cd:43:70:26:7c:2e:f9:0a:74:0f:a5:
         fb:ff:68:e1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8qYk9/KwtzC+uliwjNcuGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZlNmQ3YmNhYmZjYzMwOGQ0MjAwNTNjNDgyYTBkNTlmYjEy
ODJlMzAwHhcNMjUwMTMxMTQwMDE0WhcNMjUwMjAxMTQwMDE0WjAzMTEwLwYDVQQD
Eyg2N2QzNTNiNDdjODYwZDRkYTFlMWM1MTMwMjA4NTg2ZDlkZjk5MDU0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlaRgHAo77aIhyQiVTaL3Me53tFR7
q5yk8Aii97ttdTnOXtDIT6MwslZYGls0BDkb50O7FyJ9XkeN56QbkXQIbbKCGFl0
E5vGREqsAbnCJkTOrh9WMYwTMEi0dDone7ou+ysVC9DU9Py1RI2uutAb7vsbg3PU
D8OklUpylQgHFcFJxWW+ypdGzwl5UNwZbbytfYSV2WM9RBaIF5bEcgSiXDa8ULtK
p0JS8vRqB00BL/mQI2VXq2kjkUma3fJwmWl0gww92e7Q0b5ih/to3hBhoyWXLX8d
lY4vHuTE87o5Any0N+lBXp7O7cW64a3li2rQQtWIhN5e0d9vcpe+Rj2JFQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGfTU7R8hg1NoeHFEwIIWG2d+ZBUMB8GA1UdIwQY
MBaAFG5te8q/zDCNQgBTxIKg1Z+xKC4wMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYm0xN3lyX01NSTFDQUZQRWdxRFZuN0VvTGpBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy80NWM2ODktYWZhYS00ZGEzLWE5NDIt
OTMxOTRlYjYxMDhkLzEvYm0xN3lyX01NSTFDQUZQRWdxRFZuN0VvTGpBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMy80NWM2ODktYWZhYS00ZGEzLWE5NDItOTMxOTRlYjYxMDhk
LzEvYm0xN3lyX01NSTFDQUZQRWdxRFZuN0VvTGpBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADdRZDVZC
YncJcM3ysz3raJUhK6O8gdBKbxJ2TtKkKO6kkUbzwYWeOasMfP+7XH6q7YhDx40m
dJqv6zrLSPZgbRQA9U6Fe16uFDI91YE8ziYMNYQmGLGHBfA9FetJa8n1tBRcyQgC
YJghPpWcFqTz7+bPVl9CjUJBY/1lOfJW6yciLvLSfMJ7YRQdo2DNC4qZ3lwh/KMW
RvL2W5lhoii02M9ITC/0cyqgZFzUmUXdtxFgu4ivZDM+Td+CnLtvAGtkZ6Ul2z/a
noBofaTmm0yJYRuAm63ThEttAILbULwB7xd+Bx88+hzZb9KWCrFdOG+2rc1DcCZ8
LvkKdA+l+/9o4Q==
-----END CERTIFICATE-----