Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/e7bd01-432f-4bf9-80c5-897d00977ff2/1/SVls7MId0CZ3pyfvN_BolUbqUJc.mft
File:                     SVls7MId0CZ3pyfvN_BolUbqUJc.mft (raw, json)
Hash identifier:          nSnxQBT+EOMZ6VHvy/TW2sFh+fxBDf7Ks+WAZAvoH7k=
Subject key identifier:   2E:55:12:13:67:B7:EF:DA:52:B8:B5:0A:CD:29:97:8E:FB:28:BC:AC
Authority key identifier: 49:59:6C:EC:C2:1D:D0:26:77:A7:27:EF:37:F0:68:95:46:EA:50:97
Certificate issuer:       /CN=49596cecc21dd02677a727ef37f0689546ea5097
Certificate serial:       01962E2AFF15BF2275AECF8012EC626541B0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SVls7MId0CZ3pyfvN_BolUbqUJc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0f/e7bd01-432f-4bf9-80c5-897d00977ff2/1/SVls7MId0CZ3pyfvN_BolUbqUJc.mft
Manifest number:          14F5
Signing time:             Sun 13 Apr 2025 08:01:31 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:31 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:31 +0000
Files and hashes:         1: CgdiB-LvALW6eF8te_abb7XhHzw.roa (hash: FMmsOk3IFJDqEQcmSu8en9nadePYE7fdzLtSrsLGOLw=)
                          2: DheYS6kXlTHMFO59gGUyPsW4eds.roa (hash: n/9tk9beMA1XkkvC1xAFHfiOMzHgwQU8810EuXnnbI8=)
                          3: PBiMn82gChQHdPPkS-Oqs-Fnbh8.roa (hash: egCOLbWqDbWYCFc5/6lxhgVs+rP+45wHq+Te93L2gCw=)
                          4: SVls7MId0CZ3pyfvN_BolUbqUJc.crl (hash: gc9k54wi/QzF0KGvvCGQuYWGiLYupwoF/v9VvPSx3t0=)
                          5: heiFtANLkWlLrNLuIvdxl9kb0CQ.roa (hash: TnGpURbkXAESJ2Gk47wlG4sEj84D3SKrlpwSgF/8yys=)
                          6: jj0FH0DBvDqihM_PehNtHmRi9os.roa (hash: YyltTND33n/AiLCX9ViD6/mj27hWtc2LPtOCmOwTReA=)
                          7: lH-qHFc7crMLSf4GUnVsxi7d5S0.roa (hash: mgWBS9e4WAOzI2AGy8eUIJvq5GzFNK7+k2P1TPWDi18=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2a:ff:15:bf:22:75:ae:cf:80:12:ec:62:65:41:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49596cecc21dd02677a727ef37f0689546ea5097
        Validity
            Not Before: Apr 13 08:01:31 2025 GMT
            Not After : Apr 14 08:01:31 2025 GMT
        Subject: CN=2e55121367b7efda52b8b50acd29978efb28bcac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:42:3f:e6:26:21:02:e0:cf:c8:f0:0f:2d:1c:
                    98:c1:12:42:f5:95:27:2e:b6:95:46:39:33:8e:f7:
                    f9:59:f4:4e:6a:50:f4:c7:47:6f:76:5a:49:54:b9:
                    9f:a8:97:30:3a:40:44:8f:34:f6:72:d1:65:6e:de:
                    c3:9b:a3:24:f9:8b:ea:32:79:30:c4:da:90:53:98:
                    c8:9b:b7:ac:77:f0:52:1d:2e:91:75:d8:13:8d:32:
                    42:43:55:76:f7:9d:46:0c:01:e9:94:27:2b:52:72:
                    c6:0a:fd:23:68:8e:7c:03:a4:42:2b:b1:f5:17:77:
                    a1:5b:7e:4b:d7:66:cf:b7:d4:34:61:51:23:34:d5:
                    1b:31:98:9a:0d:4d:76:c4:4f:eb:7f:10:a0:b1:18:
                    9a:cb:4e:fd:de:63:f6:6f:07:53:a6:13:49:4b:45:
                    3a:62:3a:c4:63:db:f6:a5:d2:ed:c9:54:de:09:92:
                    db:51:b9:ac:30:61:75:64:6e:1d:0e:ba:e2:4c:9b:
                    1f:6d:95:56:e5:26:13:1d:3f:4c:8d:ba:c6:1e:2a:
                    a2:31:e5:80:93:1c:64:2b:75:cf:b4:a4:df:61:56:
                    ac:e0:08:30:4e:c7:e4:cf:5b:38:68:84:55:bc:96:
                    79:ff:41:c8:8c:2b:c8:86:08:ab:ed:e2:51:92:c8:
                    fe:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:55:12:13:67:B7:EF:DA:52:B8:B5:0A:CD:29:97:8E:FB:28:BC:AC
            X509v3 Authority Key Identifier:
                keyid:49:59:6C:EC:C2:1D:D0:26:77:A7:27:EF:37:F0:68:95:46:EA:50:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SVls7MId0CZ3pyfvN_BolUbqUJc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/e7bd01-432f-4bf9-80c5-897d00977ff2/1/SVls7MId0CZ3pyfvN_BolUbqUJc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/e7bd01-432f-4bf9-80c5-897d00977ff2/1/SVls7MId0CZ3pyfvN_BolUbqUJc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:e4:05:96:2b:7e:35:d1:62:94:d4:90:8a:93:57:65:d1:fc:
         0c:ac:e2:81:29:38:9b:4b:51:3c:aa:f5:78:29:49:bf:49:c9:
         7c:17:d0:a3:23:4c:65:ca:5e:33:39:17:6c:79:80:eb:c7:69:
         03:01:aa:73:35:d9:47:e5:cc:d7:d1:6b:50:24:b0:13:3c:6c:
         a9:fd:bc:03:16:e0:5d:a7:2e:25:5d:c5:a0:b9:43:10:30:4b:
         39:b7:13:35:7b:d8:c0:5c:08:c3:84:9e:ff:fa:44:9d:6e:3c:
         6e:c8:ea:39:0c:fe:33:99:19:e8:ed:4e:a3:b9:4f:c9:33:73:
         81:18:f1:39:b5:85:2a:e1:92:0f:12:56:10:d1:50:af:fa:77:
         23:26:67:d9:31:b0:9b:b2:00:b2:44:0f:53:a5:b3:75:5d:f4:
         1e:5a:12:7c:af:98:e1:d3:9d:5c:08:a1:7a:50:ab:5e:14:27:
         cc:09:54:01:53:b7:ad:62:e9:e2:33:c1:a8:bf:dc:a2:a9:6f:
         06:dc:82:59:56:ce:3c:4b:8e:a6:51:78:43:3f:b7:58:f1:73:
         19:f9:c7:25:2d:3e:c8:08:4b:cc:51:84:13:e3:ac:6d:0e:05:
         25:e8:68:13:8f:b4:7a:2f:cc:f4:fc:c3:8e:31:f0:6b:b4:55:
         08:38:6d:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----