Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/a324f4-9770-4a58-a6ef-d62fa6319fd4/1/Se4RlL2B0ZRsOfEPf9_fItGgMRI.mft
File:                     Se4RlL2B0ZRsOfEPf9_fItGgMRI.mft (raw, json)
Hash identifier:          1h05PVig2moz3TMWRpR5jJZgcoevL7gR5sJae8c1IYQ=
Subject key identifier:   78:79:E0:EC:1B:71:BA:34:B5:63:D6:63:01:EB:AD:98:B4:E2:28:82
Authority key identifier: 49:EE:11:94:BD:81:D1:94:6C:39:F1:0F:7F:DF:DF:22:D1:A0:31:12
Certificate issuer:       /CN=49ee1194bd81d1946c39f10f7fdfdf22d1a03112
Certificate serial:       01962DF3B61CBB93BBD94B37B46C2C3D20E0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Se4RlL2B0ZRsOfEPf9_fItGgMRI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2c/a324f4-9770-4a58-a6ef-d62fa6319fd4/1/Se4RlL2B0ZRsOfEPf9_fItGgMRI.mft
Manifest number:          1456
Signing time:             Sun 13 Apr 2025 07:01:08 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:08 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:08 +0000
Files and hashes:         1: HVVJONofo563h9QMYaZ4QxaodCA.roa (hash: yg/TA6SdsD3Id5UMI0b19L1T62Icbt5ojBDi7qobzgc=)
                          2: PQdbtj-hTjSGcw1YwA7CeITkgLw.roa (hash: cm1rujojVVXEcu5OPDSkdm+bErb6x5HaRup4skQmuac=)
                          3: Se4RlL2B0ZRsOfEPf9_fItGgMRI.crl (hash: ExUHnlQZwDfU7k3SegIcZ3nKuMsslq8DKTzJahAJSRA=)
                          4: eUHjJwuDj8xNwMB_4iM9TrMswPo.roa (hash: ClkYaKsyUxfoPn59P3GqQQlCdtnOCewBPFKLRNlTbXE=)
                          5: hTXyI46q8ybU3Dz0eS3ayB3HFbg.roa (hash: XI37ysO8Yf94g3nRE6Kdilk8PRdJybt6ja3RqZ8LGfw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f3:b6:1c:bb:93:bb:d9:4b:37:b4:6c:2c:3d:20:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49ee1194bd81d1946c39f10f7fdfdf22d1a03112
        Validity
            Not Before: Apr 13 07:01:08 2025 GMT
            Not After : Apr 14 07:01:08 2025 GMT
        Subject: CN=7879e0ec1b71ba34b563d66301ebad98b4e22882
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:da:27:a0:60:e2:bc:fd:48:82:2c:9d:0a:ee:
                    8e:03:56:8b:61:e6:92:08:fc:10:18:f2:9a:1a:c9:
                    6c:7b:45:21:b2:80:c0:37:41:35:c9:94:bd:d0:cd:
                    86:9b:fd:76:52:ee:23:58:97:f3:95:d8:ea:cc:8a:
                    ae:0c:43:eb:d8:41:f9:18:41:81:75:e3:c3:3c:89:
                    da:41:10:f3:9a:84:5e:fd:b9:77:89:9e:fd:8d:c5:
                    c1:0b:70:33:12:74:a8:18:62:57:71:0b:d3:3e:d7:
                    15:2f:f3:ce:e9:af:1b:41:94:76:c5:97:9d:e0:10:
                    08:ce:1e:00:5e:2f:04:fd:3a:7d:6c:40:58:ab:d9:
                    cb:82:c8:18:84:1b:64:72:3a:4f:1e:8e:80:b2:c3:
                    4f:f4:90:97:98:3d:c0:c3:6c:73:5c:ed:c1:f8:59:
                    f7:44:0b:86:81:4a:75:d1:1f:3e:24:04:d8:33:67:
                    88:a8:56:d5:90:50:16:74:81:bc:0f:6f:56:7f:08:
                    0b:de:4b:4a:c4:78:84:46:99:0f:01:05:2f:db:0b:
                    67:91:c2:37:c9:d9:53:fe:bd:ca:f1:8f:3f:78:de:
                    83:51:ff:20:24:9c:33:62:99:6f:a7:2f:52:17:4e:
                    59:f2:94:30:ce:b9:e0:97:eb:ac:45:fe:86:3e:b6:
                    5f:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:79:E0:EC:1B:71:BA:34:B5:63:D6:63:01:EB:AD:98:B4:E2:28:82
            X509v3 Authority Key Identifier:
                keyid:49:EE:11:94:BD:81:D1:94:6C:39:F1:0F:7F:DF:DF:22:D1:A0:31:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Se4RlL2B0ZRsOfEPf9_fItGgMRI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/a324f4-9770-4a58-a6ef-d62fa6319fd4/1/Se4RlL2B0ZRsOfEPf9_fItGgMRI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/a324f4-9770-4a58-a6ef-d62fa6319fd4/1/Se4RlL2B0ZRsOfEPf9_fItGgMRI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:a4:6a:63:75:58:51:16:ea:f3:b6:8e:40:e6:59:e6:c7:c1:
         c0:aa:b0:6f:01:25:f0:68:64:f7:41:49:e2:66:d4:5d:07:8e:
         1c:a4:96:59:8e:19:db:81:4b:3d:9f:4c:31:7c:ed:da:ac:77:
         9c:99:08:9b:60:79:35:c5:25:5a:42:57:a3:4b:d6:7c:48:9d:
         a8:10:14:05:24:59:75:a7:0e:26:58:32:d9:87:a2:52:5f:8f:
         56:fa:f4:20:2c:ad:09:93:f4:35:9a:4f:31:2d:50:fc:82:73:
         7e:85:c5:14:7f:3c:14:36:f0:8a:6f:39:fa:f7:1a:5b:5b:4e:
         b5:c2:0d:b9:81:69:ec:3a:ce:51:c7:14:63:c1:b3:15:93:5d:
         b1:35:66:9e:8d:d6:d6:da:73:91:a0:42:f9:0f:45:16:0d:6f:
         a6:e3:d7:f7:40:77:b1:9c:d8:64:a6:76:0b:37:05:9b:4f:f6:
         c9:57:94:d5:0e:46:f7:6e:a3:9d:10:4d:8a:75:05:db:1a:a6:
         f3:cc:82:cb:33:aa:40:84:0f:a1:f7:03:47:eb:13:34:e4:d1:
         32:c1:3b:10:90:67:52:3d:f0:3f:f7:59:c6:e1:01:12:bf:d5:
         b1:d9:76:31:19:81:11:be:f3:43:26:32:04:61:ca:f7:85:09:
         a8:96:24:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----