Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/25b6b5-28d7-4695-b4de-8bdf291d93d1/1/se1mdqhXWQtjZbdsVYDXD8qNuqY.mft
File:                     se1mdqhXWQtjZbdsVYDXD8qNuqY.mft (raw, json)
Hash identifier:          /vcYfCD+JFSSg55hOLgG44WoOgF5Fk0/88Hd3jaIMI4=
Subject key identifier:   EB:29:6A:A3:1A:6D:9D:4A:5A:85:F7:70:E7:30:13:51:C4:7A:A3:9D
Authority key identifier: B1:ED:66:76:A8:57:59:0B:63:65:B7:6C:55:80:D7:0F:CA:8D:BA:A6
Certificate issuer:       /CN=b1ed6676a857590b6365b76c5580d70fca8dbaa6
Certificate serial:       01962ECF6B1E7D964B00DE7ACA6BC539AC30
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/se1mdqhXWQtjZbdsVYDXD8qNuqY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2d/25b6b5-28d7-4695-b4de-8bdf291d93d1/1/se1mdqhXWQtjZbdsVYDXD8qNuqY.mft
Manifest number:          0A45
Signing time:             Sun 13 Apr 2025 11:01:07 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:07 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:07 +0000
Files and hashes:         1: BSc7Lfy8S9yDC-G_k8JPIbogXL8.roa (hash: VQaRc62T55aNNoJmxuELOMwkOtgTlKfCtu9D4IVulL4=)
                          2: se1mdqhXWQtjZbdsVYDXD8qNuqY.crl (hash: YzTSdr8DwScZRoYso7atvaOI0b0PQ01yaFsRpepw72o=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:6b:1e:7d:96:4b:00:de:7a:ca:6b:c5:39:ac:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b1ed6676a857590b6365b76c5580d70fca8dbaa6
        Validity
            Not Before: Apr 13 11:01:07 2025 GMT
            Not After : Apr 14 11:01:07 2025 GMT
        Subject: CN=eb296aa31a6d9d4a5a85f770e7301351c47aa39d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:81:e5:92:7b:fc:ac:59:e8:b1:a9:e2:32:b0:
                    67:00:1f:3d:d9:77:e6:31:1e:40:c6:d1:74:42:e0:
                    76:fc:73:89:e7:81:f2:69:21:e6:d9:e9:7a:53:48:
                    a9:e8:4d:e8:d0:47:51:b3:47:ef:75:0d:56:56:ab:
                    a3:cb:17:5d:04:7f:69:60:27:9e:9b:e4:1f:e7:b4:
                    53:fe:52:bf:8b:f7:a6:3b:1e:f3:f8:f3:d7:0f:a3:
                    49:47:79:df:1f:d3:f1:96:41:f9:9e:bc:68:49:ab:
                    3c:5c:23:b4:f9:7a:52:2b:fd:65:c5:88:b8:6d:99:
                    9d:19:05:4e:b3:f7:09:56:8c:62:97:40:b1:47:c4:
                    9d:41:e7:2e:2c:8f:f9:f5:69:5b:79:9a:8e:6e:ef:
                    66:02:33:2b:02:58:af:19:be:6e:5d:cb:8d:68:fd:
                    25:29:5f:7f:b2:38:50:f2:9c:88:03:86:86:79:61:
                    ef:81:0a:ec:1e:6a:81:b5:23:fd:83:c5:7e:cd:3a:
                    64:91:9e:a4:de:02:e2:95:e8:cc:72:eb:c8:3e:2c:
                    5a:d7:0a:a6:7e:db:df:cf:91:02:fe:95:c9:33:9a:
                    f2:d0:4b:00:5a:70:8e:9b:c0:20:56:53:c0:60:23:
                    f3:d6:e5:b4:ec:b8:45:78:cf:e5:7b:46:b6:61:9e:
                    cb:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:29:6A:A3:1A:6D:9D:4A:5A:85:F7:70:E7:30:13:51:C4:7A:A3:9D
            X509v3 Authority Key Identifier:
                keyid:B1:ED:66:76:A8:57:59:0B:63:65:B7:6C:55:80:D7:0F:CA:8D:BA:A6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/se1mdqhXWQtjZbdsVYDXD8qNuqY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/25b6b5-28d7-4695-b4de-8bdf291d93d1/1/se1mdqhXWQtjZbdsVYDXD8qNuqY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/25b6b5-28d7-4695-b4de-8bdf291d93d1/1/se1mdqhXWQtjZbdsVYDXD8qNuqY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:10:e9:36:fb:04:38:07:25:44:17:b3:7d:93:b8:57:7b:77:
         9f:62:c3:31:52:91:b0:47:00:88:97:b4:c9:0b:1d:fc:0b:92:
         a5:75:49:7e:f6:9c:68:a2:7f:37:fc:6f:43:9d:b8:ee:38:c7:
         6e:45:6a:fa:92:a4:51:60:bb:fe:49:ce:16:31:3f:e8:df:b7:
         de:07:a1:6b:79:bf:09:bd:ef:83:77:89:20:29:ae:12:7e:ab:
         f0:99:80:d8:c3:56:8e:f5:2e:03:27:0f:3a:6c:39:0b:3d:59:
         ee:bf:ff:c9:63:28:9a:b2:fa:62:a8:9c:60:d8:31:d4:be:12:
         72:4b:ed:24:80:ae:49:1d:96:8a:57:66:57:87:2e:03:51:4e:
         3e:ae:37:6e:e3:56:fb:35:91:c2:68:12:05:3e:cc:2b:f3:98:
         e4:a2:98:68:23:47:ca:07:18:06:2f:19:90:9f:4d:07:8b:97:
         f6:42:98:17:89:2f:d6:b5:b5:0a:7a:5d:15:df:cb:3a:7e:98:
         fb:f4:13:db:34:46:60:54:e4:ff:2a:29:53:70:15:ed:55:45:
         57:23:01:9a:76:f3:29:c8:b5:00:ef:03:ab:c9:db:87:e8:1b:
         68:c7:8a:0a:5c:f1:a8:74:0e:71:25:93:f0:a4:bf:f0:5d:69:
         31:aa:e4:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----