Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/31a7d4-49a4-4d6f-8c8d-d8152b5157d8/1/2SEUWCD-zu889VJwMmxeEkPyQ1U.mft
File:                     2SEUWCD-zu889VJwMmxeEkPyQ1U.mft (raw, json)
Hash identifier:          u4L+0i9lJH2JTjw54dBHvSJzpO/9yXLU38jRHaO9o3U=
Subject key identifier:   C0:10:7E:1A:3F:1F:A2:6D:39:12:2A:C5:C3:25:D6:08:BB:0B:33:4F
Authority key identifier: D9:21:14:58:20:FE:CE:EF:3C:F5:52:70:32:6C:5E:12:43:F2:43:55
Certificate issuer:       /CN=d921145820feceef3cf55270326c5e1243f24355
Certificate serial:       01962ECF62D61A8AC2FB3FF0DE5AB07F1BD0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2SEUWCD-zu889VJwMmxeEkPyQ1U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/33/31a7d4-49a4-4d6f-8c8d-d8152b5157d8/1/2SEUWCD-zu889VJwMmxeEkPyQ1U.mft
Manifest number:          103D
Signing time:             Sun 13 Apr 2025 11:01:05 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:05 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:05 +0000
Files and hashes:         1: 2SEUWCD-zu889VJwMmxeEkPyQ1U.crl (hash: hK/7kbD+aeHAKeUyrI1qnSTR+lPoHs+/f1HZGbDQJe4=)
                          2: dCeSeEvJ80fiDLJDN1fGsoVbK-k.roa (hash: 3a4yszIZKCDvFLydfEkbG4N0SBZOOG/zu+YBX5G2W1U=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:62:d6:1a:8a:c2:fb:3f:f0:de:5a:b0:7f:1b:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d921145820feceef3cf55270326c5e1243f24355
        Validity
            Not Before: Apr 13 11:01:05 2025 GMT
            Not After : Apr 14 11:01:05 2025 GMT
        Subject: CN=c0107e1a3f1fa26d39122ac5c325d608bb0b334f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:12:c4:5d:29:ec:06:94:ad:ed:4e:5e:f5:71:
                    83:26:ff:de:80:5f:4f:3f:5e:3f:74:1f:da:ff:9e:
                    da:07:8f:21:3b:fd:93:9d:24:dd:b7:c2:68:c8:04:
                    24:d9:ec:de:ac:9b:a7:6f:70:23:83:2c:d2:4a:38:
                    a4:c3:bf:8a:6c:16:55:10:76:ff:30:35:91:8d:91:
                    15:b6:d0:83:e7:85:16:36:9b:8b:42:fc:18:39:80:
                    54:9b:d2:88:96:55:7b:27:02:97:b0:f1:d4:d2:4e:
                    d3:a8:79:ab:11:c8:94:e1:c1:54:d4:07:7d:99:65:
                    0f:32:2d:a2:67:6d:14:8d:83:2c:2d:66:0a:a1:39:
                    11:8d:c1:69:27:84:9d:c5:4f:d8:f2:29:47:38:14:
                    84:c9:23:c6:05:a6:64:33:e1:83:92:0c:e5:07:70:
                    a9:5c:86:b8:a3:4e:80:56:3d:8c:3b:f6:87:d1:9b:
                    67:cc:90:0c:d0:9b:eb:0d:63:37:fa:a1:ca:92:47:
                    c3:eb:b3:db:68:1b:5d:29:09:4f:46:18:32:ce:c8:
                    6d:7d:17:e4:8c:c3:79:bc:5f:b5:14:25:97:3d:17:
                    89:43:32:67:c5:e6:28:29:43:eb:24:95:68:cf:97:
                    2b:33:24:11:05:5e:8a:6c:bb:22:3a:c0:3e:41:9f:
                    f3:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:10:7E:1A:3F:1F:A2:6D:39:12:2A:C5:C3:25:D6:08:BB:0B:33:4F
            X509v3 Authority Key Identifier:
                keyid:D9:21:14:58:20:FE:CE:EF:3C:F5:52:70:32:6C:5E:12:43:F2:43:55

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2SEUWCD-zu889VJwMmxeEkPyQ1U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/31a7d4-49a4-4d6f-8c8d-d8152b5157d8/1/2SEUWCD-zu889VJwMmxeEkPyQ1U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/33/31a7d4-49a4-4d6f-8c8d-d8152b5157d8/1/2SEUWCD-zu889VJwMmxeEkPyQ1U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:4d:9c:44:22:62:b1:94:65:29:bf:0a:4d:95:7f:c5:d4:1b:
         75:4c:88:cf:ab:07:cd:ec:a4:f2:64:29:35:10:4a:a2:94:ff:
         34:b3:fe:4b:03:2a:3d:c2:0c:f5:72:85:87:5e:91:50:4b:00:
         eb:0c:6b:7c:a2:64:64:01:13:88:b8:69:15:6a:99:eb:64:e9:
         5e:89:1a:3d:e8:70:2d:62:86:8e:74:a8:34:e8:51:8f:43:e6:
         dd:9f:08:07:92:bc:40:d8:1a:36:7d:b6:a8:5d:20:03:b9:52:
         d3:91:91:7a:f7:e3:a6:83:22:90:62:87:ea:7c:32:38:a8:bb:
         6f:58:a5:40:40:da:92:a4:4b:3e:89:c5:63:35:9d:f1:dd:bd:
         5d:fa:92:9a:6c:6b:47:eb:5e:07:e2:39:c7:72:20:7d:b8:88:
         cb:9b:7b:f9:e4:5e:37:3a:e0:7c:58:e4:44:b0:15:35:65:17:
         51:76:7e:8e:2e:cc:41:0e:cc:dc:0c:a3:d7:bd:5d:6a:74:35:
         7d:34:11:35:e1:7f:ab:f5:f3:f8:77:11:f5:89:51:b1:79:70:
         5f:d9:1b:08:f3:92:af:50:b0:4f:21:10:94:9a:a1:ed:83:88:
         f1:17:db:9e:94:1d:1c:08:41:63:8e:fa:62:d1:5d:0f:6f:d7:
         c8:3f:6c:9b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYuz2LWGorC+z/w3lqwfxvQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ5MjExNDU4MjBmZWNlZWYzY2Y1NTI3MDMyNmM1ZTEyNDNm
MjQzNTUwHhcNMjUwNDEzMTEwMTA1WhcNMjUwNDE0MTEwMTA1WjAzMTEwLwYDVQQD
EyhjMDEwN2UxYTNmMWZhMjZkMzkxMjJhYzVjMzI1ZDYwOGJiMGIzMzRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArBLEXSnsBpSt7U5e9XGDJv/egF9P
P14/dB/a/57aB48hO/2TnSTdt8JoyAQk2ezerJunb3AjgyzSSjikw7+KbBZVEHb/
MDWRjZEVttCD54UWNpuLQvwYOYBUm9KIllV7JwKXsPHU0k7TqHmrEciU4cFU1Ad9
mWUPMi2iZ20UjYMsLWYKoTkRjcFpJ4SdxU/Y8ilHOBSEySPGBaZkM+GDkgzlB3Cp
XIa4o06AVj2MO/aH0ZtnzJAM0JvrDWM3+qHKkkfD67PbaBtdKQlPRhgyzshtfRfk
jMN5vF+1FCWXPReJQzJnxeYoKUPrJJVoz5crMyQRBV6KbLsiOsA+QZ/zUQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMAQfho/H6JtORIqxcMl1gi7CzNPMB8GA1UdIwQY
MBaAFNkhFFgg/s7vPPVScDJsXhJD8kNVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMlNFVVdDRC16dTg4OVZKd01teGVFa1B5UTFVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMy8zMWE3ZDQtNDlhNC00ZDZmLThjOGQt
ZDgxNTJiNTE1N2Q4LzEvMlNFVVdDRC16dTg4OVZKd01teGVFa1B5UTFVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMy8zMWE3ZDQtNDlhNC00ZDZmLThjOGQtZDgxNTJiNTE1N2Q4
LzEvMlNFVVdDRC16dTg4OVZKd01teGVFa1B5UTFVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADU2cRCJi
sZRlKb8KTZV/xdQbdUyIz6sHzeyk8mQpNRBKopT/NLP+SwMqPcIM9XKFh16RUEsA
6wxrfKJkZAETiLhpFWqZ62TpXokaPehwLWKGjnSoNOhRj0Pm3Z8IB5K8QNgaNn22
qF0gA7lS05GRevfjpoMikGKH6nwyOKi7b1ilQEDakqRLPonFYzWd8d29XfqSmmxr
R+teB+I5x3IgfbiIy5t7+eReNzrgfFjkRLAVNWUXUXZ+ji7MQQ7M3Ayj171danQ1
fTQRNeF/q/Xz+HcR9YlRsXlwX9kbCPOSr1CwTyEQlJqh7YOI8RfbnpQdHAhBY476
YtFdD2/XyD9smw==
-----END CERTIFICATE-----