Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/f499cd-fad6-4fb0-9be7-4a7904ffc8e1/1/sejPc4YgDf2psGfbnHfTBmDXTNo.mft
File:                     sejPc4YgDf2psGfbnHfTBmDXTNo.mft (raw, json)
Hash identifier:          zt1DFxcPlaERnESCwnIfEO/Wq3xdmK8VwzW3NutdZtY=
Subject key identifier:   9F:D3:7A:E4:CF:52:16:59:72:5C:0C:90:C7:52:64:22:5A:AF:2B:45
Authority key identifier: B1:E8:CF:73:86:20:0D:FD:A9:B0:67:DB:9C:77:D3:06:60:D7:4C:DA
Certificate issuer:       /CN=b1e8cf7386200dfda9b067db9c77d30660d74cda
Certificate serial:       01962DF3CB827E8F184404E4027EB2113AFC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sejPc4YgDf2psGfbnHfTBmDXTNo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5a/f499cd-fad6-4fb0-9be7-4a7904ffc8e1/1/sejPc4YgDf2psGfbnHfTBmDXTNo.mft
Manifest number:          0A03
Signing time:             Sun 13 Apr 2025 07:01:14 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:14 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:14 +0000
Files and hashes:         1: AXjvsvQT0QHgjGJCOykWGFNYr-c.roa (hash: 7RT23qfYCEUyYP4ewoJmIzu1W/Zc3geSmO8k80S5/ts=)
                          2: sejPc4YgDf2psGfbnHfTBmDXTNo.crl (hash: 1JNnAxHhQ6UwDP7is3eu+Ue+2UAUy1NuOgGkZiIb76Q=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f3:cb:82:7e:8f:18:44:04:e4:02:7e:b2:11:3a:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b1e8cf7386200dfda9b067db9c77d30660d74cda
        Validity
            Not Before: Apr 13 07:01:14 2025 GMT
            Not After : Apr 14 07:01:14 2025 GMT
        Subject: CN=9fd37ae4cf521659725c0c90c75264225aaf2b45
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:0a:63:03:cc:81:ab:2e:27:cd:16:78:65:40:
                    2d:b4:b4:80:2a:62:42:3f:42:ff:7f:39:bf:88:7f:
                    12:9f:3d:ef:df:3b:7d:2b:60:14:af:06:ff:0a:57:
                    1f:1b:ab:48:bd:65:b6:01:5c:f5:bb:df:47:ab:14:
                    71:56:0f:b3:02:57:fb:74:1d:a9:b7:21:2a:3f:40:
                    3b:8e:1c:ed:83:bb:8c:71:5c:b1:27:21:47:3f:4b:
                    67:bd:02:35:68:1a:a3:22:e9:90:a1:33:9b:4e:bf:
                    d5:d1:14:55:06:77:2d:72:85:5b:37:d9:87:03:36:
                    7d:ad:fb:75:2c:27:3b:50:96:23:d8:ff:7b:3b:20:
                    ff:6f:95:08:6e:61:0e:10:ce:16:2a:8e:0f:c4:ff:
                    9c:94:bb:4a:cb:08:58:45:09:90:92:e3:f1:2d:02:
                    fc:ab:af:49:ed:60:5c:4b:2e:fe:7c:d5:59:4b:dd:
                    97:b4:bb:4a:52:5b:3f:71:a1:f0:b8:b2:a7:77:b8:
                    21:c9:bb:1c:52:e8:0c:97:8b:f8:5b:78:fe:8d:aa:
                    3c:e7:0a:b5:6a:ea:f7:9e:ff:4e:9b:5c:ca:f8:6d:
                    a8:83:0d:a8:9a:72:ad:ff:8c:95:1e:db:e9:d1:bb:
                    b4:31:51:90:43:cc:47:0c:6f:d3:02:2c:57:d4:01:
                    90:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:D3:7A:E4:CF:52:16:59:72:5C:0C:90:C7:52:64:22:5A:AF:2B:45
            X509v3 Authority Key Identifier:
                keyid:B1:E8:CF:73:86:20:0D:FD:A9:B0:67:DB:9C:77:D3:06:60:D7:4C:DA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sejPc4YgDf2psGfbnHfTBmDXTNo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/f499cd-fad6-4fb0-9be7-4a7904ffc8e1/1/sejPc4YgDf2psGfbnHfTBmDXTNo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/f499cd-fad6-4fb0-9be7-4a7904ffc8e1/1/sejPc4YgDf2psGfbnHfTBmDXTNo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:7b:d4:9c:94:72:13:73:4a:34:cd:ec:f6:04:a6:8f:0e:91:
         4e:15:59:35:13:fc:6b:38:80:f0:30:46:25:c2:2a:cc:19:b7:
         6b:2c:c0:9c:ea:85:6f:dc:c5:d4:bd:48:f4:f5:64:b8:1d:d3:
         3b:a9:61:b6:6e:4b:c8:6f:5f:83:cb:a7:d4:8e:f0:2b:69:8a:
         c5:77:e8:35:e6:db:08:3d:36:63:61:6a:98:8d:50:dc:2b:4c:
         d3:b4:f1:53:ca:b3:8c:c9:77:59:b6:91:16:8d:c7:da:b3:1e:
         79:95:4f:c7:d6:15:7e:24:dd:48:94:5a:65:34:53:6e:a3:e8:
         9f:f3:5a:51:72:5d:e2:42:50:ec:5a:87:64:f1:6d:08:91:76:
         9c:6b:eb:ad:71:f2:9a:4f:de:aa:50:f8:03:20:53:b3:b5:d1:
         e3:0a:bc:31:3f:b8:70:f1:60:ea:c6:2e:c8:ef:86:56:5f:1e:
         e3:a9:70:47:8c:13:22:76:3b:d4:e6:b0:d7:f2:d5:f4:37:21:
         1c:80:cc:7b:24:18:f1:c7:85:e2:8a:55:19:89:b7:6b:fd:4b:
         70:05:3f:21:84:83:13:0e:dc:76:5b:c6:50:96:d3:1a:cc:7e:
         aa:cd:c9:4f:f0:e7:a3:8e:58:70:7a:91:88:e1:9a:c6:95:f2:
         57:e8:0e:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----