Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/SeUWlMTUa0_MAvrnHl25QqcQjkc.mft
File:                     SeUWlMTUa0_MAvrnHl25QqcQjkc.mft (raw, json)
Hash identifier:          wC2h4F9hA9QoftmL2IoPkVBl6/S5V1v3eONAAXKE/4A=
Subject key identifier:   95:A3:55:3F:5D:76:56:7A:3F:6C:CF:7D:43:07:01:1B:A2:0D:FF:51
Authority key identifier: 49:E5:16:94:C4:D4:6B:4F:CC:02:FA:E7:1E:5D:B9:42:A7:10:8E:47
Certificate issuer:       /CN=49e51694c4d46b4fcc02fae71e5db942a7108e47
Certificate serial:       01962E98A4B482DE9F9698728B2C17F31983
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SeUWlMTUa0_MAvrnHl25QqcQjkc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/SeUWlMTUa0_MAvrnHl25QqcQjkc.mft
Manifest number:          0B5C
Signing time:             Sun 13 Apr 2025 10:01:17 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:17 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:17 +0000
Files and hashes:         1: 3HEQhcEOqnMp9TI9xIKL4PSt8W0.roa (hash: iiGEol1UAzOhPwjCBYaXalraGFMujqIBu0vrH6mF0zc=)
                          2: 3swNa_xzTgP8AkYyLBBIrCVQ52s.roa (hash: VNJUFw+Fdi5x2QiAhG7d0Y2q6bY9iIUHwJCHJkGc3H0=)
                          3: CBCjLUswRko0Cnzo-CX-QWC1Fp4.roa (hash: f53uE7Cw7Q6eToEXvkRDQBQ+A2NwoovXPtUufkDoIoE=)
                          4: Ej3UGJeH-MXATc3afmzTS2n5tzY.roa (hash: /6NBuHzgOHteYZwPQoQQZqqS65Z8J8nkNzKfl3svtZk=)
                          5: HMWIckkJ0EFmlufS7jeHUcRkiZ8.roa (hash: wrTE46v7Pu8f0rMBrwmsZCyhCkVzBcDkMy40eUdiqdk=)
                          6: JT1Gn4I1wojtyOsoos31LCYAw2E.roa (hash: 0iaF6eooA8uQ67V8JvWKeNDGxUJHLFAo4B/klqFC+qI=)
                          7: KpADruS1t-FrRBApnlZPFJY044I.roa (hash: FblHHhnY1K4Tn2oDFypjs57NiKHIKxo90JdaB5VDVf0=)
                          8: OsTSkCOxPbkeHMOmTXfsLMS7woc.roa (hash: h+L9av8bXXKsaSR0XEI7iXB1ecuqXKwYJToOJUYyey4=)
                          9: SctNzyhU169wmkK7Xtfs0sGNJP8.roa (hash: NPxKypUk8s0b35zYRbm3Bc9hG9SBK1WYqLKdNIlF9qU=)
                          10: SeUWlMTUa0_MAvrnHl25QqcQjkc.crl (hash: XiLZQWnBf7OMXDi2IKF+tEJsWcLufnU3cQHbOf/pSJQ=)
                          11: UtsKYaswyHuE02j4W0pIwBksKks.roa (hash: lnWCCnMCWE2GH801EFlDSMJ7rs6Gz0jAkG4Ic8Ylwvk=)
                          12: W00xBD91CIN8dXZ5AMvwMZKAj7E.roa (hash: W71k5Ty54QTQy1zzm6WiQ5UlzJ7wtv9wzwbgHIVk10c=)
                          13: W13QjiXrftJDe5I4GISO_dSUsyA.roa (hash: OmpFewYVSiOwmDy2faHYiIokbRxXwpcWFXeLkG/LARo=)
                          14: XyN4iMC-QeUDeVxX2Yc8L54EQTk.roa (hash: 7CbPtnYACv3UoLBOw/vChU95YYclWi/Wqni8MfNNdIU=)
                          15: _AnCIflcegi1TG_Bv_AnfepaFiw.roa (hash: PoWkT5w8reeyRG+Mi9so0rpgs+gcKWwDhCVDFV2nfrQ=)
                          16: _oksDFSuMnMqsIgD2xIpQMBMthw.roa (hash: ea23MjnNhyR9HJDD5DM69trVWqfIriV9YcmUWE06hcg=)
                          17: b1fIABSYNIk_wfTaWhK1GpZPKt8.roa (hash: U82kIgLxTvdUQdNHSx7mK2pMDucJCtaoNPC8koSclMk=)
                          18: bvrHXhlsyzt8Cv_FZIDRq2zZAdI.roa (hash: s4oAgcR0OZeWrAcU2t0+mG/sob09+PDbt/Ebo74XbOw=)
                          19: bw4Iwz9bOYyFD-xqammwmJHMMa4.roa (hash: pwcE+xi66kROG+p5xDnCwV+2UvenePGTLhmbXAVGhCQ=)
                          20: dqdCGJIarF_fA_bp2OJUuyDhlUg.roa (hash: Fif7RHAQgWJkfwYtkxdDWVHz+hTK4+EvnpSylmo25qI=)
                          21: jKLif-TMdnx4gdmFScothAJ_J_U.roa (hash: z4kaspEVbDiBr+9rZCZXxVGjU31c7C+HRYCRX/q4eCY=)
                          22: m-g_tm-dDlPdk0elvgbebHGNY8I.roa (hash: 34AI0Bk8uDAgPTJzmwveFc3JyDgenHOyuvbkfx2CWHI=)
                          23: mGfyRjDRuTgx9y2ssaKRC9CnTI4.roa (hash: 2UqU980bJXZLE+Qc5pA1Y2aKIB/zyZpSy3xDygargsU=)
                          24: ncQqnXp43lHM-_e5L0Z57d-n3bU.roa (hash: JoIVnG9vKxPwRGcagpI9miw46X0QNprln802SO4MLf4=)
                          25: qBejieYPHiXf3qwcnFRqP1oJWow.roa (hash: BS8LSEZMHgFYhUk+EPbw5h9cw1iidedC/da9stciOYs=)
                          26: vu3gXxNtqWeVKe4P2LSMHjwmk90.roa (hash: yPp4Qt4ICx9Z3QKMiO76AjMJPiTd6H2m5YPVIHkBo1g=)
                          27: xK4UStYZpxl5WaBqzM4Z1Ma_r4g.roa (hash: AtvX/iaf8g7CiAoITeIvKvEKZQTERVLHMHXffA7KZCw=)
                          28: yCnHPt_QlorljwCIE4B10MsyWqI.roa (hash: TENhnHcII4d8rZezueGXqw73iSfWx/RlwAbf4BOb0vU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:a4:b4:82:de:9f:96:98:72:8b:2c:17:f3:19:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49e51694c4d46b4fcc02fae71e5db942a7108e47
        Validity
            Not Before: Apr 13 10:01:17 2025 GMT
            Not After : Apr 14 10:01:17 2025 GMT
        Subject: CN=95a3553f5d76567a3f6ccf7d4307011ba20dff51
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:4f:77:ea:25:b0:7a:a0:b7:2b:c4:3e:cd:8d:
                    0d:1e:7e:34:fe:60:52:a2:37:0f:93:a7:89:12:e7:
                    ed:37:bf:c1:69:d2:da:6d:f6:4b:d7:2d:19:23:70:
                    a0:9c:7a:12:62:23:2c:2d:b4:7c:74:f9:57:b4:8c:
                    10:2a:72:8f:c0:f0:8a:85:27:5b:3e:7b:46:c9:9e:
                    10:ff:5c:51:5b:a5:db:94:be:49:1d:07:96:ee:40:
                    21:fc:58:1d:c6:b1:72:b0:a5:7a:1a:2c:a3:8b:1d:
                    8f:bb:df:08:d4:a3:2e:5c:75:b5:1c:0a:8b:f1:f9:
                    4a:a7:46:02:af:cc:0b:89:d3:aa:b9:93:b4:30:18:
                    1d:b9:6b:a4:da:c9:3d:19:b7:d5:15:37:1e:68:40:
                    c2:4c:28:5f:1b:dd:9e:7f:a6:41:81:4c:d6:51:0b:
                    2d:8a:29:9b:25:19:d6:fe:10:2c:49:8e:f4:ec:26:
                    35:60:15:a6:b8:4e:03:89:97:3d:e2:4e:18:92:54:
                    33:40:e7:ef:c6:b9:ba:c0:73:b6:61:57:73:87:9b:
                    7b:21:c1:f4:b9:39:9b:0c:24:ea:f8:83:e1:07:f6:
                    f5:0e:20:97:50:76:a1:06:42:4c:95:94:bf:ee:b8:
                    83:95:26:79:c6:4d:27:89:53:f0:33:e8:11:7e:43:
                    d9:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:A3:55:3F:5D:76:56:7A:3F:6C:CF:7D:43:07:01:1B:A2:0D:FF:51
            X509v3 Authority Key Identifier:
                keyid:49:E5:16:94:C4:D4:6B:4F:CC:02:FA:E7:1E:5D:B9:42:A7:10:8E:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SeUWlMTUa0_MAvrnHl25QqcQjkc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/SeUWlMTUa0_MAvrnHl25QqcQjkc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/SeUWlMTUa0_MAvrnHl25QqcQjkc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:57:f3:2f:47:3b:82:30:4a:ad:8c:95:95:d1:71:c5:01:9d:
         c2:40:6a:e8:a4:91:f5:1f:eb:39:d2:8e:38:be:28:73:1f:b0:
         6a:52:ff:70:b7:d1:e7:90:09:eb:d1:5e:00:08:ea:b3:fd:32:
         76:56:87:98:84:24:bc:66:df:c5:1f:84:d1:35:ab:71:b4:49:
         0e:c7:52:0e:0c:fe:ef:ac:61:a4:f6:5c:d5:36:71:af:e9:7f:
         28:65:f0:bf:0d:5b:8d:bd:c3:be:16:92:dc:9c:05:fd:c4:93:
         6f:07:70:bb:f3:82:06:99:0b:52:54:61:d9:65:aa:27:b9:3c:
         ac:5d:73:d7:75:04:b8:57:40:44:c3:71:b0:48:fd:01:e5:e8:
         eb:61:a9:5c:86:92:9b:25:26:e0:cc:fc:75:05:43:3c:9e:14:
         22:9b:58:45:4d:b3:12:89:11:8f:0e:35:90:72:9f:8f:23:91:
         4d:99:0c:5a:80:59:9c:91:8e:0c:e8:48:68:4c:93:b7:ad:db:
         8b:8a:b5:10:27:cc:49:2a:f2:e3:d3:d8:8f:84:40:31:bd:fc:
         e6:9e:8a:7b:81:6a:21:96:11:0d:22:b7:78:bb:5a:70:96:25:
         10:f8:67:dd:58:3f:cb:dd:0e:4f:ed:88:e7:f6:13:7f:75:bb:
         c9:2a:1f:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----