Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/d75a9c-7cb9-4527-aaa1-89e27078b0fe/1/Frtbm9zrvdkzgc878jtIVFE1b58.mft
File:                     Frtbm9zrvdkzgc878jtIVFE1b58.mft (raw, json)
Hash identifier:          aP14aee9vPTWJjHiC6OhPpDkKu7u5+Mg+6QDZvEKF40=
Subject key identifier:   C8:57:18:51:A4:BB:44:9C:EB:C0:07:EB:BD:DD:16:A1:8C:DB:0B:0B
Authority key identifier: 16:BB:5B:9B:DC:EB:BD:D9:33:81:CF:3B:F2:3B:48:54:51:35:6F:9F
Certificate issuer:       /CN=16bb5b9bdcebbdd93381cf3bf23b485451356f9f
Certificate serial:       01962E999A5C873B8E31DAB9B636A151CBE8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Frtbm9zrvdkzgc878jtIVFE1b58.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/45/d75a9c-7cb9-4527-aaa1-89e27078b0fe/1/Frtbm9zrvdkzgc878jtIVFE1b58.mft
Manifest number:          14E6
Signing time:             Sun 13 Apr 2025 10:02:20 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:20 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:20 +0000
Files and hashes:         1: Frtbm9zrvdkzgc878jtIVFE1b58.crl (hash: MJCrgjfmfBxej2NlmJlhb3ILgxjOE0RzYy2unXzO0Bo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:9a:5c:87:3b:8e:31:da:b9:b6:36:a1:51:cb:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=16bb5b9bdcebbdd93381cf3bf23b485451356f9f
        Validity
            Not Before: Apr 13 10:02:20 2025 GMT
            Not After : Apr 14 10:02:20 2025 GMT
        Subject: CN=c8571851a4bb449cebc007ebbddd16a18cdb0b0b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:9d:11:c6:57:fb:3c:cc:fb:0e:01:7b:c4:4e:
                    c8:f0:2d:0e:c5:84:39:d8:84:9f:08:ab:2d:25:8d:
                    a2:aa:e4:d8:08:62:e0:b3:8a:f6:64:c3:f3:33:54:
                    1f:df:f0:a9:c5:9e:7b:24:4b:30:37:27:0d:34:e3:
                    ca:4f:d2:0b:bb:f4:da:a9:b4:bd:d5:bf:f5:03:30:
                    90:da:60:64:c6:62:87:5f:9a:ce:94:57:58:27:1a:
                    bc:ba:2e:19:a5:fb:ae:f6:12:91:e2:22:24:38:6f:
                    91:6c:38:6d:67:68:39:7f:f5:0b:9f:d7:a6:ff:90:
                    c4:44:d5:1d:64:5e:bb:0d:f4:6b:b4:93:f7:88:bc:
                    d0:d0:f1:cc:94:87:0f:c5:71:4d:de:37:b5:05:be:
                    e7:4d:b1:ba:16:b1:21:4a:50:19:e7:4a:b5:05:cc:
                    2b:f5:33:0b:c8:c8:bc:03:59:5b:e5:14:86:ab:ac:
                    cb:7f:bc:7b:ec:16:0e:6f:fb:2c:76:f3:ab:a6:be:
                    ee:a5:18:4f:bb:9c:ea:94:55:0b:24:9e:d8:83:c2:
                    3a:f1:93:ac:1a:c8:5f:d9:4d:c0:2d:4e:f1:3b:9a:
                    d0:c9:17:33:52:42:41:3d:2f:ef:3e:11:80:9c:a6:
                    f8:2c:5a:60:a3:8e:67:f1:4e:f4:08:a7:4e:9b:08:
                    3c:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:57:18:51:A4:BB:44:9C:EB:C0:07:EB:BD:DD:16:A1:8C:DB:0B:0B
            X509v3 Authority Key Identifier:
                keyid:16:BB:5B:9B:DC:EB:BD:D9:33:81:CF:3B:F2:3B:48:54:51:35:6F:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Frtbm9zrvdkzgc878jtIVFE1b58.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/d75a9c-7cb9-4527-aaa1-89e27078b0fe/1/Frtbm9zrvdkzgc878jtIVFE1b58.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/45/d75a9c-7cb9-4527-aaa1-89e27078b0fe/1/Frtbm9zrvdkzgc878jtIVFE1b58.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:ce:a2:8f:99:3d:2a:35:1c:c2:85:ad:3a:c5:65:6a:b7:61:
         36:87:41:7c:31:24:86:b7:2f:35:a0:c3:21:57:f7:83:ab:85:
         f6:cc:c1:43:f7:47:97:ab:68:51:1f:f6:d8:28:d0:37:8d:81:
         e3:06:9f:83:9d:ef:54:99:2d:1e:46:d0:d7:e5:89:4e:c0:c0:
         fd:7b:82:d2:b4:af:6c:53:5a:41:ad:39:57:cf:87:31:16:0c:
         05:44:3d:d2:41:c0:b3:8a:62:9d:48:31:57:e0:3b:e5:c9:2a:
         01:cd:23:36:46:03:c2:13:df:4c:5b:8a:04:2c:25:31:de:b7:
         6f:d1:ec:78:f7:91:8b:c0:8e:bf:2f:79:eb:a6:5c:a3:3f:fd:
         4c:3b:fe:f9:63:a6:21:6c:8e:aa:ab:6a:a8:a1:57:62:68:a8:
         ea:0a:81:98:91:32:e2:5d:6f:dd:eb:d3:9b:59:bd:a5:b8:64:
         9f:88:37:41:7e:68:89:39:05:fb:0f:c0:79:59:36:80:e2:43:
         97:0e:f3:c9:6c:97:32:2a:ca:6b:4c:10:6c:57:4d:03:be:14:
         a4:82:b0:f0:d3:bc:ce:7f:73:da:ff:4a:57:9c:2a:5d:97:18:
         46:dd:45:29:0f:da:f3:28:f0:30:fc:e7:21:70:17:4c:99:3f:
         05:b0:8a:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----