Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/1f63db-c963-44bc-a039-8aaa6a90ff95/1/fTBF_EkdOfUucUWxAAs7hsN97UU.mft
File:                     fTBF_EkdOfUucUWxAAs7hsN97UU.mft (raw, json)
Hash identifier:          Gsdz1eh5xK8xsyEPr79miWmeqmgaT92oRaMkwx8EwZ8=
Subject key identifier:   B8:4A:15:6F:21:90:80:DD:36:E3:C6:5D:A3:EB:31:35:53:52:4F:22
Authority key identifier: 7D:30:45:FC:49:1D:39:F5:2E:71:45:B1:00:0B:3B:86:C3:7D:ED:45
Certificate issuer:       /CN=7d3045fc491d39f52e7145b1000b3b86c37ded45
Certificate serial:       01962F3D2A6156B0647E67B813180EFA3011
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fTBF_EkdOfUucUWxAAs7hsN97UU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/76/1f63db-c963-44bc-a039-8aaa6a90ff95/1/fTBF_EkdOfUucUWxAAs7hsN97UU.mft
Manifest number:          14E8
Signing time:             Sun 13 Apr 2025 13:00:59 +0000
Manifest this update:     Sun 13 Apr 2025 13:00:59 +0000
Manifest next update:     Mon 14 Apr 2025 13:00:59 +0000
Files and hashes:         1: K4Lbu-PRsMurt2fUpQp-WCgArbs.roa (hash: 3LSqxDqKlKKQa1qqql+RiI3DEtvgTxuB2Pprc5JwA8Q=)
                          2: bGmJuHKC9r9iVbyoDDsXdRaZNn4.roa (hash: cFv1Kx/hvA8sFFYnUpS91+Kz1exkjjuW0Zq9NwB3OSk=)
                          3: fTBF_EkdOfUucUWxAAs7hsN97UU.crl (hash: 0rWtioMcEMigNCSRJeGETLIyPR20DDObUue0Z9/A354=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:2a:61:56:b0:64:7e:67:b8:13:18:0e:fa:30:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7d3045fc491d39f52e7145b1000b3b86c37ded45
        Validity
            Not Before: Apr 13 13:00:59 2025 GMT
            Not After : Apr 14 13:00:59 2025 GMT
        Subject: CN=b84a156f219080dd36e3c65da3eb313553524f22
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:38:25:00:44:2d:fc:07:f2:03:ed:9a:43:69:
                    58:57:08:b3:dd:97:bd:5c:49:6a:23:15:94:68:5b:
                    a2:65:b8:f1:c2:a4:94:c5:a6:9d:4a:4c:8e:c6:ab:
                    bc:9b:9a:85:78:83:0b:05:04:5b:83:35:34:20:72:
                    f3:8b:2e:64:91:6a:5d:5f:70:22:25:7c:a8:1c:0f:
                    a2:db:bb:a6:53:9a:a9:c2:f1:98:66:9d:fb:e7:78:
                    e8:4c:55:c2:1f:27:3e:95:0a:27:8b:f5:c2:9a:af:
                    e4:4c:d2:bb:76:01:2f:63:ec:83:3d:22:e6:49:43:
                    34:f5:e9:57:fe:06:fc:20:89:63:16:66:f8:ca:b7:
                    c1:47:4b:f2:56:cd:ef:b8:08:b2:20:5a:33:68:7c:
                    84:8e:92:a3:13:20:04:88:c9:ce:e1:73:e6:38:f0:
                    6f:35:94:73:ed:2d:8b:13:fb:8a:16:3e:c6:e8:63:
                    1a:a7:49:93:b3:3c:38:c5:39:72:4d:81:9a:b3:37:
                    19:de:e2:37:83:1a:1a:4f:67:29:12:f8:93:30:d7:
                    0b:6a:13:8b:90:6e:5f:55:c3:f1:c2:0d:8b:20:4c:
                    2f:79:e1:ed:01:23:fa:a5:3e:13:10:78:0b:a6:d9:
                    7b:58:c6:82:b6:0f:c8:70:5e:c4:a5:dc:c3:de:4a:
                    de:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:4A:15:6F:21:90:80:DD:36:E3:C6:5D:A3:EB:31:35:53:52:4F:22
            X509v3 Authority Key Identifier:
                keyid:7D:30:45:FC:49:1D:39:F5:2E:71:45:B1:00:0B:3B:86:C3:7D:ED:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fTBF_EkdOfUucUWxAAs7hsN97UU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/1f63db-c963-44bc-a039-8aaa6a90ff95/1/fTBF_EkdOfUucUWxAAs7hsN97UU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/76/1f63db-c963-44bc-a039-8aaa6a90ff95/1/fTBF_EkdOfUucUWxAAs7hsN97UU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:34:a8:1d:ee:90:15:fe:91:9c:ba:bb:06:6b:c8:d0:00:b0:
         56:f1:ee:ac:b5:35:03:df:2a:12:41:c3:c8:2d:f8:42:5b:ce:
         07:f1:38:17:95:55:03:6e:c5:93:e5:4c:5a:76:55:5d:a9:de:
         22:fa:a3:dd:31:c9:c8:41:92:ff:2a:13:04:73:15:fa:d8:fd:
         2d:12:a1:84:96:9b:45:6d:78:ee:5f:41:2c:8a:2f:28:76:0c:
         c3:61:b0:12:4a:f2:b6:2a:5b:7c:8f:65:53:2a:06:8c:d4:29:
         43:d5:71:b0:09:30:8a:3a:77:b8:19:ac:c7:61:43:e7:e3:a0:
         ac:7a:75:61:40:14:ec:74:e3:d1:27:32:01:5e:07:76:01:35:
         a8:8b:2d:40:c5:8d:24:9d:c4:e8:84:ab:01:f3:10:82:e9:ed:
         c8:0b:92:82:53:3e:d0:da:ff:b3:a6:19:f6:2e:15:ae:2d:2a:
         b3:03:9d:e6:0d:bd:be:1c:a5:5f:37:b0:d4:4f:eb:1b:19:d4:
         c5:51:12:c3:56:09:21:58:18:56:aa:8f:c4:33:21:a8:78:23:
         f0:70:25:46:6b:b7:fd:47:a2:22:ac:4d:bb:7a:13:7d:1b:8e:
         a3:c3:57:d5:f0:69:30:1b:25:6b:b3:21:e1:c2:ed:69:e8:29:
         97:87:d4:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----