Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/7c3a18-0ec9-4157-bf5a-5207f664df21/1/FtMbLYmdbrK8t6TXjMMQDc4wyQw.mft
File:                     FtMbLYmdbrK8t6TXjMMQDc4wyQw.mft (raw, json)
Hash identifier:          kIy3tL/Kudl67q4bZHWofo9kPcZNGoJrxoCeip/ZT/U=
Subject key identifier:   E9:99:43:01:CE:E2:5A:31:68:A6:31:CA:03:0F:2B:B0:E9:46:2D:06
Authority key identifier: 16:D3:1B:2D:89:9D:6E:B2:BC:B7:A4:D7:8C:C3:10:0D:CE:30:C9:0C
Certificate issuer:       /CN=16d31b2d899d6eb2bcb7a4d78cc3100dce30c90c
Certificate serial:       01962ECF77A0AEEA2FE3EAB66ECD85E68C57
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FtMbLYmdbrK8t6TXjMMQDc4wyQw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ae/7c3a18-0ec9-4157-bf5a-5207f664df21/1/FtMbLYmdbrK8t6TXjMMQDc4wyQw.mft
Manifest number:          080A
Signing time:             Sun 13 Apr 2025 11:01:10 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:10 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:10 +0000
Files and hashes:         1: FtMbLYmdbrK8t6TXjMMQDc4wyQw.crl (hash: ULdNcB1DlUqZmMc3PP0ZatVxKgLI5Y2gBc2n9JPEtMA=)
                          2: g3b-X86nv3p6U9DOq4hCU_Dnmdo.roa (hash: 2YoEPjb/mUp/HqQp7Qak5HkOS9XgXc9API514lfVQEc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:77:a0:ae:ea:2f:e3:ea:b6:6e:cd:85:e6:8c:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=16d31b2d899d6eb2bcb7a4d78cc3100dce30c90c
        Validity
            Not Before: Apr 13 11:01:10 2025 GMT
            Not After : Apr 14 11:01:10 2025 GMT
        Subject: CN=e9994301cee25a3168a631ca030f2bb0e9462d06
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:f9:fb:a3:6b:ff:f9:68:8a:b3:1c:f6:1d:59:
                    61:e2:bf:7e:fd:a3:30:46:ea:5f:7f:ee:1e:de:82:
                    74:a5:9f:57:c1:8d:e8:74:99:c8:9c:bc:02:fe:8d:
                    1b:4b:15:c5:92:ac:eb:56:db:3f:54:4a:90:92:78:
                    a5:fb:07:80:91:59:69:cb:87:4b:a8:25:d8:f9:d9:
                    14:49:85:08:56:db:8e:ca:5a:5d:86:f3:9e:5a:c6:
                    92:1a:41:ad:ed:fb:1a:00:1b:a6:7f:c2:01:be:1e:
                    22:5a:4d:86:4b:30:c3:31:3a:80:41:fe:19:ee:d2:
                    af:14:18:90:6d:1f:90:17:6f:45:63:5f:5c:78:ab:
                    da:2f:47:c4:ad:0f:98:e9:6b:c9:aa:bf:9e:2e:10:
                    9f:f1:92:f0:a5:4e:2e:98:87:33:af:7e:97:b5:56:
                    ea:ce:33:4a:b6:0d:67:62:1d:eb:f9:79:9c:00:0f:
                    1a:04:f9:c9:1a:56:7a:11:64:69:d9:10:82:b9:69:
                    58:a9:0e:25:60:10:b7:73:64:a2:8f:7b:6e:4c:bd:
                    b7:a2:88:04:ce:80:81:52:4e:11:0c:65:1a:35:e1:
                    e1:49:3b:f8:68:2b:4f:9d:69:13:08:51:16:a0:63:
                    27:ed:7e:99:51:0f:a0:d6:2e:2f:8d:1d:d3:8e:2d:
                    c0:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:99:43:01:CE:E2:5A:31:68:A6:31:CA:03:0F:2B:B0:E9:46:2D:06
            X509v3 Authority Key Identifier:
                keyid:16:D3:1B:2D:89:9D:6E:B2:BC:B7:A4:D7:8C:C3:10:0D:CE:30:C9:0C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FtMbLYmdbrK8t6TXjMMQDc4wyQw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/7c3a18-0ec9-4157-bf5a-5207f664df21/1/FtMbLYmdbrK8t6TXjMMQDc4wyQw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/7c3a18-0ec9-4157-bf5a-5207f664df21/1/FtMbLYmdbrK8t6TXjMMQDc4wyQw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:f2:2c:df:45:0a:80:0e:02:3c:15:c2:e7:d6:d0:34:c0:08:
         b7:87:6b:00:86:1f:90:fb:01:1c:63:f0:75:1c:42:55:64:a0:
         80:2d:40:1d:e1:9d:75:44:f4:80:e7:6f:41:25:68:e0:1b:db:
         42:0a:8d:5e:01:75:e4:03:f3:29:ae:f3:42:76:84:24:8a:68:
         82:8f:fd:4f:fc:7b:0e:de:13:6d:8c:96:1a:94:a5:9c:8a:0e:
         4c:8a:8d:17:c0:04:98:ae:c0:0c:d9:19:ae:5b:f5:f5:fa:29:
         c1:86:b4:2f:65:81:db:56:7b:bd:70:8a:f6:67:4a:c0:d8:bd:
         60:26:9c:a4:00:f2:55:79:90:99:9d:5e:c5:d9:37:68:f3:c7:
         95:e5:99:82:3d:53:61:5c:73:5b:60:f7:02:b7:fb:0e:3e:cb:
         dd:07:30:e2:50:10:91:cf:1e:0a:51:26:ef:43:1d:a6:cd:ef:
         a5:86:30:ae:fd:66:79:0e:21:b0:60:73:6e:9f:6c:61:b3:d8:
         3a:fd:d1:d7:17:7d:42:3d:cf:d7:69:dd:55:07:5b:9a:9d:41:
         06:58:50:f4:50:39:1c:be:8f:0f:91:a8:9c:aa:80:aa:37:83:
         59:c5:b6:47:57:01:cc:35:68:48:b4:32:ce:85:f9:45:00:0a:
         a7:13:a8:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----