Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/136156-0753-4072-92b0-1407c08db582/1/Ftls9BCaSoXRhjv1SqT6PoHgwOY.mft
File:                     Ftls9BCaSoXRhjv1SqT6PoHgwOY.mft (raw, json)
Hash identifier:          phXTx4EQo850pjcJqQWOUXmZRSGNNhIBg8bQwHX07wE=
Subject key identifier:   B8:55:E9:80:5C:05:CD:2C:43:D0:34:18:D5:B8:99:12:DD:35:F0:91
Authority key identifier: 16:D9:6C:F4:10:9A:4A:85:D1:86:3B:F5:4A:A4:FA:3E:81:E0:C0:E6
Certificate issuer:       /CN=16d96cf4109a4a85d1863bf54aa4fa3e81e0c0e6
Certificate serial:       01962F3D7E3DD13EC4D203C3989C2878B735
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ftls9BCaSoXRhjv1SqT6PoHgwOY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b5/136156-0753-4072-92b0-1407c08db582/1/Ftls9BCaSoXRhjv1SqT6PoHgwOY.mft
Manifest number:          14EC
Signing time:             Sun 13 Apr 2025 13:01:21 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:21 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:21 +0000
Files and hashes:         1: 1-bqNZN34Z6tA08rjf9Ue9gz9z4M.roa (hash: ZBK1wDofmlTI3jgUly3vW6cc/crra2evnmHTHJR0jqI=)
                          2: Ftls9BCaSoXRhjv1SqT6PoHgwOY.crl (hash: JN/3Bl8UigGLk5dmvTZxUi/yxs5KrknYN2jL7ahsXtg=)
                          3: TVDjYzkETmBCT7v1_fe4s6H8gEU.roa (hash: zxaM+TU0HD4P7dxOW2gfkICzMAb8AYSlKoeUfD1Wv0k=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:7e:3d:d1:3e:c4:d2:03:c3:98:9c:28:78:b7:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=16d96cf4109a4a85d1863bf54aa4fa3e81e0c0e6
        Validity
            Not Before: Apr 13 13:01:21 2025 GMT
            Not After : Apr 14 13:01:21 2025 GMT
        Subject: CN=b855e9805c05cd2c43d03418d5b89912dd35f091
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:8e:9f:a7:72:d7:d2:28:46:c6:6d:54:a7:2b:
                    21:07:b6:50:09:6b:d6:42:20:8c:1a:41:4e:8f:4e:
                    79:90:36:86:ab:b7:77:ec:e5:17:5f:0b:36:42:ef:
                    b3:2e:53:ba:95:c2:95:32:dd:53:9f:3d:5f:c9:34:
                    36:76:00:5f:24:d1:97:37:45:39:4e:60:3a:8b:52:
                    21:93:96:7e:80:5e:fd:f4:3e:10:d4:c2:1b:ca:75:
                    f2:2d:4b:af:0f:3f:bf:21:22:7f:1e:3e:1d:60:ac:
                    11:ed:1c:d7:ed:93:f6:e9:f1:cc:5d:e2:60:b6:e5:
                    b0:f4:89:a1:05:ab:a2:48:1f:7c:ca:5c:6e:aa:80:
                    4c:68:db:f7:68:55:97:e8:f1:a4:29:86:9b:1c:0c:
                    21:81:1d:22:82:76:a2:38:15:5a:a7:f5:01:c8:a1:
                    da:aa:64:36:1f:b1:51:b6:8f:fc:89:dd:c3:02:07:
                    c1:c0:ca:29:93:e5:ab:f9:79:4b:19:25:7b:3f:49:
                    f6:52:76:83:ca:ff:d0:eb:8b:12:c0:88:bb:ca:a3:
                    28:09:5a:8e:3f:45:16:18:5a:e5:d9:39:70:28:94:
                    9e:5d:78:74:10:56:47:fe:d6:e5:d6:41:27:de:4a:
                    5a:14:ef:d8:c4:41:40:14:d9:8e:4e:bd:a4:5c:53:
                    71:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:55:E9:80:5C:05:CD:2C:43:D0:34:18:D5:B8:99:12:DD:35:F0:91
            X509v3 Authority Key Identifier:
                keyid:16:D9:6C:F4:10:9A:4A:85:D1:86:3B:F5:4A:A4:FA:3E:81:E0:C0:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ftls9BCaSoXRhjv1SqT6PoHgwOY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/136156-0753-4072-92b0-1407c08db582/1/Ftls9BCaSoXRhjv1SqT6PoHgwOY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/136156-0753-4072-92b0-1407c08db582/1/Ftls9BCaSoXRhjv1SqT6PoHgwOY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:14:b7:99:70:5d:a0:ba:3f:10:ef:40:e2:5a:48:da:3c:f5:
         e9:63:e7:ca:e3:d5:34:88:de:6e:e2:92:09:10:86:e5:01:2e:
         59:f0:45:16:50:2a:fa:17:56:6c:60:97:f9:22:25:ee:6e:5d:
         87:3a:a2:30:1f:87:d1:30:7f:bf:a8:15:49:04:65:99:d1:a1:
         c9:f2:5b:12:9f:b2:31:f2:0d:64:96:27:27:c9:bc:8c:97:4c:
         b9:70:99:c3:ab:eb:27:8a:71:57:6e:3e:bd:c7:aa:f0:23:4f:
         76:7b:8f:0d:da:76:cf:65:3e:16:78:2d:9b:35:98:c1:b2:c3:
         aa:f5:06:f3:91:86:d8:4e:bf:28:d9:0b:5f:53:4f:32:72:47:
         34:b2:b3:17:f7:aa:91:21:09:be:ec:88:95:e8:3b:48:5d:06:
         84:ab:0d:e4:e3:f0:6e:de:62:54:1f:20:11:5a:e6:71:28:08:
         6a:bc:9d:79:f8:f4:0c:eb:a1:a0:ec:f0:06:4d:1f:4f:63:66:
         73:59:7f:46:a8:f3:a6:87:7b:3e:01:fe:24:85:1c:95:70:9b:
         40:51:70:2f:0b:d3:8e:2a:58:2b:6b:61:ab:2b:9c:1a:3f:c5:
         ed:9d:73:f9:e6:2f:bd:c3:ef:13:33:c8:83:75:21:7d:db:1c:
         95:26:05:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----