Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/7b5a34-baad-4422-ad3d-be272975248e/1/ar_WA8cUHPY0bXXcFMCINTWWjMo.mft
File:                     ar_WA8cUHPY0bXXcFMCINTWWjMo.mft (raw, json)
Hash identifier:          5yLuNdJFZ2SKfo5GStNX3ZfZcj2bXBPks+ovFictX1s=
Subject key identifier:   1E:D2:52:A9:06:4C:7F:F0:79:BC:69:A8:8F:B7:10:51:BC:19:3B:A3
Authority key identifier: 6A:BF:D6:03:C7:14:1C:F6:34:6D:75:DC:14:C0:88:35:35:96:8C:CA
Certificate issuer:       /CN=6abfd603c7141cf6346d75dc14c0883535968cca
Certificate serial:       01948F635BC8CADE7D078B9F3502901E36DF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ar_WA8cUHPY0bXXcFMCINTWWjMo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/64/7b5a34-baad-4422-ad3d-be272975248e/1/ar_WA8cUHPY0bXXcFMCINTWWjMo.mft
Manifest number:          085E
Signing time:             Wed 22 Jan 2025 19:00:40 +0000
Manifest this update:     Wed 22 Jan 2025 19:00:40 +0000
Manifest next update:     Thu 23 Jan 2025 19:00:40 +0000
Files and hashes:         1: ar_WA8cUHPY0bXXcFMCINTWWjMo.crl (hash: NnTWEfmKVFCOkYI5fZG8v3KAxxdtxiixXDtQBh6nG8Q=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:8f:63:5b:c8:ca:de:7d:07:8b:9f:35:02:90:1e:36:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6abfd603c7141cf6346d75dc14c0883535968cca
        Validity
            Not Before: Jan 22 19:00:40 2025 GMT
            Not After : Jan 23 19:00:40 2025 GMT
        Subject: CN=1ed252a9064c7ff079bc69a88fb71051bc193ba3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:08:5a:26:55:10:b3:ad:6d:62:67:77:29:25:
                    f4:6c:3c:02:cf:a2:c3:d8:05:09:5d:f2:56:f0:8c:
                    1b:7d:93:2a:e7:5b:0e:40:b4:b7:8b:5f:75:48:e6:
                    60:87:5e:2f:fc:4a:12:70:3d:57:b5:a6:6a:00:f6:
                    97:c7:a3:41:ae:b7:2d:e7:99:dc:ad:e2:02:cd:48:
                    24:d8:40:c0:14:ab:5f:42:7b:17:c0:3b:e2:9d:ff:
                    ff:a0:31:3a:bf:df:dd:49:3d:70:9d:29:fd:84:90:
                    40:eb:1f:13:81:47:82:0d:e1:24:21:d2:38:dd:37:
                    f6:43:de:f8:fb:d7:cd:2f:b6:9c:db:d3:b6:c0:f0:
                    a9:eb:75:89:d5:d3:56:a1:e6:5e:4a:85:76:af:56:
                    cb:33:d2:89:49:43:63:b1:9d:b6:e2:8c:e8:a0:d0:
                    37:61:de:c2:63:ed:df:42:61:9e:f2:51:f7:0d:7f:
                    d3:89:bc:9d:0f:da:97:64:38:8a:bc:0d:14:fc:0b:
                    4d:84:a2:63:4a:0d:7d:49:d7:74:b3:67:e4:f5:cc:
                    dc:37:09:fb:2f:a1:9e:d7:92:7a:78:c5:d9:62:12:
                    0a:23:af:1c:f3:0b:8c:9c:fe:18:21:9f:b8:7c:01:
                    5b:12:fd:55:c3:f3:be:b7:24:68:48:9e:af:9b:1e:
                    49:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:D2:52:A9:06:4C:7F:F0:79:BC:69:A8:8F:B7:10:51:BC:19:3B:A3
            X509v3 Authority Key Identifier:
                keyid:6A:BF:D6:03:C7:14:1C:F6:34:6D:75:DC:14:C0:88:35:35:96:8C:CA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ar_WA8cUHPY0bXXcFMCINTWWjMo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/7b5a34-baad-4422-ad3d-be272975248e/1/ar_WA8cUHPY0bXXcFMCINTWWjMo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/64/7b5a34-baad-4422-ad3d-be272975248e/1/ar_WA8cUHPY0bXXcFMCINTWWjMo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:f6:48:d8:b5:86:2e:ff:24:e3:1c:50:4b:fd:4e:10:24:24:
         4e:2a:e7:2a:90:48:b0:3c:ed:8d:64:5c:a6:c7:32:f4:a1:95:
         98:ee:e7:a6:2b:07:ba:d9:fd:c6:1e:a3:b3:e9:08:8f:0d:51:
         86:a3:b6:62:1b:39:ac:3a:b2:54:bb:fd:d9:0e:75:6b:05:a5:
         75:09:dd:8a:04:fd:a6:31:31:c2:8d:83:a3:80:8b:c8:ae:a2:
         dd:1c:64:f7:05:77:1b:db:8d:c0:a8:0b:be:46:fb:1f:46:7f:
         6e:ad:56:21:c1:51:7b:71:07:b6:5c:01:c0:66:d7:2e:50:76:
         c5:a8:36:07:96:3b:70:b5:f2:9b:9a:8f:1f:b6:9d:ce:9e:57:
         54:0a:9e:7d:ca:ca:fc:65:f7:60:11:05:c9:a7:79:8a:a8:f0:
         52:96:10:37:b9:8e:81:72:25:68:98:b0:5a:81:e2:ea:e4:46:
         b4:eb:67:02:6a:d8:20:a0:bd:e5:99:43:eb:d8:58:44:8b:c3:
         f8:31:ca:e3:3f:52:fc:e7:af:87:c9:e2:9e:30:4a:ff:41:7f:
         57:12:32:28:8b:7a:3c:c3:01:87:4f:db:34:79:28:d3:77:98:
         52:d8:54:5c:49:66:95:a4:4d:e4:8a:14:ec:11:bf:10:8d:1c:
         94:b5:f5:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----