Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/da3e5a-3002-41b0-af9a-3a73c333e7e7/1/ARmUscWuj1grvs9ndysUttl3uqw.mft
File:                     ARmUscWuj1grvs9ndysUttl3uqw.mft (raw, json)
Hash identifier:          N8jZFD8F8ttkSZ/5z7+sknt0SJcDuQxnM7tbEC28geg=
Subject key identifier:   78:E3:67:FB:3E:94:A9:6E:87:9C:7C:6B:EE:A2:B4:FD:A6:60:12:1A
Authority key identifier: 01:19:94:B1:C5:AE:8F:58:2B:BE:CF:67:77:2B:14:B6:D9:77:BA:AC
Certificate issuer:       /CN=011994b1c5ae8f582bbecf67772b14b6d977baac
Certificate serial:       01962F3D9DB2CABA679F3F81F0B75D887E88
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ARmUscWuj1grvs9ndysUttl3uqw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ad/da3e5a-3002-41b0-af9a-3a73c333e7e7/1/ARmUscWuj1grvs9ndysUttl3uqw.mft
Manifest number:          0402
Signing time:             Sun 13 Apr 2025 13:01:29 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:29 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:29 +0000
Files and hashes:         1: ARmUscWuj1grvs9ndysUttl3uqw.crl (hash: FGARy+lWSUDJlfXxmcKTKkPjd+Jwggwig72A8rfJQnk=)
                          2: NFxIuk4KnMOoaK7t1Cp4prQGCpc.roa (hash: qLz7+g7LrMIsBpRTz+960ZyB6BF4g8W2iE+TmwJoilE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:9d:b2:ca:ba:67:9f:3f:81:f0:b7:5d:88:7e:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=011994b1c5ae8f582bbecf67772b14b6d977baac
        Validity
            Not Before: Apr 13 13:01:29 2025 GMT
            Not After : Apr 14 13:01:29 2025 GMT
        Subject: CN=78e367fb3e94a96e879c7c6beea2b4fda660121a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:cb:72:cd:d1:e6:67:53:98:69:eb:01:3b:74:
                    9d:f8:11:b6:01:28:b8:78:6f:c5:6b:9e:ff:74:4a:
                    9a:52:b8:e3:de:b9:c8:9d:3e:41:3b:77:1a:c5:dc:
                    1f:90:e1:fb:2d:26:93:cb:54:30:00:43:f7:69:c8:
                    db:b4:24:fc:9f:ae:8d:02:c4:0c:1c:ee:23:6e:05:
                    56:86:46:a6:90:d1:c1:13:56:6b:68:2a:33:b4:2b:
                    60:40:5d:46:b6:65:88:49:a2:91:b1:68:4f:bf:b4:
                    c4:a5:f8:5d:f9:a6:ba:d0:2f:cf:9e:48:4e:8f:0f:
                    13:69:9e:43:5c:42:cb:be:69:b0:d6:68:2f:aa:68:
                    d1:c1:52:91:d1:b6:98:39:4e:ac:18:35:72:70:04:
                    26:10:99:69:7a:ff:88:48:d3:e5:41:bd:76:1f:c9:
                    04:fd:72:2f:bb:b0:ad:f3:97:cd:c3:71:b3:b8:ad:
                    80:0f:cf:73:c7:ee:7f:8f:ed:7f:24:28:b0:77:95:
                    fa:61:a5:7b:6c:ad:21:51:91:0a:95:7e:b8:c3:cc:
                    9d:05:7f:2d:11:33:d8:16:1d:56:66:34:86:a7:73:
                    38:77:21:83:a9:2c:c3:29:87:99:59:5d:ce:bb:44:
                    bb:b7:24:c9:97:e0:32:d6:08:4e:c8:c0:04:30:fa:
                    10:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:E3:67:FB:3E:94:A9:6E:87:9C:7C:6B:EE:A2:B4:FD:A6:60:12:1A
            X509v3 Authority Key Identifier:
                keyid:01:19:94:B1:C5:AE:8F:58:2B:BE:CF:67:77:2B:14:B6:D9:77:BA:AC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ARmUscWuj1grvs9ndysUttl3uqw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/da3e5a-3002-41b0-af9a-3a73c333e7e7/1/ARmUscWuj1grvs9ndysUttl3uqw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/da3e5a-3002-41b0-af9a-3a73c333e7e7/1/ARmUscWuj1grvs9ndysUttl3uqw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:c0:1f:01:47:4a:bb:b4:13:ea:61:3f:6d:5b:21:a1:87:e1:
         b9:00:21:88:5d:72:7e:26:3c:bf:dd:06:65:ac:1d:ff:3c:89:
         66:3e:1a:a1:5a:e1:d1:f8:24:26:6e:40:38:a0:a6:15:12:62:
         83:6c:ea:32:7c:d9:59:63:a9:0a:26:33:d0:af:b7:ed:f9:95:
         bf:39:10:a3:8a:da:a3:3b:bb:2c:51:85:60:ee:68:eb:dd:88:
         f9:01:b3:7e:00:b2:93:3f:a5:88:fc:57:73:f9:f6:1a:86:fc:
         3c:ad:78:37:54:03:fc:04:f4:2b:40:70:29:e1:11:03:7d:f8:
         f2:b7:2f:60:66:dc:cc:1e:5e:6c:5c:ff:30:ba:b9:a4:bf:0e:
         de:c1:9c:4d:ca:a3:f0:d6:04:65:07:f9:67:5e:46:be:fa:b6:
         6b:b9:67:8c:96:ba:50:5d:e6:8e:aa:5f:4e:cd:aa:a6:6e:8c:
         32:3c:40:f3:4c:78:78:df:8e:a7:45:de:7f:08:28:b6:c3:1e:
         a3:a1:92:c7:e4:8f:ed:6e:3b:04:23:88:bd:df:d5:46:55:b0:
         4b:7b:ee:a8:2f:71:fe:69:ba:3b:25:f9:7d:07:30:ed:d2:77:
         04:45:2f:a4:5a:bc:85:7a:2b:d2:c4:a0:1c:44:86:89:a8:58:
         73:7f:cb:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----