Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/a8947f-e52c-4de1-bade-70c0a506d797/1/ArmAwQ1xEPkf_54OzrY52edbNeI.mft
File:                     ArmAwQ1xEPkf_54OzrY52edbNeI.mft (raw, json)
Hash identifier:          e7FlCfyVUcDAvHn+cf3oHVO5M3k6PJNsZNNcEq86GMs=
Subject key identifier:   AF:CC:C6:95:8B:01:FF:F0:88:91:57:31:45:2A:69:CB:E6:FE:5A:E7
Authority key identifier: 02:B9:80:C1:0D:71:10:F9:1F:FF:9E:0E:CE:B6:39:D9:E7:5B:35:E2
Certificate issuer:       /CN=02b980c10d7110f91fff9e0eceb639d9e75b35e2
Certificate serial:       01962ECF8C1B8FBABC08C9D497F79135DF56
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ArmAwQ1xEPkf_54OzrY52edbNeI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cf/a8947f-e52c-4de1-bade-70c0a506d797/1/ArmAwQ1xEPkf_54OzrY52edbNeI.mft
Manifest number:          1024
Signing time:             Sun 13 Apr 2025 11:01:15 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:15 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:15 +0000
Files and hashes:         1: ArmAwQ1xEPkf_54OzrY52edbNeI.crl (hash: zKZA18Uaf0w5O64+BonmDfzkToDraKsM1l29GJBuelk=)
                          2: RN98TJ7kqQI5BuSnvdMcE3q1sxc.roa (hash: YxQcvIdmH83Dh0Q3zwPjsii4N4gNYgzKFTXwaXCIS7Y=)
                          3: eIZENcgK1XZflT_O-9vOWF5_c5k.roa (hash: 72shYqXGHw00bwK02sJ1cpdaJwagVhfPsDZJsD/Kbnk=)
                          4: pw-uXfj6mcJrqBi6AQ_DbhRWlvc.roa (hash: F9GSSa/n4nzQc1So+eTia4zHzLGf70ctYWS6RuL9cmE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:8c:1b:8f:ba:bc:08:c9:d4:97:f7:91:35:df:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=02b980c10d7110f91fff9e0eceb639d9e75b35e2
        Validity
            Not Before: Apr 13 11:01:15 2025 GMT
            Not After : Apr 14 11:01:15 2025 GMT
        Subject: CN=afccc6958b01fff088915731452a69cbe6fe5ae7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:79:4b:a6:b7:91:25:30:16:48:c3:2c:d3:59:
                    c0:b9:16:eb:1b:1e:b7:5b:49:7e:67:c6:ba:41:f8:
                    12:2b:55:ab:af:2a:18:8e:60:15:50:95:4d:d3:6d:
                    d1:14:f6:3b:89:5c:81:14:45:78:0e:ae:fb:31:90:
                    fd:9c:bf:89:96:f9:54:5b:bd:a0:9e:de:fc:50:5b:
                    fc:0a:f1:9b:11:80:01:23:33:7c:4c:4e:5e:f3:0a:
                    35:66:d8:65:04:20:b2:45:25:11:c1:d0:94:93:dd:
                    21:5b:fa:9e:a9:fd:92:3c:6d:71:f2:4f:aa:8e:94:
                    5d:0b:89:08:63:45:0f:9c:56:a1:dc:ee:6b:55:ca:
                    44:3c:1b:65:9b:da:85:9f:54:80:53:00:89:21:6a:
                    28:19:78:c6:47:c5:92:b3:c9:3d:d3:66:2b:74:6b:
                    25:96:55:eb:90:f1:bd:2e:41:45:dc:60:d2:c3:cc:
                    89:0c:27:bc:2e:3e:31:1b:99:7b:ce:76:43:80:7e:
                    58:0c:bc:af:b0:be:88:03:c2:bb:83:f2:98:61:b1:
                    86:72:70:a2:13:15:8c:e1:83:9f:e2:cc:97:0e:bc:
                    cf:ca:87:d3:03:db:18:0e:0b:aa:43:ba:22:b2:82:
                    6e:ed:43:78:f1:21:19:ad:9e:91:ab:ce:f2:a1:64:
                    89:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:CC:C6:95:8B:01:FF:F0:88:91:57:31:45:2A:69:CB:E6:FE:5A:E7
            X509v3 Authority Key Identifier:
                keyid:02:B9:80:C1:0D:71:10:F9:1F:FF:9E:0E:CE:B6:39:D9:E7:5B:35:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ArmAwQ1xEPkf_54OzrY52edbNeI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/a8947f-e52c-4de1-bade-70c0a506d797/1/ArmAwQ1xEPkf_54OzrY52edbNeI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/a8947f-e52c-4de1-bade-70c0a506d797/1/ArmAwQ1xEPkf_54OzrY52edbNeI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:79:c5:80:3d:d9:1c:b0:4d:ab:5a:0c:3e:19:f8:1e:28:62:
         29:2a:ad:2b:16:a4:27:ff:d4:f7:da:ed:93:d8:06:f8:29:be:
         15:ea:76:2f:8c:12:33:e3:5f:99:1f:f4:bd:04:52:ae:3b:48:
         fa:7e:56:5e:3c:0a:80:04:13:aa:56:f9:ee:10:44:91:67:2c:
         36:83:2b:a0:ee:7f:f0:fd:e1:f9:de:17:d1:15:6d:65:84:01:
         69:93:4e:07:4f:5b:99:26:d1:74:54:1d:ae:91:76:dd:ba:cd:
         fa:28:61:53:16:f5:2c:ac:63:78:d8:2c:ba:b2:56:56:77:42:
         c5:c2:5b:c3:35:d3:58:e9:7f:26:08:49:8e:5b:b1:42:6c:ff:
         8d:ef:68:77:89:6d:f2:54:a5:b7:98:af:61:71:20:d6:13:19:
         8d:8a:73:33:f9:92:11:31:c8:f4:a6:10:ae:19:c7:08:71:29:
         51:0e:52:ab:46:69:1a:b5:fa:90:ff:54:5c:a6:38:7f:a0:c1:
         de:54:a5:ca:10:85:52:d7:57:b2:0c:e6:21:05:0a:47:3b:8f:
         b3:21:24:10:26:12:1b:03:bd:b7:12:d6:a9:2d:66:5b:0d:4f:
         ed:46:ca:4c:8b:01:0d:11:ec:b7:4a:4e:75:0b:14:4f:05:7a:
         26:ed:fc:b7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYuz4wbj7q8CMnUl/eRNd9WMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAyYjk4MGMxMGQ3MTEwZjkxZmZmOWUwZWNlYjYzOWQ5ZTc1
YjM1ZTIwHhcNMjUwNDEzMTEwMTE1WhcNMjUwNDE0MTEwMTE1WjAzMTEwLwYDVQQD
EyhhZmNjYzY5NThiMDFmZmYwODg5MTU3MzE0NTJhNjljYmU2ZmU1YWU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtHlLpreRJTAWSMMs01nAuRbrGx63
W0l+Z8a6QfgSK1WrryoYjmAVUJVN023RFPY7iVyBFEV4Dq77MZD9nL+JlvlUW72g
nt78UFv8CvGbEYABIzN8TE5e8wo1ZthlBCCyRSURwdCUk90hW/qeqf2SPG1x8k+q
jpRdC4kIY0UPnFah3O5rVcpEPBtlm9qFn1SAUwCJIWooGXjGR8WSs8k902YrdGsl
llXrkPG9LkFF3GDSw8yJDCe8Lj4xG5l7znZDgH5YDLyvsL6IA8K7g/KYYbGGcnCi
ExWM4YOf4syXDrzPyofTA9sYDguqQ7oisoJu7UN48SEZrZ6Rq87yoWSJ0QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK/MxpWLAf/wiJFXMUUqacvm/lrnMB8GA1UdIwQY
MBaAFAK5gMENcRD5H/+eDs62OdnnWzXiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQXJtQXdRMXhFUGtmXzU0T3pyWTUyZWRiTmVJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZi9hODk0N2YtZTUyYy00ZGUxLWJhZGUt
NzBjMGE1MDZkNzk3LzEvQXJtQXdRMXhFUGtmXzU0T3pyWTUyZWRiTmVJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZi9hODk0N2YtZTUyYy00ZGUxLWJhZGUtNzBjMGE1MDZkNzk3
LzEvQXJtQXdRMXhFUGtmXzU0T3pyWTUyZWRiTmVJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHXnFgD3Z
HLBNq1oMPhn4HihiKSqtKxakJ//U99rtk9gG+Cm+Fep2L4wSM+NfmR/0vQRSrjtI
+n5WXjwKgAQTqlb57hBEkWcsNoMroO5/8P3h+d4X0RVtZYQBaZNOB09bmSbRdFQd
rpF23brN+ihhUxb1LKxjeNgsurJWVndCxcJbwzXTWOl/JghJjluxQmz/je9od4lt
8lSlt5ivYXEg1hMZjYpzM/mSETHI9KYQrhnHCHEpUQ5Sq0ZpGrX6kP9UXKY4f6DB
3lSlyhCFUtdXsgzmIQUKRzuPsyEkECYSGwO9txLWqS1mWw1P7UbKTIsBDRHst0pO
dQsUTwV6Ju38tw==
-----END CERTIFICATE-----