Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/cd9976-2cd2-466f-abe7-008a80f6ff11/1/AR2IJGq1fiBN6lHpJDxnJS3LpYU.mft
File:                     AR2IJGq1fiBN6lHpJDxnJS3LpYU.mft (raw, json)
Hash identifier:          5Dc91SrQuTLjLXlxP1yWPJ/iAQFSeKlm9wGjkZ2qw3g=
Subject key identifier:   7F:6F:1B:77:76:B4:3D:F9:50:04:CD:2F:2C:AE:D2:55:1E:ED:80:58
Authority key identifier: 01:1D:88:24:6A:B5:7E:20:4D:EA:51:E9:24:3C:67:25:2D:CB:A5:85
Certificate issuer:       /CN=011d88246ab57e204dea51e9243c67252dcba585
Certificate serial:       01962E9879A57E682E02B817C7FAC34FDB3E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AR2IJGq1fiBN6lHpJDxnJS3LpYU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d0/cd9976-2cd2-466f-abe7-008a80f6ff11/1/AR2IJGq1fiBN6lHpJDxnJS3LpYU.mft
Manifest number:          0931
Signing time:             Sun 13 Apr 2025 10:01:06 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:06 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:06 +0000
Files and hashes:         1: AR2IJGq1fiBN6lHpJDxnJS3LpYU.crl (hash: wjJRCLif+4aj4ne2eCKVcaiQfdbqcJ2hGyVdd4i2dmA=)
                          2: HO4rdY3E48qrjdqnzlEZca_Yebs.roa (hash: kWWt5WfRThziurqE+e5TqB208tDWvrvzVmVg4ZHkDjI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:79:a5:7e:68:2e:02:b8:17:c7:fa:c3:4f:db:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=011d88246ab57e204dea51e9243c67252dcba585
        Validity
            Not Before: Apr 13 10:01:06 2025 GMT
            Not After : Apr 14 10:01:06 2025 GMT
        Subject: CN=7f6f1b7776b43df95004cd2f2caed2551eed8058
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:85:ce:47:6c:02:a4:7b:45:1b:ed:66:04:80:
                    38:2e:42:3f:e5:20:28:b4:5b:e2:b2:36:66:bf:d9:
                    69:30:e8:02:26:4b:5c:d8:41:bc:a0:c3:60:28:40:
                    c7:3b:44:9c:c7:07:ca:7e:0e:3b:ca:05:18:1d:1c:
                    66:dc:ea:76:53:bd:83:74:92:fb:04:f7:cd:f2:7f:
                    b3:b0:b9:7c:0d:87:5f:fc:30:b1:30:75:bf:08:c3:
                    7d:b3:9a:36:83:38:51:1f:d9:25:fa:25:1a:b8:ac:
                    80:93:a9:71:b6:92:c5:b0:3a:3c:dd:f0:40:62:fb:
                    63:ed:55:c4:44:20:b5:98:5c:2a:87:8e:49:7d:d0:
                    0d:cb:1e:fa:92:71:5b:51:ad:cd:87:dc:06:5b:6f:
                    83:75:8d:bd:6e:ca:17:4e:37:d2:98:f3:c9:c2:8a:
                    c7:e0:b4:8d:12:5a:2d:52:ff:20:9c:bf:5b:4f:80:
                    ac:ea:1a:c1:a1:8d:41:20:40:8e:f5:41:8f:d9:91:
                    da:83:05:4e:48:be:13:8f:23:76:20:07:14:3c:33:
                    e0:e4:99:73:cf:9b:6a:ba:80:79:30:af:8b:21:dd:
                    a1:31:ec:23:f0:02:8d:58:9a:26:14:59:37:42:ba:
                    82:76:95:0d:dc:03:58:fc:91:74:c8:35:ba:5e:52:
                    03:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:6F:1B:77:76:B4:3D:F9:50:04:CD:2F:2C:AE:D2:55:1E:ED:80:58
            X509v3 Authority Key Identifier:
                keyid:01:1D:88:24:6A:B5:7E:20:4D:EA:51:E9:24:3C:67:25:2D:CB:A5:85

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AR2IJGq1fiBN6lHpJDxnJS3LpYU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/cd9976-2cd2-466f-abe7-008a80f6ff11/1/AR2IJGq1fiBN6lHpJDxnJS3LpYU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/cd9976-2cd2-466f-abe7-008a80f6ff11/1/AR2IJGq1fiBN6lHpJDxnJS3LpYU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:23:98:62:73:21:63:19:8f:a4:99:7d:e1:76:65:bb:09:c7:
         9c:26:71:b2:d3:42:b4:6a:8e:61:73:e4:d6:6f:bf:c8:41:92:
         12:75:11:90:2a:d2:c4:a3:55:89:03:b6:ce:ac:15:33:10:6c:
         cb:c9:84:18:04:88:82:ef:88:83:cf:8a:46:d0:b1:20:32:74:
         66:cb:e7:d4:cc:28:ab:2f:72:69:8b:06:91:92:6b:a2:85:17:
         59:ff:46:09:77:1a:20:e6:b7:3a:c1:17:ca:e9:cd:4c:5b:d5:
         0c:35:84:0f:0e:3e:36:3e:dd:89:e1:95:84:0a:e5:43:7f:07:
         25:b3:a7:87:8d:c9:55:35:00:1f:e8:ad:9a:cc:ee:06:7b:c2:
         ef:8f:64:af:d5:8a:a0:b8:4a:b5:12:7c:46:9c:21:95:93:8b:
         22:5c:48:3a:43:c7:68:52:0a:56:cd:59:ec:79:a2:4c:27:6b:
         f5:89:0c:67:4a:49:3c:24:58:92:10:e8:02:e6:18:cb:0a:fc:
         04:c2:40:ae:0e:49:33:c8:11:45:5d:d7:a5:38:95:a8:1f:19:
         7b:9f:73:e5:41:80:c0:89:88:21:14:75:44:7e:62:e2:22:f4:
         02:e5:70:e6:1e:60:44:1a:39:b2:1b:26:46:05:ae:ee:0f:42:
         66:9a:ab:7e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYumHmlfmguArgXx/rDT9s+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAxMWQ4ODI0NmFiNTdlMjA0ZGVhNTFlOTI0M2M2NzI1MmRj
YmE1ODUwHhcNMjUwNDEzMTAwMTA2WhcNMjUwNDE0MTAwMTA2WjAzMTEwLwYDVQQD
Eyg3ZjZmMWI3Nzc2YjQzZGY5NTAwNGNkMmYyY2FlZDI1NTFlZWQ4MDU4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoIXOR2wCpHtFG+1mBIA4LkI/5SAo
tFvisjZmv9lpMOgCJktc2EG8oMNgKEDHO0ScxwfKfg47ygUYHRxm3Op2U72DdJL7
BPfN8n+zsLl8DYdf/DCxMHW/CMN9s5o2gzhRH9kl+iUauKyAk6lxtpLFsDo83fBA
Yvtj7VXERCC1mFwqh45JfdANyx76knFbUa3Nh9wGW2+DdY29bsoXTjfSmPPJworH
4LSNElotUv8gnL9bT4Cs6hrBoY1BIECO9UGP2ZHagwVOSL4TjyN2IAcUPDPg5Jlz
z5tquoB5MK+LId2hMewj8AKNWJomFFk3QrqCdpUN3ANY/JF0yDW6XlID3wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH9vG3d2tD35UATNLyyu0lUe7YBYMB8GA1UdIwQY
MBaAFAEdiCRqtX4gTepR6SQ8ZyUty6WFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQVIySUpHcTFmaUJONmxIcEpEeG5KUzNMcFlVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC9jZDk5NzYtMmNkMi00NjZmLWFiZTct
MDA4YTgwZjZmZjExLzEvQVIySUpHcTFmaUJONmxIcEpEeG5KUzNMcFlVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMC9jZDk5NzYtMmNkMi00NjZmLWFiZTctMDA4YTgwZjZmZjEx
LzEvQVIySUpHcTFmaUJONmxIcEpEeG5KUzNMcFlVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfyOYYnMh
YxmPpJl94XZluwnHnCZxstNCtGqOYXPk1m+/yEGSEnURkCrSxKNViQO2zqwVMxBs
y8mEGASIgu+Ig8+KRtCxIDJ0Zsvn1Mwoqy9yaYsGkZJrooUXWf9GCXcaIOa3OsEX
yunNTFvVDDWEDw4+Nj7dieGVhArlQ38HJbOnh43JVTUAH+itmszuBnvC749kr9WK
oLhKtRJ8RpwhlZOLIlxIOkPHaFIKVs1Z7HmiTCdr9YkMZ0pJPCRYkhDoAuYYywr8
BMJArg5JM8gRRV3XpTiVqB8Ze59z5UGAwImIIRR1RH5i4iL0AuVw5h5gRBo5shsm
RgWu7g9CZpqrfg==
-----END CERTIFICATE-----