Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/a8947f-e52c-4de1-bade-70c0a506d797/1/ArmAwQ1xEPkf_54OzrY52edbNeI.mft
File:                     ArmAwQ1xEPkf_54OzrY52edbNeI.mft (raw, json)
Hash identifier:          u/M2100outP2qvc7xRftVpE5lZcfBqOgMThRViDrMnw=
Subject key identifier:   0F:DE:BC:8E:22:6E:2E:F4:CB:60:EE:9E:48:44:3F:0E:CD:64:D1:9B
Authority key identifier: 02:B9:80:C1:0D:71:10:F9:1F:FF:9E:0E:CE:B6:39:D9:E7:5B:35:E2
Certificate issuer:       /CN=02b980c10d7110f91fff9e0eceb639d9e75b35e2
Certificate serial:       0194BC3BD031B4213764EA2E9F24D9D0695F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ArmAwQ1xEPkf_54OzrY52edbNeI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cf/a8947f-e52c-4de1-bade-70c0a506d797/1/ArmAwQ1xEPkf_54OzrY52edbNeI.mft
Manifest number:          0F64
Signing time:             Fri 31 Jan 2025 12:00:24 +0000
Manifest this update:     Fri 31 Jan 2025 12:00:24 +0000
Manifest next update:     Sat 01 Feb 2025 12:00:24 +0000
Files and hashes:         1: ArmAwQ1xEPkf_54OzrY52edbNeI.crl (hash: 4I8RZbHtPLIucR0HwpMWeHPkx7sPI9dC6xwS8qrExrc=)
                          2: RN98TJ7kqQI5BuSnvdMcE3q1sxc.roa (hash: YxQcvIdmH83Dh0Q3zwPjsii4N4gNYgzKFTXwaXCIS7Y=)
                          3: eIZENcgK1XZflT_O-9vOWF5_c5k.roa (hash: 72shYqXGHw00bwK02sJ1cpdaJwagVhfPsDZJsD/Kbnk=)
                          4: pw-uXfj6mcJrqBi6AQ_DbhRWlvc.roa (hash: F9GSSa/n4nzQc1So+eTia4zHzLGf70ctYWS6RuL9cmE=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:3b:d0:31:b4:21:37:64:ea:2e:9f:24:d9:d0:69:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=02b980c10d7110f91fff9e0eceb639d9e75b35e2
        Validity
            Not Before: Jan 31 12:00:24 2025 GMT
            Not After : Feb  1 12:00:24 2025 GMT
        Subject: CN=0fdebc8e226e2ef4cb60ee9e48443f0ecd64d19b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:86:6e:d9:7a:11:19:5d:9c:ba:6e:8e:08:ee:
                    c3:b7:c6:d0:77:03:7b:05:78:69:02:b4:66:22:63:
                    31:e9:dd:4e:3b:30:af:17:5e:3c:fc:d6:81:b2:aa:
                    7a:8a:97:77:85:ec:c0:3d:34:8a:d7:49:6d:0f:ec:
                    00:07:3a:71:55:c1:b9:da:89:d1:79:ac:37:0d:60:
                    95:10:de:f6:2d:3b:a5:9d:f9:ad:33:57:cd:75:9e:
                    17:5a:88:fa:2e:eb:de:ab:6a:64:d1:a5:84:d9:ad:
                    0b:69:ba:50:10:46:1c:ac:90:64:66:2b:56:1c:c4:
                    58:6a:d0:75:88:7f:eb:0f:4f:33:2e:e5:83:11:64:
                    0d:e4:31:e6:2a:38:37:73:01:d6:b1:41:e5:09:8f:
                    68:87:57:75:b6:e4:f1:4f:1f:b7:6e:9c:e0:c2:11:
                    a3:0a:4b:71:45:1d:a8:61:0f:21:e1:8c:98:9d:0e:
                    75:af:ca:a3:4f:13:4b:1e:c9:0c:63:7e:cf:b0:90:
                    c3:2b:91:95:cf:90:65:5d:85:60:80:75:6a:8f:4c:
                    36:0e:e9:fb:b6:0f:47:04:5d:0f:b7:58:1b:fa:08:
                    7a:5c:58:d3:c3:3f:87:a0:73:e1:5b:30:9e:08:56:
                    02:cc:1b:3d:93:14:f3:c9:ed:17:d4:17:43:82:ea:
                    f5:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:DE:BC:8E:22:6E:2E:F4:CB:60:EE:9E:48:44:3F:0E:CD:64:D1:9B
            X509v3 Authority Key Identifier:
                keyid:02:B9:80:C1:0D:71:10:F9:1F:FF:9E:0E:CE:B6:39:D9:E7:5B:35:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ArmAwQ1xEPkf_54OzrY52edbNeI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/a8947f-e52c-4de1-bade-70c0a506d797/1/ArmAwQ1xEPkf_54OzrY52edbNeI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/a8947f-e52c-4de1-bade-70c0a506d797/1/ArmAwQ1xEPkf_54OzrY52edbNeI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:74:44:68:91:63:f9:1c:3b:b9:12:26:c6:e8:97:f7:13:bb:
         ea:e7:27:ce:d9:78:c1:f5:f8:2e:b9:62:d4:84:5c:22:cf:2a:
         dc:58:35:4c:e8:d3:a5:4a:9c:64:53:b3:09:8e:6b:16:37:3a:
         dd:e5:bc:a1:c7:80:40:fe:03:bb:4c:7f:33:ba:5f:28:d9:c4:
         31:7c:71:2a:8e:9c:35:2c:50:9b:65:67:1d:2f:a4:3f:f7:62:
         f9:2f:12:ae:79:f5:ed:8a:79:b0:a4:59:4d:e8:c4:a1:d7:97:
         19:c8:af:7c:30:f8:29:02:8c:10:f4:55:31:04:29:86:60:e9:
         e4:ad:0e:45:b4:61:16:ce:83:f5:03:1b:fe:11:7b:71:da:eb:
         cd:43:e5:3f:bb:5b:bd:3e:8a:10:3c:cd:8d:ff:c0:0f:f7:75:
         86:ff:e4:8a:be:c3:37:d1:67:57:00:97:9c:94:2d:ef:2c:8f:
         57:90:2f:f2:06:77:fd:1f:8d:70:62:e4:d2:1f:cf:49:7f:8a:
         e9:93:f4:d7:3d:d4:d8:54:a8:89:d1:44:ae:07:d5:f5:60:05:
         43:3f:cf:da:88:71:ca:37:8a:5c:68:f3:f0:3e:26:6f:4b:7f:
         32:0b:9f:69:71:34:cb:0b:38:44:9f:aa:1c:47:08:28:33:db:
         eb:c4:b7:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----