Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/240024-f433-4241-b40d-d1e84cfa478f/1/ARRj_5nCTAk3pAZdH8z-uQj8OtI.mft
File:                     ARRj_5nCTAk3pAZdH8z-uQj8OtI.mft (raw, json)
Hash identifier:          EId8cizIqJVse/VYNKSBCRNBPb3D363Xjp6+0M9Iu5s=
Subject key identifier:   48:84:F2:7C:F3:4E:77:FA:F0:01:BA:46:BC:CB:10:3C:2B:45:48:70
Authority key identifier: 01:14:63:FF:99:C2:4C:09:37:A4:06:5D:1F:CC:FE:B9:08:FC:3A:D2
Certificate issuer:       /CN=011463ff99c24c0937a4065d1fccfeb908fc3ad2
Certificate serial:       01962E98E30E7C9A3333927A560452C0924D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ARRj_5nCTAk3pAZdH8z-uQj8OtI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2b/240024-f433-4241-b40d-d1e84cfa478f/1/ARRj_5nCTAk3pAZdH8z-uQj8OtI.mft
Manifest number:          1121
Signing time:             Sun 13 Apr 2025 10:01:33 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:33 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:33 +0000
Files and hashes:         1: ARRj_5nCTAk3pAZdH8z-uQj8OtI.crl (hash: Cd1Z/djZo2oY4NmZu2A6SobSuxazW+qVL/nSwHGXEUY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:e3:0e:7c:9a:33:33:92:7a:56:04:52:c0:92:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=011463ff99c24c0937a4065d1fccfeb908fc3ad2
        Validity
            Not Before: Apr 13 10:01:33 2025 GMT
            Not After : Apr 14 10:01:33 2025 GMT
        Subject: CN=4884f27cf34e77faf001ba46bccb103c2b454870
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:55:37:b9:ac:66:1a:50:bb:9d:56:c0:d8:71:
                    2f:8a:45:ff:e3:8d:cb:84:06:15:bd:be:3b:54:05:
                    ab:3d:73:b4:26:9c:28:4c:6f:1c:bb:1a:53:6f:d2:
                    64:c5:8b:1f:03:28:d4:ac:01:1f:21:59:56:d4:6a:
                    5b:a0:82:16:f5:ec:e3:80:92:4c:9c:c3:3d:5c:23:
                    09:29:26:96:8a:a6:38:1d:85:2b:9a:9e:a0:55:e7:
                    61:d1:89:4d:0b:c2:a1:ed:0e:04:93:4c:b2:87:f7:
                    0b:94:99:6e:19:08:da:22:c4:6e:87:05:0b:3e:4d:
                    1c:ed:96:09:91:4a:d8:fc:d2:2f:6f:60:11:60:ab:
                    a5:58:5f:21:04:bd:0f:04:d5:8c:c0:53:19:61:e0:
                    c7:c1:a0:dd:6b:2e:88:72:ab:70:71:ef:c9:1e:b1:
                    aa:4c:01:ab:bf:75:7f:9d:5a:4c:e8:10:48:41:7f:
                    9e:28:ef:d7:89:62:ce:34:b9:38:2e:1c:50:24:b9:
                    02:69:cf:9f:f4:f4:c0:b5:0e:6a:b9:39:90:dc:59:
                    2c:b2:1d:82:c3:90:72:b5:93:4b:74:46:05:d9:cc:
                    b7:60:58:23:e3:a1:08:04:51:31:e9:cf:f1:b2:cf:
                    d4:49:62:42:ac:b1:5a:a3:b6:01:ce:39:82:86:7c:
                    13:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:84:F2:7C:F3:4E:77:FA:F0:01:BA:46:BC:CB:10:3C:2B:45:48:70
            X509v3 Authority Key Identifier:
                keyid:01:14:63:FF:99:C2:4C:09:37:A4:06:5D:1F:CC:FE:B9:08:FC:3A:D2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ARRj_5nCTAk3pAZdH8z-uQj8OtI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/240024-f433-4241-b40d-d1e84cfa478f/1/ARRj_5nCTAk3pAZdH8z-uQj8OtI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/240024-f433-4241-b40d-d1e84cfa478f/1/ARRj_5nCTAk3pAZdH8z-uQj8OtI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:d8:ba:2a:3e:0a:cb:66:5d:03:93:cd:3e:99:f1:43:03:d2:
         b9:7f:3d:95:7a:8a:70:16:65:ba:65:56:bc:06:27:db:0b:00:
         73:14:e9:08:ce:34:3c:69:9f:24:b8:b9:5b:fd:9b:be:c9:50:
         2f:0e:ac:2f:8c:9f:ab:d0:2b:7f:3d:d1:25:6c:09:eb:f8:fd:
         53:af:18:5f:23:7e:bc:06:47:52:ea:3a:a1:85:06:c4:2f:c9:
         f3:71:40:5a:05:2c:95:04:f4:e8:70:8b:77:fd:d7:f0:4e:e3:
         bb:b1:b9:ae:4c:1e:ec:fe:29:80:01:c6:03:a8:93:ef:76:b0:
         6b:b6:19:be:db:75:70:62:a9:5d:fa:23:58:da:ed:ed:8d:78:
         c1:11:07:d4:49:4a:4f:b9:ae:fe:65:21:7f:c2:4d:64:30:1e:
         e5:7c:b1:e6:20:c4:23:c8:09:3d:60:2a:1d:dc:03:28:30:e9:
         fc:8c:a7:57:f2:20:57:be:9d:f8:fe:f8:87:97:3d:95:f3:4d:
         da:aa:1e:8d:76:4b:a3:b2:b7:83:24:ac:a3:e7:f1:f5:7a:33:
         77:31:d0:51:d7:80:fb:b3:f6:c7:d4:39:19:54:97:29:07:b7:
         a4:43:ef:2c:76:bb:0e:70:90:82:55:79:d3:7d:9f:79:23:b2:
         71:a3:a4:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----