Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/2b187d-edd8-40ee-a17c-d67da3c6969b/1/arRJwZjLlmN7rBpbbVHLMfJYuyw.mft
File:                     arRJwZjLlmN7rBpbbVHLMfJYuyw.mft (raw, json)
Hash identifier:          CJGH1FbCugt/GX08PSuXrPnkNaqx+v/YEM2dUuhoC7s=
Subject key identifier:   0E:3D:91:52:5C:0F:9D:04:81:6E:37:07:29:45:B1:8F:A1:E0:F0:7A
Authority key identifier: 6A:B4:49:C1:98:CB:96:63:7B:AC:1A:5B:6D:51:CB:31:F2:58:BB:2C
Certificate issuer:       /CN=6ab449c198cb96637bac1a5b6d51cb31f258bb2c
Certificate serial:       01962E619D01C8E36E67E4E50F3FF93E66DE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/arRJwZjLlmN7rBpbbVHLMfJYuyw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/33/2b187d-edd8-40ee-a17c-d67da3c6969b/1/arRJwZjLlmN7rBpbbVHLMfJYuyw.mft
Manifest number:          14EB
Signing time:             Sun 13 Apr 2025 09:01:11 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:11 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:11 +0000
Files and hashes:         1: Pj_t5CT2l74I7u9IIPT57QIpwtI.roa (hash: injYF0uAAm68pNeJanI0YLVJHbntDpb8a8fhql09/Qo=)
                          2: Tu-eLvS4BjY6sLbjKclCuHMNcyE.roa (hash: EMlouII+tVGp47ymDY78sfeCzz5ozn1bYR3C76/DHNQ=)
                          3: arRJwZjLlmN7rBpbbVHLMfJYuyw.crl (hash: osSdGas6AtMhxhZ1qvUZoEq6BA5OTFDdegjqJ+7TpmU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:9d:01:c8:e3:6e:67:e4:e5:0f:3f:f9:3e:66:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ab449c198cb96637bac1a5b6d51cb31f258bb2c
        Validity
            Not Before: Apr 13 09:01:11 2025 GMT
            Not After : Apr 14 09:01:11 2025 GMT
        Subject: CN=0e3d91525c0f9d04816e37072945b18fa1e0f07a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:fc:bb:6e:10:de:65:af:d6:82:b7:56:f2:74:
                    f5:bc:47:e4:e1:d8:42:94:56:57:f3:81:7a:d3:09:
                    23:10:9b:6b:8b:7e:49:1d:9c:d1:90:e9:ac:f3:4d:
                    e7:61:62:27:a4:e9:9e:2d:0c:69:d7:ab:ab:d9:23:
                    4d:00:1c:60:66:9a:fb:1e:90:89:47:23:83:17:ee:
                    84:06:1b:c6:67:60:c7:06:ac:4b:4e:8e:42:5c:8a:
                    c9:82:58:fa:95:3f:42:47:38:65:7b:d2:be:45:17:
                    74:d1:e1:d9:cf:49:c8:70:80:5e:e5:e0:d3:6a:3d:
                    7f:5e:f5:2c:3d:0a:6f:f3:c3:1e:40:69:97:98:df:
                    6e:24:c4:cc:5b:71:3f:a7:30:4e:c1:1d:0d:61:dd:
                    e6:58:22:dc:db:5e:d4:f7:c6:05:5e:90:f9:66:a6:
                    bb:42:b4:a1:63:9a:79:20:f3:20:b0:e4:7c:c4:3a:
                    41:31:44:29:bd:2d:22:2a:14:27:0b:52:f2:c5:88:
                    eb:6b:5b:d8:6c:40:fc:43:c7:bf:ff:3a:f4:cb:13:
                    5a:06:f2:07:1c:98:ce:04:88:8b:f8:e2:ba:fd:41:
                    1a:cc:f9:1e:fd:d9:c4:d3:86:bb:e2:d4:04:2a:83:
                    2c:ae:3d:56:eb:0b:5d:dd:c2:0f:13:da:ec:ef:48:
                    2e:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:3D:91:52:5C:0F:9D:04:81:6E:37:07:29:45:B1:8F:A1:E0:F0:7A
            X509v3 Authority Key Identifier:
                keyid:6A:B4:49:C1:98:CB:96:63:7B:AC:1A:5B:6D:51:CB:31:F2:58:BB:2C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/arRJwZjLlmN7rBpbbVHLMfJYuyw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/2b187d-edd8-40ee-a17c-d67da3c6969b/1/arRJwZjLlmN7rBpbbVHLMfJYuyw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/33/2b187d-edd8-40ee-a17c-d67da3c6969b/1/arRJwZjLlmN7rBpbbVHLMfJYuyw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:bd:c3:c6:24:a7:83:8c:ea:b9:2d:21:08:c8:ee:5c:07:1d:
         d7:cd:9f:7b:72:0c:58:c2:8d:1b:13:1e:86:aa:a4:cc:44:b1:
         53:a6:26:42:85:7c:87:5a:fb:7d:1b:72:45:89:8a:f5:8f:d6:
         5d:83:ea:f9:d9:8e:04:cc:78:51:12:57:6d:17:2c:15:bf:aa:
         c6:9c:71:db:02:a2:76:6d:8c:5b:62:15:5e:be:28:b3:1e:91:
         ee:8f:5e:47:d0:8e:67:38:ed:38:a4:92:8b:25:b3:f1:11:90:
         46:50:92:cd:0c:24:f1:ad:22:f1:19:fd:23:7b:c0:56:8d:9f:
         67:a3:fd:49:aa:1e:53:a1:77:14:07:47:f4:f0:b5:77:07:65:
         87:23:29:a2:a4:74:c7:53:4c:f2:5f:fd:e7:c2:6c:62:ae:8c:
         13:20:93:b4:b8:2d:4a:1f:30:2a:ad:64:45:ed:da:80:a4:b3:
         a6:3c:ad:f5:09:fc:8f:87:58:42:31:b1:9c:d9:25:bf:c4:b6:
         e1:9d:46:25:6b:a9:0b:01:fd:61:a6:c0:c9:63:74:ca:3f:f0:
         61:e0:ea:3f:78:3c:db:e6:46:1f:37:a4:f8:00:74:01:eb:1a:
         01:46:83:a9:58:c2:ed:a2:27:f7:94:af:14:a6:e5:a2:6b:87:
         2f:99:bc:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----