Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/136faf-cf20-4265-98a3-d9b82d9ecc45/1/rvIO_ArkAT5vSGfBXyN3sjUJW4Y.mft
File:                     rvIO_ArkAT5vSGfBXyN3sjUJW4Y.mft (raw, json)
Hash identifier:          3w3nhUx8YL/Q6s1WCTzKhNckL2Vy8p5YKpUFlVy4KXA=
Subject key identifier:   CD:07:F8:2E:25:C1:32:4F:07:A5:A4:28:FE:AF:D8:A2:94:5E:2E:E4
Authority key identifier: AE:F2:0E:FC:0A:E4:01:3E:6F:48:67:C1:5F:23:77:B2:35:09:5B:86
Certificate issuer:       /CN=aef20efc0ae4013e6f4867c15f2377b235095b86
Certificate serial:       01962E2B0B8B9FA6F0BE503D34CD362C4A7D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rvIO_ArkAT5vSGfBXyN3sjUJW4Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4d/136faf-cf20-4265-98a3-d9b82d9ecc45/1/rvIO_ArkAT5vSGfBXyN3sjUJW4Y.mft
Manifest number:          11EC
Signing time:             Sun 13 Apr 2025 08:01:35 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:35 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:35 +0000
Files and hashes:         1: o7v2ihQZngiNboLPlznFQHbVVog.roa (hash: twBuq4hJwFozjQzNXD6DkR3/XLNImqCcOIvvxAULQBw=)
                          2: rvIO_ArkAT5vSGfBXyN3sjUJW4Y.crl (hash: KhHYX4lefRWbW9Jzz0NcyIpiC8llxjf0y9z6sihBIvo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2b:0b:8b:9f:a6:f0:be:50:3d:34:cd:36:2c:4a:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aef20efc0ae4013e6f4867c15f2377b235095b86
        Validity
            Not Before: Apr 13 08:01:35 2025 GMT
            Not After : Apr 14 08:01:35 2025 GMT
        Subject: CN=cd07f82e25c1324f07a5a428feafd8a2945e2ee4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:fb:bf:c2:01:63:79:0f:57:c6:19:6d:c4:35:
                    39:95:3e:91:0e:4c:07:1b:bb:fe:fb:10:71:4d:56:
                    57:7d:34:85:d1:db:46:55:00:3f:8a:4e:c8:63:37:
                    d5:02:c2:fb:cc:6c:90:f5:e2:bf:a0:a5:9b:52:16:
                    05:93:2a:80:ca:ea:60:fa:d0:21:f5:b3:a3:40:ac:
                    10:f3:e0:15:75:8b:f4:e4:aa:e6:82:06:35:51:71:
                    8c:aa:25:9f:61:aa:3d:f6:6f:9a:e1:37:1f:3f:d5:
                    f1:92:7a:2a:7b:81:84:0a:20:50:38:75:fe:e0:b7:
                    2e:d1:71:69:09:d5:da:46:9d:fc:bb:de:6e:99:3e:
                    f9:29:8b:87:03:e3:7f:da:5a:19:4b:13:82:e2:6a:
                    38:02:47:41:1e:53:3c:39:24:1a:c7:ff:79:eb:c1:
                    1e:51:0f:13:a6:1b:39:c0:3a:07:65:35:8c:50:30:
                    e3:2f:42:f7:62:5b:12:84:c2:34:36:69:66:df:63:
                    ea:be:d6:dc:dd:38:1f:ef:d5:4a:4a:76:49:84:83:
                    bc:04:0a:59:a0:fa:79:c3:47:27:fa:5c:b4:91:4a:
                    7a:30:f2:b1:be:f1:0c:da:98:79:0f:19:21:98:33:
                    af:e5:2b:ab:aa:ce:8b:7f:0d:02:ac:ef:a5:5a:02:
                    a2:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:07:F8:2E:25:C1:32:4F:07:A5:A4:28:FE:AF:D8:A2:94:5E:2E:E4
            X509v3 Authority Key Identifier:
                keyid:AE:F2:0E:FC:0A:E4:01:3E:6F:48:67:C1:5F:23:77:B2:35:09:5B:86

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rvIO_ArkAT5vSGfBXyN3sjUJW4Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/136faf-cf20-4265-98a3-d9b82d9ecc45/1/rvIO_ArkAT5vSGfBXyN3sjUJW4Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/136faf-cf20-4265-98a3-d9b82d9ecc45/1/rvIO_ArkAT5vSGfBXyN3sjUJW4Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:47:f1:ce:63:41:b0:5a:44:be:5d:05:ff:40:56:40:37:bb:
         6a:22:8c:0b:34:20:63:5b:7f:c3:f0:d0:32:3b:8f:0b:1a:d5:
         8d:0b:c9:d5:73:be:c0:76:d7:5d:16:29:47:fa:02:3c:0f:7e:
         9c:91:97:ed:b9:95:b5:0e:df:e6:9e:f6:83:bf:89:e3:0b:44:
         1d:26:5f:02:6c:36:e5:8c:f6:da:0d:a5:dc:be:18:dc:72:06:
         d5:ab:ab:5e:a0:50:94:dc:70:af:a6:d3:9d:23:c2:99:28:5d:
         d8:0b:ba:e9:a5:16:72:fa:22:5e:a0:53:22:65:96:c3:f8:aa:
         9c:57:54:70:f0:57:e0:0e:d3:2f:60:36:81:54:23:a0:5c:e0:
         56:f9:f4:c8:de:b6:32:32:ec:cd:19:fb:b0:c9:d7:dc:6e:be:
         03:9e:3e:11:98:77:d5:c8:10:d1:13:2f:41:18:d3:9d:59:58:
         d2:6f:32:26:a6:c8:17:46:7e:3b:aa:60:00:ee:06:61:37:2f:
         8a:f9:21:92:23:00:73:e6:65:0c:bb:ac:7d:12:59:b0:16:60:
         8d:cf:d9:7c:66:de:66:79:1d:ec:8a:cc:1a:fe:b5:52:2e:2c:
         d9:a5:4d:52:28:cd:de:36:b4:9f:95:e1:70:e1:1c:c7:6f:56:
         d6:f6:06:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----