Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/9c5dab-e01e-4546-8c38-ff86146f8cc8/1/ArqdsmdPc0Vl8JUzk_ClaWHKV8g.mft
File:                     ArqdsmdPc0Vl8JUzk_ClaWHKV8g.mft (raw, json)
Hash identifier:          OvOZBNGWPFgvrh2Ji9yfCN2fUfYMJv9/UHMhFfyNGVc=
Subject key identifier:   D3:DD:62:07:89:30:44:97:EB:7C:DF:33:4E:1C:B0:FD:FD:CD:A9:21
Authority key identifier: 02:BA:9D:B2:67:4F:73:45:65:F0:95:33:93:F0:A5:69:61:CA:57:C8
Certificate issuer:       /CN=02ba9db2674f734565f0953393f0a56961ca57c8
Certificate serial:       01962F744E4388088B6B3AB2C61650DA27AB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ArqdsmdPc0Vl8JUzk_ClaWHKV8g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cb/9c5dab-e01e-4546-8c38-ff86146f8cc8/1/ArqdsmdPc0Vl8JUzk_ClaWHKV8g.mft
Manifest number:          0DC3
Signing time:             Sun 13 Apr 2025 14:01:13 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:13 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:13 +0000
Files and hashes:         1: ArqdsmdPc0Vl8JUzk_ClaWHKV8g.crl (hash: pmYeHCFK39DDtPA5kDmNCGNewB1DJ+JQomBnzgB4ORE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:4e:43:88:08:8b:6b:3a:b2:c6:16:50:da:27:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=02ba9db2674f734565f0953393f0a56961ca57c8
        Validity
            Not Before: Apr 13 14:01:13 2025 GMT
            Not After : Apr 14 14:01:13 2025 GMT
        Subject: CN=d3dd620789304497eb7cdf334e1cb0fdfdcda921
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:50:ba:91:e5:91:da:6b:9f:de:8d:87:04:ae:
                    36:53:ba:92:2e:e4:8e:48:5a:e0:bb:91:07:6f:70:
                    2a:f2:7b:07:43:44:f7:93:34:3b:58:ce:d4:4f:ee:
                    82:93:b0:c6:1b:35:bd:e6:5f:5a:af:c3:9d:71:16:
                    05:43:c4:a4:e4:fe:6c:fd:bf:78:aa:70:9b:2d:29:
                    8d:e0:df:c3:3d:2c:e6:7f:25:db:fc:82:6e:c8:d2:
                    b0:4a:42:a5:45:25:3c:83:8f:f7:5b:5c:8b:71:1d:
                    c9:94:8c:8b:b3:f8:d7:3c:75:ec:cf:0b:5e:f8:01:
                    ff:59:ea:e0:74:81:62:19:15:08:eb:f6:9c:b6:ff:
                    70:0c:92:05:ca:8d:58:63:79:6f:42:ad:8d:c2:41:
                    eb:e1:c6:6d:43:21:1f:b5:dd:c6:22:d3:05:ca:d7:
                    68:b2:2f:59:21:16:02:81:d0:9e:8d:17:3f:42:b5:
                    2f:37:0a:d3:64:eb:8b:be:b9:a9:14:9a:0b:ea:e0:
                    18:8a:3c:a3:80:d8:ff:a3:d2:83:75:c0:a1:67:3d:
                    bc:e8:dd:63:e7:ce:7c:c6:32:0c:5d:96:2b:73:66:
                    4a:2b:02:2c:01:61:fe:ca:09:4c:f6:a3:d8:4d:26:
                    8e:68:90:ac:da:fb:07:c6:e0:d8:a5:26:84:87:62:
                    08:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:DD:62:07:89:30:44:97:EB:7C:DF:33:4E:1C:B0:FD:FD:CD:A9:21
            X509v3 Authority Key Identifier:
                keyid:02:BA:9D:B2:67:4F:73:45:65:F0:95:33:93:F0:A5:69:61:CA:57:C8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ArqdsmdPc0Vl8JUzk_ClaWHKV8g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/9c5dab-e01e-4546-8c38-ff86146f8cc8/1/ArqdsmdPc0Vl8JUzk_ClaWHKV8g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/9c5dab-e01e-4546-8c38-ff86146f8cc8/1/ArqdsmdPc0Vl8JUzk_ClaWHKV8g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bb:da:4a:d7:88:ff:bf:9e:19:b3:83:ea:bf:78:d7:5f:b2:5a:
         6d:88:45:d2:25:14:09:9c:81:a6:9e:81:ef:90:8d:3d:a5:26:
         66:80:21:25:76:3a:6f:7a:35:7e:30:0f:08:86:d5:e8:96:a0:
         ad:78:d7:5d:9b:e1:5b:51:87:15:a8:e7:61:b6:44:da:b7:fc:
         82:5c:87:39:af:b6:b1:42:0a:cc:48:a9:8b:24:48:84:82:da:
         e1:2b:10:89:48:e0:a9:4c:fc:f1:08:a6:4d:eb:06:b8:05:08:
         ae:71:05:5d:d0:a5:db:ae:41:bb:4e:1b:80:94:3f:9a:fc:69:
         ed:eb:ca:f0:a0:75:75:56:46:ce:63:5a:77:03:b7:35:5a:ac:
         c5:cb:b3:5e:65:72:ec:06:f2:ac:12:76:52:aa:e7:51:cf:1f:
         63:44:60:2b:e0:c1:3c:94:bf:6e:46:57:6a:05:9e:c7:17:bd:
         80:7a:6a:2c:71:74:5b:ee:28:94:24:68:12:75:11:25:42:30:
         40:c8:e4:08:ae:a7:70:b8:06:e6:27:85:5f:84:2e:cd:f0:30:
         ea:5f:2c:15:5a:af:a6:17:99:bf:88:af:10:9e:93:7a:25:10:
         e2:50:01:e1:59:92:b6:cf:23:9b:9c:05:a5:74:54:3a:38:70:
         ec:9b:ff:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----