Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/89a4bf-325a-4675-bb00-0a4338cdf97b/1/arQ3nhGecQAczf7r9PKvLPXwego.mft
File:                     arQ3nhGecQAczf7r9PKvLPXwego.mft (raw, json)
Hash identifier:          zJeGw/iIbz71lwW+2dMiESenkLAq4zqqbpkJw/tkYWQ=
Subject key identifier:   3F:92:70:93:28:78:E9:A4:C7:FD:90:6E:1D:6C:89:7F:71:2F:7E:58
Authority key identifier: 6A:B4:37:9E:11:9E:71:00:1C:CD:FE:EB:F4:F2:AF:2C:F5:F0:7A:0A
Certificate issuer:       /CN=6ab4379e119e71001ccdfeebf4f2af2cf5f07a0a
Certificate serial:       01962F07487B6FF855A4EFF298DC02D1E4D7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/arQ3nhGecQAczf7r9PKvLPXwego.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f0/89a4bf-325a-4675-bb00-0a4338cdf97b/1/arQ3nhGecQAczf7r9PKvLPXwego.mft
Manifest number:          0358
Signing time:             Sun 13 Apr 2025 12:02:08 +0000
Manifest this update:     Sun 13 Apr 2025 12:02:08 +0000
Manifest next update:     Mon 14 Apr 2025 12:02:08 +0000
Files and hashes:         1: I6IGWwtvcwjpv5OcYefwbQc8Dac.roa (hash: XsrwhU20IGp39xs49VqrIKTfmkeTvzqhqNOw6J/CaTU=)
                          2: arQ3nhGecQAczf7r9PKvLPXwego.crl (hash: GAP5pclxh3OKavD22Gj2pMPHuPBOCooPX89lyzjMVl8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:07:48:7b:6f:f8:55:a4:ef:f2:98:dc:02:d1:e4:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ab4379e119e71001ccdfeebf4f2af2cf5f07a0a
        Validity
            Not Before: Apr 13 12:02:08 2025 GMT
            Not After : Apr 14 12:02:08 2025 GMT
        Subject: CN=3f9270932878e9a4c7fd906e1d6c897f712f7e58
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:d2:fb:ee:8c:31:84:b2:8c:41:eb:74:f1:b3:
                    4b:bb:b3:a3:81:1e:b1:6b:9d:88:e8:f4:4a:a5:33:
                    4c:44:b6:32:4c:02:6e:96:a6:f0:9a:a4:8c:0c:9f:
                    3b:93:ab:d8:5c:99:a4:0c:3e:10:07:b5:cc:59:af:
                    2d:6f:d1:75:06:3f:4e:9f:00:1b:1d:18:88:37:b3:
                    c6:d1:7b:a6:f9:71:64:96:5c:ef:d4:55:89:72:72:
                    b5:28:1c:4e:b0:82:ab:29:c6:00:6b:33:a4:bf:37:
                    56:a6:92:be:1d:4f:2a:f4:64:cb:99:4c:8d:d8:2b:
                    b4:18:0c:da:49:18:33:74:b2:e7:eb:28:6d:5e:79:
                    d9:d9:63:4d:e3:0c:42:0f:54:f8:0e:c3:8f:54:ec:
                    ff:16:25:f1:0d:ce:5f:e2:be:8b:57:47:c3:0f:44:
                    59:f5:5e:1c:4e:93:73:45:56:b8:2e:cf:f5:32:48:
                    47:ba:a5:00:5d:ff:1a:cc:29:d5:dc:34:b9:50:f9:
                    bd:45:f4:ed:ad:76:24:88:48:af:e3:f0:33:cf:aa:
                    34:c1:9e:39:6c:39:f7:ee:58:eb:b6:23:a4:37:0e:
                    7c:3b:bd:8f:06:a5:b6:4f:17:eb:4b:18:8e:23:29:
                    e7:1f:d3:81:ee:75:32:97:04:45:0d:82:c1:5b:44:
                    74:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:92:70:93:28:78:E9:A4:C7:FD:90:6E:1D:6C:89:7F:71:2F:7E:58
            X509v3 Authority Key Identifier:
                keyid:6A:B4:37:9E:11:9E:71:00:1C:CD:FE:EB:F4:F2:AF:2C:F5:F0:7A:0A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/arQ3nhGecQAczf7r9PKvLPXwego.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/89a4bf-325a-4675-bb00-0a4338cdf97b/1/arQ3nhGecQAczf7r9PKvLPXwego.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/89a4bf-325a-4675-bb00-0a4338cdf97b/1/arQ3nhGecQAczf7r9PKvLPXwego.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:5b:e1:31:ef:2b:db:c0:d3:ed:a4:c6:5b:d9:62:af:20:7c:
         79:78:92:e8:01:94:fc:15:ee:69:b0:fd:d4:63:ab:58:37:a1:
         7a:aa:94:dd:43:0f:37:27:48:a8:01:9c:29:e1:49:33:df:83:
         3c:8f:4e:88:72:ab:91:09:3d:cc:cb:41:61:12:f1:fb:76:ec:
         ec:25:3c:4c:40:53:1b:1b:b5:c3:12:a7:b4:fe:d1:9e:30:a2:
         61:3a:93:28:4e:34:46:28:4d:bb:c8:97:06:63:0c:8d:ba:f5:
         e1:a7:94:05:3c:b1:e6:8b:56:c3:4d:80:09:ae:fb:fc:d7:ee:
         64:73:24:61:3f:c3:bc:ea:b0:78:dc:b3:e7:03:be:46:fe:9d:
         81:29:62:b7:cc:9b:3e:19:f7:e3:be:ca:67:4f:9e:fe:ac:2f:
         cf:ad:f9:07:48:0f:30:e9:be:33:b5:0d:4e:1f:55:36:f3:e8:
         01:ab:15:4c:21:92:1d:05:25:7d:4a:2e:97:40:5d:4f:11:b2:
         1e:5e:0f:ec:a1:f3:a4:d7:50:92:76:71:01:d2:c0:57:ba:f1:
         07:55:75:34:3c:87:b2:06:bd:28:fa:8d:78:95:f4:76:7b:75:
         60:34:b7:f8:c2:a8:4c:c8:a4:a1:4a:01:58:7f:73:e4:5f:e5:
         1b:ba:a6:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----