Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/925f91-30c5-4a6b-a149-9bf8b1ef2e96/1/0DjDOLEo-Drewvadk8MsU1PKA5g.mft
File:                     0DjDOLEo-Drewvadk8MsU1PKA5g.mft (raw, json)
Hash identifier:          iT2RH1GW+pMHae1urOberEfhj0Lq1dT6wuESUeVNdMU=
Subject key identifier:   50:BE:AA:3A:7F:D7:69:59:EA:F2:76:21:1E:19:55:04:6A:5B:11:BA
Authority key identifier: D0:38:C3:38:B1:28:F8:3A:DE:C2:F6:9D:93:C3:2C:53:53:CA:03:98
Certificate issuer:       /CN=d038c338b128f83adec2f69d93c32c5353ca0398
Certificate serial:       01962DF3BA39BF27BB0F30AAF7AE5A2C75B1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0DjDOLEo-Drewvadk8MsU1PKA5g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/05/925f91-30c5-4a6b-a149-9bf8b1ef2e96/1/0DjDOLEo-Drewvadk8MsU1PKA5g.mft
Manifest number:          1186
Signing time:             Sun 13 Apr 2025 07:01:09 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:09 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:09 +0000
Files and hashes:         1: 0DjDOLEo-Drewvadk8MsU1PKA5g.crl (hash: kyNtJvIW+n3G5VOIINzF8rTDL4Ra/hLzjVcsvd9/Y44=)
                          2: 7PD1wIgjrZ9T9-fQhjLFUrZGUJE.roa (hash: 8HGos2aeHkG0saEvUQyEseTwmsTJnTnE4JuY9jxzUVo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f3:ba:39:bf:27:bb:0f:30:aa:f7:ae:5a:2c:75:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d038c338b128f83adec2f69d93c32c5353ca0398
        Validity
            Not Before: Apr 13 07:01:09 2025 GMT
            Not After : Apr 14 07:01:09 2025 GMT
        Subject: CN=50beaa3a7fd76959eaf276211e1955046a5b11ba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:2b:4a:0e:29:b8:8e:66:82:99:fe:0a:ed:08:
                    79:9b:1d:4f:f0:79:44:cf:d2:82:bc:14:81:da:9f:
                    e5:ff:9f:b2:01:d0:41:85:82:fb:ef:84:a8:9b:00:
                    b2:52:56:e7:ed:95:bd:3d:4b:90:c2:4d:b4:55:a6:
                    7b:46:d7:9b:97:a0:76:eb:69:2c:c9:da:5b:a2:8c:
                    18:e4:92:9e:eb:46:c4:a7:8b:ba:a0:e1:d2:b1:37:
                    5f:fa:16:3e:96:6b:82:50:37:a2:f7:34:cb:79:f1:
                    80:e5:5b:ab:df:89:ba:f4:a8:6d:5c:c4:00:8b:00:
                    75:16:6c:db:ad:8d:27:30:ca:1b:7c:20:5d:6d:21:
                    d1:42:11:4b:31:6f:b2:88:6d:8c:5b:9d:51:8a:44:
                    e3:27:f2:f2:fa:db:88:4d:3d:1f:fc:54:9b:21:a2:
                    37:c1:db:05:22:22:49:37:ec:bd:6c:25:92:e4:7e:
                    0e:bc:7b:09:b1:ca:a1:00:a3:d8:b3:d8:d0:1d:16:
                    d9:f4:24:64:9d:95:91:e4:dc:0f:3c:4e:34:43:c7:
                    20:0f:bb:f9:76:d1:62:3b:79:05:85:58:2d:b7:cc:
                    da:9e:50:5d:85:d5:07:ee:a6:97:de:3a:ef:99:e2:
                    c5:03:62:40:ef:d1:93:31:32:28:e2:ca:da:cb:5d:
                    d3:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:BE:AA:3A:7F:D7:69:59:EA:F2:76:21:1E:19:55:04:6A:5B:11:BA
            X509v3 Authority Key Identifier:
                keyid:D0:38:C3:38:B1:28:F8:3A:DE:C2:F6:9D:93:C3:2C:53:53:CA:03:98

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0DjDOLEo-Drewvadk8MsU1PKA5g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/925f91-30c5-4a6b-a149-9bf8b1ef2e96/1/0DjDOLEo-Drewvadk8MsU1PKA5g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/05/925f91-30c5-4a6b-a149-9bf8b1ef2e96/1/0DjDOLEo-Drewvadk8MsU1PKA5g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b5:3c:4a:f0:8c:2f:5d:77:56:f4:9b:1f:80:e6:e6:3a:43:d1:
         38:a1:ab:05:d5:8e:23:91:24:a4:5e:f4:9d:99:6b:51:eb:0c:
         fd:4f:8c:95:04:b8:0b:b3:48:d0:e9:09:ab:e7:6c:9c:e0:67:
         91:98:85:3d:6f:a3:bb:73:0a:79:4a:2e:ae:bb:8f:ba:6e:aa:
         7b:95:dc:d1:a5:8c:31:b2:c6:3f:97:c6:8f:00:47:c7:ee:2c:
         38:1d:a9:4d:f4:ac:02:c7:ed:12:e4:f4:d0:72:8a:75:52:3f:
         c2:51:f6:ac:f5:2a:84:70:57:de:13:c0:88:6e:3e:82:cd:2a:
         e8:b4:dc:56:ca:c0:20:34:78:ae:38:3e:89:97:a2:d6:bd:a9:
         c0:d1:e9:60:62:cc:c3:a7:81:79:25:d9:e0:0c:87:7e:6d:71:
         03:e0:86:d1:da:a0:d4:51:ef:08:af:67:85:a7:37:4c:0f:8f:
         39:d3:13:10:ee:dd:87:0b:54:26:86:fc:86:7d:9f:16:de:5f:
         2a:b6:d9:30:3d:ad:cb:f9:d9:bc:1a:f5:cd:27:3c:c7:78:8d:
         2e:89:84:e1:2d:50:7f:57:4c:e0:bf:c1:8f:cd:44:6e:e3:51:
         a0:0e:6c:31:37:7e:ea:ef:2f:73:60:e4:31:6b:95:62:8c:e0:
         68:2f:56:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----