Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/b55e40-d8be-48d9-bd55-c83007327449/1/38JgNDfvdBF_oSJy7ELCUn2oAMc.mft
File:                     38JgNDfvdBF_oSJy7ELCUn2oAMc.mft (raw, json)
Hash identifier:          g81u/4AWe4mYlgedSRZYYTOGzSp9K8vl7yMAUu96sO0=
Subject key identifier:   49:81:2D:BE:E4:92:F3:1D:8B:9C:23:9E:5D:1B:DA:D6:87:64:AB:AB
Authority key identifier: DF:C2:60:34:37:EF:74:11:7F:A1:22:72:EC:42:C2:52:7D:A8:00:C7
Certificate issuer:       /CN=dfc2603437ef74117fa12272ec42c2527da800c7
Certificate serial:       01962F747F26357A30AC0FCFBE8FC789766A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/38JgNDfvdBF_oSJy7ELCUn2oAMc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0d/b55e40-d8be-48d9-bd55-c83007327449/1/38JgNDfvdBF_oSJy7ELCUn2oAMc.mft
Manifest number:          0DEF
Signing time:             Sun 13 Apr 2025 14:01:25 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:25 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:25 +0000
Files and hashes:         1: 38JgNDfvdBF_oSJy7ELCUn2oAMc.crl (hash: NkaFZ33LwzNDvMvlOl0iksHBNvCpzfWaVikvtC73rac=)
                          2: C6Si8_4OvkA_L0SzhzDXIdZD70Q.roa (hash: MXDhlA4OqmmtXJ3YGQ8YOTAMBcB/6855qXcMYCrv39s=)
                          3: VehV-DaGpdPd27h7BeCPuf7XgGU.roa (hash: sAalVTrnmg6yf8SFv/nnSyHMnXSPLWE6BdkaiXIz7ts=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:7f:26:35:7a:30:ac:0f:cf:be:8f:c7:89:76:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dfc2603437ef74117fa12272ec42c2527da800c7
        Validity
            Not Before: Apr 13 14:01:25 2025 GMT
            Not After : Apr 14 14:01:25 2025 GMT
        Subject: CN=49812dbee492f31d8b9c239e5d1bdad68764abab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:e7:c3:a1:e4:f4:5f:24:c0:0b:62:95:5b:57:
                    95:49:aa:ad:45:52:d5:af:d2:84:47:93:79:87:7e:
                    52:78:9e:bb:7c:bd:97:e8:72:67:c4:d1:f0:31:9b:
                    41:e2:80:ea:1d:3e:8a:71:72:bb:ed:d7:5b:c8:cd:
                    b1:7d:60:5b:65:1b:e6:1e:26:c7:3b:0f:68:0f:e9:
                    0a:2d:ae:0c:fe:12:ef:6c:c2:90:0b:10:45:29:84:
                    2b:b5:43:06:51:87:77:1f:8e:1c:42:61:7e:56:d6:
                    d7:d2:11:ae:31:dd:49:71:99:53:3b:f5:3b:7f:87:
                    3c:d9:31:5c:4c:4b:1b:9c:17:e7:3e:4e:df:9a:0c:
                    d2:2e:fd:b0:fc:79:3e:12:0a:c5:3d:9b:7f:a0:96:
                    05:43:10:79:4e:0f:44:fd:de:6d:78:03:93:9b:05:
                    4e:0b:cc:84:82:c3:80:8f:46:9f:38:d0:b9:a4:93:
                    8c:f6:95:4d:ab:ca:1b:31:04:6e:ea:d3:4f:c4:3d:
                    6d:a7:fe:07:da:f0:f6:af:5b:4d:24:90:aa:fe:fb:
                    47:6d:fd:88:2a:79:58:04:d0:40:b2:0c:cb:14:18:
                    77:98:2d:11:e5:6e:db:83:83:75:ba:68:41:d7:52:
                    01:bb:ff:05:9b:12:86:a6:4d:06:29:d6:12:2f:e2:
                    cb:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:81:2D:BE:E4:92:F3:1D:8B:9C:23:9E:5D:1B:DA:D6:87:64:AB:AB
            X509v3 Authority Key Identifier:
                keyid:DF:C2:60:34:37:EF:74:11:7F:A1:22:72:EC:42:C2:52:7D:A8:00:C7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/38JgNDfvdBF_oSJy7ELCUn2oAMc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/b55e40-d8be-48d9-bd55-c83007327449/1/38JgNDfvdBF_oSJy7ELCUn2oAMc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/b55e40-d8be-48d9-bd55-c83007327449/1/38JgNDfvdBF_oSJy7ELCUn2oAMc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         99:ff:00:22:8a:73:59:02:b5:d4:6a:a3:0b:1a:e2:25:ef:83:
         cb:cd:29:f7:7f:bb:81:ae:a8:ab:3b:ab:e4:8e:7f:da:aa:c4:
         03:8d:88:cc:61:43:03:cd:4a:85:19:e5:ba:ba:9e:a5:1d:0f:
         bb:21:7f:58:c0:ea:83:5f:80:aa:8b:b2:91:03:b2:57:1e:a6:
         ae:29:7c:26:8a:a2:59:22:bc:b9:50:f5:d3:d6:01:05:5c:a3:
         74:62:a6:d0:8c:e9:8e:ad:fc:51:a9:c8:26:e1:24:9d:5d:5e:
         95:ab:bd:6f:89:90:3b:26:b3:ba:fb:7b:16:ca:28:ac:6a:1f:
         1a:04:3f:6c:88:94:f0:80:59:ee:50:09:c8:f8:a1:2a:6a:ce:
         d8:ba:95:ff:26:56:d2:5c:d7:f9:0b:9b:0e:6d:5a:6d:ce:94:
         60:c5:8b:19:d2:b0:16:a2:0d:9c:38:79:34:74:c6:14:e1:6b:
         b7:e5:30:7f:6d:bd:97:14:2d:27:a2:be:3b:47:62:b9:39:7c:
         04:0d:6c:72:51:38:83:49:db:73:c9:5c:08:16:12:c5:ca:ee:
         41:29:25:a4:57:68:09:c2:7a:c6:24:4d:58:9a:de:91:bc:99:
         27:fb:ec:24:f0:bd:fc:75:4d:56:0a:24:d8:71:38:ae:58:2e:
         bd:18:50:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----