Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/21bdbb-856f-41dd-aad9-066ddf32bfcc/1/0PFLigjLX4BX1IsD5T9Fi44f7tY.mft
File:                     0PFLigjLX4BX1IsD5T9Fi44f7tY.mft (raw, json)
Hash identifier:          7vrAIgsDDvl7Z/c4okB87UVsear6ycRi4FKMLK7XAd4=
Subject key identifier:   50:7B:02:50:C4:3E:FB:68:26:73:B0:BA:53:B8:3A:19:81:04:38:D9
Authority key identifier: D0:F1:4B:8A:08:CB:5F:80:57:D4:8B:03:E5:3F:45:8B:8E:1F:EE:D6
Certificate issuer:       /CN=d0f14b8a08cb5f8057d48b03e53f458b8e1feed6
Certificate serial:       01962F06D160368CFAA417B9AB274AD7CCBF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0PFLigjLX4BX1IsD5T9Fi44f7tY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/38/21bdbb-856f-41dd-aad9-066ddf32bfcc/1/0PFLigjLX4BX1IsD5T9Fi44f7tY.mft
Manifest number:          0138
Signing time:             Sun 13 Apr 2025 12:01:37 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:37 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:37 +0000
Files and hashes:         1: 0PFLigjLX4BX1IsD5T9Fi44f7tY.crl (hash: o8UWwsZzSynwEgt/Eb37nTm+ACcwHWkG2r+vax1EbiU=)
                          2: 5XHmlHMatoj7HuqzW-xKZFCBoCk.roa (hash: 2LwcEFXQBzd4wv+NbYjPLMlRT/J2wftX73OmJ3FhceM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:d1:60:36:8c:fa:a4:17:b9:ab:27:4a:d7:cc:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d0f14b8a08cb5f8057d48b03e53f458b8e1feed6
        Validity
            Not Before: Apr 13 12:01:37 2025 GMT
            Not After : Apr 14 12:01:37 2025 GMT
        Subject: CN=507b0250c43efb682673b0ba53b83a19810438d9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:91:b0:c5:68:67:35:50:0b:7d:40:92:5f:a7:
                    0c:43:35:fc:e6:99:0d:c6:d2:91:cd:a1:d2:4b:f5:
                    2c:1d:ae:61:90:b3:93:f2:6a:9a:c7:6d:3f:c5:e7:
                    8e:57:74:9c:c8:b2:5c:ba:80:47:10:64:b4:a7:2a:
                    12:98:ff:65:a7:07:4b:2d:c6:4f:f8:15:03:64:60:
                    da:8e:6f:73:ac:13:8a:2f:95:0f:20:c9:45:a6:b8:
                    3f:91:f8:58:f4:61:32:6f:c4:cc:08:cf:4d:32:3d:
                    fd:dd:ac:10:23:58:aa:53:a3:74:3b:42:e2:ca:81:
                    2b:0c:02:a7:d7:0d:0e:af:02:f3:76:20:c8:d9:83:
                    16:6d:c9:40:54:9b:c8:76:1b:9d:b8:b9:7c:29:f9:
                    cc:ea:ef:a1:a1:4b:fd:12:e1:ef:82:3d:24:a5:74:
                    01:bc:06:21:1f:49:90:eb:51:b8:6c:61:83:06:e8:
                    0c:cb:a0:a0:f2:77:1f:08:cd:5d:79:17:e9:81:f9:
                    87:48:0a:15:cb:34:24:1d:4b:00:d2:9e:71:23:ed:
                    52:b1:8a:53:41:e2:b2:5a:96:7c:6e:45:bc:ac:ec:
                    c8:a9:c8:96:b1:0c:e5:61:a4:19:4d:a1:71:d2:45:
                    21:04:04:43:81:e5:2c:4d:ce:bf:60:ca:ea:cf:89:
                    34:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:7B:02:50:C4:3E:FB:68:26:73:B0:BA:53:B8:3A:19:81:04:38:D9
            X509v3 Authority Key Identifier:
                keyid:D0:F1:4B:8A:08:CB:5F:80:57:D4:8B:03:E5:3F:45:8B:8E:1F:EE:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0PFLigjLX4BX1IsD5T9Fi44f7tY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/21bdbb-856f-41dd-aad9-066ddf32bfcc/1/0PFLigjLX4BX1IsD5T9Fi44f7tY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/38/21bdbb-856f-41dd-aad9-066ddf32bfcc/1/0PFLigjLX4BX1IsD5T9Fi44f7tY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:ab:e7:78:78:b7:9a:7b:be:1e:52:30:2f:98:31:fa:f1:34:
         32:d7:6d:5e:2e:80:4f:4a:3f:77:a2:89:86:aa:eb:0a:55:31:
         a9:f6:f8:13:82:f7:93:1e:92:fa:4f:aa:ea:e5:34:92:42:6c:
         7c:41:1d:a5:0c:88:05:6b:a3:7b:2a:aa:36:ea:c5:49:84:45:
         14:55:dd:87:27:72:7e:f2:6f:57:37:c1:56:38:0f:59:e9:01:
         0e:64:f6:6e:1f:b3:75:56:78:8c:ac:24:89:39:12:4a:40:dd:
         ab:e6:a2:45:2a:2d:a7:33:c1:20:7a:73:53:15:8e:4e:a7:62:
         b8:e9:ea:01:3a:80:71:a4:ab:ac:17:e6:31:84:fe:17:cb:ea:
         7b:2e:d6:46:d1:bd:7b:91:b8:0e:35:d0:47:a6:a6:0b:e0:62:
         37:13:4b:00:ed:f3:c4:ba:c3:c5:c0:0a:38:06:17:01:e5:dc:
         93:0f:b3:67:73:7f:12:58:8c:0e:dc:21:dd:aa:06:f7:f6:83:
         58:75:bd:24:7e:b4:b8:b9:36:f4:75:4e:e0:04:fe:77:99:b3:
         79:4e:8f:07:8d:34:6b:36:87:88:62:e2:b8:a9:0e:15:0e:34:
         fb:ae:73:ad:76:4a:5f:51:ae:ed:0c:27:13:41:3a:17:50:2c:
         3a:3c:34:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----