Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/058624-de77-4224-b540-ca3350e760cb/1/ORxdMzEUXsjicYdvgEIge50Ay2Q.mft
File:                     ORxdMzEUXsjicYdvgEIge50Ay2Q.mft (raw, json)
Hash identifier:          MdkAQeARE112F8SsNgYZCwH6hKO9QCzia1m2wzvN8eE=
Subject key identifier:   38:FC:B9:22:59:D8:51:0C:6F:39:74:16:EF:39:5F:0A:66:83:99:B1
Authority key identifier: 39:1C:5D:33:31:14:5E:C8:E2:71:87:6F:80:42:20:7B:9D:00:CB:64
Certificate issuer:       /CN=391c5d3331145ec8e271876f8042207b9d00cb64
Certificate serial:       01962F744413C1B1C58A804C45E212C20B7F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ORxdMzEUXsjicYdvgEIge50Ay2Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c0/058624-de77-4224-b540-ca3350e760cb/1/ORxdMzEUXsjicYdvgEIge50Ay2Q.mft
Manifest number:          0DC1
Signing time:             Sun 13 Apr 2025 14:01:10 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:10 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:10 +0000
Files and hashes:         1: ORxdMzEUXsjicYdvgEIge50Ay2Q.crl (hash: OL6xkGkzJhywUsLJRqhkQzeldg83YLIeVjHq+CAIM2o=)
                          2: OST4PzA3ppU9tim3_KfBBcrqcgQ.roa (hash: 7aAkIwPTKpTiRriNWV3feZU6/0BHu+h2F1+5PEi7g88=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:44:13:c1:b1:c5:8a:80:4c:45:e2:12:c2:0b:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=391c5d3331145ec8e271876f8042207b9d00cb64
        Validity
            Not Before: Apr 13 14:01:10 2025 GMT
            Not After : Apr 14 14:01:10 2025 GMT
        Subject: CN=38fcb92259d8510c6f397416ef395f0a668399b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:8d:18:dd:75:ec:eb:a6:a1:c6:11:af:6c:56:
                    3b:b7:d4:32:76:05:cd:ad:01:fb:51:01:81:e1:d2:
                    5d:42:85:50:a1:53:89:12:55:4c:0b:39:ee:7d:a6:
                    01:d2:d8:d7:ee:41:4b:c1:de:45:68:eb:dd:8d:35:
                    d9:36:31:4c:fc:28:5f:cc:4d:00:6e:41:ad:47:d7:
                    bf:47:69:c3:8b:2c:7a:b5:bb:6a:0e:b0:ee:f2:14:
                    d2:46:fd:da:87:fa:c1:20:72:41:b0:c3:18:8b:59:
                    17:21:fe:e7:9f:d4:fa:b3:e4:f1:1e:ea:fc:15:62:
                    8c:03:2d:6b:b2:73:41:20:5a:0b:f2:a3:ab:90:0a:
                    56:5a:cf:a2:c8:ea:d3:b4:71:be:05:c9:91:cb:98:
                    d1:76:9e:be:6d:ed:5b:2e:03:93:43:04:49:9f:56:
                    31:06:91:a0:4f:5e:88:01:d1:90:7a:af:43:d6:db:
                    8f:99:be:ac:10:71:c4:76:f2:47:25:c9:a1:33:bd:
                    48:a6:07:14:2d:71:09:09:a8:50:72:de:4e:42:8f:
                    eb:10:6e:6b:c2:a7:45:08:38:7a:6c:89:a6:75:b3:
                    74:cb:fc:a8:30:78:ec:c5:2d:48:e4:a9:02:b3:a8:
                    d1:a5:76:4e:06:8e:27:2c:43:e6:d6:ee:53:0c:1e:
                    bf:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:FC:B9:22:59:D8:51:0C:6F:39:74:16:EF:39:5F:0A:66:83:99:B1
            X509v3 Authority Key Identifier:
                keyid:39:1C:5D:33:31:14:5E:C8:E2:71:87:6F:80:42:20:7B:9D:00:CB:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ORxdMzEUXsjicYdvgEIge50Ay2Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/058624-de77-4224-b540-ca3350e760cb/1/ORxdMzEUXsjicYdvgEIge50Ay2Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/058624-de77-4224-b540-ca3350e760cb/1/ORxdMzEUXsjicYdvgEIge50Ay2Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:83:fc:06:aa:98:18:1d:3f:0d:eb:a0:28:d6:05:7b:75:d2:
         64:5a:e4:e9:60:5f:5e:e5:0e:4d:88:22:25:e5:bf:4b:90:97:
         ce:d5:50:1a:64:7b:cd:7c:17:ac:e9:db:09:a1:91:92:fc:29:
         a7:59:91:51:15:3b:d3:d9:2e:29:13:5c:35:59:19:36:7d:f3:
         0b:7c:44:ca:c8:c1:dd:bc:f6:5f:c7:ab:3f:3a:5f:ad:83:a0:
         05:1a:0b:02:a5:1b:34:ba:f6:06:f5:b3:ff:8f:1d:1b:58:96:
         71:c7:a4:8c:6a:78:54:4c:d5:36:fa:74:f1:74:27:5f:4a:26:
         f5:69:d3:62:60:ff:2d:33:9a:32:09:ac:78:0f:68:06:1c:32:
         4e:22:e1:02:13:58:7a:14:e3:93:7f:d5:c6:56:fe:89:6c:1c:
         87:05:a5:75:fe:ea:20:20:9c:30:16:39:6d:47:8d:c0:11:09:
         61:85:42:10:bf:5f:a2:3f:e5:00:ed:30:6b:69:5c:f9:9c:6c:
         a4:25:89:da:e6:17:d6:1a:8a:92:66:6f:fc:f9:93:49:20:d7:
         2f:8c:8c:b9:9c:03:74:e0:e4:28:6f:8a:7a:47:35:23:54:27:
         60:63:be:60:55:d6:f8:89:45:a8:92:d5:22:76:02:07:67:ce:
         76:6a:95:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----