Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/85fc11-e23a-4942-b0de-22f8d4a027ae/1/Xl5k_r-lZnT03hZCn13eSdnOk2g.mft
File:                     Xl5k_r-lZnT03hZCn13eSdnOk2g.mft (raw, json)
Hash identifier:          hjlLY89XHhFeO7VWUobV/nFTBBwaw0zg4/tdAisVwxs=
Subject key identifier:   F9:CE:36:47:CA:E2:5C:04:36:D2:C1:7A:27:BD:F2:D4:32:F1:06:13
Authority key identifier: 5E:5E:64:FE:BF:A5:66:74:F4:DE:16:42:9F:5D:DE:49:D9:CE:93:68
Certificate issuer:       /CN=5e5e64febfa56674f4de16429f5dde49d9ce9368
Certificate serial:       01962DF39C29549A8633BFB011BFF5F88034
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Xl5k_r-lZnT03hZCn13eSdnOk2g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/00/85fc11-e23a-4942-b0de-22f8d4a027ae/1/Xl5k_r-lZnT03hZCn13eSdnOk2g.mft
Manifest number:          117B
Signing time:             Sun 13 Apr 2025 07:01:01 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:01 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:01 +0000
Files and hashes:         1: Xl5k_r-lZnT03hZCn13eSdnOk2g.crl (hash: VzlpKzv9dojb0gWV6wkrCbLksueyxPtcLhBk4QLLfUU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f3:9c:29:54:9a:86:33:bf:b0:11:bf:f5:f8:80:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e5e64febfa56674f4de16429f5dde49d9ce9368
        Validity
            Not Before: Apr 13 07:01:01 2025 GMT
            Not After : Apr 14 07:01:01 2025 GMT
        Subject: CN=f9ce3647cae25c0436d2c17a27bdf2d432f10613
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:24:f3:86:54:be:24:b1:69:f3:d0:94:4a:ca:
                    dd:5f:6c:63:23:ef:3e:39:04:d8:f5:9c:e9:ac:5a:
                    3d:62:67:b6:29:24:bd:fb:d4:56:ee:78:e7:29:91:
                    21:4f:7b:04:58:1a:ad:19:5c:cc:17:ea:56:0b:33:
                    0e:e2:2e:36:a2:94:ab:56:2f:83:4e:c8:27:53:4a:
                    8c:fc:17:ad:f1:53:69:0d:29:38:ab:26:e2:a5:cc:
                    bc:48:a5:df:86:e5:ea:1b:8b:1c:7b:11:c8:aa:db:
                    35:fa:15:9f:81:50:ed:da:83:6c:68:b5:a3:4b:0e:
                    e4:9c:fb:a6:e4:dc:a7:d1:43:61:c0:1e:57:3b:4e:
                    39:4a:6a:52:c8:7c:6e:25:6f:f6:bd:d2:93:f3:32:
                    5b:9d:e3:fe:d8:30:ad:73:e7:21:ed:ef:c0:65:6d:
                    12:94:e9:8c:69:85:c1:80:ff:45:17:e2:7e:c0:fd:
                    4b:46:83:c5:b7:a9:37:c9:f1:7b:02:03:4c:aa:84:
                    4b:c0:2b:88:cc:07:bf:ab:b8:f9:49:69:5e:12:a0:
                    bc:93:84:b7:5d:e2:2f:27:2d:ad:c7:76:7f:f1:2d:
                    87:10:a2:d7:96:65:1f:46:d4:04:fd:9b:63:73:68:
                    79:77:63:38:08:d6:9a:f1:c6:44:f1:6a:aa:40:ed:
                    74:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:CE:36:47:CA:E2:5C:04:36:D2:C1:7A:27:BD:F2:D4:32:F1:06:13
            X509v3 Authority Key Identifier:
                keyid:5E:5E:64:FE:BF:A5:66:74:F4:DE:16:42:9F:5D:DE:49:D9:CE:93:68

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xl5k_r-lZnT03hZCn13eSdnOk2g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/85fc11-e23a-4942-b0de-22f8d4a027ae/1/Xl5k_r-lZnT03hZCn13eSdnOk2g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/00/85fc11-e23a-4942-b0de-22f8d4a027ae/1/Xl5k_r-lZnT03hZCn13eSdnOk2g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:8f:27:c3:4a:56:02:e7:ca:c5:ff:bf:5c:c6:db:98:0d:f7:
         df:d5:f0:32:ef:8f:02:61:19:6d:81:73:1f:6b:07:05:ea:ba:
         e5:40:1d:89:b2:ac:03:17:d4:38:fc:11:1c:c0:36:aa:8f:1d:
         5a:a5:a6:6f:96:01:e4:89:4a:a5:b5:20:55:98:38:a9:37:43:
         6c:e7:ff:5f:0a:44:ae:ec:6b:b5:f6:3f:a7:2b:94:fe:21:b2:
         64:a0:b9:59:00:33:0d:b0:6b:a5:6d:6a:77:44:3e:39:d6:3f:
         44:79:67:ae:bf:58:06:e8:c9:e5:4a:98:de:67:ab:fd:56:e9:
         86:9b:64:7c:4b:de:bb:c8:3f:e4:34:ea:cf:cf:ac:89:3e:69:
         77:56:1c:6f:ae:61:48:f1:40:9f:20:1b:c3:28:b9:76:41:22:
         25:c1:c8:16:61:4f:f3:a1:35:c0:7f:4e:3f:4c:78:16:5e:0e:
         c7:4a:7f:7a:42:d1:7c:97:22:fa:60:b0:3b:03:c7:35:d6:0a:
         44:6b:cb:32:75:9e:49:64:86:04:00:18:36:2d:6a:6e:f2:ac:
         78:b0:31:b6:ae:81:e8:6a:d6:34:2e:d1:fc:1d:bf:17:b2:20:
         ee:6e:75:cf:27:db:68:7c:0f:73:6f:27:74:dd:1a:c1:96:1c:
         dd:50:c3:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----