Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/ebdca6-2588-40a0-a19e-6d0cbd8bd492/1/5Lqtn19putkQB1-OHYBetB0N98s.mft
File:                     5Lqtn19putkQB1-OHYBetB0N98s.mft (raw, json)
Hash identifier:          rAURdCOP9XOzlhQHfpqELOEkDUveMuKROp+db4HHPM8=
Subject key identifier:   FB:63:06:C0:10:B1:C7:3F:F9:10:17:37:69:D9:1E:B0:14:42:C6:7A
Authority key identifier: E4:BA:AD:9F:5F:69:BA:D9:10:07:5F:8E:1D:80:5E:B4:1D:0D:F7:CB
Certificate issuer:       /CN=e4baad9f5f69bad910075f8e1d805eb41d0df7cb
Certificate serial:       01962F3D885DBB1A6B6375F7D5B869605735
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5Lqtn19putkQB1-OHYBetB0N98s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/32/ebdca6-2588-40a0-a19e-6d0cbd8bd492/1/5Lqtn19putkQB1-OHYBetB0N98s.mft
Manifest number:          0DD3
Signing time:             Sun 13 Apr 2025 13:01:23 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:23 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:23 +0000
Files and hashes:         1: 5Lqtn19putkQB1-OHYBetB0N98s.crl (hash: ToMSUkPhuSBZwC0Cx6yp9nbD91kaf6PCzz4dTYc7Tj8=)
                          2: Q49WFQb687C-dROudfCZNH5xgk0.roa (hash: 6gTPlVN38oZH6TKqFrihOGk/Y67bvVr39M4N4cXiKUY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:88:5d:bb:1a:6b:63:75:f7:d5:b8:69:60:57:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e4baad9f5f69bad910075f8e1d805eb41d0df7cb
        Validity
            Not Before: Apr 13 13:01:23 2025 GMT
            Not After : Apr 14 13:01:23 2025 GMT
        Subject: CN=fb6306c010b1c73ff910173769d91eb01442c67a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:13:c1:bb:6e:7f:8b:15:ec:d0:76:0b:91:4c:
                    4f:70:f5:68:2b:30:92:c8:dc:4d:11:1b:3f:6f:a8:
                    13:e3:5d:50:7a:b8:fc:27:29:44:69:15:05:0f:32:
                    ef:54:93:1a:12:c0:25:1a:6e:06:52:24:86:ae:0b:
                    78:af:1b:90:88:b8:49:6c:ca:2e:da:ad:03:9d:1f:
                    74:c8:17:84:72:62:4d:50:ad:44:c2:2c:c4:10:82:
                    78:59:52:e7:85:97:9a:d6:06:53:26:c3:ed:f8:fc:
                    04:bb:41:3d:4e:8e:42:4d:4e:00:4f:8f:ac:c5:76:
                    67:a4:16:fc:0b:7e:55:b3:10:48:e6:19:6d:dd:69:
                    87:af:74:dc:58:3f:ab:8f:40:00:87:8a:37:f2:47:
                    07:52:d0:88:7b:0d:ad:47:a3:f5:43:c5:e7:0c:9c:
                    68:c3:4d:21:fa:bb:41:a7:2d:2c:c1:5a:38:76:ce:
                    5f:99:ff:0f:12:6b:28:3d:75:56:f3:a4:31:8f:02:
                    1b:ee:6b:55:21:c2:b5:05:f3:96:8d:c0:7d:93:58:
                    56:53:58:e6:8f:d9:3c:ce:a2:b2:b6:c9:37:be:a0:
                    26:1a:9b:22:3c:1a:05:9b:69:a3:84:28:f1:f2:f9:
                    f5:4b:01:bf:f3:ee:12:c4:21:70:4a:a6:cb:a9:cb:
                    91:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:63:06:C0:10:B1:C7:3F:F9:10:17:37:69:D9:1E:B0:14:42:C6:7A
            X509v3 Authority Key Identifier:
                keyid:E4:BA:AD:9F:5F:69:BA:D9:10:07:5F:8E:1D:80:5E:B4:1D:0D:F7:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5Lqtn19putkQB1-OHYBetB0N98s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/ebdca6-2588-40a0-a19e-6d0cbd8bd492/1/5Lqtn19putkQB1-OHYBetB0N98s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/32/ebdca6-2588-40a0-a19e-6d0cbd8bd492/1/5Lqtn19putkQB1-OHYBetB0N98s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:50:b7:31:5a:e4:04:2e:51:db:7d:c0:f8:65:a1:d7:07:9b:
         fe:3f:45:05:af:91:20:67:9f:56:b0:e3:b2:14:2c:6c:0c:1a:
         f3:0d:33:db:7f:ed:1a:bc:0b:3f:b4:6f:55:ac:16:78:7c:21:
         f6:ca:e4:de:54:1b:4e:28:8e:85:a2:ed:9e:71:62:c5:d0:53:
         4b:d0:96:72:de:10:76:76:b2:8c:2a:19:b0:10:13:0c:d6:22:
         91:5b:0a:2d:b2:10:d1:80:fa:5d:b0:4f:f0:07:c9:90:89:4d:
         e8:c1:45:43:80:94:63:cd:bc:6a:16:c3:24:99:3e:e8:a8:b9:
         37:e8:fb:9b:79:a7:4b:d0:bd:0b:6d:0c:fb:f4:ff:c8:c5:5f:
         d3:e6:7a:fd:8a:34:7e:ab:81:46:f3:78:50:7d:f0:5d:77:58:
         11:4f:5f:1e:b3:fa:e0:9b:03:ef:26:be:e9:e5:b5:ed:27:7c:
         76:58:a3:01:b8:61:c7:03:ea:b5:6a:57:9f:ea:5e:d8:24:66:
         70:83:ab:83:b3:f2:71:38:b2:70:48:54:b5:eb:4a:81:23:fb:
         e4:7a:e1:b4:3b:47:c9:20:af:70:db:a3:3e:a3:f7:2e:4b:01:
         6d:14:5d:65:c7:6c:5d:28:9b:18:fa:02:c6:2f:33:69:5f:9a:
         d1:33:a5:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----