Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/265efa-f049-4647-8cf1-824ccefd9c81/1/D5HltY2jJuZU6ZT-8hlSdnWVeb4.mft
File:                     D5HltY2jJuZU6ZT-8hlSdnWVeb4.mft (raw, json)
Hash identifier:          2b1C0ucmqVT3dla4Axcr8Dr/rHjrQkDZIDYTvojZYWU=
Subject key identifier:   DE:16:82:B9:5E:77:48:F7:13:3E:FC:3D:6C:46:4F:1C:22:D7:E9:5D
Authority key identifier: 0F:91:E5:B5:8D:A3:26:E6:54:E9:94:FE:F2:19:52:76:75:95:79:BE
Certificate issuer:       /CN=0f91e5b58da326e654e994fef2195276759579be
Certificate serial:       01962E61A14D859D31A8A69B1E5380689881
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/D5HltY2jJuZU6ZT-8hlSdnWVeb4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d2/265efa-f049-4647-8cf1-824ccefd9c81/1/D5HltY2jJuZU6ZT-8hlSdnWVeb4.mft
Manifest number:          0BA5
Signing time:             Sun 13 Apr 2025 09:01:12 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:12 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:12 +0000
Files and hashes:         1: D5HltY2jJuZU6ZT-8hlSdnWVeb4.crl (hash: UvWemEuopDhgyAr3h8pqPf7/W4ezCFAElO4BB+y4CEs=)
                          2: KKoVkt36UzhB8KBbFPImmZW73vA.roa (hash: GhpkIl47GYlGJw2nWrVttpHKLmkRE0ZfoRg/RpNRI/I=)
                          3: fMybGYR-8tzcLwLk9F7xQBZ6-N4.roa (hash: Y2XsWw7qdiuLK4RPieRUDih+9enRniyBYvTmKwdcDsA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:a1:4d:85:9d:31:a8:a6:9b:1e:53:80:68:98:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0f91e5b58da326e654e994fef2195276759579be
        Validity
            Not Before: Apr 13 09:01:12 2025 GMT
            Not After : Apr 14 09:01:12 2025 GMT
        Subject: CN=de1682b95e7748f7133efc3d6c464f1c22d7e95d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:b4:a4:d4:4f:39:c0:2e:a6:53:8c:e4:a7:de:
                    84:32:05:9a:7f:42:c8:eb:84:d3:31:e9:65:92:bb:
                    5b:7c:1b:87:75:50:a6:30:a9:9f:0d:da:24:46:45:
                    bc:17:a5:55:b9:2f:06:ae:1a:e7:e4:e5:eb:bd:d5:
                    93:d2:b4:e8:77:72:3a:7f:06:4b:cc:4b:8c:63:46:
                    ac:19:c1:8c:1b:5d:ac:45:49:f7:e9:0e:35:b7:6e:
                    06:e0:33:f2:55:58:2c:97:d5:b4:b0:19:7b:b7:f6:
                    e9:78:70:9c:c0:e1:2f:49:89:7d:0d:85:0b:e6:1c:
                    ff:7c:5a:a9:94:c4:26:79:cf:7e:43:fb:be:eb:30:
                    ce:ad:4d:f3:45:ea:ef:0c:06:92:96:44:18:02:47:
                    d0:07:53:cd:f8:a7:6e:22:3e:2e:ac:98:55:b2:46:
                    f7:e6:e0:a1:8c:43:67:c5:75:62:cb:67:ac:1d:d9:
                    c7:37:f5:3a:f6:a8:21:bd:e8:c2:cd:2a:ed:b1:a6:
                    3b:5d:1a:fd:f8:43:7b:98:7b:5b:09:81:e2:d1:3a:
                    a5:a2:73:71:06:3d:dc:51:b4:a8:4d:e7:c4:a6:7e:
                    1d:b4:7e:09:e3:ea:48:26:fb:98:3d:bf:31:e0:3e:
                    5a:11:74:ef:87:53:db:91:cf:00:32:16:db:ba:7d:
                    fd:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:16:82:B9:5E:77:48:F7:13:3E:FC:3D:6C:46:4F:1C:22:D7:E9:5D
            X509v3 Authority Key Identifier:
                keyid:0F:91:E5:B5:8D:A3:26:E6:54:E9:94:FE:F2:19:52:76:75:95:79:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D5HltY2jJuZU6ZT-8hlSdnWVeb4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/265efa-f049-4647-8cf1-824ccefd9c81/1/D5HltY2jJuZU6ZT-8hlSdnWVeb4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/265efa-f049-4647-8cf1-824ccefd9c81/1/D5HltY2jJuZU6ZT-8hlSdnWVeb4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:73:fa:2c:4c:89:50:eb:2e:85:ad:ac:25:17:85:e5:46:38:
         d1:98:be:78:87:f4:fc:55:2d:d5:43:78:3d:28:02:30:bf:67:
         6d:bf:86:ff:0b:9c:69:21:fb:70:79:5f:fc:be:2c:44:26:15:
         67:49:cf:7f:fe:9b:50:bb:6c:3f:b0:2a:1f:73:bd:29:21:86:
         d7:96:46:75:ee:01:5e:f4:e5:66:ac:73:87:ef:f4:ca:f6:3b:
         43:42:b8:1d:1c:b8:4e:11:c1:6c:c4:9a:52:3f:5f:b6:2e:af:
         60:d3:9d:d2:6d:ed:d8:71:94:6c:dd:bf:51:fb:08:70:93:34:
         fe:83:d4:8a:95:ef:b4:15:4a:c8:fc:78:08:6d:32:bc:ad:85:
         5c:c6:2a:fd:53:8f:2a:45:37:73:a7:be:13:0e:6c:ac:5c:95:
         51:66:4e:26:29:37:ee:b1:49:74:47:b8:33:30:ec:c1:f4:49:
         bf:b1:94:d9:29:12:b5:75:4c:49:e2:eb:cc:8e:d0:c2:12:49:
         fa:c0:7c:54:dc:4e:33:fc:c4:24:fd:e9:6c:c1:e8:6e:39:59:
         2b:80:e1:18:1e:8f:d1:43:72:0c:46:8a:2c:6c:30:b3:0f:76:
         54:a1:fd:a8:25:bb:20:93:ec:ad:21:dc:b6:a7:c7:6a:a7:e7:
         ae:70:31:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----