Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/0d3032-bda4-4c6b-81c9-92416007158e/1/xbEYLTF5b6Y-w8HZuXy2qqw0_dk.mft
File:                     xbEYLTF5b6Y-w8HZuXy2qqw0_dk.mft (raw, json)
Hash identifier:          6UpW4YdkQAYryEzns7wOQS0CCm+u0Gar1+KukrkurKc=
Subject key identifier:   DE:48:C5:81:5F:AE:36:99:23:95:58:D2:12:57:EA:A9:5D:C6:62:08
Authority key identifier: C5:B1:18:2D:31:79:6F:A6:3E:C3:C1:D9:B9:7C:B6:AA:AC:34:FD:D9
Certificate issuer:       /CN=c5b1182d31796fa63ec3c1d9b97cb6aaac34fdd9
Certificate serial:       01962E99828561F6482C6BE96059BEBDBDBF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xbEYLTF5b6Y-w8HZuXy2qqw0_dk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e2/0d3032-bda4-4c6b-81c9-92416007158e/1/xbEYLTF5b6Y-w8HZuXy2qqw0_dk.mft
Manifest number:          0EE5
Signing time:             Sun 13 Apr 2025 10:02:14 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:14 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:14 +0000
Files and hashes:         1: 6CdL4NVEnOP6dX0O4aaaSJqjuEw.roa (hash: opstI2GGEuXqVjNMZSKfqsaiPjOYL/Qa7H9RA+r+awI=)
                          2: xbEYLTF5b6Y-w8HZuXy2qqw0_dk.crl (hash: ebM7l24hEFfgkuvh6qTAot94/DvaDv2DaQtAwrlD0wQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:82:85:61:f6:48:2c:6b:e9:60:59:be:bd:bd:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c5b1182d31796fa63ec3c1d9b97cb6aaac34fdd9
        Validity
            Not Before: Apr 13 10:02:14 2025 GMT
            Not After : Apr 14 10:02:14 2025 GMT
        Subject: CN=de48c5815fae3699239558d21257eaa95dc66208
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:f1:0b:be:22:6d:16:d4:af:2a:a6:cd:06:85:
                    9e:c8:51:81:bb:65:eb:95:df:1f:3d:7f:40:92:fa:
                    3c:dc:fe:b3:65:27:7c:aa:d1:cb:28:1c:19:ac:72:
                    43:dd:e9:d9:d2:90:63:6a:e7:d1:be:d1:e3:d0:16:
                    dc:cd:62:50:f9:e3:60:38:c5:dd:ce:29:7e:dc:22:
                    12:fb:99:7e:92:a2:24:c9:77:67:45:31:89:ec:48:
                    38:ab:9c:a7:99:36:b7:bd:ec:04:2c:9c:6e:22:22:
                    62:e3:f9:f5:25:ef:75:30:36:28:de:14:20:d8:4d:
                    8a:73:62:94:c8:4f:30:38:d5:2b:12:1c:4a:bd:e6:
                    21:e7:51:44:20:90:70:5f:5b:0b:71:b2:c1:19:5c:
                    6e:31:a2:bf:d4:79:80:74:8d:5b:8f:1a:bb:df:2f:
                    4f:9b:e0:6e:1f:15:b5:08:5b:ec:b7:18:92:53:b2:
                    bc:a8:75:c5:63:62:3b:e6:54:33:b9:bc:fb:f6:a4:
                    30:7d:fc:88:af:23:fe:56:05:7e:de:0e:22:f5:ac:
                    db:ed:ee:9f:fc:f8:ce:41:67:ce:94:d8:4b:e8:fa:
                    14:8e:fb:0e:7f:24:85:e2:7f:35:88:fc:a3:3e:d7:
                    06:5e:8f:25:f6:6d:33:9f:d8:b9:fc:dd:c6:5e:2c:
                    f4:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:48:C5:81:5F:AE:36:99:23:95:58:D2:12:57:EA:A9:5D:C6:62:08
            X509v3 Authority Key Identifier:
                keyid:C5:B1:18:2D:31:79:6F:A6:3E:C3:C1:D9:B9:7C:B6:AA:AC:34:FD:D9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xbEYLTF5b6Y-w8HZuXy2qqw0_dk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/0d3032-bda4-4c6b-81c9-92416007158e/1/xbEYLTF5b6Y-w8HZuXy2qqw0_dk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/0d3032-bda4-4c6b-81c9-92416007158e/1/xbEYLTF5b6Y-w8HZuXy2qqw0_dk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ac:16:60:c2:64:65:96:71:d8:1b:27:45:b5:b7:e3:cb:a3:d8:
         7f:65:aa:ac:ae:71:24:47:60:92:4e:b8:b1:37:61:08:6a:82:
         f9:c0:a0:7e:f6:87:81:da:d3:bb:d8:a9:82:a8:1d:5d:91:ce:
         69:8f:73:20:d5:a1:c2:32:e0:5b:cb:37:c1:ef:46:2d:ba:97:
         92:f0:81:92:a9:5a:7b:de:b7:6a:41:8d:72:4d:fb:c6:a9:97:
         8a:2a:01:2d:45:84:06:d9:00:64:4d:6c:59:2d:b9:28:6f:ec:
         89:32:b3:97:d5:cb:53:55:d0:57:7f:ae:cc:8c:49:71:1c:f4:
         14:ad:fc:72:16:4d:c0:c4:e2:79:7e:d9:52:c9:d9:83:f5:fa:
         cf:91:3f:4a:60:1d:44:1e:89:bd:fe:8f:c6:1b:d9:ef:ce:a8:
         71:7d:43:d9:65:da:47:4f:07:7d:e5:bb:52:69:4e:36:16:6d:
         01:d7:4d:06:da:60:38:51:0c:67:30:ff:52:65:46:8a:04:a0:
         b4:73:b4:15:b8:ac:fa:59:58:27:10:a8:d5:ce:ae:f4:cb:05:
         98:bb:8c:ff:b3:53:7a:02:ad:90:1a:54:74:9e:67:5e:19:87:
         93:14:f9:7d:2d:c0:71:06:ef:1a:06:a9:9e:f0:cc:af:b8:aa:
         3f:23:0e:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----