Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/7b92bf-011b-44a7-8382-bfb2b8815e49/1/dk-Nqt8dd11Z0VArVzkBuHVRO1Y.mft
File:                     dk-Nqt8dd11Z0VArVzkBuHVRO1Y.mft (raw, json)
Hash identifier:          q5Bms6kZzPe5v+Ewnx1F6lCSYZL/jG31yYVtcLQV9Dg=
Subject key identifier:   04:39:0C:A1:16:BB:4B:E3:96:2E:DF:DC:A4:30:E8:BD:2E:55:ED:E9
Authority key identifier: 76:4F:8D:AA:DF:1D:77:5D:59:D1:50:2B:57:39:01:B8:75:51:3B:56
Certificate issuer:       /CN=764f8daadf1d775d59d1502b573901b875513b56
Certificate serial:       018870D6450130FC9D58E0EEEA0DFCC13E4A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dk-Nqt8dd11Z0VArVzkBuHVRO1Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ed/7b92bf-011b-44a7-8382-bfb2b8815e49/1/dk-Nqt8dd11Z0VArVzkBuHVRO1Y.mft
Manifest number:          0DF8
Signing time:             Wed 31 May 2023 08:04:30 +0000
Manifest this update:     Wed 31 May 2023 08:04:30 +0000
Manifest next update:     Thu 01 Jun 2023 08:04:30 +0000
Files and hashes:         1: 1-1_warD9Iod0-7LKEG_eR9OdFDc.roa (hash: Xn9e2d4yktqNcKykyxL9cxAAoewFXO6KdHaMPzglNLo=)
                          2: 4UDHryToFWDeCzBpQlE9StPAznU.roa (hash: sjWkcaQJRuVglb7evyyYQQuqBoNUAwAPTbTiS7H7ynM=)
                          3: 6JDhaNtL6MHEzd8YeWcA22cwQjQ.roa (hash: +qsXYyl4DtfzvUwlrwkYN0I2qrcWhtRVq3sKwO9zJfM=)
                          4: 91Awp5mXjKzZCsf7dN-liA2Ls2s.roa (hash: MytGfjjH6cEwUcoHeUm1+VmWjstyOjXBDl7GkIzMXzo=)
                          5: 9ye_MJ3CDKLGs43OWULLGKmYQb4.roa (hash: tp3HfP1jzFcr5iPN9umyx3VnD5VfJrKBTWcnwk8LwW0=)
                          6: Abgr-nppTiet25J-aWV2E-hhtek.roa (hash: JhcbzwJX9mDLfYW1/lRQwrzIRWYPDrKVZ1V84WLIPTI=)
                          7: AzwWhSh4cCbBDcOtjTffiiX10Xw.roa (hash: 8UcFyPuS0slrM4vkkp8z/HkWrQpuFYlG/wjE7dyAviU=)
                          8: E6w4Uk0FVA64dAlBgl4Mk4XtSxw.roa (hash: KuA9VCsf/c+RqgHhMg/559aB9nZ2R37hC3slh64FqLE=)
                          9: EqwCytk9UfWXZerpFxe5lJzXLbQ.roa (hash: swU8ppsefJeOLEc2SkFuEcqGqPijS+XQH7ahuLXHgLw=)
                          10: HGMtoF9TEKjZafRpGM-V74QYx_w.roa (hash: +YBEFitVFBZ9Gcl6lJO4ckMQRJA90o2sWBsSHvHAOj4=)
                          11: HewOHfcf-8DFqOihWpyI41NgQJs.roa (hash: CGChrwSByIaNpob6c4TTEJpRTjE0sJSC5knB4ErmqI4=)
                          12: JlinVGx-AiiBUuzoZ_KrWe6wySk.roa (hash: VYHWutlNAeV24c+iU8axIadxOrP/ZAo6+4xHuj+U+ZI=)
                          13: K4Kah_uKVuISj6VUaPJOBfAjBNY.roa (hash: xBkjKLZdmcuhsxTOXLG6xidpPM1INDdUgonGwEAjBbI=)
                          14: KllhIl43Ief7tzYG6hLGi3OKzmY.roa (hash: mhY7xG7gs4uLRAuEjm6H9EFWuCfuJwkDBm8TyeCnyZE=)
                          15: N5yWU8PmAFrtZGGJDR4EFEVYkIc.roa (hash: OZbTNh9JqWV4J5u8odtIoZuZdgLIAHEqiXNlycudf6M=)
                          16: TtjS_dxDsxebD5wqa4EgopQT31A.roa (hash: 0GBMoQyxEzqshI96tdXoMMr1Vea+g/YtL/lalXZwbOE=)
                          17: Ty2N8nxF1pJA5ZPIwcAUOw_ZMdg.roa (hash: LRfeNvyhu7GwrHQ7CqTwuifN114vLx02vrPn/HuhdqU=)
                          18: Uu0CRandUCSL8W8uPDLmaWSbRUY.roa (hash: nE+1Qjq0YrZ8QpP89BccBvsvrvrqXs6EPkZZqlrp1Ww=)
                          19: V5zQPV8Xop8g3Jijcea4DgkvdSE.roa (hash: Y7JhI8ET4K6/MvNOX66Kk6+Z4sVY26wyWvXuXk+EAaY=)
                          20: Vc2yq7vakAgHDlpUhZVw3apTU8U.roa (hash: H2uOVYzgAr69g4IFb+E6KUUjDlzVo21pWDbG/qA/TQc=)
                          21: XJDjmiLXpE9R8-u0xClt5xFykOY.roa (hash: 1818G1F8VtHwRcFmX8bksneEAPRwH+JOuKxBvogWZNA=)
                          22: dk-Nqt8dd11Z0VArVzkBuHVRO1Y.crl (hash: IEGYsNB17D9z0a3aMc1qQdxj7ygMcpOTkZIqFiVAzH4=)
                          23: nHGszXpoS9Zv9RrSV46z_YDS7yM.roa (hash: Z+x/kFJoal5aQoyEVey46/+ZSl7uvQ2mXqIBVdwkocQ=)
                          24: oA7nlenvu7poWql0tjNhUgJRWBk.roa (hash: fMDOnOVuUXWMAGAu6T+awNHmtCRbqip7jjiiqEAoyJk=)
                          25: penJA0gBXmXMKjwk3p9AAkDjZWU.roa (hash: 2mvu4cGuzcqPuavXBmfmgEU+PihFseaJ4dHFJpIUef0=)
                          26: sScUswCkLJJXcp5_qLDwZOjYDjg.roa (hash: 5SaOkvCQZ/6KvRsrBgLxqqS45/iFbwQh9saVBD9gRSU=)
                          27: wbrv0klD60YY77Ncc9hgPKd8pr4.roa (hash: RWyLjERbhA1iQXWnP8y0s9b8o4LpnFs/e8gUbRUrhMM=)
                          28: x0i4B0PGPpcz1aGxA9XWF7TdiCk.roa (hash: poQ8teTjF+ewBdZFgFG0ISYKbwQVXlyeuBgVlDtUwWw=)
                          29: xRAVlriM197nXGhYkurNPnmzsqo.roa (hash: +/fIekS2/w7sib/35+H7BFVlQee61X67gi86zC7uqUo=)
                          30: z39Ek6Y2zbpDyP-bUxdqsIYZAzo.roa (hash: PxKvmvlOFSz9D+AksKcPIaXry1mxL2c07YvpBHMUUck=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:88:70:d6:45:01:30:fc:9d:58:e0:ee:ea:0d:fc:c1:3e:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=764f8daadf1d775d59d1502b573901b875513b56
        Validity
            Not Before: May 31 08:04:30 2023 GMT
            Not After : Jun  1 08:04:30 2023 GMT
        Subject: CN=04390ca116bb4be3962edfdca430e8bd2e55ede9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:c3:bb:71:78:a2:28:53:3f:77:5b:89:f2:66:
                    c3:a2:4d:8e:fd:a8:d1:07:90:19:ca:09:15:a4:bb:
                    e9:05:83:e8:bf:b2:9e:4a:56:a8:4d:26:73:30:7e:
                    26:89:66:64:6b:cd:eb:99:47:88:22:ca:1d:86:ff:
                    dd:13:da:d7:cb:f4:ac:cf:64:54:9c:5a:ff:5f:b7:
                    73:80:d6:36:85:45:70:09:a3:92:aa:d5:79:66:bf:
                    75:1e:83:fb:39:30:96:40:d8:6d:40:3f:65:2f:47:
                    c8:28:fc:84:21:d3:42:1a:0e:90:42:a2:04:5a:15:
                    f9:4d:ee:47:5e:10:16:62:ec:58:24:60:8e:a8:44:
                    1f:e8:6c:a9:53:eb:5e:e5:1e:b4:26:05:c1:fd:e2:
                    15:1d:8e:55:79:e7:6f:d5:55:38:71:7b:0b:f8:98:
                    0d:01:2d:b9:aa:4d:b7:0f:1a:45:b4:f7:10:86:94:
                    1c:c4:9c:fa:b7:15:c7:77:93:ec:4e:95:9a:c6:ca:
                    cd:33:03:db:c3:67:89:bd:c0:27:19:99:96:65:ad:
                    8a:aa:30:98:d7:cf:c8:fe:3a:dd:e2:62:95:1b:24:
                    54:4a:32:ee:35:20:cf:9d:b5:00:e2:3b:23:9c:5a:
                    74:1c:43:35:76:61:1c:f7:1f:23:bd:20:e3:5d:4e:
                    45:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:39:0C:A1:16:BB:4B:E3:96:2E:DF:DC:A4:30:E8:BD:2E:55:ED:E9
            X509v3 Authority Key Identifier:
                keyid:76:4F:8D:AA:DF:1D:77:5D:59:D1:50:2B:57:39:01:B8:75:51:3B:56

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dk-Nqt8dd11Z0VArVzkBuHVRO1Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/7b92bf-011b-44a7-8382-bfb2b8815e49/1/dk-Nqt8dd11Z0VArVzkBuHVRO1Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/7b92bf-011b-44a7-8382-bfb2b8815e49/1/dk-Nqt8dd11Z0VArVzkBuHVRO1Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:0d:c8:1b:58:5c:22:18:f4:e5:af:24:0f:3d:c2:f8:c2:ae:
         5d:53:1e:e2:55:ca:46:e4:66:6b:49:48:5a:27:63:09:85:75:
         8e:bb:7e:1a:df:3d:23:27:3e:c0:84:19:98:a2:6b:60:ee:f5:
         e7:03:ef:12:05:f6:f9:42:09:c1:02:78:57:95:f3:54:27:7a:
         fd:76:cf:85:25:ed:e0:d8:a0:67:e0:b3:f3:42:cc:2f:15:34:
         3a:f6:9a:1e:55:3c:e7:ad:af:02:38:4b:47:36:77:6e:b2:05:
         33:94:0a:75:63:0b:4b:8c:15:ba:c5:f2:95:89:a3:eb:2c:e6:
         6f:1f:97:ad:64:7e:a7:78:de:fa:cc:ff:ec:0f:ba:e0:cf:3f:
         2b:79:9e:e5:a2:ce:a2:90:d2:fb:62:96:ca:4f:84:1a:37:c4:
         54:aa:b6:26:86:19:9b:18:8d:ad:64:f9:16:b5:b9:d7:78:4e:
         d1:7f:ec:27:f5:e1:11:2b:94:fe:a4:20:33:f0:d3:6f:52:54:
         70:e5:4a:a1:c2:14:66:cb:8b:fd:e5:64:8c:df:8b:ee:8a:cf:
         af:f6:37:61:b2:96:24:01:72:86:5f:b6:b5:27:df:22:15:dc:
         fe:8d:22:3f:f2:07:6d:b2:b7:d0:7c:8b:46:df:f7:83:4a:e8:
         42:14:0b:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----