Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/e64625-cb8b-49cb-8569-266ac104f7b4/1/lUsHGgPbXSM9BasDlFSAB3Z_g-c.mft
File:                     lUsHGgPbXSM9BasDlFSAB3Z_g-c.mft (raw, json)
Hash identifier:          Z9wtYNb1llvhcYILs9Ywz6RJWxWEbLO/RUHYoNTZh8g=
Subject key identifier:   A5:C1:EA:DB:10:9D:C0:44:1B:A1:BB:DB:C7:3B:A9:88:B2:F7:34:08
Authority key identifier: 95:4B:07:1A:03:DB:5D:23:3D:05:AB:03:94:54:80:07:76:7F:83:E7
Certificate issuer:       /CN=954b071a03db5d233d05ab0394548007767f83e7
Certificate serial:       01962E9945A6B535DEC738217C514FB59669
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lUsHGgPbXSM9BasDlFSAB3Z_g-c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1c/e64625-cb8b-49cb-8569-266ac104f7b4/1/lUsHGgPbXSM9BasDlFSAB3Z_g-c.mft
Manifest number:          0561
Signing time:             Sun 13 Apr 2025 10:01:58 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:58 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:58 +0000
Files and hashes:         1: MeHcHEJLI5aJxpbL08K_nBsRPYY.roa (hash: N7FogbwCwinhT6HlieiaEOy7N6CNclRf7G6B1lRFJU0=)
                          2: lUsHGgPbXSM9BasDlFSAB3Z_g-c.crl (hash: /ALGO0qFAZ9t1h2U+dFiRG24Nf2EGhhf4fCT18yTB7s=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:45:a6:b5:35:de:c7:38:21:7c:51:4f:b5:96:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=954b071a03db5d233d05ab0394548007767f83e7
        Validity
            Not Before: Apr 13 10:01:58 2025 GMT
            Not After : Apr 14 10:01:58 2025 GMT
        Subject: CN=a5c1eadb109dc0441ba1bbdbc73ba988b2f73408
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:c9:b1:26:bb:ba:a6:69:b8:41:6e:69:ec:d7:
                    3f:15:e3:38:6d:7c:74:8f:1a:09:92:6d:8d:f4:ab:
                    89:35:42:e0:61:27:87:61:ae:ff:84:b9:71:25:28:
                    28:0c:e1:23:96:8b:78:6c:78:63:fc:ca:c1:20:5f:
                    bb:45:a2:1f:c4:4f:19:87:86:c5:7f:bb:df:e8:57:
                    b1:56:bf:7d:02:19:16:bd:50:9a:b6:07:3e:2b:f9:
                    6b:33:d8:40:0f:2f:a5:d7:b4:86:c3:37:9e:16:23:
                    4e:05:e3:21:ec:9c:b4:f6:5b:d7:82:85:9f:ff:10:
                    1c:e8:96:67:e7:a2:15:aa:f9:40:1c:20:7b:d2:0a:
                    87:ec:c0:a5:0f:26:1d:7a:3e:ef:de:f5:a5:59:88:
                    f3:67:95:f7:56:9e:92:77:b6:f9:cc:f1:d9:69:3e:
                    25:e6:03:a4:75:57:75:79:1c:f6:eb:6b:a0:0b:ff:
                    fe:e3:59:a9:8e:d7:75:8c:27:70:6f:13:6e:da:16:
                    b8:a8:d9:13:18:46:e3:74:e7:58:a8:27:ac:28:60:
                    ff:6f:11:11:29:9b:ac:df:cb:72:ef:d7:fe:8b:63:
                    9a:88:fc:77:3a:30:53:2b:e8:be:85:2a:a8:0d:2e:
                    1b:6d:6a:f1:91:7a:a6:ac:53:9c:be:11:af:05:45:
                    ee:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:C1:EA:DB:10:9D:C0:44:1B:A1:BB:DB:C7:3B:A9:88:B2:F7:34:08
            X509v3 Authority Key Identifier:
                keyid:95:4B:07:1A:03:DB:5D:23:3D:05:AB:03:94:54:80:07:76:7F:83:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lUsHGgPbXSM9BasDlFSAB3Z_g-c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/e64625-cb8b-49cb-8569-266ac104f7b4/1/lUsHGgPbXSM9BasDlFSAB3Z_g-c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/e64625-cb8b-49cb-8569-266ac104f7b4/1/lUsHGgPbXSM9BasDlFSAB3Z_g-c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:21:04:75:4f:87:f6:51:4e:e7:1a:4b:d3:33:a4:70:37:92:
         09:5c:b4:93:4f:bd:93:53:cc:63:b7:26:6d:13:5b:a2:a6:11:
         a1:1d:76:40:1e:3e:38:73:2e:60:70:cc:d9:62:a0:aa:06:54:
         3a:be:db:a1:b8:24:ba:ee:1d:19:53:43:dd:55:e3:2d:01:68:
         da:ef:61:35:3a:30:6d:43:1e:6b:93:32:5b:f7:17:cc:b6:63:
         86:08:aa:d6:47:ff:37:a5:22:64:73:d8:3a:94:b5:a9:d4:a4:
         58:d3:36:e3:bc:4f:a7:a3:87:49:bd:d3:5c:25:0c:96:4d:f7:
         42:d8:1b:64:23:2f:33:4a:3e:9d:d7:5d:e1:ea:0a:5c:3c:41:
         04:22:18:6c:ff:e9:4d:ba:7a:73:f1:d5:f5:36:63:1b:c2:5c:
         bb:84:97:18:07:01:8a:ba:5e:43:18:f2:93:c7:a1:f1:47:cc:
         94:c1:d5:dd:4f:63:93:f6:69:7a:5a:7e:2c:ef:c3:df:e8:18:
         de:0b:b2:dc:71:40:dd:0e:d3:2e:c0:61:b7:37:a4:45:c5:bc:
         d3:c5:01:a6:7c:c8:43:b1:67:60:a3:ae:e3:37:b2:04:f8:29:
         93:b2:2d:f1:8b:c2:02:66:b6:cb:49:87:ff:c2:03:1b:8f:67:
         6c:b8:1c:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----