Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/8a707a-5ced-4c75-ae38-56596beed1c7/1/lAueGO6wlNkS3rWV3HqshmGw1sc.mft
File:                     lAueGO6wlNkS3rWV3HqshmGw1sc.mft (raw, json)
Hash identifier:          MWUdW7lwyVk9NPHAFZeqJIJijaKmnNKSFyJkX7BLIW4=
Subject key identifier:   0A:67:ED:31:85:F0:96:D3:27:DD:B7:43:1E:8A:5D:0F:35:2C:5A:F2
Authority key identifier: 94:0B:9E:18:EE:B0:94:D9:12:DE:B5:95:DC:7A:AC:86:61:B0:D6:C7
Certificate issuer:       /CN=940b9e18eeb094d912deb595dc7aac8661b0d6c7
Certificate serial:       01962ECFAAA842981B8F31A46DD4F63D966D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lAueGO6wlNkS3rWV3HqshmGw1sc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/28/8a707a-5ced-4c75-ae38-56596beed1c7/1/lAueGO6wlNkS3rWV3HqshmGw1sc.mft
Manifest number:          14E8
Signing time:             Sun 13 Apr 2025 11:01:23 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:23 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:23 +0000
Files and hashes:         1: LAIYSHBNgDJwVs33iUQdNmBywEc.roa (hash: InEjvH48yKZ/JYP0Dutv2j5z1AvlQ/oufM81Pmqxk2w=)
                          2: VSA2PLMqpOv7dlTMBPyD4an4HVU.roa (hash: eXWyLM0MZufkmn0XWy2I12Cyf+5VVc0lvhOa7vlAv3E=)
                          3: lAueGO6wlNkS3rWV3HqshmGw1sc.crl (hash: EG6psCvhv3nO3a6RnTinbZbvH6vjSi0EkMOS4JCnSLQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:aa:a8:42:98:1b:8f:31:a4:6d:d4:f6:3d:96:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=940b9e18eeb094d912deb595dc7aac8661b0d6c7
        Validity
            Not Before: Apr 13 11:01:23 2025 GMT
            Not After : Apr 14 11:01:23 2025 GMT
        Subject: CN=0a67ed3185f096d327ddb7431e8a5d0f352c5af2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:2e:29:28:b5:39:78:19:72:0d:0b:89:ee:1a:
                    8c:f3:45:3a:70:52:73:0f:f1:f3:06:a6:e8:da:db:
                    9e:12:89:95:c3:b3:4d:52:99:8c:e1:94:21:74:4d:
                    36:c8:43:36:70:a7:45:93:f3:92:c0:2e:ac:1e:3d:
                    e4:55:6d:28:42:ee:80:88:30:b1:10:f3:da:e8:aa:
                    0e:bd:c1:58:8c:d7:ec:30:41:d6:41:86:01:1a:f2:
                    b3:ad:f4:5b:b4:c5:f7:15:09:0b:08:ca:a7:68:6c:
                    86:75:d8:f9:3e:cb:4d:ce:ab:32:21:4a:11:e3:06:
                    66:44:8b:d4:ed:24:b4:fb:88:d2:80:fb:67:26:fc:
                    c8:a4:a8:26:cb:02:11:bc:b2:44:0a:6d:da:b6:a1:
                    0a:0e:3c:38:18:f3:57:de:42:3b:cb:2e:1b:50:51:
                    c7:40:3f:d3:cf:4c:a7:c8:84:62:54:4c:58:c0:5d:
                    98:d4:99:46:d7:2f:ea:cb:51:7e:2c:a8:d9:25:39:
                    ff:46:da:af:41:27:4a:ab:86:8c:9a:6c:51:a4:99:
                    c0:de:f0:59:11:6e:e0:f5:a3:8d:b3:05:97:ce:c9:
                    42:2c:f4:c0:de:b2:5f:20:0d:05:47:4a:46:00:a1:
                    eb:05:2d:85:f2:d4:ee:a0:40:ea:82:c1:38:5c:49:
                    f1:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:67:ED:31:85:F0:96:D3:27:DD:B7:43:1E:8A:5D:0F:35:2C:5A:F2
            X509v3 Authority Key Identifier:
                keyid:94:0B:9E:18:EE:B0:94:D9:12:DE:B5:95:DC:7A:AC:86:61:B0:D6:C7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lAueGO6wlNkS3rWV3HqshmGw1sc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/8a707a-5ced-4c75-ae38-56596beed1c7/1/lAueGO6wlNkS3rWV3HqshmGw1sc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/28/8a707a-5ced-4c75-ae38-56596beed1c7/1/lAueGO6wlNkS3rWV3HqshmGw1sc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:46:c2:8e:ec:5d:02:a1:5e:5f:33:6e:55:8f:14:10:ba:af:
         fd:0a:6e:d7:57:f6:73:43:61:e6:15:5d:b8:2a:e5:c4:98:3d:
         87:69:a0:3c:c3:60:20:7b:4c:2f:bb:02:f8:b7:07:35:74:83:
         f6:7b:2b:fe:b3:49:52:65:d2:33:8b:b1:7e:2c:f1:58:e3:0b:
         1b:2b:be:5b:84:27:fc:c4:d0:79:0a:10:00:c1:45:64:67:a9:
         aa:30:d6:ee:eb:ab:4e:03:45:58:41:a5:7c:28:6a:05:49:6f:
         fb:5b:17:97:20:60:3e:b0:54:b6:47:57:f7:e7:c4:14:c5:1f:
         ea:7b:91:2b:2b:55:a0:ce:73:d1:6e:d2:8b:86:78:23:ba:90:
         99:6b:aa:59:f5:12:b0:22:10:80:43:bd:0f:de:d5:a4:c7:88:
         1a:8a:a0:b8:af:03:2d:ff:0a:e6:3d:42:69:03:4a:f4:10:c9:
         5d:75:c2:8c:20:4a:72:95:42:02:a0:fd:ee:10:17:a9:b3:8f:
         25:08:3e:29:3b:12:c8:16:37:a2:93:64:99:0a:a5:db:f1:3a:
         33:5d:5a:9d:70:7d:a7:c2:44:6a:9a:c8:c2:ce:84:48:06:61:
         74:6e:63:33:44:af:05:08:fc:17:30:49:d8:59:ed:9b:58:9d:
         5f:19:ca:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----