Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/9120cb-0b06-4861-b657-757838670948/1/lnc-nMl0MBp4t-5tmUUo8fiC5G8.mft
File:                     lnc-nMl0MBp4t-5tmUUo8fiC5G8.mft (raw, json)
Hash identifier:          s+iQL6tFEt3i3Kw+E6FjXZ43EykQQKbB8x7A9Tk7GIc=
Subject key identifier:   E7:F6:64:1A:D3:E1:0B:DA:66:8F:07:51:9D:EC:96:F7:5E:F8:04:E7
Authority key identifier: 96:77:3E:9C:C9:74:30:1A:78:B7:EE:6D:99:45:28:F1:F8:82:E4:6F
Certificate issuer:       /CN=96773e9cc974301a78b7ee6d994528f1f882e46f
Certificate serial:       01962ECFBD77A3E6D54DB0BA5CA74DEDAFF2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lnc-nMl0MBp4t-5tmUUo8fiC5G8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/29/9120cb-0b06-4861-b657-757838670948/1/lnc-nMl0MBp4t-5tmUUo8fiC5G8.mft
Manifest number:          14EB
Signing time:             Sun 13 Apr 2025 11:01:28 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:28 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:28 +0000
Files and hashes:         1: 6ApC-jHQIcJABZYGTnaj4cDWTZ0.roa (hash: mW6j44egYeyH1Rdwi9kE+w3aUg6boclFfelfnL+ZOCc=)
                          2: gnEe3OeabPYnBDM3IzIwqcZpMW8.roa (hash: VzRNxcBeLn35opHADGeiMTKNeQ/005lIREbbg/TGf9U=)
                          3: lnc-nMl0MBp4t-5tmUUo8fiC5G8.crl (hash: CX7gGohOxeNSJk5y5lIliF+q+tXApjR+zML04od8HsY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:bd:77:a3:e6:d5:4d:b0:ba:5c:a7:4d:ed:af:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=96773e9cc974301a78b7ee6d994528f1f882e46f
        Validity
            Not Before: Apr 13 11:01:28 2025 GMT
            Not After : Apr 14 11:01:28 2025 GMT
        Subject: CN=e7f6641ad3e10bda668f07519dec96f75ef804e7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:22:bf:10:8c:05:27:66:23:88:3d:d3:8b:8f:
                    97:9a:11:c1:e1:d5:72:d1:5c:9f:8b:72:9d:42:fc:
                    bd:17:17:3c:2f:23:fd:e0:0b:b1:2d:1b:81:47:bd:
                    81:f9:05:75:93:8f:57:e3:b4:d3:02:90:15:02:63:
                    aa:25:3b:be:e9:89:af:f4:17:80:ec:41:cc:d0:9b:
                    0b:18:76:02:df:bf:76:a5:3e:90:85:3e:59:22:90:
                    77:dd:c0:b6:74:e9:1d:e8:22:de:d2:9c:e4:4f:e4:
                    66:e8:cf:17:10:65:64:89:55:de:e0:77:51:96:08:
                    d9:5a:55:a8:6b:d2:49:6f:c0:44:ae:71:43:9f:51:
                    bf:a7:3f:ab:ec:fc:64:e7:bb:49:d4:c4:1e:68:aa:
                    f8:9b:1b:ca:19:fa:02:48:0c:0d:8c:c7:e7:49:6c:
                    fd:8f:ef:b5:09:79:e2:01:25:a7:98:1a:ea:47:c1:
                    1a:5d:9d:48:64:f6:24:97:08:62:e2:ba:d5:ca:35:
                    16:f8:4f:40:1f:2c:0a:10:ce:02:ba:d8:02:29:50:
                    d9:01:7b:9d:78:66:88:b5:a8:5d:97:df:d0:79:63:
                    f1:08:8d:fd:0d:84:78:2a:da:d4:1a:d9:cc:84:92:
                    de:b8:e5:e3:be:6e:0e:e5:66:d5:d1:23:2e:e0:bc:
                    aa:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:F6:64:1A:D3:E1:0B:DA:66:8F:07:51:9D:EC:96:F7:5E:F8:04:E7
            X509v3 Authority Key Identifier:
                keyid:96:77:3E:9C:C9:74:30:1A:78:B7:EE:6D:99:45:28:F1:F8:82:E4:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lnc-nMl0MBp4t-5tmUUo8fiC5G8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/9120cb-0b06-4861-b657-757838670948/1/lnc-nMl0MBp4t-5tmUUo8fiC5G8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/29/9120cb-0b06-4861-b657-757838670948/1/lnc-nMl0MBp4t-5tmUUo8fiC5G8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:0d:45:d9:77:e9:6f:b9:62:46:0a:3b:cd:9f:62:93:86:e5:
         e6:b9:93:60:0c:82:05:fd:9d:95:7b:be:17:9d:f8:93:d3:62:
         24:97:aa:1e:f5:dc:b1:a9:d7:75:9e:fb:0d:98:46:d7:db:bc:
         89:ea:ed:b0:55:91:75:aa:a5:f1:fc:f4:e2:c5:ec:bd:aa:c6:
         45:e7:e7:23:6a:77:02:41:40:83:d6:30:7c:6a:ee:3a:c7:96:
         9b:e2:5b:cd:a8:a1:d3:be:81:b2:9f:07:6f:3f:33:f2:f3:88:
         cf:d3:74:0c:8e:83:90:e3:a9:c6:d8:fa:96:9e:e0:03:b9:4e:
         1a:54:0f:2f:82:19:04:02:32:1c:7e:b6:b3:a7:1d:0e:a7:d6:
         16:a8:f7:a3:9d:61:f7:1d:c3:05:e3:12:63:68:64:2d:71:06:
         b5:06:b2:94:f6:29:35:6a:20:6f:2e:59:6a:76:62:e8:6e:7d:
         c9:12:9e:f0:e8:6e:b3:36:3d:28:ca:e8:24:fb:e5:60:f4:4f:
         9e:c8:d2:1d:b5:fa:22:d9:ac:9a:82:bc:1c:ce:1b:a7:51:cb:
         31:85:fe:4f:05:2d:29:71:98:cd:4c:f9:d2:98:fd:4a:b8:d0:
         07:5e:bc:f4:37:40:67:02:cf:96:03:32:ed:9e:8f:31:d1:0e:
         0c:b1:9c:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----