Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/1ac795-2e93-4056-93d9-684e855d7ddc/1/LgO_8-c1I3MjiWRkff2JOyajs0k.mft
File:                     LgO_8-c1I3MjiWRkff2JOyajs0k.mft (raw, json)
Hash identifier:          VbEbT4clkd1m4YW/NeYwgD1c2LUqWM5xl9F/5o+VfvM=
Subject key identifier:   2C:54:C7:F4:77:05:49:90:96:86:97:E9:74:73:BF:DB:5D:9B:E2:2C
Authority key identifier: 2E:03:BF:F3:E7:35:23:73:23:89:64:64:7D:FD:89:3B:26:A3:B3:49
Certificate issuer:       /CN=2e03bff3e7352373238964647dfd893b26a3b349
Certificate serial:       01962F74945D3FAD20FAA7F1E71780C2D6DA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LgO_8-c1I3MjiWRkff2JOyajs0k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7a/1ac795-2e93-4056-93d9-684e855d7ddc/1/LgO_8-c1I3MjiWRkff2JOyajs0k.mft
Manifest number:          14E9
Signing time:             Sun 13 Apr 2025 14:01:31 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:31 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:31 +0000
Files and hashes:         1: 4Ks29m0KEvqQ2u_x82i2_AGUJYc.roa (hash: LAlVvGEw43G7VBWh8V8Fzw/Vs6vev/GRjzgqnNcn5CU=)
                          2: LgO_8-c1I3MjiWRkff2JOyajs0k.crl (hash: QOBzJ8Sd6fmtVU7g215gxeVr7/dQ+bwne1QkClT9hYc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:94:5d:3f:ad:20:fa:a7:f1:e7:17:80:c2:d6:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2e03bff3e7352373238964647dfd893b26a3b349
        Validity
            Not Before: Apr 13 14:01:31 2025 GMT
            Not After : Apr 14 14:01:31 2025 GMT
        Subject: CN=2c54c7f477054990968697e97473bfdb5d9be22c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:b3:a4:63:2c:fe:25:66:3d:be:76:4f:b5:16:
                    5c:9f:d3:92:71:58:6b:95:65:c4:6b:ff:d2:f2:f8:
                    9b:b1:b5:72:95:38:4d:76:03:46:18:8e:ad:59:b3:
                    f8:3c:49:fe:d8:79:b4:14:8f:f4:8e:9e:5b:1f:67:
                    8e:d5:c5:8e:f1:72:69:b8:d3:c4:62:52:40:58:56:
                    a4:b6:15:bd:3a:4d:31:f4:53:2f:70:8a:a2:4b:84:
                    05:e5:e7:8f:88:46:da:21:5d:fb:2e:0a:09:6e:e3:
                    05:f6:d1:d1:4a:70:e9:eb:23:d7:38:09:11:41:2f:
                    6d:81:ad:05:20:5c:be:c8:68:55:2f:3d:ec:1e:54:
                    30:f6:cc:c6:f7:d5:0e:0a:0e:1f:79:92:a2:20:65:
                    7b:b5:80:47:88:c0:03:86:44:73:42:b1:c2:57:a3:
                    8b:dd:73:3d:71:9f:02:cb:d4:2c:cd:8b:a5:10:a0:
                    e0:45:eb:85:1c:29:be:cb:41:27:78:e9:38:2b:37:
                    74:a9:60:70:64:81:94:99:27:34:d7:29:de:e0:ee:
                    ce:ff:0d:2b:ba:16:66:82:4b:c4:39:aa:93:c6:e3:
                    2d:60:db:1b:82:da:69:59:20:f1:30:ee:58:85:5d:
                    99:3f:8b:9f:d0:53:a7:cb:6e:15:30:88:e5:1e:36:
                    24:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:54:C7:F4:77:05:49:90:96:86:97:E9:74:73:BF:DB:5D:9B:E2:2C
            X509v3 Authority Key Identifier:
                keyid:2E:03:BF:F3:E7:35:23:73:23:89:64:64:7D:FD:89:3B:26:A3:B3:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LgO_8-c1I3MjiWRkff2JOyajs0k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/1ac795-2e93-4056-93d9-684e855d7ddc/1/LgO_8-c1I3MjiWRkff2JOyajs0k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/1ac795-2e93-4056-93d9-684e855d7ddc/1/LgO_8-c1I3MjiWRkff2JOyajs0k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:27:20:4e:2b:27:c5:2e:b7:48:d8:e0:2a:22:86:7a:ba:ee:
         ba:30:10:00:1c:01:5b:32:0a:a1:e5:c5:53:50:3a:24:35:52:
         7e:45:06:6d:ec:4a:8a:e0:82:48:bc:87:56:18:a6:78:10:f9:
         15:76:22:ac:b1:48:f2:cc:96:db:8c:00:e2:6d:b9:8c:1e:89:
         b2:d5:59:39:9c:e8:8f:67:af:8e:be:8c:34:fc:04:d1:31:89:
         af:5b:24:6d:e3:a4:96:11:96:bf:c0:78:8d:5f:7f:05:76:70:
         75:8a:42:2c:e1:31:16:2a:91:f9:0d:5f:0a:6e:a5:fd:92:bb:
         53:2e:3e:8b:f0:9f:02:3a:e2:33:02:24:d9:a4:47:54:41:81:
         62:3e:4b:47:ed:16:3a:9f:c5:8b:40:4d:22:8c:1d:2d:dd:c1:
         4d:29:c0:3f:f3:05:32:ab:7e:9e:15:92:db:d9:c0:f6:a3:16:
         70:88:d2:4d:51:0e:9e:f9:47:de:8a:d8:c1:0d:de:6b:d7:d5:
         c5:f6:59:7c:2f:cf:81:9d:1b:d0:07:f4:47:4e:d3:f7:75:ee:
         6a:a8:20:fc:6d:73:4a:44:f0:62:91:ad:f2:44:4a:90:77:78:
         a6:94:2e:36:e6:b3:9d:8b:41:9a:32:8e:d5:a7:b5:b2:48:42:
         20:05:01:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----