Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/a7c8d0-c92d-45d0-91a3-28c22abf08d0/1/lVJGsbZclQRiWcIkjB0wb_E1uYQ.mft
File:                     lVJGsbZclQRiWcIkjB0wb_E1uYQ.mft (raw, json)
Hash identifier:          gOjLeZayI5kT6fe3Z5OfjJ+5ngnZYvHC/hDO3eMOpiU=
Subject key identifier:   30:62:84:EE:F4:76:39:C0:50:3F:3B:10:7B:F8:A3:1E:BE:1D:A6:6F
Authority key identifier: 95:52:46:B1:B6:5C:95:04:62:59:C2:24:8C:1D:30:6F:F1:35:B9:84
Certificate issuer:       /CN=955246b1b65c95046259c2248c1d306ff135b984
Certificate serial:       01962F0669CB20796173449581BBC61CFD48
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lVJGsbZclQRiWcIkjB0wb_E1uYQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/88/a7c8d0-c92d-45d0-91a3-28c22abf08d0/1/lVJGsbZclQRiWcIkjB0wb_E1uYQ.mft
Manifest number:          102E
Signing time:             Sun 13 Apr 2025 12:01:11 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:11 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:11 +0000
Files and hashes:         1: d62eL6CZy4sqfG2HJBBtw2_a_Xo.roa (hash: VQJVLEqVpBvW0EhwHp75V7iW+dHN3GO38t078QYSo/g=)
                          2: lVJGsbZclQRiWcIkjB0wb_E1uYQ.crl (hash: 62l4MRIhQ3wz1S1rf/fKlkV/efRCOTuGBfz7ZWhium0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:69:cb:20:79:61:73:44:95:81:bb:c6:1c:fd:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=955246b1b65c95046259c2248c1d306ff135b984
        Validity
            Not Before: Apr 13 12:01:11 2025 GMT
            Not After : Apr 14 12:01:11 2025 GMT
        Subject: CN=306284eef47639c0503f3b107bf8a31ebe1da66f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:af:2d:ad:dc:33:63:8c:dc:16:45:de:3f:cc:
                    08:dc:e0:2a:84:ac:1d:35:68:56:be:20:ca:16:9f:
                    0c:e1:7b:61:91:d9:f4:bd:43:f9:98:c3:9c:53:79:
                    a3:03:56:db:4c:31:85:fa:ed:fb:95:7a:38:c1:83:
                    50:de:8f:2c:da:c6:c7:8e:bf:ab:56:3e:22:09:b5:
                    d4:eb:00:61:81:db:9b:ef:c8:1d:fb:74:7f:8a:e7:
                    c2:19:55:91:ed:c7:ab:74:be:45:b8:4d:f1:14:a8:
                    f5:ed:56:c7:6d:a9:57:1c:b9:9b:e3:e3:e0:fb:80:
                    43:03:0c:86:dd:8b:8f:c1:9d:f6:84:9d:fc:4e:80:
                    e3:e2:70:e4:37:02:cf:89:c5:51:ed:c3:20:ad:f0:
                    f9:20:9e:12:32:a3:a0:4e:e3:f5:79:b3:2a:c2:24:
                    97:22:5a:80:3d:36:03:96:61:6a:3b:60:0f:05:6f:
                    51:e0:f4:a9:e2:af:1d:91:13:28:34:08:dc:db:3c:
                    61:34:89:cf:f8:8a:93:14:43:3f:dc:ff:38:83:94:
                    8f:b5:21:b1:a4:80:3a:16:fa:d5:65:03:eb:c7:57:
                    7e:0b:f4:de:cf:50:9d:47:57:76:c2:a3:42:d9:f9:
                    1b:19:f0:ae:a7:0c:59:46:ea:18:ee:2a:f7:dc:e5:
                    53:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:62:84:EE:F4:76:39:C0:50:3F:3B:10:7B:F8:A3:1E:BE:1D:A6:6F
            X509v3 Authority Key Identifier:
                keyid:95:52:46:B1:B6:5C:95:04:62:59:C2:24:8C:1D:30:6F:F1:35:B9:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lVJGsbZclQRiWcIkjB0wb_E1uYQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/a7c8d0-c92d-45d0-91a3-28c22abf08d0/1/lVJGsbZclQRiWcIkjB0wb_E1uYQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/88/a7c8d0-c92d-45d0-91a3-28c22abf08d0/1/lVJGsbZclQRiWcIkjB0wb_E1uYQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:a8:b8:fb:01:27:48:9f:cd:8c:09:db:62:98:e1:dd:8f:51:
         42:54:7e:3e:e4:57:64:1e:ea:11:3b:ee:1b:5a:43:cf:a6:1d:
         6c:cb:12:06:56:1b:a6:41:c4:bd:e3:3b:14:e8:61:34:2b:71:
         02:be:7a:8a:b9:c0:11:b5:15:92:41:b0:e1:a1:07:8e:7b:d3:
         60:7c:07:56:62:99:69:fa:c2:c8:10:52:1e:af:65:83:c6:a8:
         1b:ce:07:b1:2c:0a:b5:73:f0:d2:9d:69:4f:2a:da:81:40:62:
         76:2f:f1:3c:96:ed:12:ff:54:20:a8:40:7b:b6:21:84:a0:eb:
         e0:86:90:5f:c6:ce:19:84:35:88:eb:2e:03:cc:a8:a6:5c:da:
         a0:23:67:dc:f1:2f:48:d8:88:b6:b4:54:7e:58:ee:08:bb:ac:
         b1:75:13:d6:3e:a8:34:c8:c1:d4:4f:f4:80:45:27:2e:49:e6:
         43:de:e0:3c:a9:3d:43:03:a1:63:1b:f3:5d:82:e4:a6:30:f7:
         43:5e:bd:18:97:24:5b:1e:d5:4a:34:d6:3c:b2:50:94:f6:ea:
         87:4c:85:6a:ec:d6:1d:e6:81:00:d8:1b:bb:1b:b5:6e:56:c3:
         d3:99:e7:7f:d1:7c:9d:c4:92:99:25:bc:99:80:45:42:ff:d7:
         16:30:92:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----