Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/48f99e-1a10-45c3-aa34-4cd15cbc501b/1/lakErGCT4eIpoHTFBQb_7NoBDM8.mft
File:                     lakErGCT4eIpoHTFBQb_7NoBDM8.mft (raw, json)
Hash identifier:          5K5qtBqxWK+l0ZALXbzbAP/O4nfQGcKC3GQxdlz5MrA=
Subject key identifier:   3D:34:7B:02:B9:10:57:DE:09:13:CC:3A:7D:E7:65:8C:09:8E:CA:E9
Authority key identifier: 95:A9:04:AC:60:93:E1:E2:29:A0:74:C5:05:06:FF:EC:DA:01:0C:CF
Certificate issuer:       /CN=95a904ac6093e1e229a074c50506ffecda010ccf
Certificate serial:       01962E99418B1D30BA208D222D792DE038E1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lakErGCT4eIpoHTFBQb_7NoBDM8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b0/48f99e-1a10-45c3-aa34-4cd15cbc501b/1/lakErGCT4eIpoHTFBQb_7NoBDM8.mft
Manifest number:          0A61
Signing time:             Sun 13 Apr 2025 10:01:57 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:57 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:57 +0000
Files and hashes:         1: EYwLNQ0R_Ied-v-mXvUH_vf6GVA.roa (hash: TajJUilMmDGZNmoTd4v8tDuWl6eHYmByCynqf999DBU=)
                          2: lakErGCT4eIpoHTFBQb_7NoBDM8.crl (hash: w7SdiQv1HOKXHHl0d1qZsRmooGSJH//PM6V2nUZiJoM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:41:8b:1d:30:ba:20:8d:22:2d:79:2d:e0:38:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=95a904ac6093e1e229a074c50506ffecda010ccf
        Validity
            Not Before: Apr 13 10:01:57 2025 GMT
            Not After : Apr 14 10:01:57 2025 GMT
        Subject: CN=3d347b02b91057de0913cc3a7de7658c098ecae9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:ea:2f:f1:dd:2a:96:59:13:a5:77:18:1e:21:
                    06:02:33:5a:bc:53:54:52:75:ef:15:87:f3:89:d2:
                    fd:f7:cc:51:9e:83:ab:fd:f1:ce:5b:02:57:27:3d:
                    a7:d7:55:21:76:87:30:69:69:e9:0b:d0:6a:3a:d1:
                    e6:52:a2:e0:68:85:86:4c:74:ae:72:0b:05:b0:13:
                    e8:13:71:3d:b6:2a:25:16:f2:f8:05:77:f7:48:25:
                    9c:9a:a6:7c:2c:88:d1:cd:21:f0:25:34:f3:67:d7:
                    fe:59:81:ff:d5:5b:9b:f4:3d:ea:c4:f9:05:83:a2:
                    8c:44:ab:9b:a9:c5:04:1d:3f:61:c1:22:0a:d7:19:
                    d3:2c:93:bf:14:17:05:ca:67:a4:ca:ca:e1:75:b6:
                    9c:63:99:03:d4:4e:c0:ff:af:55:a9:2a:fa:02:e2:
                    0b:e9:af:43:09:cc:f0:28:2d:46:71:c6:38:6f:4b:
                    f0:22:ef:ee:01:cf:59:36:85:ba:ea:70:5a:2f:18:
                    9c:50:61:60:d6:b9:04:18:ed:90:03:11:ba:a6:96:
                    45:ea:8e:8b:f8:4c:3c:02:49:c6:f5:75:47:23:42:
                    38:41:4a:73:0d:81:1c:c7:8d:ac:04:e8:9b:e0:b3:
                    2f:c5:61:d6:4a:ad:07:a2:3a:db:00:81:52:de:c2:
                    ff:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:34:7B:02:B9:10:57:DE:09:13:CC:3A:7D:E7:65:8C:09:8E:CA:E9
            X509v3 Authority Key Identifier:
                keyid:95:A9:04:AC:60:93:E1:E2:29:A0:74:C5:05:06:FF:EC:DA:01:0C:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lakErGCT4eIpoHTFBQb_7NoBDM8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/48f99e-1a10-45c3-aa34-4cd15cbc501b/1/lakErGCT4eIpoHTFBQb_7NoBDM8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/48f99e-1a10-45c3-aa34-4cd15cbc501b/1/lakErGCT4eIpoHTFBQb_7NoBDM8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:40:df:b7:e9:76:ef:d2:2c:af:e6:ec:ff:8d:2c:01:d2:07:
         e4:e8:97:08:34:db:71:33:a9:fd:b6:85:7b:08:3f:5b:ae:a6:
         eb:c1:4e:15:50:9a:40:71:ce:3b:a6:a5:d4:24:90:f4:45:c6:
         f6:7c:86:f7:a0:60:8d:93:64:4f:d4:b2:c9:65:9e:e1:d0:09:
         a0:0f:70:e1:dc:30:e3:69:d1:c3:1c:44:25:81:4c:40:3e:df:
         39:b4:02:3e:6f:6b:c1:58:7e:dd:42:89:45:0c:dd:90:58:fa:
         e6:db:d4:58:f6:86:1f:31:07:8b:73:4b:07:e0:29:0e:7c:dc:
         11:de:32:c4:92:f8:01:d0:23:6f:79:f5:e9:f1:ce:bc:fa:08:
         b7:b0:0d:ee:28:21:d6:75:b4:41:b8:46:5e:43:ce:56:ae:64:
         25:2e:75:ce:ec:26:06:c6:37:90:4e:0d:b8:b8:53:f6:f0:64:
         a0:87:33:86:cd:d7:ba:b7:c6:b1:a5:4b:21:eb:56:dc:04:23:
         61:a5:f2:9c:bc:9b:cc:b2:23:b6:c3:7d:c0:45:79:cf:3c:2b:
         c1:fe:42:6a:c6:a5:bc:8d:fb:6d:86:a3:97:77:7d:4b:52:3f:
         0e:c0:42:2e:c4:cd:b7:e6:12:44:b5:ac:b2:8e:b0:9b:7e:2c:
         bb:f5:f3:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----