Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/c35dcd-3103-4ea0-a8c5-866f1d2327aa/1/LENEciZF2iXs47F8eoN2LtQt2lI.mft
File:                     LENEciZF2iXs47F8eoN2LtQt2lI.mft (raw, json)
Hash identifier:          ddpFnaayGXrP+UNQAF5aAAtNmwC+J095QF8kl0gnbqs=
Subject key identifier:   45:CE:B2:74:6F:42:8A:AB:B9:07:38:5F:E5:32:CD:B5:61:46:42:7B
Authority key identifier: 2C:43:44:72:26:45:DA:25:EC:E3:B1:7C:7A:83:76:2E:D4:2D:DA:52
Certificate issuer:       /CN=2c4344722645da25ece3b17c7a83762ed42dda52
Certificate serial:       01962F3D3F911C3480C7BEFF881A5B51ADDC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LENEciZF2iXs47F8eoN2LtQt2lI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d2/c35dcd-3103-4ea0-a8c5-866f1d2327aa/1/LENEciZF2iXs47F8eoN2LtQt2lI.mft
Manifest number:          14EA
Signing time:             Sun 13 Apr 2025 13:01:05 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:05 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:05 +0000
Files and hashes:         1: DNca1fRckrUMFldSKB-cqGf1TK0.roa (hash: kIv065JqVrTE0ajJFMvarA4KoH/TSNsdKoOgfZZUL90=)
                          2: LENEciZF2iXs47F8eoN2LtQt2lI.crl (hash: mISG8dTy/Wb/YfOld9N1MAiOqWwrl8V/eQwJz4pyfN0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:3f:91:1c:34:80:c7:be:ff:88:1a:5b:51:ad:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2c4344722645da25ece3b17c7a83762ed42dda52
        Validity
            Not Before: Apr 13 13:01:05 2025 GMT
            Not After : Apr 14 13:01:05 2025 GMT
        Subject: CN=45ceb2746f428aabb907385fe532cdb56146427b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:af:68:c4:22:ce:e6:52:e6:f9:57:7d:26:08:
                    70:7c:6d:11:2d:d3:3c:aa:41:f5:3c:19:42:64:2b:
                    54:23:9f:ae:0e:3b:23:6b:24:02:1a:8c:d8:36:41:
                    57:e4:b6:70:b1:6d:26:84:e5:b4:bc:97:2e:ca:82:
                    d1:50:96:4a:64:c6:9c:10:db:5c:e9:63:dd:8f:cb:
                    2f:4f:f6:98:18:7b:3b:53:79:51:ac:b8:53:a1:5e:
                    b1:23:a4:18:a0:41:ef:84:be:d9:b6:d1:4f:0e:5e:
                    be:38:21:29:14:32:85:7d:9f:c6:f8:5a:14:ff:cf:
                    a0:b9:c5:30:e2:68:5b:da:21:30:5a:6e:66:c0:ca:
                    27:f6:b9:21:94:f6:2b:30:83:8e:99:8d:8b:57:86:
                    1b:bd:80:0d:92:6c:db:20:e4:fb:07:61:14:02:d5:
                    bc:e2:49:a5:41:e9:09:88:d1:6a:9e:fd:b4:e0:8a:
                    98:cd:f4:f5:37:b7:7c:e7:30:ad:83:fd:51:45:93:
                    e4:97:d2:6d:31:46:9c:0f:96:88:42:2c:5d:fd:c3:
                    1f:28:79:a5:83:bd:58:89:6c:be:9c:53:8c:8a:93:
                    37:0c:52:69:76:b3:35:50:1c:86:19:b3:df:6c:98:
                    93:d3:ed:df:46:6e:fb:00:c2:26:ea:f7:ba:1b:6b:
                    ca:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:CE:B2:74:6F:42:8A:AB:B9:07:38:5F:E5:32:CD:B5:61:46:42:7B
            X509v3 Authority Key Identifier:
                keyid:2C:43:44:72:26:45:DA:25:EC:E3:B1:7C:7A:83:76:2E:D4:2D:DA:52

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LENEciZF2iXs47F8eoN2LtQt2lI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/c35dcd-3103-4ea0-a8c5-866f1d2327aa/1/LENEciZF2iXs47F8eoN2LtQt2lI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/c35dcd-3103-4ea0-a8c5-866f1d2327aa/1/LENEciZF2iXs47F8eoN2LtQt2lI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:b8:c4:ab:f5:86:58:2e:8b:6e:0b:24:29:ea:25:8a:c3:c0:
         d4:57:2d:0d:bb:cd:12:78:09:73:ba:d1:d3:cb:e9:43:a1:ee:
         bf:37:ef:6a:5c:d0:3e:11:b4:77:e8:84:38:f2:bc:ef:d4:a1:
         c0:6f:43:70:d7:82:3a:79:cd:58:48:2a:09:ae:b3:03:6c:0a:
         b6:5f:93:e9:55:8d:89:a1:e6:33:3d:73:58:a1:0a:43:9c:31:
         f4:f1:62:cf:a3:3d:85:b3:71:96:e8:89:65:c7:d7:67:d6:46:
         21:ae:c2:a2:8b:f8:d8:06:bf:f5:9a:92:14:30:0d:a5:02:b7:
         51:6d:29:0b:3d:26:31:9f:ca:c3:04:f1:19:d2:b6:ab:b4:c3:
         51:8d:fa:7e:49:b3:3b:19:8a:3e:69:69:48:96:18:73:62:f5:
         2c:55:f2:9e:10:93:61:24:cd:2f:b0:79:89:37:e5:fd:b4:a3:
         39:a6:94:70:c7:c3:fc:f4:f4:3c:49:ae:0c:70:bc:7e:3e:86:
         94:be:0b:58:4d:57:53:1a:29:44:dc:c8:e5:68:15:3f:ba:22:
         13:61:f3:15:4c:b8:02:dd:a7:17:55:0c:a9:61:75:88:eb:fb:
         3a:c9:e0:bd:23:fe:13:1c:46:59:09:56:84:45:1e:01:d8:a9:
         dd:8a:14:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----