Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/d27ad0-55c2-4904-a8c5-ace180ff9b19/1/lRibFY2NYBG6X5YlLTAmanDT4GY.mft
File:                     lRibFY2NYBG6X5YlLTAmanDT4GY.mft (raw, json)
Hash identifier:          O26PGpZI0RVS6K05X+lYOkL7zEumsezgeaMU4dVxTLk=
Subject key identifier:   DC:EE:AB:AE:CD:0F:F4:2F:3D:B7:68:F0:49:52:19:26:2B:A0:01:4B
Authority key identifier: 95:18:9B:15:8D:8D:60:11:BA:5F:96:25:2D:30:26:6A:70:D3:E0:66
Certificate issuer:       /CN=95189b158d8d6011ba5f96252d30266a70d3e066
Certificate serial:       01962F06957C65583A7ADC0D7B01026025D3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lRibFY2NYBG6X5YlLTAmanDT4GY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/db/d27ad0-55c2-4904-a8c5-ace180ff9b19/1/lRibFY2NYBG6X5YlLTAmanDT4GY.mft
Manifest number:          14EA
Signing time:             Sun 13 Apr 2025 12:01:22 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:22 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:22 +0000
Files and hashes:         1: alfL1bRTQjOY-E2KjHP8N4Ulue0.roa (hash: ybSj2AdhAA+9tbRInXwXzkVBfMf3WHllqssGw6/wFUI=)
                          2: lRibFY2NYBG6X5YlLTAmanDT4GY.crl (hash: e073PLp3p5NCSFMy6DAiQ1AXoWdmNiMs7rQMA4acgnE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:95:7c:65:58:3a:7a:dc:0d:7b:01:02:60:25:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=95189b158d8d6011ba5f96252d30266a70d3e066
        Validity
            Not Before: Apr 13 12:01:22 2025 GMT
            Not After : Apr 14 12:01:22 2025 GMT
        Subject: CN=dceeabaecd0ff42f3db768f0495219262ba0014b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:50:98:3a:20:bd:55:68:ce:f7:9a:03:0f:8c:
                    52:d8:21:26:ed:20:88:cc:1e:e2:c5:7a:da:4c:7c:
                    bf:22:96:1c:27:60:eb:30:de:27:df:0d:b8:81:a2:
                    02:7e:52:30:8a:42:38:5f:55:4f:27:7d:13:40:c1:
                    6a:9b:ce:aa:36:37:a9:4e:a9:cb:00:50:a6:68:ce:
                    ca:b7:86:6d:28:6c:32:25:4d:b6:20:f6:da:be:7c:
                    e4:b7:7b:1a:c4:68:b5:36:68:79:21:34:d2:55:53:
                    7c:61:76:94:a0:40:19:57:37:1e:99:93:08:0b:66:
                    ef:4b:fb:d9:08:f3:9e:60:aa:24:a9:a9:ef:fb:d3:
                    b3:02:d0:f4:59:e9:93:6d:4c:15:07:86:a5:42:fe:
                    70:44:f0:44:33:c1:fe:83:c9:61:77:65:b1:e9:a4:
                    48:e9:e8:fc:1b:38:72:eb:bf:60:df:ec:e0:46:a3:
                    6e:20:a8:cc:97:84:14:24:4f:08:46:63:19:3e:3b:
                    85:3e:3e:d3:ae:b2:5c:3c:19:f0:f6:f8:df:63:24:
                    4a:7c:0c:1e:ee:1f:e0:2a:f6:05:31:b2:8d:e8:09:
                    32:c6:9a:2f:88:0f:05:98:6d:ab:bc:d4:80:75:09:
                    18:a1:14:29:7c:89:80:ff:31:0a:82:20:db:81:b6:
                    d5:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:EE:AB:AE:CD:0F:F4:2F:3D:B7:68:F0:49:52:19:26:2B:A0:01:4B
            X509v3 Authority Key Identifier:
                keyid:95:18:9B:15:8D:8D:60:11:BA:5F:96:25:2D:30:26:6A:70:D3:E0:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lRibFY2NYBG6X5YlLTAmanDT4GY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/d27ad0-55c2-4904-a8c5-ace180ff9b19/1/lRibFY2NYBG6X5YlLTAmanDT4GY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/db/d27ad0-55c2-4904-a8c5-ace180ff9b19/1/lRibFY2NYBG6X5YlLTAmanDT4GY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:d9:4a:5f:ab:dd:03:e7:6b:3f:86:4f:2d:ca:65:2b:86:cb:
         ee:57:cb:f6:df:20:48:33:f4:97:82:42:b4:9b:8f:30:99:c9:
         72:fb:1e:44:a0:d1:e1:3a:81:3c:7e:14:fd:7f:39:c8:5c:ea:
         79:39:14:47:d1:8b:43:12:c2:42:97:18:00:15:c0:99:be:ab:
         27:ba:45:38:42:9d:b0:7d:fc:b1:55:5c:a8:b4:08:13:66:b7:
         b3:e7:63:3f:78:22:ec:68:14:a7:18:92:36:8f:68:c9:15:be:
         3b:7e:23:4d:c0:3a:b7:50:91:e5:6f:59:db:12:77:06:89:cd:
         be:a0:f2:e0:7d:c6:96:86:49:6f:2f:39:85:e9:c9:e3:32:75:
         77:98:77:69:9e:96:b8:28:54:9b:78:c4:c9:db:b0:37:f6:f5:
         75:1d:a6:61:bc:87:e8:37:28:98:f8:6e:ec:f5:17:94:64:b2:
         a0:cd:11:0f:08:63:57:19:52:25:b0:fc:82:3e:e6:ab:cf:ac:
         25:17:26:be:a1:0e:5f:92:23:fb:58:57:6b:37:c7:4d:71:47:
         0c:0c:9e:68:e1:ef:3f:db:1b:6f:43:98:dc:9a:c0:4c:36:39:
         53:81:48:2c:ba:a1:bd:29:37:03:e1:d0:e2:93:03:1e:a9:99:
         91:a4:5a:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----