Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/82e6f5-82f2-45e7-844e-3514841f36ae/1/lcriw3yGYw5hr9-JA_4XTei5Rb4.mft
File:                     lcriw3yGYw5hr9-JA_4XTei5Rb4.mft (raw, json)
Hash identifier:          J5eDV9EyAuLs1enp9KQoLDTUSHRX8z+dy8TdyjZNBX8=
Subject key identifier:   A4:44:77:5E:EE:30:3A:3A:2A:3E:B2:45:42:8B:09:C1:77:61:51:FC
Authority key identifier: 95:CA:E2:C3:7C:86:63:0E:61:AF:DF:89:03:FE:17:4D:E8:B9:45:BE
Certificate issuer:       /CN=95cae2c37c86630e61afdf8903fe174de8b945be
Certificate serial:       01962E61FC4066BE7EFD184423D9355EE926
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lcriw3yGYw5hr9-JA_4XTei5Rb4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ec/82e6f5-82f2-45e7-844e-3514841f36ae/1/lcriw3yGYw5hr9-JA_4XTei5Rb4.mft
Manifest number:          14E8
Signing time:             Sun 13 Apr 2025 09:01:35 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:35 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:35 +0000
Files and hashes:         1: 4PZQlcsjVsAvgmqOqQEmrDwbHdM.roa (hash: WiP23BGsK1UTNte+BakYOV/1LeI5VSUhcks2u5DxJ8M=)
                          2: Ha5upAoCmCkgHpv_bzidQHciZpU.roa (hash: dLaRJkdtGcshL2ZliATq/iRbMaN6GbsblgbG4F90nyk=)
                          3: lcriw3yGYw5hr9-JA_4XTei5Rb4.crl (hash: wt5jzx2WaNW/6bwak9FGPTqBDRCFHBOtJOiGfO5jTUU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:fc:40:66:be:7e:fd:18:44:23:d9:35:5e:e9:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=95cae2c37c86630e61afdf8903fe174de8b945be
        Validity
            Not Before: Apr 13 09:01:35 2025 GMT
            Not After : Apr 14 09:01:35 2025 GMT
        Subject: CN=a444775eee303a3a2a3eb245428b09c1776151fc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:15:9f:b9:01:08:b4:e6:61:ee:6c:2c:ac:02:
                    77:85:5b:38:5b:1d:26:f3:7e:b9:43:d6:1f:4a:ac:
                    f2:28:a4:0c:48:40:de:74:cb:1f:51:e3:b5:b4:d5:
                    5f:98:ba:73:13:19:45:24:39:bd:a9:89:c0:fd:ef:
                    80:8d:31:8f:8b:8a:8c:09:e5:6b:de:a6:12:34:08:
                    f6:40:fb:5e:73:f5:a6:1a:10:85:f8:c4:2a:d7:93:
                    fc:68:5d:c8:7a:c9:4a:b5:14:76:22:21:83:d3:2a:
                    0c:df:89:47:86:86:46:26:d0:87:60:ad:ae:a5:47:
                    bc:63:f3:09:c0:8c:1f:dd:b9:54:60:cc:03:7a:03:
                    79:5e:6c:45:a9:af:e4:47:33:97:3a:e7:62:1e:61:
                    1f:6a:83:cc:a6:e0:49:05:29:99:f7:1c:06:52:6a:
                    43:1e:fa:34:8a:24:fb:1c:a5:fb:68:66:81:11:64:
                    fe:42:65:f6:eb:27:4f:ad:09:39:09:7a:41:c1:fd:
                    e8:57:2e:e9:ed:1d:a2:09:fd:54:c5:50:e5:9c:96:
                    76:96:f3:fe:b2:e9:df:0d:13:85:18:b3:50:20:93:
                    5d:42:2d:38:19:f8:a4:0c:07:34:ea:60:6d:22:40:
                    e2:69:94:86:fa:e3:fb:92:64:0b:ff:e1:96:9a:93:
                    5c:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:44:77:5E:EE:30:3A:3A:2A:3E:B2:45:42:8B:09:C1:77:61:51:FC
            X509v3 Authority Key Identifier:
                keyid:95:CA:E2:C3:7C:86:63:0E:61:AF:DF:89:03:FE:17:4D:E8:B9:45:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lcriw3yGYw5hr9-JA_4XTei5Rb4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/82e6f5-82f2-45e7-844e-3514841f36ae/1/lcriw3yGYw5hr9-JA_4XTei5Rb4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/82e6f5-82f2-45e7-844e-3514841f36ae/1/lcriw3yGYw5hr9-JA_4XTei5Rb4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:1c:2e:5f:7a:56:fc:b7:85:e2:5a:27:76:f8:b4:0b:2c:f3:
         8d:4f:e4:ff:62:93:35:97:e5:02:86:e3:1d:cf:49:e4:89:f5:
         85:08:68:c2:41:22:77:1e:82:5c:78:e8:88:4f:e6:19:db:12:
         9f:89:e6:03:bb:7c:7f:dd:0d:a3:96:41:52:4e:2b:4e:5a:7c:
         7e:68:0d:32:43:6a:d1:ab:f7:89:a9:ae:2b:61:d8:c3:ea:31:
         0b:69:06:22:d0:9b:26:48:f3:53:8a:a7:4e:0b:e5:2b:7c:d8:
         43:45:2c:fe:1f:a6:7e:10:2d:f7:33:97:11:da:50:23:02:03:
         30:6b:c9:cd:50:a8:d1:10:67:9c:d8:8f:2e:25:6d:47:86:53:
         aa:f1:db:32:78:f2:53:85:54:92:a8:11:32:c1:64:45:d8:af:
         fc:99:d6:a0:06:42:b6:a0:e1:6b:ed:b1:e0:31:26:30:63:c4:
         dc:af:c7:00:a7:c1:03:ec:7f:1c:ed:b5:5f:70:6e:a6:ce:07:
         b6:54:56:06:7b:80:bb:e2:de:35:64:5a:e4:25:a9:cb:93:b3:
         41:80:34:d3:9e:b0:02:ba:b8:7d:00:26:04:bc:7f:3b:fc:d1:
         08:9c:14:4e:d3:b2:72:9e:2b:f3:74:2d:9d:ba:a4:44:3d:70:
         d9:e2:f7:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----