Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/fc4690-080f-4018-89a1-93b4fe5157ec/1/lvLaL6G8jtLyvGtwOovxU0D5fPo.mft
File:                     lvLaL6G8jtLyvGtwOovxU0D5fPo.mft (raw, json)
Hash identifier:          3URq0S6JTGEshvIwnd7PUDpFMudt5Qk02fsN7uREndA=
Subject key identifier:   66:9E:E5:5A:3E:6D:A8:32:98:6C:8E:B6:F1:03:75:36:82:8E:E6:AB
Authority key identifier: 96:F2:DA:2F:A1:BC:8E:D2:F2:BC:6B:70:3A:8B:F1:53:40:F9:7C:FA
Certificate issuer:       /CN=96f2da2fa1bc8ed2f2bc6b703a8bf15340f97cfa
Certificate serial:       01962E61FEF5A812771F5631D9AF6CBB5A9C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lvLaL6G8jtLyvGtwOovxU0D5fPo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0e/fc4690-080f-4018-89a1-93b4fe5157ec/1/lvLaL6G8jtLyvGtwOovxU0D5fPo.mft
Manifest number:          08C7
Signing time:             Sun 13 Apr 2025 09:01:36 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:36 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:36 +0000
Files and hashes:         1: HfieAyyFiGHzuxK88Qqlcm0jHjE.roa (hash: 9hArFOOTkWsSdh7y1qMFDzyLMrMdzpKqI+tBBv6IzqM=)
                          2: lvLaL6G8jtLyvGtwOovxU0D5fPo.crl (hash: FxrcExhMehJpXkxzp3s3p1CRkcUfCzxAQZw+Pg9J7cU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:fe:f5:a8:12:77:1f:56:31:d9:af:6c:bb:5a:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=96f2da2fa1bc8ed2f2bc6b703a8bf15340f97cfa
        Validity
            Not Before: Apr 13 09:01:36 2025 GMT
            Not After : Apr 14 09:01:36 2025 GMT
        Subject: CN=669ee55a3e6da832986c8eb6f1037536828ee6ab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:d8:64:ba:80:19:03:f5:47:63:c8:ad:6c:fa:
                    ad:2d:85:90:20:6b:f5:29:de:dc:f0:bf:9e:3f:f6:
                    57:6f:ed:f8:da:7b:85:09:05:ad:1f:46:c8:73:3b:
                    e2:36:4a:9c:4b:33:5b:15:63:1a:5c:b2:99:60:92:
                    0e:74:75:3a:78:66:23:61:2a:a5:34:fb:dc:13:e6:
                    c9:b5:d0:b1:d6:e1:00:e8:10:f7:91:d7:16:ec:cc:
                    7d:95:0a:9d:d8:28:5d:fa:9d:d5:54:d7:45:66:cc:
                    5e:18:6a:f0:74:f4:8f:c8:52:20:24:64:de:6d:6b:
                    75:82:9a:5b:71:a2:dc:87:97:f3:f9:6c:15:49:7a:
                    80:fb:1a:a4:14:8f:37:c1:83:c1:0e:69:a8:f1:bc:
                    9b:64:35:ed:e2:42:ce:97:af:d8:fa:78:92:2b:b7:
                    ba:f8:bb:ef:85:33:83:d4:d1:b1:98:30:f5:19:2a:
                    6e:d8:12:54:ca:4a:23:1a:03:63:f6:6a:60:c1:49:
                    4c:09:d9:1f:48:84:b1:1e:a9:62:0b:41:00:89:37:
                    03:fd:11:34:9e:92:f7:54:39:37:e6:69:14:10:95:
                    55:ac:2d:0d:6d:af:d4:e9:aa:60:4f:99:d7:02:bf:
                    2b:29:3b:ab:b8:07:26:e3:8e:61:08:fa:a0:79:71:
                    8b:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:9E:E5:5A:3E:6D:A8:32:98:6C:8E:B6:F1:03:75:36:82:8E:E6:AB
            X509v3 Authority Key Identifier:
                keyid:96:F2:DA:2F:A1:BC:8E:D2:F2:BC:6B:70:3A:8B:F1:53:40:F9:7C:FA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lvLaL6G8jtLyvGtwOovxU0D5fPo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/fc4690-080f-4018-89a1-93b4fe5157ec/1/lvLaL6G8jtLyvGtwOovxU0D5fPo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/fc4690-080f-4018-89a1-93b4fe5157ec/1/lvLaL6G8jtLyvGtwOovxU0D5fPo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:7c:ff:31:e6:fc:10:13:77:72:44:47:bc:36:cb:19:fb:f8:
         42:dc:58:12:43:41:c1:1a:a1:e7:c8:4b:ac:b0:7d:66:65:e8:
         e2:26:9f:af:2b:32:bb:a9:5c:88:e9:d7:02:dc:4b:ae:c9:0a:
         4f:9d:90:96:ff:97:63:bc:9a:ef:5c:0d:02:c7:70:66:fc:a3:
         9a:23:c6:c6:2d:5f:75:bc:04:77:60:e6:39:61:40:80:aa:0f:
         65:df:29:8e:ee:73:c1:79:2c:47:e1:d4:66:1c:f8:69:fd:49:
         94:18:32:90:41:3d:05:89:5e:48:0d:b2:4a:bb:5e:5c:16:20:
         52:d3:f0:59:4f:8b:c7:1e:4b:35:2d:3b:3c:31:d8:77:f1:c1:
         aa:8b:2c:8f:f4:97:cc:04:9d:6b:76:96:a3:12:a7:49:23:e2:
         10:a6:85:bf:1f:ba:17:09:f1:4a:57:68:53:b3:9e:0d:4d:16:
         8a:b5:5b:5b:5c:9f:75:1b:03:7e:83:79:21:50:df:5b:97:a0:
         b7:ca:c7:a4:75:93:93:37:90:2e:c9:06:0d:2e:8b:a1:c2:a1:
         d3:53:14:23:c0:3e:bf:a4:80:d9:93:1d:52:45:bd:08:0f:66:
         53:2a:c7:64:55:16:ba:c9:07:0a:01:5d:33:42:7d:a6:3c:4a:
         87:6b:24:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----