Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/e05975-da8e-460b-9ebb-3fcb5f3f3c59/1/lgYvXdsY-W14SSs1ONd0XMRxSiY.mft
File:                     lgYvXdsY-W14SSs1ONd0XMRxSiY.mft (raw, json)
Hash identifier:          ZVzxgPupn7J6uwHWuJwY6Mkx3Bp1z9jWDIn6Gyg76YU=
Subject key identifier:   94:D7:27:70:1D:DD:02:4C:38:94:A1:93:2F:E5:9A:67:8B:D2:86:9A
Authority key identifier: 96:06:2F:5D:DB:18:F9:6D:78:49:2B:35:38:D7:74:5C:C4:71:4A:26
Certificate issuer:       /CN=96062f5ddb18f96d78492b3538d7745cc4714a26
Certificate serial:       01962E61962936B4278BD9BF2895DE6F5516
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lgYvXdsY-W14SSs1ONd0XMRxSiY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/36/e05975-da8e-460b-9ebb-3fcb5f3f3c59/1/lgYvXdsY-W14SSs1ONd0XMRxSiY.mft
Manifest number:          07CC
Signing time:             Sun 13 Apr 2025 09:01:09 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:09 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:09 +0000
Files and hashes:         1: lgYvXdsY-W14SSs1ONd0XMRxSiY.crl (hash: gxcDe0CPDzGDyzAbJcjeRU9Yc2fDu5HnDWygQIyEspA=)
                          2: tfoDF7zyFas9gs6WFrVbnqLVtKs.roa (hash: x+5zZ3Gyf9InZ2EuLZGBkdxKiWzA8pOKE0Jk5ZEXWWg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:96:29:36:b4:27:8b:d9:bf:28:95:de:6f:55:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=96062f5ddb18f96d78492b3538d7745cc4714a26
        Validity
            Not Before: Apr 13 09:01:09 2025 GMT
            Not After : Apr 14 09:01:09 2025 GMT
        Subject: CN=94d727701ddd024c3894a1932fe59a678bd2869a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:1e:b6:de:ed:e3:e6:74:34:7d:97:6b:96:8a:
                    0e:06:1f:70:60:f0:9f:d7:07:19:25:ef:5d:85:3a:
                    43:49:c2:25:f3:70:da:cc:d5:81:10:09:23:ea:f5:
                    fb:e1:36:f5:76:05:fd:cd:07:bc:de:b0:96:70:f1:
                    00:a2:95:a9:f1:0f:90:e5:96:46:1c:9a:a8:62:8f:
                    64:33:a9:3c:db:8e:05:ae:68:6c:49:f4:03:fe:5f:
                    35:4a:c1:ad:10:34:57:8f:7a:d3:6a:4d:a7:bd:d9:
                    a4:6a:0d:75:25:35:34:f9:43:5a:2e:75:ff:d5:e4:
                    d0:18:2d:bf:1b:f2:08:03:ea:59:41:a1:2f:a7:8e:
                    17:46:7c:d9:47:c4:74:6d:8e:e4:fc:32:64:39:05:
                    85:60:57:b2:78:3d:ad:c2:77:84:5c:77:90:11:cc:
                    48:78:ea:b4:24:15:ac:b4:36:ab:aa:49:08:3b:67:
                    05:25:02:b3:b8:c1:2f:87:49:58:8c:cd:e5:f4:a3:
                    ce:e2:d9:48:de:4f:9e:44:4e:c5:f2:f4:d5:68:c1:
                    94:dc:b6:ce:82:a7:fe:47:f6:ae:f6:a4:7e:f0:d2:
                    4c:9b:f4:b9:6f:54:7f:53:fa:bc:d9:ed:58:86:24:
                    91:fb:ca:e9:bb:cf:77:93:3b:3a:ab:73:db:9d:30:
                    f2:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:D7:27:70:1D:DD:02:4C:38:94:A1:93:2F:E5:9A:67:8B:D2:86:9A
            X509v3 Authority Key Identifier:
                keyid:96:06:2F:5D:DB:18:F9:6D:78:49:2B:35:38:D7:74:5C:C4:71:4A:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lgYvXdsY-W14SSs1ONd0XMRxSiY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/e05975-da8e-460b-9ebb-3fcb5f3f3c59/1/lgYvXdsY-W14SSs1ONd0XMRxSiY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/36/e05975-da8e-460b-9ebb-3fcb5f3f3c59/1/lgYvXdsY-W14SSs1ONd0XMRxSiY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8e:07:0e:a6:18:db:46:5e:f6:0d:d1:6a:38:ff:ce:1d:ed:99:
         5b:bf:b7:60:88:30:31:a0:ea:41:0d:d1:9b:f8:bc:d5:a0:87:
         5b:a5:5c:93:a3:50:7d:9e:e5:53:29:02:46:05:7a:18:3e:a0:
         49:29:50:39:aa:04:6e:e9:24:e1:f8:17:00:1c:e4:5f:34:c0:
         59:ca:04:02:d0:1b:76:a3:72:0d:f2:6f:50:02:a8:57:a3:a4:
         d1:ba:76:6f:cf:0d:63:bc:60:eb:3b:50:b9:ec:ae:66:49:0e:
         d7:33:0c:bc:98:dc:91:14:ab:01:6f:2e:c0:96:82:ec:53:4a:
         fb:82:94:2c:13:45:73:45:10:67:e9:79:cd:3d:ef:ce:59:cb:
         e9:66:47:c5:3c:6c:fb:c4:f7:08:8e:3f:41:5d:aa:ae:21:cb:
         84:21:c5:19:b5:aa:f6:65:fa:da:b0:86:d0:90:ec:81:86:14:
         18:1d:dc:6a:2d:72:85:3f:c9:80:06:87:8f:ea:50:99:b2:dc:
         92:37:b2:f9:f1:2b:e2:bb:12:7f:de:fb:94:f9:1d:61:e1:13:
         a5:b3:87:63:06:0f:30:71:fe:49:dd:6d:c1:94:78:35:bd:a2:
         20:38:13:bc:d9:ae:24:a9:22:da:50:d3:d8:68:93:05:88:67:
         90:02:70:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----