Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/b50110-02b0-4235-984f-2d80cb25579a/1/lmAVV4yUjzG_dKHh__1_o-NGAgY.mft
File:                     lmAVV4yUjzG_dKHh__1_o-NGAgY.mft (raw, json)
Hash identifier:          YgamlNQt+aqX5GsQNG47majGxTR/e4MnXiQMc0Xm0qE=
Subject key identifier:   58:9F:5E:9E:1D:15:AE:9B:6D:26:BE:3C:38:8F:3A:98:B4:37:D0:58
Authority key identifier: 96:60:15:57:8C:94:8F:31:BF:74:A1:E1:FF:FD:7F:A3:E3:46:02:06
Certificate issuer:       /CN=966015578c948f31bf74a1e1fffd7fa3e3460206
Certificate serial:       01962E2AE92C5C24A519D750439A5E1C6EED
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lmAVV4yUjzG_dKHh__1_o-NGAgY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/50/b50110-02b0-4235-984f-2d80cb25579a/1/lmAVV4yUjzG_dKHh__1_o-NGAgY.mft
Manifest number:          0B76
Signing time:             Sun 13 Apr 2025 08:01:26 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:26 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:26 +0000
Files and hashes:         1: OE686EGR1IVKz-bx67_ZsH11lHQ.roa (hash: S5Z4RalwztbreTYazKn4Yw+ySxhuT6+PltCXQ/y03p0=)
                          2: lmAVV4yUjzG_dKHh__1_o-NGAgY.crl (hash: xwHsn1OSJszQdaA6U4e/Bp8Yc8XZSa1VRrr8Z+Pu4tQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2a:e9:2c:5c:24:a5:19:d7:50:43:9a:5e:1c:6e:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=966015578c948f31bf74a1e1fffd7fa3e3460206
        Validity
            Not Before: Apr 13 08:01:26 2025 GMT
            Not After : Apr 14 08:01:26 2025 GMT
        Subject: CN=589f5e9e1d15ae9b6d26be3c388f3a98b437d058
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:df:fe:0a:5a:f6:8c:1c:03:0d:28:1e:bb:d8:
                    a0:b9:2e:ae:cf:82:12:b6:74:ca:94:8a:07:dd:a8:
                    a7:93:0f:91:59:df:9e:33:a5:41:a0:5a:c6:bc:cf:
                    e0:cd:ca:2e:a5:0c:05:b9:a6:d7:15:21:36:8f:5e:
                    2c:6e:e6:a0:95:ca:77:33:08:fe:ca:c2:3a:96:8d:
                    17:8a:3f:60:5f:a5:26:bd:44:2c:ad:e2:77:4b:19:
                    6b:d0:9f:be:e5:43:89:bc:1c:9c:78:22:26:c7:28:
                    9f:1c:1b:f4:9b:d3:56:ae:db:5d:fc:d3:c2:31:f8:
                    b5:28:d9:6f:79:5d:af:82:21:38:2b:35:98:9d:23:
                    81:64:27:1f:3b:92:6f:fc:cc:de:46:d0:0f:37:74:
                    48:ce:43:db:2b:78:a1:7c:cf:1e:15:4a:5c:b6:8a:
                    00:71:85:c3:b2:0e:b0:13:b0:43:d0:3a:72:b6:90:
                    1f:eb:66:bb:82:81:61:ae:75:71:e5:2c:f6:10:70:
                    6e:e3:3c:c9:50:6d:3a:5e:e6:55:50:2c:f6:21:f0:
                    1c:97:61:9d:90:c0:09:8b:f5:65:a5:68:9c:7f:97:
                    c5:a9:76:bd:68:34:45:6c:56:42:8c:37:d1:af:43:
                    a5:e0:5b:27:ad:92:b9:05:b4:76:e1:36:c0:b4:a6:
                    29:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:9F:5E:9E:1D:15:AE:9B:6D:26:BE:3C:38:8F:3A:98:B4:37:D0:58
            X509v3 Authority Key Identifier:
                keyid:96:60:15:57:8C:94:8F:31:BF:74:A1:E1:FF:FD:7F:A3:E3:46:02:06

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lmAVV4yUjzG_dKHh__1_o-NGAgY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/b50110-02b0-4235-984f-2d80cb25579a/1/lmAVV4yUjzG_dKHh__1_o-NGAgY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/50/b50110-02b0-4235-984f-2d80cb25579a/1/lmAVV4yUjzG_dKHh__1_o-NGAgY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:18:24:62:7c:bd:17:c4:17:32:2a:e1:62:ae:8a:d1:5b:fc:
         48:8c:a1:7b:54:dd:59:1a:22:e6:95:4e:92:d8:f0:97:b4:1b:
         06:9f:0a:da:bc:b8:5d:fa:31:66:a4:d1:1c:79:e7:60:60:7c:
         41:ca:00:83:4e:a2:ec:16:33:89:cc:f5:40:89:25:18:e2:71:
         be:d7:65:c5:2b:30:72:9f:48:2d:d0:18:fb:2f:9e:53:53:d4:
         a4:45:2e:b3:33:2a:aa:bb:73:f1:c1:f7:1f:94:9a:4d:37:4e:
         d1:4d:d7:5e:aa:a3:9f:ce:22:61:99:c1:7c:ae:98:d8:eb:94:
         8d:0a:4b:97:f9:b0:3a:ea:93:96:72:aa:e0:f4:fb:bd:05:59:
         24:3b:2d:d6:df:dd:05:f3:5c:f5:80:52:d4:57:89:75:d9:dd:
         37:42:b0:bb:e0:93:83:0d:d2:6b:2a:1e:01:df:26:c3:cc:6d:
         7e:be:5d:20:cb:79:75:48:5b:25:6a:00:4f:59:1c:e3:08:34:
         38:ca:86:c3:1e:a4:8a:2e:94:c7:f7:6f:6e:e9:91:cf:94:1f:
         f4:92:b9:c9:34:5c:fe:6d:61:45:c2:66:69:ff:4e:8b:cb:64:
         4a:fc:95:1e:af:f9:14:64:f2:82:7d:62:52:fa:da:80:82:31:
         5d:40:4a:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----