Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/24a47d-6a4d-4e15-a238-7740b3d6905e/1/lvGXfPF_5OHeLxYpPGafRNW9dDM.mft
File:                     lvGXfPF_5OHeLxYpPGafRNW9dDM.mft (raw, json)
Hash identifier:          adxbNn7wUODYzq3RRMHBTy9aiScf6zI/XWv4Am4iLG4=
Subject key identifier:   20:73:BF:A8:D5:4F:32:3E:F1:4E:AB:4C:7E:76:76:06:E0:26:EE:1D
Authority key identifier: 96:F1:97:7C:F1:7F:E4:E1:DE:2F:16:29:3C:66:9F:44:D5:BD:74:33
Certificate issuer:       /CN=96f1977cf17fe4e1de2f16293c669f44d5bd7433
Certificate serial:       01962F7460F711F654F1F57CA0D383DFD73A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lvGXfPF_5OHeLxYpPGafRNW9dDM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/68/24a47d-6a4d-4e15-a238-7740b3d6905e/1/lvGXfPF_5OHeLxYpPGafRNW9dDM.mft
Manifest number:          0760
Signing time:             Sun 13 Apr 2025 14:01:18 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:18 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:18 +0000
Files and hashes:         1: lvGXfPF_5OHeLxYpPGafRNW9dDM.crl (hash: jN/dvfsqZrwPfieWKkJbR+7Qa/AD/sVCl9c0MhACAis=)
                          2: yyEfKYzfWifnZltk7ctCY5A-44M.roa (hash: Bx/CCORj4vVt+Qie6xpQv8J6eghjTLCeuziTvvg5CUE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:60:f7:11:f6:54:f1:f5:7c:a0:d3:83:df:d7:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=96f1977cf17fe4e1de2f16293c669f44d5bd7433
        Validity
            Not Before: Apr 13 14:01:18 2025 GMT
            Not After : Apr 14 14:01:18 2025 GMT
        Subject: CN=2073bfa8d54f323ef14eab4c7e767606e026ee1d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:1c:b1:e3:f6:27:0e:df:f1:20:d7:2f:1a:f7:
                    76:1b:4e:bc:54:a1:fb:be:b0:b8:8c:ff:3d:83:a4:
                    25:89:f8:7d:0b:aa:62:aa:a4:a8:d0:b8:f2:34:35:
                    67:2e:47:25:4e:e6:a0:4e:b8:18:27:cc:0a:29:15:
                    0e:d1:da:5b:b1:c5:76:50:35:7d:7d:5f:b4:1d:dd:
                    c7:4a:0e:6b:80:6e:5d:dd:c3:2e:5c:a5:29:1b:f6:
                    28:7b:db:ef:cb:bd:6e:e7:6c:f5:ec:1e:2c:2f:15:
                    08:35:58:85:e7:48:69:0f:39:a9:03:14:0a:65:41:
                    d8:7a:a3:c6:4a:51:50:3c:52:b6:7d:f6:9c:c8:ec:
                    4b:1b:c0:10:6a:94:3e:31:61:87:e5:f3:37:26:21:
                    6e:70:90:d8:e0:ab:bf:f9:34:67:32:b0:2f:78:3b:
                    22:8c:8a:a8:21:7c:70:20:ef:b9:7d:e5:ab:66:c5:
                    ec:e3:ca:37:52:d2:5a:3f:07:46:41:4f:2c:fa:21:
                    34:8a:88:8e:cc:ca:5a:60:62:27:7a:e8:8e:ed:23:
                    5b:11:b7:b6:9d:0b:53:bc:40:d2:71:50:fb:d8:69:
                    33:01:76:b5:7d:36:1a:74:af:5d:cd:24:35:b5:63:
                    88:d9:aa:c3:31:05:09:c3:1d:ff:ff:38:5c:4d:49:
                    9e:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:73:BF:A8:D5:4F:32:3E:F1:4E:AB:4C:7E:76:76:06:E0:26:EE:1D
            X509v3 Authority Key Identifier:
                keyid:96:F1:97:7C:F1:7F:E4:E1:DE:2F:16:29:3C:66:9F:44:D5:BD:74:33

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lvGXfPF_5OHeLxYpPGafRNW9dDM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/24a47d-6a4d-4e15-a238-7740b3d6905e/1/lvGXfPF_5OHeLxYpPGafRNW9dDM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/68/24a47d-6a4d-4e15-a238-7740b3d6905e/1/lvGXfPF_5OHeLxYpPGafRNW9dDM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         99:1b:a1:c2:92:ce:44:fa:7e:0f:68:b2:ee:83:fb:57:fd:54:
         2a:20:49:51:55:9a:45:ce:63:90:93:a0:ef:de:18:63:56:82:
         13:f9:9e:31:6d:da:97:c1:71:b8:52:1e:72:62:87:7a:64:db:
         42:78:03:d9:6a:97:81:70:33:c5:6f:06:03:9a:5f:86:f9:e7:
         0c:4a:66:4d:db:5d:de:93:39:2a:59:19:cd:4e:a7:16:29:83:
         7e:e8:8c:3c:7f:df:ae:28:a5:d0:d4:9e:74:88:ed:2e:26:3e:
         d8:31:1c:e7:de:22:ec:a5:d0:27:c1:97:d7:95:79:9f:f0:bc:
         ce:55:b6:1f:25:b0:8b:29:56:bb:57:43:c3:72:b1:bc:70:9d:
         85:15:fd:15:03:25:ad:a8:52:c4:7f:5c:09:84:12:73:3a:ce:
         dd:01:e4:c4:3e:4f:cb:82:9e:bd:5d:81:45:27:d4:da:5c:c2:
         6d:de:d2:b3:ff:c9:2e:cf:de:47:cb:9b:bb:92:ae:0b:3a:46:
         69:e1:b5:e8:55:bd:b6:75:b3:e4:6a:33:43:ed:a3:7c:86:e7:
         94:4d:58:8e:df:0d:5b:0e:d4:70:68:47:bb:84:a8:f3:69:59:
         14:f8:9e:a1:a8:da:af:88:2f:57:f5:95:69:62:e1:62:f4:df:
         39:69:a3:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----