Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/3108a3-5b5d-48d2-853b-f12b6ac5a2b2/1/lvMFpB83TbAVgTN3CNHHnr6nlxw.mft
File:                     lvMFpB83TbAVgTN3CNHHnr6nlxw.mft (raw, json)
Hash identifier:          ybKPKVb32q1xu5f37YihIQPHxGsqj8g/ZfunFavBwUE=
Subject key identifier:   23:B5:38:47:73:1E:9E:3A:25:D6:71:71:B3:39:A9:27:E7:31:DA:51
Authority key identifier: 96:F3:05:A4:1F:37:4D:B0:15:81:33:77:08:D1:C7:9E:BE:A7:97:1C
Certificate issuer:       /CN=96f305a41f374db01581337708d1c79ebea7971c
Certificate serial:       01962ECF5B8A6609CCA345F0146BE195ACB2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lvMFpB83TbAVgTN3CNHHnr6nlxw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/78/3108a3-5b5d-48d2-853b-f12b6ac5a2b2/1/lvMFpB83TbAVgTN3CNHHnr6nlxw.mft
Manifest number:          036C
Signing time:             Sun 13 Apr 2025 11:01:03 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:03 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:03 +0000
Files and hashes:         1: lvMFpB83TbAVgTN3CNHHnr6nlxw.crl (hash: ajCJ4lGbzROPqm5xvHYBk+0Mq7T4SVMjUpZEtdXFkSQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:5b:8a:66:09:cc:a3:45:f0:14:6b:e1:95:ac:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=96f305a41f374db01581337708d1c79ebea7971c
        Validity
            Not Before: Apr 13 11:01:03 2025 GMT
            Not After : Apr 14 11:01:03 2025 GMT
        Subject: CN=23b53847731e9e3a25d67171b339a927e731da51
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:49:f1:db:ff:a9:f2:c0:f7:52:33:79:06:db:
                    3a:46:e3:40:e8:10:61:cc:27:e7:72:38:01:63:80:
                    46:9d:4b:6a:84:7a:6f:cc:48:3a:31:22:7d:78:d3:
                    2d:34:09:23:e6:03:da:2d:5b:a9:35:d2:9f:6b:91:
                    a9:9c:f3:32:71:c8:e7:f5:21:5a:c1:39:b0:72:6f:
                    a9:27:58:29:02:32:3d:6e:b4:2d:a7:5a:0e:ef:6f:
                    9a:1e:0e:ba:ba:c5:f3:7b:75:d5:24:0b:f8:c9:09:
                    9c:76:b6:c8:c6:e8:34:5d:51:a9:75:72:f6:fe:33:
                    a4:ec:8d:af:cb:29:7d:cb:fe:65:1b:11:ab:61:56:
                    18:f8:aa:07:9d:ff:be:dd:ac:3d:25:9d:54:e7:dc:
                    3c:e4:90:b4:2c:74:2c:2c:8a:1f:f6:a2:e0:f9:4f:
                    21:91:42:7e:dc:2a:9c:79:11:66:5d:2d:17:77:6b:
                    6d:2e:26:9a:25:7b:b8:7d:0e:3d:d1:86:f5:fd:87:
                    1f:fc:2b:2a:55:a2:07:a9:59:31:b0:fe:3e:23:05:
                    ad:0a:a7:bd:d7:f5:86:85:4b:36:12:5d:46:60:91:
                    03:b4:bb:12:f7:50:ee:4a:75:86:9a:df:30:f8:4f:
                    e1:7c:51:ba:68:63:15:de:58:e4:77:47:0f:6b:f2:
                    aa:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:B5:38:47:73:1E:9E:3A:25:D6:71:71:B3:39:A9:27:E7:31:DA:51
            X509v3 Authority Key Identifier:
                keyid:96:F3:05:A4:1F:37:4D:B0:15:81:33:77:08:D1:C7:9E:BE:A7:97:1C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lvMFpB83TbAVgTN3CNHHnr6nlxw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/3108a3-5b5d-48d2-853b-f12b6ac5a2b2/1/lvMFpB83TbAVgTN3CNHHnr6nlxw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/78/3108a3-5b5d-48d2-853b-f12b6ac5a2b2/1/lvMFpB83TbAVgTN3CNHHnr6nlxw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:2d:bf:2f:9f:6f:75:91:6a:62:14:b4:2c:93:d1:e5:33:8b:
         54:87:c6:0c:04:26:37:b4:8c:09:0d:bb:58:46:7d:f4:e4:08:
         a7:2a:43:9a:94:4b:aa:87:d7:ea:c5:4a:21:e5:dc:ab:be:c3:
         a7:4c:86:3a:38:ec:5a:e0:6f:a9:c5:7a:61:f4:75:16:b1:1f:
         9b:18:83:6d:f0:f6:6e:d2:0f:33:43:12:f6:09:ce:70:16:02:
         aa:7a:ed:ba:71:29:43:3b:4d:62:30:49:ff:2f:b3:e9:23:75:
         02:32:90:07:21:7a:93:c4:da:be:ad:79:6b:37:e8:ed:7d:5c:
         39:3a:61:a1:a9:03:17:f8:24:30:60:4f:4c:69:39:a6:01:5f:
         50:d2:d7:08:3a:c2:00:55:84:d7:97:c9:a0:8d:6b:9a:a8:16:
         d1:1d:c6:98:72:5f:d0:e9:3d:26:86:02:a5:94:f0:29:26:19:
         89:09:14:13:6a:1e:b4:a8:d9:eb:8e:66:c3:a0:6e:63:9b:09:
         9f:a0:97:52:a1:b3:29:82:e0:16:dd:29:23:63:8b:af:ce:9a:
         5d:c2:4d:1b:28:e1:3c:a0:30:e1:38:fc:e6:b6:bb:53:81:1c:
         3c:da:3b:ef:c5:f5:74:40:00:e2:aa:65:f4:7f:2f:5c:1f:6d:
         f4:ff:6e:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----