Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/ef7787-404b-4a1e-ba8b-68e7fb17a44b/1/LpT_AwG-edgSYKxmrHNi762WikE.mft
File:                     LpT_AwG-edgSYKxmrHNi762WikE.mft (raw, json)
Hash identifier:          QkCJFrqiiT1y+FFUZQR6tkUV5ilKOoSit0NfdqwTavM=
Subject key identifier:   73:AD:14:47:EF:0C:57:FC:71:DD:A3:7A:55:21:80:17:DD:A7:0A:FB
Authority key identifier: 2E:94:FF:03:01:BE:79:D8:12:60:AC:66:AC:73:62:EF:AD:96:8A:41
Certificate issuer:       /CN=2e94ff0301be79d81260ac66ac7362efad968a41
Certificate serial:       01962FAB51629D4856B3DB3A6A4A9BB77F8F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LpT_AwG-edgSYKxmrHNi762WikE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7e/ef7787-404b-4a1e-ba8b-68e7fb17a44b/1/LpT_AwG-edgSYKxmrHNi762WikE.mft
Manifest number:          0B28
Signing time:             Sun 13 Apr 2025 15:01:18 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:18 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:18 +0000
Files and hashes:         1: LpT_AwG-edgSYKxmrHNi762WikE.crl (hash: io0dFOxZeBtA/h+IsGeWhoeMDi52hYfflPsQGMhHmYM=)
                          2: xl3BkGl_f_RqSB7FJBWzwtRLWbM.roa (hash: gmBp6MHi7PgcV0+T6HOJKzGRBuPuBU2bj1lv4nMBWYk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:51:62:9d:48:56:b3:db:3a:6a:4a:9b:b7:7f:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2e94ff0301be79d81260ac66ac7362efad968a41
        Validity
            Not Before: Apr 13 15:01:18 2025 GMT
            Not After : Apr 14 15:01:18 2025 GMT
        Subject: CN=73ad1447ef0c57fc71dda37a55218017dda70afb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:bc:65:1e:40:b7:48:c5:07:12:6c:fe:d3:65:
                    5d:33:9d:5c:af:c8:dd:e1:9a:a7:ed:2a:72:21:43:
                    e3:ad:c2:19:e1:f5:4f:7e:8d:ab:54:e4:58:35:1d:
                    ae:02:ce:33:77:65:02:03:8d:76:7c:55:8d:42:bf:
                    6f:b7:7d:b3:4c:0c:40:0d:26:8e:53:bd:d7:37:2f:
                    f5:76:5e:03:15:25:b7:fa:2f:7a:dd:70:25:6d:da:
                    78:96:15:ac:b7:59:04:11:04:00:db:45:e8:74:a2:
                    a5:5f:45:40:0c:e4:84:5a:89:64:f2:a9:0b:71:55:
                    ab:cd:26:f9:ef:ae:44:84:0d:ed:8b:cc:32:c9:62:
                    83:b9:5f:ec:ca:70:3a:91:b8:35:c8:f6:46:a9:dc:
                    bd:fd:75:0f:99:77:7c:4c:be:d9:b2:54:19:87:3f:
                    3d:fb:4e:45:7f:79:ad:9e:e6:22:23:9d:da:8f:8d:
                    3b:8b:e8:54:d9:89:e7:b4:59:53:13:93:16:23:1c:
                    ba:fc:50:fe:a1:95:8d:c3:94:e6:31:71:e8:43:49:
                    ee:06:42:aa:d5:44:9e:32:b8:9a:f2:93:ee:bd:e4:
                    91:88:50:17:fa:24:87:fc:f2:43:8a:08:c2:7a:c6:
                    d3:5f:c5:b7:15:61:89:6a:85:58:8d:ff:38:8b:e0:
                    51:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:AD:14:47:EF:0C:57:FC:71:DD:A3:7A:55:21:80:17:DD:A7:0A:FB
            X509v3 Authority Key Identifier:
                keyid:2E:94:FF:03:01:BE:79:D8:12:60:AC:66:AC:73:62:EF:AD:96:8A:41

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LpT_AwG-edgSYKxmrHNi762WikE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/ef7787-404b-4a1e-ba8b-68e7fb17a44b/1/LpT_AwG-edgSYKxmrHNi762WikE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/ef7787-404b-4a1e-ba8b-68e7fb17a44b/1/LpT_AwG-edgSYKxmrHNi762WikE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:64:58:b7:c8:4c:54:b4:fa:37:c0:56:c4:21:2a:34:94:fe:
         5b:6c:eb:95:23:fb:b9:bd:79:0a:ba:08:6e:6b:ec:71:e2:a7:
         1c:1a:75:5b:37:ef:09:33:a4:53:15:cb:4a:89:c6:b5:27:c4:
         e7:2a:08:1e:00:15:01:b8:03:c5:64:cd:9b:e3:a0:9e:b4:01:
         39:8b:22:6a:59:d2:ae:27:79:8c:de:f0:3d:ac:35:03:ea:ae:
         2c:05:43:b0:fb:36:34:70:cc:d2:ce:7e:53:9d:0e:47:49:bf:
         3d:a5:ac:d0:58:1f:f0:44:32:79:8a:8e:5c:cd:c3:0b:59:91:
         4e:83:59:e9:e6:78:aa:40:7e:4e:6c:fa:79:9d:4e:c0:54:08:
         fa:25:69:55:8d:1d:e5:3e:9f:9f:0a:28:4b:a1:59:43:da:f4:
         c3:02:ce:91:71:0b:46:b0:54:fd:0f:0a:22:02:4e:d9:f2:4e:
         8f:91:c0:3b:71:9f:c1:4a:48:55:6e:54:ad:f4:5e:c2:92:03:
         a0:e3:9d:fa:33:19:3b:e9:d1:e8:c7:55:fd:64:d6:01:14:27:
         10:0b:cb:45:c2:e1:2e:e4:da:ce:47:c3:5c:6b:c4:c7:f0:c6:
         40:01:4c:9c:d0:9e:2a:cd:a5:5d:a4:fb:2c:dc:c7:ab:92:9a:
         5d:94:00:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----