Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/c47b46-ccdc-4b5e-862e-bddff197c29d/1/lris-hevk77b78b-tGiPmGBLiq4.mft
File:                     lris-hevk77b78b-tGiPmGBLiq4.mft (raw, json)
Hash identifier:          0DScctRyYRzCpmyJz7lovwNGa5XCd9e0b+7v26btcqg=
Subject key identifier:   FF:EE:1C:11:1A:11:5F:BB:A3:57:9B:08:06:65:32:ED:A7:B8:EA:A3
Authority key identifier: 96:B8:AC:FA:17:AF:93:BE:DB:EF:C6:FE:B4:68:8F:98:60:4B:8A:AE
Certificate issuer:       /CN=96b8acfa17af93bedbefc6feb4688f98604b8aae
Certificate serial:       01962E61A80C8268AED057C402FF8C1691D5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lris-hevk77b78b-tGiPmGBLiq4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/83/c47b46-ccdc-4b5e-862e-bddff197c29d/1/lris-hevk77b78b-tGiPmGBLiq4.mft
Manifest number:          0F75
Signing time:             Sun 13 Apr 2025 09:01:13 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:13 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:13 +0000
Files and hashes:         1: lCUgvhyBp0UKbHxKxUYkrgGL2EY.roa (hash: kCJqfKEC/8AcT5Dn8+T0849c1Ido/6VgqldxnSwXqNg=)
                          2: lris-hevk77b78b-tGiPmGBLiq4.crl (hash: XiyYLiiOlAS2+Tt3rxrFieX6KG+k3SYe5K+v3LZEP2E=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:a8:0c:82:68:ae:d0:57:c4:02:ff:8c:16:91:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=96b8acfa17af93bedbefc6feb4688f98604b8aae
        Validity
            Not Before: Apr 13 09:01:13 2025 GMT
            Not After : Apr 14 09:01:13 2025 GMT
        Subject: CN=ffee1c111a115fbba3579b08066532eda7b8eaa3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:84:27:4c:eb:e6:00:4e:9d:cd:1a:81:43:f7:
                    3a:8f:ba:4c:b4:95:c0:cb:f1:90:1e:ec:49:57:d3:
                    25:93:3c:5d:83:62:d1:80:7a:6e:ca:ce:ba:23:a0:
                    4c:51:0a:59:ef:0d:2c:5b:db:a6:b7:66:9d:9b:1a:
                    4a:63:7e:46:7d:97:7c:a3:06:c0:08:51:79:dc:4a:
                    97:e1:a0:84:22:21:79:d9:5b:7a:16:fe:e1:ff:08:
                    48:30:d4:72:c4:f2:de:27:a7:e9:29:3c:5d:85:e4:
                    b0:3c:f3:a0:c3:59:1b:4a:ab:da:09:e7:4f:da:41:
                    14:5d:d9:d5:5e:86:89:ab:d3:f5:bb:b4:19:a5:b0:
                    d6:49:d7:bd:41:91:58:9a:46:db:9c:e5:77:ac:b5:
                    49:27:6c:f7:4b:83:1d:1d:4e:b4:55:1c:4a:c3:1c:
                    8a:f8:dd:fa:79:a7:e2:44:cd:62:f0:07:72:9c:c8:
                    32:1e:67:75:f4:af:f4:c6:3d:c0:a7:90:5a:d5:f9:
                    51:4b:fc:84:75:fc:d6:34:63:15:dd:61:b5:65:7e:
                    81:7f:3a:34:62:0d:fc:e6:bb:fc:4f:97:e6:de:d3:
                    a4:06:e4:eb:f2:58:73:70:b1:58:92:fd:4e:2a:df:
                    3d:f4:fe:bb:77:e6:2b:80:d0:c1:63:bf:57:e2:8a:
                    43:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:EE:1C:11:1A:11:5F:BB:A3:57:9B:08:06:65:32:ED:A7:B8:EA:A3
            X509v3 Authority Key Identifier:
                keyid:96:B8:AC:FA:17:AF:93:BE:DB:EF:C6:FE:B4:68:8F:98:60:4B:8A:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lris-hevk77b78b-tGiPmGBLiq4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/c47b46-ccdc-4b5e-862e-bddff197c29d/1/lris-hevk77b78b-tGiPmGBLiq4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/83/c47b46-ccdc-4b5e-862e-bddff197c29d/1/lris-hevk77b78b-tGiPmGBLiq4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:91:13:bb:6a:65:54:79:d5:44:a5:a8:b7:c4:39:90:bc:12:
         82:23:52:5f:84:89:e7:3e:cc:89:81:18:4a:d8:c2:be:95:ee:
         fb:4e:c8:6c:c8:86:39:e1:50:53:b4:fd:d6:33:6b:27:9c:f2:
         f1:b8:63:81:77:f3:59:53:3c:bf:f8:6e:2f:bc:e2:9f:dd:ac:
         ce:c4:ae:94:99:fa:fd:65:60:1b:ae:35:00:d5:86:0a:ff:53:
         9a:aa:0b:cd:0f:59:ba:23:57:ad:58:da:0e:a3:cb:2c:5d:a5:
         80:2b:0e:bc:a9:40:0f:4e:6a:e6:37:b9:68:e0:d3:21:1b:a5:
         7b:ac:60:53:76:62:c5:f7:5c:ab:fe:ef:ae:03:19:e7:3c:67:
         1b:ec:3d:1b:98:ce:c6:d8:64:c1:00:16:3d:37:8c:9c:02:b9:
         9a:6f:7e:d1:12:46:2a:a8:7e:48:b7:95:23:c7:cc:c0:54:69:
         ce:24:cf:16:b4:16:ea:18:63:1b:6a:c1:0d:14:51:c5:20:2e:
         e4:f8:a1:82:2d:13:6f:d9:c9:85:45:1e:2f:60:d1:85:a5:f6:
         34:c4:53:e3:36:02:be:b7:b9:40:f5:74:24:fb:99:b6:f7:85:
         75:52:d9:06:c8:ac:f1:dc:34:46:40:a9:b1:ef:8d:b7:ba:3e:
         8a:f5:5c:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----