Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/436b56-5b55-4ff4-83bf-98ac665b1908/1/lm-ON-SmyEs_O1unfiEJ0-9ZquA.mft
File:                     lm-ON-SmyEs_O1unfiEJ0-9ZquA.mft (raw, json)
Hash identifier:          bOCkcfm4NJwdZFSna5egjbP69RVveblpFWLalw12mQA=
Subject key identifier:   87:92:62:D5:31:B4:8F:55:85:EB:5D:67:BA:C4:CB:AF:50:FE:93:6B
Authority key identifier: 96:6F:8E:37:E4:A6:C8:4B:3F:3B:5B:A7:7E:21:09:D3:EF:59:AA:E0
Certificate issuer:       /CN=966f8e37e4a6c84b3f3b5ba77e2109d3ef59aae0
Certificate serial:       01962F3D51FA377F2B9B7E9A2E5CA2C1CE0A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lm-ON-SmyEs_O1unfiEJ0-9ZquA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8a/436b56-5b55-4ff4-83bf-98ac665b1908/1/lm-ON-SmyEs_O1unfiEJ0-9ZquA.mft
Manifest number:          D7
Signing time:             Sun 13 Apr 2025 13:01:09 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:09 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:09 +0000
Files and hashes:         1: lm-ON-SmyEs_O1unfiEJ0-9ZquA.crl (hash: 6QzBHDjP3g5aK0RH+z50nRrrGqQ287QZhY9ftP/7w6I=)
                          2: on5-XY5_69ZqoMpI3X4OhIb7uc4.roa (hash: 4oa5fFDXWm4dHc0nsqOubqefekgWac8ztkJvtrP5fzs=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:51:fa:37:7f:2b:9b:7e:9a:2e:5c:a2:c1:ce:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=966f8e37e4a6c84b3f3b5ba77e2109d3ef59aae0
        Validity
            Not Before: Apr 13 13:01:09 2025 GMT
            Not After : Apr 14 13:01:09 2025 GMT
        Subject: CN=879262d531b48f5585eb5d67bac4cbaf50fe936b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:2d:bf:ec:05:67:62:1c:a5:9d:1b:8a:e9:7d:
                    49:41:98:e8:9c:26:f9:bd:4a:81:95:d2:13:7a:1f:
                    54:f1:60:a3:82:e6:ff:8e:a2:18:da:e9:f4:62:2e:
                    e1:83:49:7d:9e:09:f1:79:5f:33:fc:d6:f9:50:5a:
                    96:3d:ca:c5:eb:84:fe:5b:90:cb:9c:ac:74:81:7f:
                    ba:bb:c8:d4:af:47:3e:2b:eb:26:b0:6b:61:38:d7:
                    a7:09:71:2b:5f:6b:1d:1e:62:3c:77:b9:44:8b:72:
                    c7:58:fd:77:90:8b:ef:c0:24:a0:18:8a:07:aa:20:
                    77:9e:2c:3f:52:12:36:f3:61:72:46:15:ce:da:30:
                    1c:f8:ed:a5:f2:16:d3:d8:b6:56:70:b7:40:42:f2:
                    10:0c:56:fe:e8:d2:d6:dc:96:28:03:1a:fa:6c:3f:
                    73:e7:35:21:21:22:48:59:1a:4f:4d:fe:be:b3:7f:
                    69:2f:11:c5:f3:09:07:10:53:92:6a:36:a0:15:30:
                    82:0f:24:2f:e5:99:60:dc:2f:76:0a:a1:c3:b2:f0:
                    76:69:78:9b:2c:14:70:7e:41:8c:b3:97:4c:b0:d2:
                    2b:57:70:a2:03:7d:6a:da:f6:7f:35:e1:71:1f:62:
                    fc:57:cd:59:49:63:67:78:ce:2c:85:92:c4:05:47:
                    99:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:92:62:D5:31:B4:8F:55:85:EB:5D:67:BA:C4:CB:AF:50:FE:93:6B
            X509v3 Authority Key Identifier:
                keyid:96:6F:8E:37:E4:A6:C8:4B:3F:3B:5B:A7:7E:21:09:D3:EF:59:AA:E0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lm-ON-SmyEs_O1unfiEJ0-9ZquA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/436b56-5b55-4ff4-83bf-98ac665b1908/1/lm-ON-SmyEs_O1unfiEJ0-9ZquA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/436b56-5b55-4ff4-83bf-98ac665b1908/1/lm-ON-SmyEs_O1unfiEJ0-9ZquA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:3d:d8:bf:2d:60:92:9e:ed:62:e7:7d:dd:26:94:0d:e9:ea:
         1e:e4:86:12:0b:e0:f1:96:85:c8:fe:a6:be:16:09:9c:f8:f2:
         69:0e:df:69:3c:2f:d1:ab:6f:5a:13:36:2b:09:90:30:74:36:
         a3:d2:f8:10:6e:3f:c8:8f:54:20:55:22:1b:e6:d7:44:92:59:
         e1:0f:2e:b7:db:35:0c:4e:c0:90:11:69:59:41:34:23:5a:7d:
         ce:66:20:0e:41:a6:42:ef:2b:59:76:7d:17:5a:c3:3d:4d:de:
         b4:04:15:40:41:fd:55:b6:5f:b6:73:3f:e6:e6:a0:3e:ce:dc:
         db:1e:ce:f6:49:a6:53:9e:47:17:f5:ac:47:59:9d:ba:de:43:
         b4:c2:c6:0d:0e:4a:8c:79:1b:91:79:03:d2:16:6d:4c:90:93:
         85:30:0e:d9:8a:52:73:75:b6:de:9b:92:99:2a:61:b2:74:95:
         9e:c7:51:eb:b8:8b:dc:6f:68:03:53:75:86:de:36:59:cd:93:
         c1:1c:bf:7b:6f:f5:d1:12:69:1c:b5:5f:2b:52:c0:4f:0c:64:
         ba:85:01:92:d7:7c:3d:6d:94:4c:a3:36:9d:6f:6b:f2:41:5b:
         4d:3f:10:72:f9:47:9f:9c:19:15:8d:73:8c:85:03:25:6a:c2:
         15:4e:f1:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----