Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/7baa1c-8da1-4f80-babb-b4bfc29e71a3/1/lvbqdo68ndwGj1aX39dcrt164Qg.mft
File:                     lvbqdo68ndwGj1aX39dcrt164Qg.mft (raw, json)
Hash identifier:          pLjVEuj8oSX++xWBlbK4NuNSo3ha00I5zE2qMwIz2zU=
Subject key identifier:   96:68:FE:A3:CC:BE:7D:BE:B0:24:63:97:22:64:A7:50:B7:0E:33:2E
Authority key identifier: 96:F6:EA:76:8E:BC:9D:DC:06:8F:56:97:DF:D7:5C:AE:DD:7A:E1:08
Certificate issuer:       /CN=96f6ea768ebc9ddc068f5697dfd75caedd7ae108
Certificate serial:       01962F0655221E6234236985E71716C359AF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lvbqdo68ndwGj1aX39dcrt164Qg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/99/7baa1c-8da1-4f80-babb-b4bfc29e71a3/1/lvbqdo68ndwGj1aX39dcrt164Qg.mft
Manifest number:          0E51
Signing time:             Sun 13 Apr 2025 12:01:06 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:06 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:06 +0000
Files and hashes:         1: hpkYZsr4ehkRhZoX0PY5vhGw4f0.roa (hash: yIy93XAXh8xhvhofZiP5cDUdE2rbmmhviH4jDOGAZ/g=)
                          2: lvbqdo68ndwGj1aX39dcrt164Qg.crl (hash: PnEmB13DF1Ab1zbU9pZLl0ENIbA8uGUkTdCboYgSeDk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:55:22:1e:62:34:23:69:85:e7:17:16:c3:59:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=96f6ea768ebc9ddc068f5697dfd75caedd7ae108
        Validity
            Not Before: Apr 13 12:01:06 2025 GMT
            Not After : Apr 14 12:01:06 2025 GMT
        Subject: CN=9668fea3ccbe7dbeb02463972264a750b70e332e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:69:50:2e:37:86:31:36:a2:76:ff:78:1e:95:
                    04:a6:0c:ee:d8:5c:b0:a8:89:23:d5:5c:d1:d2:fd:
                    d1:0e:53:f6:47:fc:c3:1f:05:2b:7e:35:04:6b:4b:
                    b0:3c:59:6e:5c:9f:40:b4:b8:c7:b7:46:e3:ec:74:
                    40:b1:f0:d8:0e:ee:c7:ba:a1:92:9a:8b:77:f5:81:
                    3b:44:f7:02:9c:99:da:27:c5:1a:0d:08:45:aa:43:
                    14:06:df:ac:51:bd:92:3b:2a:1c:b4:8b:46:11:2c:
                    3b:6c:d4:ea:46:95:19:e6:1e:dc:e9:df:ff:26:b4:
                    a5:f5:ff:0b:da:e2:14:80:9a:bf:46:97:7b:61:bb:
                    31:c8:33:17:7e:71:bb:4b:1e:33:e5:c6:1c:f8:bd:
                    47:13:aa:9b:f1:50:6c:90:4a:3b:de:1d:bf:a9:ef:
                    38:31:7a:c9:39:46:97:c4:82:e2:36:e7:4a:0a:9a:
                    aa:83:39:cc:9a:ce:91:da:ce:45:17:42:c6:67:1e:
                    d7:14:1c:a9:c6:9a:79:4b:71:b7:44:ce:42:18:32:
                    2c:cd:1b:79:d9:a0:fc:bd:67:61:ec:84:36:24:c5:
                    5f:fc:21:2e:6b:23:4d:89:38:72:9b:ac:d0:5d:c5:
                    f9:8a:fb:2e:cf:6e:bc:f1:db:aa:a9:f0:02:ce:20:
                    8e:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:68:FE:A3:CC:BE:7D:BE:B0:24:63:97:22:64:A7:50:B7:0E:33:2E
            X509v3 Authority Key Identifier:
                keyid:96:F6:EA:76:8E:BC:9D:DC:06:8F:56:97:DF:D7:5C:AE:DD:7A:E1:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lvbqdo68ndwGj1aX39dcrt164Qg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/7baa1c-8da1-4f80-babb-b4bfc29e71a3/1/lvbqdo68ndwGj1aX39dcrt164Qg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/99/7baa1c-8da1-4f80-babb-b4bfc29e71a3/1/lvbqdo68ndwGj1aX39dcrt164Qg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:e5:c1:5a:0f:40:52:74:b4:70:64:33:fc:96:6e:18:a0:33:
         34:9c:54:d8:0d:93:b6:87:19:0b:0c:2b:b5:52:0f:89:2b:4d:
         75:0c:a3:b1:6b:54:7f:e3:ba:a0:11:38:d5:82:f1:81:33:48:
         bb:3a:c7:a4:03:6e:b4:66:b1:c8:3b:ba:e7:e9:09:6f:a8:ce:
         16:b7:63:b2:f3:04:36:d5:84:54:0c:88:94:9d:d0:a9:41:d0:
         76:d3:ed:33:7c:49:56:52:cb:0b:47:d5:72:0f:be:16:43:a0:
         4f:eb:c2:44:54:87:c9:99:36:ac:c2:a8:d7:0f:d7:1d:51:99:
         70:63:90:58:a6:03:76:e3:46:f1:71:22:c2:34:71:32:83:2d:
         3a:83:75:c2:99:fd:e6:80:90:3e:de:7f:c3:1a:ce:a3:81:42:
         5e:33:bd:bc:fc:dc:9e:ad:7a:5a:39:d9:f1:87:ff:00:e1:d2:
         84:67:77:c4:44:0f:57:1c:89:a4:d4:60:b1:ab:32:1e:ab:0b:
         c3:be:a1:44:31:4f:40:f2:40:1c:c3:9a:bf:01:6a:44:4b:f5:
         56:5e:a5:57:0a:6f:ad:92:12:ae:81:0d:2c:4e:82:68:37:8e:
         95:11:ea:66:54:40:19:fe:36:fd:c1:93:e6:4d:55:0a:01:2a:
         24:78:21:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----