Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/4b622e-f5a1-4c2c-8c77-6f71cad16f96/1/Lz_LZCXVmOS4ewSRez75UJ47VsA.mft
File:                     Lz_LZCXVmOS4ewSRez75UJ47VsA.mft (raw, json)
Hash identifier:          cWacBfd7VbCJ/c2yz/OIGVBdajmLNeqA1NFg28SplG8=
Subject key identifier:   EF:F4:2D:E0:BE:3F:76:47:E8:B3:0E:A9:79:85:73:D8:03:99:25:83
Authority key identifier: 2F:3F:CB:64:25:D5:98:E4:B8:7B:04:91:7B:3E:F9:50:9E:3B:56:C0
Certificate issuer:       /CN=2f3fcb6425d598e4b87b04917b3ef9509e3b56c0
Certificate serial:       01962F745EDDF2BE639D21DAE00EC1094318
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Lz_LZCXVmOS4ewSRez75UJ47VsA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b4/4b622e-f5a1-4c2c-8c77-6f71cad16f96/1/Lz_LZCXVmOS4ewSRez75UJ47VsA.mft
Manifest number:          07F3
Signing time:             Sun 13 Apr 2025 14:01:17 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:17 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:17 +0000
Files and hashes:         1: 2YmJTcAs1uemHQPUBr03G1oF2-o.roa (hash: pPzIg/QViF6nnNM/CzGYm2r3D8l+qUVLVDXD+71JZMM=)
                          2: Lz_LZCXVmOS4ewSRez75UJ47VsA.crl (hash: b3uUUNRJ1DuCwf1vYInx6XOl9XepFHcpdFz7jRwLJcg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:5e:dd:f2:be:63:9d:21:da:e0:0e:c1:09:43:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2f3fcb6425d598e4b87b04917b3ef9509e3b56c0
        Validity
            Not Before: Apr 13 14:01:17 2025 GMT
            Not After : Apr 14 14:01:17 2025 GMT
        Subject: CN=eff42de0be3f7647e8b30ea9798573d803992583
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:dc:40:ac:70:ed:eb:7a:b2:a9:00:b3:4f:b1:
                    9a:81:8d:6e:de:fd:86:20:97:7c:f6:28:42:b2:85:
                    22:65:3d:6f:05:aa:98:81:04:e2:e6:b5:59:08:4c:
                    0c:36:be:ba:4c:20:34:aa:bb:8d:1c:91:5e:82:e8:
                    1a:7e:e1:62:a2:a4:0f:78:ef:2b:39:8c:da:c1:6d:
                    f0:c0:fc:82:12:db:4a:48:5c:56:90:d5:a4:13:ac:
                    65:b6:ff:09:de:f7:14:7a:60:5c:91:a1:59:21:40:
                    1f:83:53:bc:c1:d8:13:40:c1:cd:a3:67:d4:53:9a:
                    2e:42:0e:9e:a8:31:38:de:f8:f2:6f:d1:f6:4b:53:
                    13:73:4f:33:94:12:ef:42:08:3c:00:21:b4:71:65:
                    59:26:4d:fb:44:e0:0c:c1:2d:6f:6f:ce:39:7a:db:
                    ef:1d:5c:ac:32:8e:95:22:ef:40:5e:0b:03:9a:63:
                    a6:95:ca:e1:bd:a9:97:87:66:56:d7:36:03:70:0a:
                    a5:db:89:a7:06:65:90:10:08:fa:9e:bf:35:c9:13:
                    9c:25:f2:78:fd:50:2e:da:a4:ec:dc:fd:88:74:44:
                    c4:07:76:d1:47:d0:55:71:fc:ae:b7:c9:d8:28:3c:
                    45:d3:d4:28:b7:b9:14:42:14:6e:e5:84:62:50:b2:
                    40:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:F4:2D:E0:BE:3F:76:47:E8:B3:0E:A9:79:85:73:D8:03:99:25:83
            X509v3 Authority Key Identifier:
                keyid:2F:3F:CB:64:25:D5:98:E4:B8:7B:04:91:7B:3E:F9:50:9E:3B:56:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Lz_LZCXVmOS4ewSRez75UJ47VsA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/4b622e-f5a1-4c2c-8c77-6f71cad16f96/1/Lz_LZCXVmOS4ewSRez75UJ47VsA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/4b622e-f5a1-4c2c-8c77-6f71cad16f96/1/Lz_LZCXVmOS4ewSRez75UJ47VsA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:d6:a9:a4:51:17:19:a9:38:3c:6f:ac:44:4f:80:08:0e:28:
         5b:64:71:b4:75:e1:94:ba:76:79:ad:12:ef:04:63:d3:6e:98:
         79:0a:d7:13:d1:f5:d3:fb:81:96:d3:7e:27:20:2d:b6:8d:13:
         cc:a9:a3:1c:8d:ba:ed:07:78:22:ca:23:15:ac:57:e4:36:23:
         72:72:20:47:f2:be:36:24:d1:fb:ef:fe:5d:1b:6b:8f:7d:a8:
         16:7e:0b:c5:c5:ad:bf:be:06:38:c1:f1:82:24:c7:eb:d2:27:
         c8:c0:c6:60:e4:ea:f4:15:25:ae:44:4c:cf:cd:a7:4b:d5:17:
         62:b9:09:57:1a:d2:2c:63:f2:a8:4f:86:26:7c:0d:43:70:09:
         4e:77:e2:bc:94:83:a0:53:4e:61:7b:e1:c2:a3:e6:27:b8:24:
         f1:08:eb:7e:f9:77:a0:20:93:83:3c:c8:51:56:60:ef:73:9f:
         87:3a:82:0b:18:22:b8:25:1b:19:85:e0:7b:08:f8:5c:20:5c:
         17:71:b1:0b:8b:d3:09:2c:ab:71:6e:c6:d7:a8:61:31:8d:a0:
         c7:08:55:77:f8:42:fb:5e:e6:8f:c9:05:6c:7f:07:21:8c:64:
         e7:32:23:11:76:19:5f:71:04:14:58:84:0d:71:0b:e6:ed:c1:
         b3:d1:55:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----