Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/07ae9e-3d04-45b6-9db0-46935fcc855e/1/lvcbInOrNO1KVIEXbvcPrYZ-8WY.mft
File:                     lvcbInOrNO1KVIEXbvcPrYZ-8WY.mft (raw, json)
Hash identifier:          JGrMjeyhQmyWl1kP5WfRyOuNrwQmvk3GeqwmtlsEyS4=
Subject key identifier:   05:BF:F6:18:53:E3:D2:0E:4F:A3:9C:7A:10:06:E4:E1:0F:73:CD:6F
Authority key identifier: 96:F7:1B:22:73:AB:34:ED:4A:54:81:17:6E:F7:0F:AD:86:7E:F1:66
Certificate issuer:       /CN=96f71b2273ab34ed4a5481176ef70fad867ef166
Certificate serial:       01962FAB6312655AF2CD285A18C48141C803
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lvcbInOrNO1KVIEXbvcPrYZ-8WY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/da/07ae9e-3d04-45b6-9db0-46935fcc855e/1/lvcbInOrNO1KVIEXbvcPrYZ-8WY.mft
Manifest number:          0F18
Signing time:             Sun 13 Apr 2025 15:01:23 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:23 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:23 +0000
Files and hashes:         1: Fj_5uSamv3jJtjHIke52iA3Na28.roa (hash: bRfKAtXHlDItQpeybK7VtR0dtUctyiWAqKlzDKS2Kn8=)
                          2: dJXQbo6z-3ryGZc7-KlzntCNDPg.roa (hash: dZ1N3sX+9N9ZicyxN/2APG+qgevhxMcEIynl4tsXiwo=)
                          3: lvcbInOrNO1KVIEXbvcPrYZ-8WY.crl (hash: L/J/Rp1o82TSznzmk9Xm/S8R9KCG1M6jHBazH3mpGVU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:63:12:65:5a:f2:cd:28:5a:18:c4:81:41:c8:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=96f71b2273ab34ed4a5481176ef70fad867ef166
        Validity
            Not Before: Apr 13 15:01:23 2025 GMT
            Not After : Apr 14 15:01:23 2025 GMT
        Subject: CN=05bff61853e3d20e4fa39c7a1006e4e10f73cd6f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:32:3f:01:54:b9:c6:32:d3:8e:1a:86:27:57:
                    67:af:3e:d6:20:5c:2c:55:91:e1:aa:ce:12:0a:5f:
                    df:92:a0:4a:0a:33:f1:71:ba:28:17:d1:3b:6b:f2:
                    fe:7b:8e:d7:2a:d9:65:ef:31:08:06:d7:14:f9:db:
                    fd:85:8d:50:d0:11:f8:42:ed:b3:3f:25:19:07:6b:
                    a8:65:a0:1e:fd:dd:87:eb:5a:f6:dd:78:ef:69:5d:
                    30:2b:ea:51:94:45:80:fe:4c:f7:d8:0f:0f:8f:bf:
                    89:e0:c8:78:28:71:2d:95:7c:fe:70:e6:9c:2b:5f:
                    41:12:81:fa:ef:dd:2f:2f:ab:cb:89:7e:9a:0c:6b:
                    9c:d9:45:e2:65:fc:d2:2b:d8:b3:40:c3:31:35:e5:
                    4d:da:2d:5c:a3:45:b2:5a:36:e6:9b:ea:99:b9:6b:
                    5d:1e:6c:b8:d3:25:24:a5:54:43:cd:04:00:d9:48:
                    af:8a:8e:72:a9:48:bd:49:d4:97:63:5b:e9:61:2b:
                    7c:65:d1:59:58:07:c7:d2:23:f6:0c:5d:0d:95:8a:
                    74:2f:3c:ea:22:71:ab:9c:72:c1:47:62:57:d1:b3:
                    9b:e0:7e:59:04:1e:0b:16:f2:74:8e:be:73:07:25:
                    f3:f3:0b:cd:f4:b7:d9:72:8b:d5:e3:11:8b:2a:a5:
                    cf:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:BF:F6:18:53:E3:D2:0E:4F:A3:9C:7A:10:06:E4:E1:0F:73:CD:6F
            X509v3 Authority Key Identifier:
                keyid:96:F7:1B:22:73:AB:34:ED:4A:54:81:17:6E:F7:0F:AD:86:7E:F1:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lvcbInOrNO1KVIEXbvcPrYZ-8WY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/07ae9e-3d04-45b6-9db0-46935fcc855e/1/lvcbInOrNO1KVIEXbvcPrYZ-8WY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/da/07ae9e-3d04-45b6-9db0-46935fcc855e/1/lvcbInOrNO1KVIEXbvcPrYZ-8WY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:61:1e:a8:04:03:bf:b1:83:0f:7d:bc:e0:00:89:2b:57:d8:
         b4:22:dc:5f:be:ad:73:64:cb:31:8a:9b:3a:60:b2:e9:eb:bc:
         92:de:67:d2:e0:ef:b5:84:b5:8b:37:73:03:ab:44:e0:8f:5f:
         2b:a2:2b:68:80:bf:ea:60:05:26:c0:f5:fc:53:d6:32:04:56:
         70:c7:f3:1d:44:d9:f1:e3:f2:dd:27:5d:5e:a7:48:09:c9:50:
         0b:b5:59:a2:2e:bc:20:c6:1d:32:48:44:94:e1:f9:f8:54:ab:
         4e:29:81:2c:ab:71:ed:74:57:c2:a6:96:66:42:8b:bc:9d:30:
         ee:59:2b:7e:83:fa:57:64:c1:5d:25:7a:4f:d3:f2:db:d8:81:
         25:ec:b6:4f:7b:af:fd:da:bb:bb:84:c3:a7:7b:39:5f:66:db:
         2c:14:7c:ed:9d:ea:92:54:4a:2d:8e:e9:27:b7:85:f0:61:12:
         7c:39:67:f3:89:b3:75:7b:25:d0:5e:f9:e8:4c:39:c7:e1:31:
         3a:c9:d6:8c:1d:a2:3e:d8:d0:53:42:ba:50:ad:e9:c5:5b:f0:
         14:f9:c6:2d:7d:2b:18:8b:02:91:c5:c1:30:a0:c2:a0:26:53:
         7e:c6:1a:f9:be:ff:68:89:22:3b:86:8d:d6:bd:47:88:41:5e:
         75:14:48:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----