Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/86cc47-f0c0-473a-b11b-f5c09ff38a00/1/58yGJhOL8enLP9H-wmxoxKY0CWs.mft
File:                     58yGJhOL8enLP9H-wmxoxKY0CWs.mft (raw, json)
Hash identifier:          BGUyiDzS4oZaBl62f54zHdI5F2ZjubUtP2+xkb4DMws=
Subject key identifier:   8C:C9:32:0B:BC:78:41:CA:48:90:6E:3E:28:27:19:F1:3E:10:E0:49
Authority key identifier: E7:CC:86:26:13:8B:F1:E9:CB:3F:D1:FE:C2:6C:68:C4:A6:34:09:6B
Certificate issuer:       /CN=e7cc8626138bf1e9cb3fd1fec26c68c4a634096b
Certificate serial:       01962F065BC95ABBCF72677B21BB81465245
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/58yGJhOL8enLP9H-wmxoxKY0CWs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/47/86cc47-f0c0-473a-b11b-f5c09ff38a00/1/58yGJhOL8enLP9H-wmxoxKY0CWs.mft
Manifest number:          082C
Signing time:             Sun 13 Apr 2025 12:01:07 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:07 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:07 +0000
Files and hashes:         1: 58yGJhOL8enLP9H-wmxoxKY0CWs.crl (hash: xiNcPslfnnZ1REdZfCta3e+r+PQu+n/Ri6pSk7xFCTg=)
                          2: rj-L1Ht9KU4SpqytVvSZ8FykJs0.roa (hash: o5/pUFEbXRLCOB5XslmeCnU9+6JRYi7PIpvUyWlOL2M=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:5b:c9:5a:bb:cf:72:67:7b:21:bb:81:46:52:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7cc8626138bf1e9cb3fd1fec26c68c4a634096b
        Validity
            Not Before: Apr 13 12:01:07 2025 GMT
            Not After : Apr 14 12:01:07 2025 GMT
        Subject: CN=8cc9320bbc7841ca48906e3e282719f13e10e049
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:3a:5c:46:0c:d1:92:22:d2:7d:b1:e7:3a:07:
                    ac:f1:9f:23:c0:f8:f7:b0:67:65:85:3d:38:69:7c:
                    d9:9e:16:77:8c:17:c4:ab:ba:e8:f7:4d:9c:f1:fe:
                    bd:e1:ef:77:4a:f4:c2:92:01:84:8e:7b:36:57:a9:
                    83:7d:b7:1b:ad:48:bc:ee:ec:3c:7e:37:64:7f:0c:
                    28:19:a5:7a:e6:19:d0:20:bb:57:1a:14:29:e6:99:
                    4c:49:9a:80:b0:59:23:1a:aa:9d:56:63:4b:89:8a:
                    77:13:60:24:14:42:db:ac:4a:9d:bb:ce:10:c9:9e:
                    62:45:59:d8:de:73:fa:f3:99:fd:18:ba:85:31:ad:
                    46:65:b5:42:70:4b:71:bd:bf:d5:11:19:a9:47:70:
                    4e:0f:be:d4:7a:32:cd:2d:e7:a4:b5:e1:e0:56:4e:
                    99:b2:a5:d0:42:6b:56:5f:60:98:7c:ca:02:dc:35:
                    11:59:a5:0e:26:14:ca:b0:9e:fa:3b:18:c3:89:bb:
                    ab:8d:1f:5d:da:ea:6c:6c:32:e4:3a:ef:05:1d:41:
                    d8:8c:b9:cd:50:b7:e2:56:e4:3f:4f:57:e4:2e:d7:
                    68:13:96:f1:35:c1:3a:ff:4a:73:e3:11:e4:f3:ec:
                    75:f1:e7:6e:1a:35:b6:c7:4d:80:ea:30:1e:30:e4:
                    19:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:C9:32:0B:BC:78:41:CA:48:90:6E:3E:28:27:19:F1:3E:10:E0:49
            X509v3 Authority Key Identifier:
                keyid:E7:CC:86:26:13:8B:F1:E9:CB:3F:D1:FE:C2:6C:68:C4:A6:34:09:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/58yGJhOL8enLP9H-wmxoxKY0CWs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/86cc47-f0c0-473a-b11b-f5c09ff38a00/1/58yGJhOL8enLP9H-wmxoxKY0CWs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/47/86cc47-f0c0-473a-b11b-f5c09ff38a00/1/58yGJhOL8enLP9H-wmxoxKY0CWs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:b3:9f:58:a2:4b:41:81:b2:ae:66:98:e1:15:9d:3c:05:27:
         eb:ca:07:9b:ac:e6:dc:4a:7b:be:fa:e1:d1:8b:47:5c:74:7a:
         55:30:5a:f3:18:bc:7e:9d:92:17:51:da:52:9e:b5:c7:e5:ef:
         11:56:06:c1:f8:dd:40:1d:d3:8d:7c:a9:74:b0:67:67:2a:97:
         a9:30:4d:16:4a:db:32:f2:c3:95:58:c6:76:df:fb:fb:2d:c9:
         18:54:6a:37:07:13:26:0f:47:98:05:bd:e1:ab:0d:c4:f2:11:
         e5:a0:f7:53:7f:9f:9a:ca:e0:72:20:8e:51:a5:4b:ce:97:97:
         04:85:86:8d:2f:03:86:6c:d2:25:a1:ea:e9:3c:f0:f6:81:07:
         11:fb:b6:d4:36:82:29:44:e5:4d:6d:22:9c:fa:d5:ac:9f:16:
         d0:42:5b:95:ec:e1:f7:0f:de:ec:22:a5:e1:06:e3:5c:86:9b:
         f7:b0:31:17:25:0d:83:aa:81:c1:28:3c:65:23:d5:ea:f8:6f:
         8d:e3:7f:d4:9a:b2:c1:78:bb:95:32:47:f1:c3:a1:a1:ae:b7:
         a5:a0:dc:6c:a7:b3:06:c5:8a:6c:87:e9:ed:85:12:ab:f5:be:
         f5:39:3e:eb:be:81:b3:ed:0a:49:59:1d:08:f1:fe:16:e0:21:
         98:05:9d:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----