Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/e7d974-e258-41fe-880a-4ec2d94e2ede/1/58OrlrdMKsTwSuYqt-gs3xmI7UA.mft
File:                     58OrlrdMKsTwSuYqt-gs3xmI7UA.mft (raw, json)
Hash identifier:          XVITaKDkEM3YMbJL7pZffT8UcwCadY0r/s1+Ooj7hHQ=
Subject key identifier:   60:94:E0:87:65:58:15:90:92:96:16:18:3E:13:0B:AC:14:A4:F1:A3
Authority key identifier: E7:C3:AB:96:B7:4C:2A:C4:F0:4A:E6:2A:B7:E8:2C:DF:19:88:ED:40
Certificate issuer:       /CN=e7c3ab96b74c2ac4f04ae62ab7e82cdf1988ed40
Certificate serial:       01962FAB82962B030367D1A5681E560B3435
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/58OrlrdMKsTwSuYqt-gs3xmI7UA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5d/e7d974-e258-41fe-880a-4ec2d94e2ede/1/58OrlrdMKsTwSuYqt-gs3xmI7UA.mft
Manifest number:          066C
Signing time:             Sun 13 Apr 2025 15:01:31 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:31 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:31 +0000
Files and hashes:         1: 58OrlrdMKsTwSuYqt-gs3xmI7UA.crl (hash: 1PnA7JDO5vc9OFITz0u1yy+gyZ6bA/4C1HTc2PeaQ3g=)
                          2: tRQVAZPhSI7yY2YBf58wHloNtVk.roa (hash: x6U/gqCwfyDYCGrA4HX4YKbEtJbHihcQ4Z9Ks5Bgn58=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:82:96:2b:03:03:67:d1:a5:68:1e:56:0b:34:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7c3ab96b74c2ac4f04ae62ab7e82cdf1988ed40
        Validity
            Not Before: Apr 13 15:01:31 2025 GMT
            Not After : Apr 14 15:01:31 2025 GMT
        Subject: CN=6094e08765581590929616183e130bac14a4f1a3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:7e:56:af:91:51:f2:14:d2:b6:e0:24:87:09:
                    e1:35:01:b0:ce:4a:ca:8a:2e:df:19:c4:bc:d7:73:
                    17:3e:d5:69:68:c8:fa:14:72:1f:4a:70:30:4e:95:
                    38:75:d9:fc:49:22:40:fa:86:da:15:99:91:77:53:
                    70:8c:a8:b3:55:c0:29:37:6f:5b:f6:f2:75:60:78:
                    dd:6d:64:5d:18:8c:41:e4:a0:d0:51:16:1c:3a:a0:
                    70:aa:a1:46:31:f3:3d:ac:1a:74:b8:46:46:c7:13:
                    fc:27:a5:6b:35:a3:4f:e1:2c:bc:0c:af:ae:36:ba:
                    8c:e7:d1:ba:4d:b8:13:4f:8a:f6:21:6f:48:c3:fc:
                    a9:4f:6a:54:9a:c2:c0:72:18:10:e2:7b:8f:dd:c2:
                    04:3c:33:09:e5:e0:d2:96:51:f3:e0:fb:bc:9b:53:
                    cf:64:23:ce:8e:59:b7:1a:75:d6:13:89:40:39:00:
                    72:b1:2f:d2:ad:95:da:d7:bc:03:b6:4b:c5:96:13:
                    b2:d1:b2:6a:08:57:37:fc:3b:da:4a:33:ee:db:98:
                    49:65:9a:4a:43:7c:be:1e:d2:a7:43:27:7d:a2:bb:
                    a2:84:80:09:cb:17:bb:ff:26:88:29:59:57:4b:8a:
                    0b:1f:4a:a8:7d:1f:7d:d3:f4:50:bd:c6:81:78:79:
                    41:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:94:E0:87:65:58:15:90:92:96:16:18:3E:13:0B:AC:14:A4:F1:A3
            X509v3 Authority Key Identifier:
                keyid:E7:C3:AB:96:B7:4C:2A:C4:F0:4A:E6:2A:B7:E8:2C:DF:19:88:ED:40

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/58OrlrdMKsTwSuYqt-gs3xmI7UA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/e7d974-e258-41fe-880a-4ec2d94e2ede/1/58OrlrdMKsTwSuYqt-gs3xmI7UA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/e7d974-e258-41fe-880a-4ec2d94e2ede/1/58OrlrdMKsTwSuYqt-gs3xmI7UA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:40:5f:58:99:aa:21:f9:43:7a:79:d0:84:70:97:8d:98:76:
         2e:21:f8:66:cc:12:96:f1:9d:a3:82:2a:e4:02:b1:f4:b7:5f:
         c0:b9:a5:68:96:c1:35:37:ce:75:35:e7:34:4d:d0:0b:50:68:
         6d:6f:7d:3b:90:ab:45:1d:99:ac:9d:3a:0f:fe:4f:19:a3:21:
         35:f6:93:8a:9a:c6:85:19:6d:e1:1b:85:f5:d4:44:92:e4:23:
         19:7a:1f:53:29:83:e8:61:32:f3:2f:32:a8:1e:9c:30:b6:09:
         59:81:11:14:fb:56:27:48:9b:db:f9:33:b2:78:1f:2d:63:f9:
         5b:a8:91:2e:9f:c5:b7:bf:41:cd:e9:c1:8f:86:d1:b8:36:32:
         17:ff:52:ae:73:64:aa:b2:1d:18:09:51:d0:3f:ec:0e:48:77:
         f4:04:6c:03:7f:48:b9:25:57:ca:49:e5:0d:17:20:54:2f:69:
         62:bc:41:4f:5c:65:7c:56:90:8c:e2:2f:91:7f:10:9b:f5:62:
         57:e4:0c:e3:40:d9:5e:c1:8d:5e:ec:70:61:e8:cb:95:c4:09:
         e2:6c:ce:01:b0:1c:0d:e5:36:00:c8:21:89:d2:b3:6c:07:d6:
         89:52:b1:32:52:7e:72:ca:2d:8a:9d:4f:f2:76:68:fe:83:31:
         d3:55:85:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----