Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/ccb56f-dd05-4616-a5f1-56324668a964/1/58NBW98cAUrhwY58_TPFbwGP7ug.mft
File:                     58NBW98cAUrhwY58_TPFbwGP7ug.mft (raw, json)
Hash identifier:          2XWMFsYsWSakdD/uedgDkWbdXCAZInm0G2CqkLycnOM=
Subject key identifier:   95:4B:E5:8F:DD:70:26:C8:30:E9:34:7E:0C:01:CE:82:1A:45:9C:6C
Authority key identifier: E7:C3:41:5B:DF:1C:01:4A:E1:C1:8E:7C:FD:33:C5:6F:01:8F:EE:E8
Certificate issuer:       /CN=e7c3415bdf1c014ae1c18e7cfd33c56f018feee8
Certificate serial:       01962E989113851DABBB1E706F6E17245026
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/58NBW98cAUrhwY58_TPFbwGP7ug.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ab/ccb56f-dd05-4616-a5f1-56324668a964/1/58NBW98cAUrhwY58_TPFbwGP7ug.mft
Manifest number:          147E
Signing time:             Sun 13 Apr 2025 10:01:12 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:12 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:12 +0000
Files and hashes:         1: 58NBW98cAUrhwY58_TPFbwGP7ug.crl (hash: BEYzcGUo8s/YKGzBI37YsC7LVa52F/Tms4nHBAj6PSA=)
                          2: FiCeY_mBEBLBRbL14JMQjW_TEpQ.roa (hash: zmpLfs/691bdiYAVSZTFtEj2DvlsbiXT1z8hvns9wAo=)
                          3: k2bRbV7XqonRIs_2mgDBoumLm0U.roa (hash: qpwrCsvOi/cGB44FbKJwNJnBf33OxmuWQYiUCXxF50I=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:91:13:85:1d:ab:bb:1e:70:6f:6e:17:24:50:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7c3415bdf1c014ae1c18e7cfd33c56f018feee8
        Validity
            Not Before: Apr 13 10:01:12 2025 GMT
            Not After : Apr 14 10:01:12 2025 GMT
        Subject: CN=954be58fdd7026c830e9347e0c01ce821a459c6c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:e9:55:5f:ed:f6:1d:67:ef:bf:19:68:27:1c:
                    bb:5e:06:8e:fe:ff:b0:b9:e6:a2:00:c3:c6:4a:14:
                    eb:c9:9f:c0:b3:76:36:2b:76:e6:b4:7f:ad:6f:4a:
                    c1:e1:1d:d8:68:c5:63:2a:bc:e4:5c:df:96:f4:80:
                    a1:28:27:da:cd:72:71:d8:89:df:c5:ef:d9:07:1f:
                    ed:95:67:b6:28:00:7e:e8:6f:e3:34:23:a6:04:34:
                    a6:33:d7:dd:75:06:ed:6d:28:7c:17:27:c0:90:64:
                    d9:2f:f1:5c:c2:d5:08:9e:61:36:f5:78:6b:c0:93:
                    12:1a:94:a1:05:8d:e2:1f:48:51:81:25:28:1f:97:
                    ad:6d:28:b5:ba:d1:e2:6a:0f:91:f5:3d:ba:ac:c1:
                    06:20:18:6a:93:0c:a4:42:cc:62:88:21:a4:a2:a8:
                    72:85:08:0e:e3:9d:02:e9:3d:bc:95:8e:88:25:8e:
                    b7:25:36:9b:ea:6b:98:ec:54:80:77:a4:c4:87:bc:
                    46:ed:9e:b2:03:28:ef:2b:6e:d4:3a:97:f5:d4:c0:
                    8f:46:f6:6a:d4:e0:e2:0f:25:42:6f:ec:bb:d8:ac:
                    20:5c:0b:31:55:f9:c4:65:7b:09:7b:07:a2:60:5c:
                    15:54:b6:70:0f:4f:7b:b5:06:7f:8c:9f:7f:8a:a3:
                    05:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:4B:E5:8F:DD:70:26:C8:30:E9:34:7E:0C:01:CE:82:1A:45:9C:6C
            X509v3 Authority Key Identifier:
                keyid:E7:C3:41:5B:DF:1C:01:4A:E1:C1:8E:7C:FD:33:C5:6F:01:8F:EE:E8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/58NBW98cAUrhwY58_TPFbwGP7ug.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/ccb56f-dd05-4616-a5f1-56324668a964/1/58NBW98cAUrhwY58_TPFbwGP7ug.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/ccb56f-dd05-4616-a5f1-56324668a964/1/58NBW98cAUrhwY58_TPFbwGP7ug.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:85:6d:23:10:d7:6e:5d:c7:82:b3:f1:44:f6:5a:57:5a:42:
         c0:16:6b:6b:71:79:40:a2:70:e5:81:31:14:f5:a3:75:29:2c:
         c5:7d:a7:4e:fe:c9:d2:07:3f:1e:1b:57:6e:eb:41:32:ea:8a:
         c4:9c:51:72:f6:25:c5:44:66:1c:ce:cb:3b:92:fc:73:e4:31:
         f0:54:79:05:ee:59:b4:2d:1e:42:d6:49:8a:1c:d0:d4:3a:d1:
         4a:ae:98:35:61:81:be:48:4b:8b:fe:b5:e4:c0:81:3f:71:cc:
         bd:6d:e2:c5:ad:84:1f:02:20:aa:e2:da:5c:64:17:f4:b1:67:
         f8:cb:30:26:92:7f:cc:50:07:0d:98:23:8c:20:b9:66:91:f0:
         76:96:45:43:77:c8:f4:45:60:2b:4f:7e:d0:d3:0a:02:77:45:
         0b:c2:2f:17:2d:1d:9e:02:55:44:ce:7f:dc:a1:d2:5e:c3:ae:
         15:5f:b6:71:98:e7:af:37:9a:34:8b:af:6c:59:b4:05:5c:6b:
         6f:90:75:c1:df:b5:ef:92:14:b0:c8:9a:42:86:20:69:75:7d:
         90:cc:42:9c:29:a9:b7:64:45:d4:29:6f:b4:93:11:ee:83:26:
         5c:fb:d3:1a:b2:89:9a:12:f3:b2:dd:c9:6c:fe:ed:e9:7f:c5:
         dd:56:9d:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----