Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/f04636-b295-4ac8-a86f-e7a382750bb9/1/e1l6Sw_khublyFue4D5ym97H570.mft
File:                     e1l6Sw_khublyFue4D5ym97H570.mft (raw, json)
Hash identifier:          WlrCHV4bHNglLhN/Tal18HZn3KJTz4sH6MMtoDDBLx4=
Subject key identifier:   58:F7:A5:87:42:7E:85:FB:D4:A7:0F:59:3D:F7:FB:9D:90:96:D3:51
Authority key identifier: 7B:59:7A:4B:0F:E4:86:E6:E5:C8:5B:9E:E0:3E:72:9B:DE:C7:E7:BD
Certificate issuer:       /CN=7b597a4b0fe486e6e5c85b9ee03e729bdec7e7bd
Certificate serial:       01962E617F7170D0AE54FCC2579922346027
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/e1l6Sw_khublyFue4D5ym97H570.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bd/f04636-b295-4ac8-a86f-e7a382750bb9/1/e1l6Sw_khublyFue4D5ym97H570.mft
Manifest number:          086D
Signing time:             Sun 13 Apr 2025 09:01:03 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:03 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:03 +0000
Files and hashes:         1: CL5GDI7AL5f3-MMAg1KGH-qZ_X4.roa (hash: 1+cCs2zFwxJkW1OoUx7Jz3Uxj06h6MGbFiXw6q5dy7M=)
                          2: e1l6Sw_khublyFue4D5ym97H570.crl (hash: YV3KHEuykn2iw22pLmnED2s7+xMaU7aHUWpEwY23Wb8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:7f:71:70:d0:ae:54:fc:c2:57:99:22:34:60:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7b597a4b0fe486e6e5c85b9ee03e729bdec7e7bd
        Validity
            Not Before: Apr 13 09:01:03 2025 GMT
            Not After : Apr 14 09:01:03 2025 GMT
        Subject: CN=58f7a587427e85fbd4a70f593df7fb9d9096d351
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:d2:fa:bf:f8:2b:ed:90:c0:f5:6b:66:2c:39:
                    7b:05:a7:2d:64:29:3b:2a:0d:92:92:d1:a9:37:4e:
                    c6:ae:09:4f:2a:f9:e1:71:c5:b1:b4:e7:9f:c8:79:
                    77:03:cc:7b:fb:21:9e:5f:28:73:e0:76:31:b2:19:
                    7f:ae:ec:df:74:76:c4:53:d8:8e:58:d8:b6:70:e3:
                    9f:c9:f7:07:5e:d5:6e:2c:49:b9:dc:10:28:d4:98:
                    ae:87:c7:5d:b1:1b:49:c4:74:da:e8:b6:42:c4:5a:
                    c1:36:09:b7:74:d8:88:cc:99:7e:4b:3f:78:2a:8d:
                    d3:c5:50:6f:c8:10:20:b3:3b:66:52:c1:ea:a2:cc:
                    56:3b:bd:fd:b4:fa:1c:95:48:18:12:f2:b8:ba:aa:
                    2b:3b:7c:bc:45:cc:ad:99:5a:0f:06:1e:b0:a6:71:
                    c9:93:63:af:73:29:30:6c:1b:16:0c:d7:c9:77:b0:
                    ed:d0:1c:39:cc:24:c7:fe:41:ed:d6:67:a7:0b:ab:
                    1d:92:b1:cd:c7:6f:f7:37:5f:94:56:83:f1:95:9f:
                    18:3c:be:0f:f1:88:4b:54:3b:97:42:2f:46:8a:62:
                    ed:e7:95:56:45:4e:24:34:f8:dd:d8:29:3f:90:80:
                    d2:47:ae:9c:bb:37:25:d8:e9:7f:5c:f8:91:63:02:
                    84:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:F7:A5:87:42:7E:85:FB:D4:A7:0F:59:3D:F7:FB:9D:90:96:D3:51
            X509v3 Authority Key Identifier:
                keyid:7B:59:7A:4B:0F:E4:86:E6:E5:C8:5B:9E:E0:3E:72:9B:DE:C7:E7:BD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1l6Sw_khublyFue4D5ym97H570.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/f04636-b295-4ac8-a86f-e7a382750bb9/1/e1l6Sw_khublyFue4D5ym97H570.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/f04636-b295-4ac8-a86f-e7a382750bb9/1/e1l6Sw_khublyFue4D5ym97H570.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:cd:e4:52:42:1e:48:34:ea:eb:bf:f1:02:67:58:83:4c:b4:
         fc:0b:66:da:e1:a4:29:13:92:b9:cb:c9:5c:79:2c:a9:3d:4a:
         65:4b:f0:d8:36:c6:4e:bf:36:0f:d2:9a:50:9c:14:26:d7:bc:
         d1:96:46:1a:14:52:60:2c:f7:17:cb:54:05:9b:eb:8c:c1:8b:
         16:74:76:37:9c:b5:b7:5b:b4:99:e5:5b:11:27:20:d9:a0:5f:
         c7:bf:8a:36:54:a1:0c:ff:0e:e3:9e:8e:73:4a:11:39:ba:e7:
         d9:10:82:91:c5:e3:d3:bb:14:86:6a:dc:92:85:8d:f0:ac:8a:
         a6:91:2c:6e:a4:99:bb:1b:87:9d:03:a0:97:ef:43:5c:c7:9b:
         6a:8d:7a:c8:ff:c4:7d:08:b2:09:c9:90:1c:dc:91:5c:02:4f:
         dc:49:b4:d2:4f:95:c6:e5:dd:be:6b:3a:bb:80:51:11:ba:fc:
         59:2d:68:c7:f6:48:91:02:a7:81:2f:11:c2:4b:e9:fc:c0:98:
         b4:67:10:52:e5:0a:c2:6a:a6:ac:42:46:ef:a0:a9:67:b2:f9:
         35:97:9e:56:36:42:01:14:7a:cc:2f:5b:aa:2f:49:f0:65:09:
         ef:35:b4:46:84:f1:cb:98:44:9c:90:0b:19:f7:2d:6f:1b:ba:
         6d:81:16:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----