Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/674e76-4245-402d-9c51-d2d2aba28e80/1/58fsjXgFA9t8q8sUHWuZHNAppqI.mft
File:                     58fsjXgFA9t8q8sUHWuZHNAppqI.mft (raw, json)
Hash identifier:          HSnAQ3+y0Osq7e7zrY/WMhDrdBiVA+dn73M306vSjhM=
Subject key identifier:   FE:1A:2B:4E:DC:B2:22:A8:68:B9:34:45:38:78:47:06:5A:A4:06:50
Authority key identifier: E7:C7:EC:8D:78:05:03:DB:7C:AB:CB:14:1D:6B:99:1C:D0:29:A6:A2
Certificate issuer:       /CN=e7c7ec8d780503db7cabcb141d6b991cd029a6a2
Certificate serial:       01962F7497D70DE162B70101C1446D3B1553
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/58fsjXgFA9t8q8sUHWuZHNAppqI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f7/674e76-4245-402d-9c51-d2d2aba28e80/1/58fsjXgFA9t8q8sUHWuZHNAppqI.mft
Manifest number:          0EE5
Signing time:             Sun 13 Apr 2025 14:01:32 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:32 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:32 +0000
Files and hashes:         1: 58fsjXgFA9t8q8sUHWuZHNAppqI.crl (hash: gumOg8FTS1R+4qg4mQ4JMG3lzMsHPg29/aMlWEMPmqM=)
                          2: Gr2bTac37FdQF97pGkH13J5M8LQ.roa (hash: oaatGmufJtltyljxjCY0yrTcOMqVjEXZ2p4QbghN278=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:97:d7:0d:e1:62:b7:01:01:c1:44:6d:3b:15:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7c7ec8d780503db7cabcb141d6b991cd029a6a2
        Validity
            Not Before: Apr 13 14:01:32 2025 GMT
            Not After : Apr 14 14:01:32 2025 GMT
        Subject: CN=fe1a2b4edcb222a868b93445387847065aa40650
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:64:b4:f9:9d:ed:4e:f2:ee:b2:c7:37:c5:ec:
                    65:41:9f:0c:16:fa:12:9e:76:d7:6e:97:af:15:04:
                    53:43:e7:2e:15:95:8b:e7:d3:33:90:dc:82:ae:14:
                    ba:9a:19:e0:bd:81:4a:a3:3b:24:7d:0e:b9:4c:c0:
                    21:c3:bb:60:ec:7c:46:da:5e:18:72:ca:b3:42:cb:
                    f2:10:1e:bf:05:4e:a3:cf:61:c8:f7:c7:dd:ab:9f:
                    bc:48:75:bb:ca:94:42:a8:f5:e6:cd:28:81:00:ca:
                    2b:d7:c0:a5:27:b7:bb:4e:e2:af:29:13:17:85:e1:
                    9c:56:46:8f:74:df:71:1f:ae:0c:86:b2:c4:e8:e8:
                    30:83:5c:c7:61:fd:aa:db:2c:69:cd:41:cb:9c:5f:
                    5a:38:a8:24:91:c5:48:61:26:98:ae:d6:49:55:5a:
                    2d:63:ea:c9:38:ea:51:24:79:61:0c:ee:2d:0c:7b:
                    ae:39:80:f7:42:05:49:3e:c1:a0:d0:ee:af:cd:85:
                    c9:0e:bd:cb:b7:44:a7:fb:4e:ee:d3:b4:ab:cd:a0:
                    7d:57:29:76:d2:60:c4:24:f4:72:85:0e:26:13:38:
                    29:fc:46:d1:73:b4:30:79:a8:02:ca:ac:e2:ad:e1:
                    99:1c:6f:89:4e:75:a0:5e:ce:dd:f5:44:40:fa:a2:
                    2d:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:1A:2B:4E:DC:B2:22:A8:68:B9:34:45:38:78:47:06:5A:A4:06:50
            X509v3 Authority Key Identifier:
                keyid:E7:C7:EC:8D:78:05:03:DB:7C:AB:CB:14:1D:6B:99:1C:D0:29:A6:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/58fsjXgFA9t8q8sUHWuZHNAppqI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/674e76-4245-402d-9c51-d2d2aba28e80/1/58fsjXgFA9t8q8sUHWuZHNAppqI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/674e76-4245-402d-9c51-d2d2aba28e80/1/58fsjXgFA9t8q8sUHWuZHNAppqI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d6:60:10:e3:4b:24:e4:63:2b:3a:ab:13:89:33:41:b8:82:b9:
         db:f5:d3:47:ea:51:df:07:c5:55:65:b3:21:a9:f1:04:c3:07:
         a7:6b:46:35:33:60:b7:9c:79:fb:63:19:63:3b:f0:bc:fd:0c:
         85:60:73:44:c3:3e:f7:e6:5c:90:89:ca:83:fe:23:61:7c:a9:
         9c:64:42:28:f3:ff:03:b9:38:c2:9e:57:be:0c:e3:40:4f:9e:
         06:79:3a:40:4d:3e:b3:14:83:ac:87:dd:bc:0d:03:a0:67:90:
         9e:c1:7b:a6:1e:d5:0e:77:94:97:01:33:00:36:82:bb:f4:cb:
         b2:dd:df:3d:0a:39:50:a1:11:9d:a2:13:c7:af:64:8d:27:10:
         e5:79:ff:7f:fa:ea:3b:22:fa:b8:c8:b4:87:e8:b3:93:b4:af:
         1c:f9:19:79:05:0b:2e:5f:57:d8:8d:32:d0:1a:42:d4:1f:d7:
         19:a9:8c:91:a7:12:57:06:1c:18:cf:a3:34:c8:b1:71:ae:44:
         65:36:c2:d7:92:47:06:b8:a8:0f:6f:0c:f6:44:68:cf:5a:7d:
         9a:1c:ff:62:c6:1d:22:9a:dc:f7:bd:d9:9c:03:69:de:6b:0c:
         12:18:3e:fa:51:1c:7a:4e:07:38:21:07:68:85:ef:21:bb:da:
         a9:f9:b7:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----