Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/0d362c-f863-4d40-80bd-85fc5fd90fd8/1/Enr2xpNXOiJwySN4dUVsLfC1A8I.mft
File:                     Enr2xpNXOiJwySN4dUVsLfC1A8I.mft (raw, json)
Hash identifier:          4Lby0E7KTnqh+KoXaQCiDOQrHIesGgwiac9PONWktb0=
Subject key identifier:   9D:BE:6A:EF:5A:39:A6:C7:25:E5:A2:FF:14:C8:E2:CD:F6:DE:7C:FA
Authority key identifier: 12:7A:F6:C6:93:57:3A:22:70:C9:23:78:75:45:6C:2D:F0:B5:03:C2
Certificate issuer:       /CN=127af6c693573a2270c9237875456c2df0b503c2
Certificate serial:       01962E9918E8E116575C6005D0FA14A05B13
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Enr2xpNXOiJwySN4dUVsLfC1A8I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0c/0d362c-f863-4d40-80bd-85fc5fd90fd8/1/Enr2xpNXOiJwySN4dUVsLfC1A8I.mft
Manifest number:          0936
Signing time:             Sun 13 Apr 2025 10:01:47 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:47 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:47 +0000
Files and hashes:         1: Enr2xpNXOiJwySN4dUVsLfC1A8I.crl (hash: EyafXs3npsqMZtvp7//K3nVpZJUfObjJ7sqRlX3NgFs=)
                          2: VDxX1bu_IneAzz4Yg7mHL9qU8nI.roa (hash: wTZ4abffSQNMN+9KEZc/y4JfVZ87xDtbLN5IYZv+F0I=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:18:e8:e1:16:57:5c:60:05:d0:fa:14:a0:5b:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=127af6c693573a2270c9237875456c2df0b503c2
        Validity
            Not Before: Apr 13 10:01:47 2025 GMT
            Not After : Apr 14 10:01:47 2025 GMT
        Subject: CN=9dbe6aef5a39a6c725e5a2ff14c8e2cdf6de7cfa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:1c:9e:23:6a:54:f3:00:08:f3:c3:1a:04:5b:
                    2b:e7:cc:34:b2:fb:bb:46:76:17:5f:f6:b0:be:d3:
                    1c:1c:16:0a:7a:87:14:af:b8:ba:29:f4:f2:f2:30:
                    a2:6f:2e:f4:bd:c2:85:1d:c4:f9:14:a2:3d:61:1c:
                    d5:97:cd:96:24:e5:ab:76:bf:37:f0:02:27:45:f1:
                    b7:62:4d:64:b0:54:4e:d7:2b:41:46:7e:72:10:3c:
                    7a:90:c0:19:7c:d5:0c:5b:88:bc:63:3a:b5:96:f3:
                    4f:2c:34:cb:f0:c1:09:a8:26:5d:22:14:46:97:21:
                    13:57:b6:1f:18:7c:8b:0f:96:5a:5a:a8:cb:8d:b4:
                    43:4b:68:c3:84:97:07:29:ae:72:c7:60:96:d2:87:
                    73:e6:83:80:1d:b2:07:28:dd:55:6b:14:05:5f:12:
                    c4:df:3a:84:3f:5b:4e:17:1b:37:d5:b9:0a:c8:c7:
                    ef:1d:c7:c4:2f:a4:c4:15:d9:d5:08:99:86:43:cc:
                    02:a9:69:de:b9:9b:35:ad:95:6d:f3:ad:4f:1a:27:
                    74:1b:d4:f3:11:2e:14:00:d0:43:2c:5d:12:b1:6f:
                    17:53:d1:2a:bc:fc:24:36:af:b5:5a:a2:f2:ff:65:
                    a7:1e:9b:9e:3b:be:d7:c1:26:fa:23:27:11:a0:8f:
                    11:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:BE:6A:EF:5A:39:A6:C7:25:E5:A2:FF:14:C8:E2:CD:F6:DE:7C:FA
            X509v3 Authority Key Identifier:
                keyid:12:7A:F6:C6:93:57:3A:22:70:C9:23:78:75:45:6C:2D:F0:B5:03:C2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Enr2xpNXOiJwySN4dUVsLfC1A8I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/0d362c-f863-4d40-80bd-85fc5fd90fd8/1/Enr2xpNXOiJwySN4dUVsLfC1A8I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/0d362c-f863-4d40-80bd-85fc5fd90fd8/1/Enr2xpNXOiJwySN4dUVsLfC1A8I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:39:4a:0b:d4:0a:77:fd:72:d9:2e:46:b4:9f:33:30:16:36:
         10:d2:75:23:38:b2:d8:4d:4e:84:db:d9:72:21:47:cd:ac:71:
         5e:f7:cd:31:29:88:e7:07:a5:7c:75:c5:7d:c0:e9:4c:ff:0e:
         09:d3:e9:94:7d:e7:2b:df:0a:79:dc:6e:33:34:85:11:8e:02:
         5a:2f:a2:fb:7e:90:26:0c:2a:c6:d3:e5:53:d7:b7:4a:b2:be:
         fd:7d:4b:0a:2b:2d:e6:c1:a7:0c:b8:20:d9:71:41:83:4e:e0:
         76:2e:73:7e:bf:20:64:dc:0b:18:36:50:88:1e:25:d7:ac:e2:
         e7:da:ff:73:5a:d0:5c:f6:a1:aa:e8:ca:84:b9:09:91:0e:27:
         cc:2b:02:60:24:58:37:f1:19:06:6e:a1:66:26:3b:36:2d:85:
         1a:2e:f5:37:61:c7:dd:c4:99:6e:29:f3:db:0e:64:f8:53:45:
         84:3c:06:f3:1e:18:3f:17:a8:17:b7:54:c6:f6:7f:1d:fe:17:
         53:a2:ae:8a:3e:bf:3d:47:27:69:3d:6b:f9:1a:ea:be:91:77:
         d0:d3:d0:a4:b4:c8:aa:99:c7:15:76:28:45:55:66:24:5e:e6:
         4a:f6:bc:ab:63:89:1a:39:e0:bf:dd:0b:d9:4d:cb:fe:1e:1f:
         e2:0a:28:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----