Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/70a8fa-0fc9-4a97-aade-2ac62657f463/1/EneXY60_H0taSgVSxgOUlrz_OlQ.mft
File:                     EneXY60_H0taSgVSxgOUlrz_OlQ.mft (raw, json)
Hash identifier:          KCTai8wH3ZDhk/6FN2prLUFYmQ7SO722sM8qv4LMaPs=
Subject key identifier:   E5:30:25:11:8C:FA:01:E7:E4:77:88:70:31:79:D8:2D:70:66:47:B9
Authority key identifier: 12:77:97:63:AD:3F:1F:4B:5A:4A:05:52:C6:03:94:96:BC:FF:3A:54
Certificate issuer:       /CN=12779763ad3f1f4b5a4a0552c6039496bcff3a54
Certificate serial:       01962F3DC55FDD83C70F6420AB561173BFEF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EneXY60_H0taSgVSxgOUlrz_OlQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1d/70a8fa-0fc9-4a97-aade-2ac62657f463/1/EneXY60_H0taSgVSxgOUlrz_OlQ.mft
Manifest number:          03D8
Signing time:             Sun 13 Apr 2025 13:01:39 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:39 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:39 +0000
Files and hashes:         1: EneXY60_H0taSgVSxgOUlrz_OlQ.crl (hash: PFrxfK5bJWC61DJdyweNJY2Jm+nfJ03Txc1RbKXHaxc=)
                          2: X6geWX5nM159UJnYLrAlkyag0CM.roa (hash: i2/ukSqH8f8rPwnYXz8bpqJPbVxP6Pdogw7nGkBUWWU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:c5:5f:dd:83:c7:0f:64:20:ab:56:11:73:bf:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=12779763ad3f1f4b5a4a0552c6039496bcff3a54
        Validity
            Not Before: Apr 13 13:01:39 2025 GMT
            Not After : Apr 14 13:01:39 2025 GMT
        Subject: CN=e53025118cfa01e7e47788703179d82d706647b9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:4c:99:e5:10:c4:cb:6d:2c:6c:c0:7f:df:a2:
                    7a:1d:ad:1f:4e:e7:4f:3d:88:f7:b1:f4:92:e4:79:
                    70:4c:f2:30:35:b1:74:82:12:b2:db:6e:aa:ca:e4:
                    2f:cb:fd:b8:29:5d:11:1d:44:92:62:9e:29:f2:f3:
                    f8:7f:87:c3:dd:13:21:3a:00:b5:84:3d:42:fa:e4:
                    63:58:77:41:4e:df:03:50:34:01:47:42:39:8c:75:
                    46:81:7e:b2:45:3d:8f:3c:85:99:7a:13:bb:52:9d:
                    40:e1:80:7e:18:82:b1:c0:3b:4b:58:70:b8:98:23:
                    5f:04:0f:dc:a0:2f:7d:e1:14:ad:93:04:05:0a:b9:
                    84:59:7b:a9:1c:7e:a5:75:fa:1c:f7:83:02:16:6e:
                    68:fb:df:3f:b7:6d:39:78:52:1f:e8:ea:2e:5d:7d:
                    46:3d:eb:dd:4b:a7:b8:af:da:3b:7d:83:37:4b:fd:
                    4a:1a:80:15:f9:a3:80:d4:b1:ec:3a:33:63:24:47:
                    04:b9:15:ac:b7:36:8d:10:d3:42:de:88:2b:7d:d6:
                    4a:a1:96:f5:d3:13:58:a5:05:d4:21:1f:e9:9c:14:
                    5e:f4:72:d9:bd:e8:d0:86:12:64:5e:11:80:63:6f:
                    54:a6:22:eb:4e:8f:00:bb:9e:47:86:cc:1b:c8:18:
                    68:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:30:25:11:8C:FA:01:E7:E4:77:88:70:31:79:D8:2D:70:66:47:B9
            X509v3 Authority Key Identifier:
                keyid:12:77:97:63:AD:3F:1F:4B:5A:4A:05:52:C6:03:94:96:BC:FF:3A:54

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EneXY60_H0taSgVSxgOUlrz_OlQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/70a8fa-0fc9-4a97-aade-2ac62657f463/1/EneXY60_H0taSgVSxgOUlrz_OlQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/70a8fa-0fc9-4a97-aade-2ac62657f463/1/EneXY60_H0taSgVSxgOUlrz_OlQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:7a:d3:e4:2c:d7:d6:3a:13:e9:13:ad:52:9c:8e:66:1e:6a:
         42:62:4d:e9:bb:ad:2f:22:69:4b:ee:f2:5e:ee:97:5d:90:9b:
         10:05:b5:8e:ab:24:e7:d8:a3:2f:e4:fb:15:50:d3:7f:75:b4:
         50:69:14:ae:61:84:20:25:08:e0:7c:b9:ad:07:cd:2b:fd:2a:
         b0:4e:70:e4:30:ed:7b:3d:d1:f1:e9:91:f9:b7:69:58:57:bc:
         b5:91:a3:53:2f:94:5c:5d:21:2d:4b:8d:be:e0:95:07:ba:e1:
         c8:1e:64:6f:7b:b7:5a:6c:a2:ce:d1:fe:fd:fd:aa:2c:b6:ff:
         6f:57:50:84:10:f5:ac:d5:49:53:03:a8:38:74:c7:8e:e8:fd:
         17:6c:24:a1:61:ee:c6:56:fe:04:07:02:4d:a5:2c:53:31:5d:
         33:29:a2:09:8e:79:c8:4e:99:49:ce:bb:e7:fe:bf:ad:4f:97:
         03:c5:a0:ff:e8:01:07:ba:04:a7:f1:cf:a5:a9:14:a5:d7:08:
         3e:a1:b8:27:12:a5:8c:12:89:58:e0:5f:d7:bc:d2:50:53:95:
         03:eb:06:e4:5f:08:e6:de:47:48:4b:bb:ab:d9:c4:5e:cf:a1:
         1b:7e:46:2e:62:42:a3:49:2f:2c:d4:d4:67:04:c5:15:d3:ec:
         c9:9c:24:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----