Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/b6ef42-b8c0-4e5a-bda1-034bcf4ebdcb/1/ENJnhg06QDsA4aYcVDSs_265c5Q.mft
File:                     ENJnhg06QDsA4aYcVDSs_265c5Q.mft (raw, json)
Hash identifier:          jdkOOvVFAKEoTlesygHrsXZ2J4wTz6DQ9mxq6BGxpH0=
Subject key identifier:   58:9E:85:EB:E7:70:2F:2C:C9:DF:6B:70:45:D7:29:E2:C1:02:DB:5B
Authority key identifier: 10:D2:67:86:0D:3A:40:3B:00:E1:A6:1C:54:34:AC:FF:6E:B9:73:94
Certificate issuer:       /CN=10d267860d3a403b00e1a61c5434acff6eb97394
Certificate serial:       01962F3D71FF407623A8623EDDB5ABB64756
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ENJnhg06QDsA4aYcVDSs_265c5Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/b6ef42-b8c0-4e5a-bda1-034bcf4ebdcb/1/ENJnhg06QDsA4aYcVDSs_265c5Q.mft
Manifest number:          147D
Signing time:             Sun 13 Apr 2025 13:01:18 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:18 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:18 +0000
Files and hashes:         1: ENJnhg06QDsA4aYcVDSs_265c5Q.crl (hash: yn96UOmg/m5a5bJb+kdHXM5/VKoTqTzVplqunrybpQc=)
                          2: dBEJ6Z4T0iJXRXy3ic-Gmbtq2zk.roa (hash: 2ngGgbsBeXS5oDaHpMWchshDHqxPpAQ3xlLFSQTtD/s=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:71:ff:40:76:23:a8:62:3e:dd:b5:ab:b6:47:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=10d267860d3a403b00e1a61c5434acff6eb97394
        Validity
            Not Before: Apr 13 13:01:18 2025 GMT
            Not After : Apr 14 13:01:18 2025 GMT
        Subject: CN=589e85ebe7702f2cc9df6b7045d729e2c102db5b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:96:e3:b9:e3:50:b4:45:61:de:fb:65:cd:6c:
                    20:5f:d6:83:4a:a5:27:84:46:a9:8b:5c:03:e5:e4:
                    6e:7c:ef:d3:9a:47:c6:27:ef:a0:98:dc:2b:b7:75:
                    3b:e7:b9:a3:47:23:49:00:15:75:59:a7:28:a0:26:
                    bb:46:ec:c4:12:86:0b:87:73:14:9f:85:3f:64:0e:
                    7d:5c:11:ec:2c:26:44:42:8f:fa:c2:71:13:a3:08:
                    3c:c8:04:4b:1b:f8:10:6d:06:2e:55:16:c7:45:52:
                    9b:75:08:15:f9:23:7a:2c:f4:0b:c4:62:76:9b:94:
                    10:69:3b:d4:1a:d0:8e:24:6a:b2:af:5b:b0:24:66:
                    de:0e:b9:9d:79:35:63:7f:11:09:55:36:ab:ec:7a:
                    3d:47:fa:38:74:fa:5a:75:a2:9a:ea:ea:5f:c5:3e:
                    1c:c4:ea:40:ef:c2:49:ef:e0:51:b0:86:42:82:b2:
                    52:1b:3b:ca:6c:01:17:a2:09:6a:d9:7a:71:c8:32:
                    33:d0:12:d2:e3:ee:43:d9:7c:71:e0:78:55:a8:b6:
                    50:4c:0f:66:14:69:c5:fe:40:49:fd:b5:84:75:1b:
                    9d:ae:57:39:6c:62:08:b2:3b:3e:7a:ab:de:c2:b0:
                    e3:f0:9a:48:88:75:c3:6a:a2:80:45:7d:a6:35:5d:
                    3d:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:9E:85:EB:E7:70:2F:2C:C9:DF:6B:70:45:D7:29:E2:C1:02:DB:5B
            X509v3 Authority Key Identifier:
                keyid:10:D2:67:86:0D:3A:40:3B:00:E1:A6:1C:54:34:AC:FF:6E:B9:73:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ENJnhg06QDsA4aYcVDSs_265c5Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/b6ef42-b8c0-4e5a-bda1-034bcf4ebdcb/1/ENJnhg06QDsA4aYcVDSs_265c5Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/b6ef42-b8c0-4e5a-bda1-034bcf4ebdcb/1/ENJnhg06QDsA4aYcVDSs_265c5Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         aa:ab:f5:6a:55:76:8e:1f:1a:ad:41:0d:66:9b:5f:46:97:0d:
         8a:fe:8f:09:43:3f:4b:05:88:57:d6:c5:1c:f9:0b:5b:1c:b3:
         3e:3e:ca:6b:e8:43:62:77:98:e2:2c:46:52:a0:b7:ae:c5:b9:
         95:ff:c7:53:8f:2a:b7:d8:3f:23:5f:15:0e:02:b3:3b:6b:db:
         d1:26:7f:98:25:d3:a9:56:7e:b9:64:5f:a3:43:3f:5a:32:62:
         0f:28:7a:91:0b:4e:4f:79:6f:86:29:6e:79:95:7c:e3:32:75:
         05:09:07:cd:b2:0b:1d:b1:2b:23:dc:77:8e:4f:25:4b:30:ea:
         ae:e5:d5:2c:a1:84:c1:8a:45:f8:ca:11:e0:80:2c:6a:ee:ff:
         f7:b5:8c:b0:ef:de:de:2f:82:4c:56:95:f5:4b:70:5d:66:7e:
         07:9a:4e:1a:8c:21:e6:28:5f:af:01:d2:33:46:7a:a0:4c:31:
         b4:7e:d4:36:34:37:c3:1f:05:82:1a:ac:75:0e:77:6b:23:1c:
         da:93:30:6d:73:8b:81:eb:af:c5:71:67:93:8a:17:eb:10:7c:
         c6:58:6c:0d:fc:91:73:92:c3:9f:56:5d:27:3c:9b:42:69:69:
         3d:89:29:7b:8e:d9:e4:50:cc:f4:5a:bc:b8:f3:91:77:3e:6f:
         77:86:35:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----