Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/c25098-d7c9-4fa9-a3c1-d7fc8c5d00aa/1/CsgX_khqx3vpTil6zjqVzyff-xo.mft
File:                     CsgX_khqx3vpTil6zjqVzyff-xo.mft (raw, json)
Hash identifier:          rCTlqvUpPpe8Yn7ZMoHN3SBFSxxSn+a5Z9PgnqRWHEY=
Subject key identifier:   81:34:8D:25:98:11:5E:13:5F:A7:16:1E:66:76:AC:8E:A1:B8:34:F3
Authority key identifier: 0A:C8:17:FE:48:6A:C7:7B:E9:4E:29:7A:CE:3A:95:CF:27:DF:FB:1A
Certificate issuer:       /CN=0ac817fe486ac77be94e297ace3a95cf27dffb1a
Certificate serial:       01962ECFDD1DF4362AC44D3279528ED3360C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CsgX_khqx3vpTil6zjqVzyff-xo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9c/c25098-d7c9-4fa9-a3c1-d7fc8c5d00aa/1/CsgX_khqx3vpTil6zjqVzyff-xo.mft
Manifest number:          0A19
Signing time:             Sun 13 Apr 2025 11:01:36 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:36 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:36 +0000
Files and hashes:         1: CsgX_khqx3vpTil6zjqVzyff-xo.crl (hash: Rs4g83PbBLWvjOh9SOx0Pe5hZnOXnL1sjNkZyJ7trQ4=)
                          2: rKgQI-w1UXNWfaL5RhIkWUF_FgI.roa (hash: hcJ9d+FGrXGqRkOgDTqfnuX4GbB1zYDVH1Gwhkt3mDA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:dd:1d:f4:36:2a:c4:4d:32:79:52:8e:d3:36:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0ac817fe486ac77be94e297ace3a95cf27dffb1a
        Validity
            Not Before: Apr 13 11:01:36 2025 GMT
            Not After : Apr 14 11:01:36 2025 GMT
        Subject: CN=81348d2598115e135fa7161e6676ac8ea1b834f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:f8:5f:fe:14:6f:be:af:0a:24:ba:76:1c:58:
                    68:6b:dd:dc:75:ae:f4:b1:3f:35:50:d1:d2:f5:4f:
                    f0:1e:65:97:30:38:98:c3:44:e7:ad:6e:57:c7:7c:
                    6e:1d:07:e8:d7:34:29:a9:f1:d9:6b:5c:a9:19:cc:
                    00:4e:c0:7e:81:29:0b:c1:05:7d:71:21:86:a6:87:
                    d1:2e:dd:83:a7:4e:6f:b9:e8:8b:60:7e:5e:af:ea:
                    32:a3:8f:03:e2:cc:a5:34:d4:d9:18:e5:4d:6b:48:
                    36:ff:78:97:4a:57:27:35:5b:03:ff:43:06:30:0c:
                    f8:8b:4e:76:3b:94:e2:3f:eb:f0:af:71:a6:4c:67:
                    19:79:6b:5d:ec:10:4f:a7:07:8f:23:cc:fa:34:8e:
                    6c:94:fa:95:5f:e6:c4:09:0e:f1:a6:a0:59:77:90:
                    ec:55:ba:16:30:fa:6a:0e:60:58:b1:e1:cc:a1:65:
                    62:d6:b9:8d:38:e2:57:b7:34:f1:7e:51:68:46:8d:
                    66:4c:06:cb:96:e8:9e:f0:e2:1f:57:23:94:6d:c2:
                    61:98:2d:62:c2:1b:d7:92:e5:16:cb:e6:3f:a9:b9:
                    6e:e6:62:05:21:63:f5:f4:72:87:e5:68:3a:8a:8b:
                    2e:d2:f8:ac:50:22:42:4d:d8:4f:64:7d:1f:63:93:
                    c3:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:34:8D:25:98:11:5E:13:5F:A7:16:1E:66:76:AC:8E:A1:B8:34:F3
            X509v3 Authority Key Identifier:
                keyid:0A:C8:17:FE:48:6A:C7:7B:E9:4E:29:7A:CE:3A:95:CF:27:DF:FB:1A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CsgX_khqx3vpTil6zjqVzyff-xo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/c25098-d7c9-4fa9-a3c1-d7fc8c5d00aa/1/CsgX_khqx3vpTil6zjqVzyff-xo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/c25098-d7c9-4fa9-a3c1-d7fc8c5d00aa/1/CsgX_khqx3vpTil6zjqVzyff-xo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:5b:d8:00:f6:20:2e:f1:8a:c0:90:3d:b0:80:a2:54:bb:59:
         ae:e2:6f:1a:19:57:75:4d:39:72:5c:c5:c2:4c:73:a2:7e:be:
         11:b0:02:4f:12:5a:75:bf:22:8f:00:f7:3b:6c:e2:41:22:fe:
         da:09:ad:4a:44:5f:e0:23:c8:71:d8:9d:e4:ee:1a:a8:43:b1:
         72:22:b0:83:57:d8:16:dd:03:91:a3:42:83:8b:51:7c:d9:ad:
         a7:c0:2e:11:f0:3f:48:c6:ad:ef:2b:8f:11:95:cc:4e:f2:4c:
         e5:f5:e4:fa:87:f0:fa:d5:79:70:14:2b:66:79:8d:08:4e:72:
         19:31:a2:ca:90:d9:6c:f3:cf:e4:dc:5a:50:c7:03:ba:9a:40:
         bc:03:e3:3f:52:40:f8:d6:0d:b5:54:eb:c3:6b:4a:b0:4a:de:
         97:c4:3c:13:70:ae:75:44:e0:f0:3e:c4:92:24:a5:bd:d0:2a:
         1e:f8:87:0c:42:69:8b:ea:6c:7e:52:ab:66:94:2b:7d:2d:a2:
         c6:75:02:5f:58:bb:02:3e:4e:1a:bd:fc:fb:e4:34:00:c6:33:
         4b:33:6b:99:b8:94:3b:bc:26:32:ea:33:7b:ac:53:67:79:9e:
         0d:13:1a:c3:93:f0:88:d1:aa:5a:f3:6f:eb:62:b6:43:49:6d:
         96:df:cd:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----