Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/a50372-da39-482e-9ad4-30becfc1b311/1/CX4FUW_IeTQGhouBCePARLcCcWw.mft
File:                     CX4FUW_IeTQGhouBCePARLcCcWw.mft (raw, json)
Hash identifier:          VPrt8L6GdYhChjQK2NxkK3Z/fiuIPkG7iwkflkF//lw=
Subject key identifier:   A4:26:73:44:97:92:0F:83:12:84:0D:93:39:57:07:05:A5:AA:DC:C1
Authority key identifier: 09:7E:05:51:6F:C8:79:34:06:86:8B:81:09:E3:C0:44:B7:02:71:6C
Certificate issuer:       /CN=097e05516fc8793406868b8109e3c044b702716c
Certificate serial:       01962F0640ADC1E4A367A2CE101FE869D861
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CX4FUW_IeTQGhouBCePARLcCcWw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c0/a50372-da39-482e-9ad4-30becfc1b311/1/CX4FUW_IeTQGhouBCePARLcCcWw.mft
Manifest number:          14EB
Signing time:             Sun 13 Apr 2025 12:01:00 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:00 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:00 +0000
Files and hashes:         1: CX4FUW_IeTQGhouBCePARLcCcWw.crl (hash: I+gtu6uS1tRNQTc03O/6JwpPG75blazXefbyefbiAnU=)
                          2: LYov3s-RBNegs9sCI5mzwI0B-OM.roa (hash: Q5JNZZskubtUF3draKhRYhTL06FaQ8LhpyPNSVMlulo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:40:ad:c1:e4:a3:67:a2:ce:10:1f:e8:69:d8:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=097e05516fc8793406868b8109e3c044b702716c
        Validity
            Not Before: Apr 13 12:01:00 2025 GMT
            Not After : Apr 14 12:01:00 2025 GMT
        Subject: CN=a426734497920f8312840d9339570705a5aadcc1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fc:a2:71:cc:fe:64:53:ae:63:93:4a:f5:93:d6:
                    72:28:24:09:d5:8a:ca:38:84:1b:2e:52:25:c5:77:
                    5e:2d:07:8c:85:a9:90:21:9c:44:e1:98:b3:af:c0:
                    99:c9:d3:03:25:af:c4:88:1e:85:df:6b:39:29:3b:
                    c1:b2:fd:ab:f5:a4:91:11:a4:61:8a:a6:95:f9:4d:
                    52:a1:69:b3:3c:92:e1:22:07:b3:c6:80:f9:53:24:
                    40:7f:2a:85:a8:8c:fb:42:c4:05:aa:07:6e:d6:94:
                    bc:0f:5e:b5:cc:17:9e:b9:2d:92:b7:a0:8c:cd:d3:
                    2c:07:2d:42:bd:31:37:f3:cd:0f:cf:cb:53:1f:d7:
                    a3:17:8c:7a:e4:87:48:91:04:08:39:49:e2:10:57:
                    ce:ca:d0:9e:5b:8b:58:0a:14:a9:d1:4e:2a:67:9f:
                    f5:c4:05:d7:ad:c0:64:11:4b:36:a5:18:53:38:0a:
                    90:3d:f5:db:6f:4d:ea:3b:b5:4b:15:38:64:04:e0:
                    4d:c0:72:48:f1:e4:be:79:2d:01:5f:a0:bd:5b:43:
                    d8:fb:a6:d7:ca:d2:6a:2d:13:49:e1:21:d1:76:bd:
                    eb:fa:8d:3f:fe:11:3f:99:49:c4:5d:5d:79:58:f4:
                    c3:d6:02:a1:55:b4:63:e2:57:fa:df:84:7b:11:bc:
                    0e:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:26:73:44:97:92:0F:83:12:84:0D:93:39:57:07:05:A5:AA:DC:C1
            X509v3 Authority Key Identifier:
                keyid:09:7E:05:51:6F:C8:79:34:06:86:8B:81:09:E3:C0:44:B7:02:71:6C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CX4FUW_IeTQGhouBCePARLcCcWw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/a50372-da39-482e-9ad4-30becfc1b311/1/CX4FUW_IeTQGhouBCePARLcCcWw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/a50372-da39-482e-9ad4-30becfc1b311/1/CX4FUW_IeTQGhouBCePARLcCcWw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:a9:cf:b8:eb:29:bc:14:c1:ee:a2:ea:36:8c:59:02:12:4d:
         4d:d9:d5:ba:4f:2a:ca:57:95:56:dc:ca:52:d2:c1:11:e3:6e:
         41:6b:a3:57:c8:2c:9b:49:05:62:58:96:ff:28:fe:f0:1a:b1:
         6e:a0:25:ab:2f:75:15:81:f9:26:2f:8d:0c:db:74:89:1f:57:
         d7:3e:a8:2f:a8:14:f5:1d:4f:95:83:3b:a5:c3:9b:81:d4:58:
         a9:88:7a:63:d4:b0:8e:a7:9a:d2:a9:8c:9d:fc:72:67:48:db:
         b4:10:3c:c7:0a:eb:9c:db:d5:84:fc:f0:86:c7:53:46:99:fe:
         df:6a:d2:0d:62:db:5d:14:23:8b:fc:84:51:b7:d0:44:d1:a8:
         b2:2a:2a:9e:9f:ed:a2:f9:3b:3c:da:bb:db:fc:7d:a8:73:19:
         d7:27:cf:5d:df:8d:34:0d:8f:06:b8:9d:23:25:a6:90:68:1f:
         a4:c3:0d:59:f5:03:72:ad:c3:7f:3c:c1:c4:f3:f0:bf:63:dc:
         0b:ae:a2:72:d2:5f:40:92:23:f7:05:a2:81:f8:c2:c8:df:40:
         c0:7f:35:50:b2:e5:ac:31:47:11:06:e4:c3:18:1b:e6:1a:73:
         f4:af:1a:33:15:82:ed:1b:a3:f6:a3:a9:71:98:8b:ae:f3:ea:
         b6:55:48:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----