Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/9f54a6-933f-47de-8726-eddf527e8f2d/1/xcSzrlnZgfJQzIfatZeFSr7XowA.mft
File:                     xcSzrlnZgfJQzIfatZeFSr7XowA.mft (raw, json)
Hash identifier:          0oZtPWLCfbxR1da4J/5u0yEd8uOKY2ANGHMmzZAGRDI=
Subject key identifier:   92:79:0A:14:52:FD:BC:A9:0C:2C:15:47:5F:5B:DD:F3:4B:A3:BD:1D
Authority key identifier: C5:C4:B3:AE:59:D9:81:F2:50:CC:87:DA:B5:97:85:4A:BE:D7:A3:00
Certificate issuer:       /CN=c5c4b3ae59d981f250cc87dab597854abed7a300
Certificate serial:       01962F06447CADB7E35439CBE6DD6982945B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xcSzrlnZgfJQzIfatZeFSr7XowA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2e/9f54a6-933f-47de-8726-eddf527e8f2d/1/xcSzrlnZgfJQzIfatZeFSr7XowA.mft
Manifest number:          0403
Signing time:             Sun 13 Apr 2025 12:01:01 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:01 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:01 +0000
Files and hashes:         1: tSYSYm63yj3qobuZYMSr1LAsH4E.roa (hash: e9vbUkUz5x9f5ya8J4QgHE0l9ibgPIgGHQ86whMQdU8=)
                          2: xcSzrlnZgfJQzIfatZeFSr7XowA.crl (hash: K1Z4xX76VOUUldnA8ZX/8iz7rrcFVYCuVl8sPOGrt4I=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:44:7c:ad:b7:e3:54:39:cb:e6:dd:69:82:94:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c5c4b3ae59d981f250cc87dab597854abed7a300
        Validity
            Not Before: Apr 13 12:01:01 2025 GMT
            Not After : Apr 14 12:01:01 2025 GMT
        Subject: CN=92790a1452fdbca90c2c15475f5bddf34ba3bd1d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:8e:bc:e0:a7:e8:cd:5d:56:99:90:a0:b0:bc:
                    f8:d9:35:c9:6f:6d:4a:7f:02:a3:09:33:ba:dc:3d:
                    49:5d:0b:9d:a6:53:7e:4c:99:d7:18:dd:d6:5a:da:
                    c0:fd:d9:de:ca:3d:12:30:35:f3:7f:dc:40:b3:df:
                    30:b9:71:81:17:c8:3b:5a:12:ff:de:f2:f0:d6:03:
                    7a:16:4b:b1:b1:d6:9c:fc:1c:30:d9:01:6e:f3:4a:
                    53:5a:ae:c2:49:ee:60:bc:34:ec:9d:fc:87:1e:46:
                    0a:99:cf:78:8c:7d:6a:dd:89:06:6a:0e:d2:60:e1:
                    a4:1f:20:ed:6e:05:40:8e:24:0d:a1:e9:e6:cf:6c:
                    8d:1a:14:6a:e4:eb:2b:29:0b:3b:76:c2:05:4b:4f:
                    76:05:6e:02:0c:83:d7:44:69:67:91:bc:08:34:7f:
                    f9:cd:19:7d:90:75:07:85:20:fc:9e:f0:8e:7d:7f:
                    bf:0d:48:13:91:fd:52:88:2c:b3:90:ac:00:30:2d:
                    12:9b:0f:05:c7:ba:02:32:4c:a7:c0:2f:1e:43:80:
                    fd:7c:fe:5c:07:6a:c9:da:23:54:be:94:b9:b6:6a:
                    18:31:8d:c5:20:24:dc:8f:75:f6:25:27:63:0d:2d:
                    5c:9a:24:62:3e:57:5c:54:89:55:6c:5f:26:1e:6f:
                    d7:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:79:0A:14:52:FD:BC:A9:0C:2C:15:47:5F:5B:DD:F3:4B:A3:BD:1D
            X509v3 Authority Key Identifier:
                keyid:C5:C4:B3:AE:59:D9:81:F2:50:CC:87:DA:B5:97:85:4A:BE:D7:A3:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xcSzrlnZgfJQzIfatZeFSr7XowA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/9f54a6-933f-47de-8726-eddf527e8f2d/1/xcSzrlnZgfJQzIfatZeFSr7XowA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/9f54a6-933f-47de-8726-eddf527e8f2d/1/xcSzrlnZgfJQzIfatZeFSr7XowA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:87:fd:61:57:ef:35:c0:71:4a:90:bf:53:93:83:16:6b:a4:
         3f:3d:d9:e5:d0:de:f2:c5:cd:3a:d8:ff:52:84:18:d4:c1:7b:
         2f:d6:44:0f:be:26:86:c7:59:66:89:c1:e2:75:c3:f2:6b:db:
         6e:f0:dd:14:8c:85:26:a7:19:ba:0c:06:64:19:a6:d7:e2:7d:
         9f:28:32:d9:c7:bd:27:bf:55:89:05:bb:d5:ed:a5:2b:4c:50:
         a3:28:ec:2d:0a:73:b6:ca:11:c9:f7:1a:61:81:3c:cd:c2:56:
         f0:5b:18:2b:b6:ab:e6:97:48:92:6e:b6:fd:ed:d6:fa:14:ba:
         6f:84:4d:fc:e7:f6:1e:c0:90:ba:71:13:6f:9b:4c:d1:9c:5c:
         ec:86:bb:46:03:e2:eb:c1:fb:dd:1c:ff:0a:d9:48:c3:7d:bc:
         41:68:c4:b1:c0:5b:d9:74:13:66:9f:00:c6:66:2c:25:a8:35:
         23:58:17:2a:ed:fe:da:f0:36:a1:7a:fa:39:f2:b1:e7:c4:8f:
         31:48:db:c9:93:f7:6c:94:79:c3:0d:ca:cd:ee:8f:92:ed:16:
         b6:a1:d4:d7:ed:af:98:9f:95:28:bb:05:13:d5:4a:af:33:02:
         b5:37:0d:68:64:7c:26:27:4d:2f:d9:b9:c8:88:53:3e:f2:1f:
         7a:0b:04:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----