Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/e92666-4526-47c1-b2ba-63728b0fa108/1/xTsinnPOa7GW1lwL7xGVYGV6NyA.mft
File:                     xTsinnPOa7GW1lwL7xGVYGV6NyA.mft (raw, json)
Hash identifier:          RuE0U87bz9hQUv6qDyeJb3gxHGPgoP5ZBHNiZ7tr4/I=
Subject key identifier:   C6:BF:89:33:FA:76:46:59:CD:52:0D:96:37:A5:43:2C:C0:C8:09:7F
Authority key identifier: C5:3B:22:9E:73:CE:6B:B1:96:D6:5C:0B:EF:11:95:60:65:7A:37:20
Certificate issuer:       /CN=c53b229e73ce6bb196d65c0bef119560657a3720
Certificate serial:       01962E2B4852350224A5183FFC37242B077F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xTsinnPOa7GW1lwL7xGVYGV6NyA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d9/e92666-4526-47c1-b2ba-63728b0fa108/1/xTsinnPOa7GW1lwL7xGVYGV6NyA.mft
Manifest number:          0954
Signing time:             Sun 13 Apr 2025 08:01:50 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:50 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:50 +0000
Files and hashes:         1: gzZahYqckgC0Uj_Nklh90nWZtP0.roa (hash: oNQlnk2/mO4eMuiG7Nb/MiiGpF0Vc9lIJ1vyvcm+wlA=)
                          2: xTsinnPOa7GW1lwL7xGVYGV6NyA.crl (hash: EQ6Pn0nnixRQf9D9WuhouNbJgbOG4JYO1LNfVRA0DfI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2b:48:52:35:02:24:a5:18:3f:fc:37:24:2b:07:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c53b229e73ce6bb196d65c0bef119560657a3720
        Validity
            Not Before: Apr 13 08:01:50 2025 GMT
            Not After : Apr 14 08:01:50 2025 GMT
        Subject: CN=c6bf8933fa764659cd520d9637a5432cc0c8097f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:72:18:91:e2:8b:40:39:3b:2d:bb:30:90:77:
                    78:26:81:71:75:24:55:e1:0b:c4:02:a7:73:52:cc:
                    c7:29:28:e1:13:89:c2:37:55:d7:48:54:a7:f8:21:
                    14:9b:10:2c:a0:e6:23:87:ba:9a:25:19:03:18:3e:
                    2d:ae:23:b1:2b:31:f8:53:81:e4:a9:71:6c:5e:6d:
                    36:c9:8e:50:d5:e2:ed:8c:cb:89:b4:74:d1:82:b3:
                    2a:86:94:b1:a1:e0:b2:91:b7:0c:87:c2:5f:7d:14:
                    b5:56:c9:17:81:ac:f6:ba:d2:d5:2e:50:19:db:71:
                    23:f0:8b:43:38:23:72:2c:9b:8e:d5:2d:5f:f5:65:
                    c1:d3:6e:6a:b0:4b:6a:00:70:c2:a7:a2:2c:99:6b:
                    97:8f:55:54:3f:24:3b:ac:ee:1d:72:60:82:fc:86:
                    a8:b0:cc:06:23:77:aa:91:72:67:32:ef:76:d8:93:
                    0a:f0:e2:21:bf:30:3a:7c:2b:c4:70:94:69:e0:68:
                    ce:4d:99:42:16:eb:4f:1b:a6:1b:e3:86:86:18:dd:
                    34:15:67:6e:62:fb:91:1d:09:f3:67:93:1d:13:3c:
                    f6:b5:25:8c:df:72:69:51:b5:70:68:53:10:b9:a3:
                    29:ff:2f:a9:a2:ff:7d:c7:08:cc:1c:a1:74:bb:53:
                    59:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:BF:89:33:FA:76:46:59:CD:52:0D:96:37:A5:43:2C:C0:C8:09:7F
            X509v3 Authority Key Identifier:
                keyid:C5:3B:22:9E:73:CE:6B:B1:96:D6:5C:0B:EF:11:95:60:65:7A:37:20

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xTsinnPOa7GW1lwL7xGVYGV6NyA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/e92666-4526-47c1-b2ba-63728b0fa108/1/xTsinnPOa7GW1lwL7xGVYGV6NyA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/e92666-4526-47c1-b2ba-63728b0fa108/1/xTsinnPOa7GW1lwL7xGVYGV6NyA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:20:6d:b4:fa:c7:84:ea:4a:6e:ae:cd:6c:94:78:a9:72:f3:
         7d:89:6a:b0:e7:0a:3d:11:d8:dc:dc:6d:e2:d6:b7:67:cf:7d:
         c4:d6:49:12:90:c1:4d:b5:f1:8e:a6:f6:1e:d8:1f:2c:da:f8:
         8e:7e:29:ed:3b:c0:0f:69:bf:b2:cd:65:37:02:eb:98:ec:c6:
         22:18:e9:91:a6:df:af:87:8a:5f:bd:b3:98:01:b9:e9:4c:ce:
         fe:4a:74:65:f1:9a:dd:d2:ab:48:2d:b4:cb:3e:9c:92:20:ad:
         27:a4:ca:c2:82:5d:a3:cf:2e:2a:92:50:70:ac:44:81:41:f0:
         35:27:62:1d:df:f3:e4:58:d3:0f:1b:28:78:76:8d:7a:28:6e:
         6e:6e:44:9e:da:fb:53:04:51:ef:b2:fc:6b:e7:99:4a:23:15:
         7d:d5:0f:3f:70:8e:dc:19:e2:dc:d3:5c:b5:55:91:62:fa:d4:
         99:95:29:4d:75:b2:7f:9d:74:9c:ef:8d:10:cc:89:12:0b:35:
         22:a7:87:11:b4:ec:1c:81:96:45:31:89:aa:17:e4:b3:69:af:
         f9:0a:b7:6e:d1:a1:5b:83:25:37:d1:b4:11:d9:2a:1e:db:73:
         d6:65:28:a8:cc:5c:57:ea:28:ea:44:7f:25:91:fe:5b:b2:28:
         37:95:55:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----