Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/1/29C9C8CA32A12DE7C686B5240D01173FC43C71FF.mft
File:                     29C9C8CA32A12DE7C686B5240D01173FC43C71FF.mft (raw, json)
Hash identifier:          Sci2y6vFXnnMwLuxglHLvLr5+iVQ8vG//tW8OQQwO90=
Subject key identifier:   18:56:E7:0F:9D:56:CB:15:6D:F5:D8:4B:B3:04:AD:54:7A:E0:8C:AA
Authority key identifier: 29:C9:C8:CA:32:A1:2D:E7:C6:86:B5:24:0D:01:17:3F:C4:3C:71:FF
Certificate issuer:       /CN=29c9c8ca32a12de7c686b5240d01173fc43c71ff
Certificate serial:       4C377DE64F214E8676E6070A981A335B1A8CB794
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KcnIyjKhLefGhrUkDQEXP8Q8cf8.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/1/29C9C8CA32A12DE7C686B5240D01173FC43C71FF.mft
Manifest number:          0442
Signing time:             Sun 13 Apr 2025 01:02:52 +0000
Manifest this update:     Sun 13 Apr 2025 00:57:52 +0000
Manifest next update:     Mon 14 Apr 2025 03:24:52 +0000
Files and hashes:         1: 29C9C8CA32A12DE7C686B5240D01173FC43C71FF.crl (hash: Nb1AVBUcKVcA//zyl1fq2zW+5UxxRGBjjIuzi1pjKMg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:37:7d:e6:4f:21:4e:86:76:e6:07:0a:98:1a:33:5b:1a:8c:b7:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=29c9c8ca32a12de7c686b5240d01173fc43c71ff
        Validity
            Not Before: Apr 13 00:57:52 2025 GMT
            Not After : Apr 14 03:24:52 2025 GMT
        Subject: CN=1856E70F9D56CB156DF5D84BB304AD547AE08CAA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:9e:fc:e1:58:9e:3c:52:e5:76:b7:83:49:5a:
                    b6:e3:1d:54:a2:fc:b7:ff:95:d0:be:87:6d:41:95:
                    dd:43:68:33:cf:dd:1a:bc:cb:99:7a:72:cd:42:5b:
                    0a:29:47:c5:42:77:40:8a:13:af:18:f3:bd:2b:48:
                    e9:50:51:4e:35:6d:f7:c6:9f:d2:11:ff:26:df:42:
                    38:fe:e2:ad:9f:75:08:d4:69:13:d8:42:65:2a:6a:
                    3f:51:1d:41:a0:35:b8:64:e5:45:7b:72:cb:da:7b:
                    cf:68:73:63:e1:76:82:62:2a:05:83:a8:f2:0e:1d:
                    9e:7a:96:5c:e7:86:d1:14:23:5a:f1:76:77:0a:4d:
                    5f:a8:0c:72:c9:32:15:c9:11:a7:58:a1:5d:09:5e:
                    dc:18:b9:ef:56:59:5c:b8:33:ed:6d:c9:bc:8e:84:
                    cf:13:90:8a:5f:38:59:ce:01:db:56:9e:02:89:a5:
                    3c:38:88:a0:72:9b:a1:e7:21:05:1b:c4:45:6f:0c:
                    f3:73:7c:66:7e:7b:0d:a5:4c:9a:6a:5a:65:39:03:
                    73:4d:b7:00:6e:1f:67:d6:4a:b2:6a:b1:e3:50:11:
                    9d:b8:20:41:ae:41:f0:bf:21:77:32:82:96:6f:8a:
                    98:4e:08:ec:21:db:64:c3:cf:e9:75:51:28:d9:70:
                    00:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:56:E7:0F:9D:56:CB:15:6D:F5:D8:4B:B3:04:AD:54:7A:E0:8C:AA
            X509v3 Authority Key Identifier:
                keyid:29:C9:C8:CA:32:A1:2D:E7:C6:86:B5:24:0D:01:17:3F:C4:3C:71:FF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/1/29C9C8CA32A12DE7C686B5240D01173FC43C71FF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KcnIyjKhLefGhrUkDQEXP8Q8cf8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/1/29C9C8CA32A12DE7C686B5240D01173FC43C71FF.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:6e:d9:1c:ba:a1:18:11:3f:c7:fe:26:b7:a2:87:38:38:8c:
         6c:b5:6c:78:fb:63:05:e6:5f:d2:9c:fb:a9:67:7f:06:7d:b5:
         fb:01:01:d8:b8:9f:a4:b9:f8:6f:fe:7a:65:5f:59:ae:3b:8e:
         7b:f7:69:3a:2b:76:78:f3:ee:9f:7e:d3:1b:63:a7:0f:73:cc:
         81:23:5b:97:f0:d7:66:b9:2b:15:e2:e4:f5:83:25:d4:ec:b3:
         76:af:3d:a8:e7:ea:d1:f1:bd:e7:4a:c5:92:4f:af:4b:ac:00:
         c0:c5:0c:9c:58:2b:06:be:15:de:0a:29:83:78:6f:79:96:c9:
         e5:67:b8:91:b7:7d:4a:a2:25:0f:59:a1:3e:37:ff:d0:b4:5b:
         47:e7:da:cc:f3:d3:95:2e:b0:27:38:ad:e5:ca:52:0a:8c:23:
         86:5f:a2:2a:80:3a:5f:1a:63:d1:23:3e:da:18:c6:1e:60:4e:
         4c:ba:98:12:44:7c:44:de:d4:94:fc:73:1c:ad:7a:79:9d:47:
         a5:31:80:6a:57:d0:24:13:7a:81:53:38:4e:07:03:98:e1:9a:
         b8:68:e1:33:d8:29:48:58:31:9f:c6:0e:82:8d:46:61:24:df:
         a5:b9:5a:9b:13:8e:65:78:a9:9b:68:ec:88:03:c5:ba:ba:af:
         4d:7b:5c:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----