Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/22cf8ba7-cb02-418b-be04-4d9f3a07e950/0/74E91965A809D1AC5AA0F0D05506ACB0DDB02AB8.mft
File:                     74E91965A809D1AC5AA0F0D05506ACB0DDB02AB8.mft (raw, json)
Hash identifier:          ZU9wipl2Z/w8gI00dlDYQCa34NT1MU+/OlUg9pJjvBI=
Subject key identifier:   68:0F:10:6B:47:CC:A9:18:3A:42:4A:AC:F9:C3:75:A8:99:E0:85:CA
Authority key identifier: 74:E9:19:65:A8:09:D1:AC:5A:A0:F0:D0:55:06:AC:B0:DD:B0:2A:B8
Certificate issuer:       /CN=74e91965a809d1ac5aa0f0d05506acb0ddb02ab8
Certificate serial:       418E7354076A9033C54B406C6A70B903A69CE4D5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dOkZZagJ0axaoPDQVQassN2wKrg.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/22cf8ba7-cb02-418b-be04-4d9f3a07e950/0/74E91965A809D1AC5AA0F0D05506ACB0DDB02AB8.mft
Manifest number:          E7
Signing time:             Sun 13 Apr 2025 11:28:51 +0000
Manifest this update:     Sun 13 Apr 2025 11:23:51 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:51 +0000
Files and hashes:         1: 74E91965A809D1AC5AA0F0D05506ACB0DDB02AB8.crl (hash: Fl/vszAxWjCnTpaA7dXoqmXZ6yvmsn+SyqQdAbq0j0g=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:8e:73:54:07:6a:90:33:c5:4b:40:6c:6a:70:b9:03:a6:9c:e4:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74e91965a809d1ac5aa0f0d05506acb0ddb02ab8
        Validity
            Not Before: Apr 13 11:23:51 2025 GMT
            Not After : Apr 14 14:01:51 2025 GMT
        Subject: CN=680F106B47CCA9183A424AACF9C375A899E085CA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:6b:96:0b:97:53:bb:16:0a:a3:b2:67:fe:d7:
                    b9:76:25:26:b1:c5:74:5a:56:83:6a:a1:29:af:b5:
                    a8:9f:5a:51:f6:7a:2a:6d:7a:8f:2e:ee:b9:74:18:
                    cd:58:2e:43:38:de:97:54:b8:30:9c:d0:33:e2:09:
                    e2:2a:cd:76:0a:aa:dd:df:30:db:29:81:6d:d5:f2:
                    69:6f:d5:45:2e:75:f8:e8:1e:aa:7b:b2:1c:97:77:
                    68:e1:68:28:37:3c:2d:ad:7e:a1:75:94:98:2a:c5:
                    56:f2:5e:cd:3d:a8:a9:8b:44:12:4d:d8:23:45:7d:
                    fa:b9:f7:7e:25:37:87:5c:2c:b9:b6:46:7d:a5:96:
                    fc:f7:f1:1c:d2:22:b7:57:66:b3:18:c5:c0:2e:bc:
                    08:fa:06:80:21:6b:dd:1d:4e:ba:ca:e2:12:ee:3e:
                    83:ca:49:f3:25:b4:57:5b:09:3d:b9:03:f7:9b:64:
                    ac:a5:7d:89:e0:04:52:fc:07:9c:d2:85:85:f2:ce:
                    e5:c9:34:c6:d2:51:1b:7b:06:f3:df:63:7d:11:7a:
                    b7:f6:8b:52:cb:eb:02:b8:45:92:fd:e4:8b:76:98:
                    57:62:5d:3d:ef:09:32:f7:0d:8c:55:3a:f5:b5:18:
                    01:8f:f2:1c:12:32:40:d7:34:ad:68:bc:16:02:a5:
                    7a:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:0F:10:6B:47:CC:A9:18:3A:42:4A:AC:F9:C3:75:A8:99:E0:85:CA
            X509v3 Authority Key Identifier:
                keyid:74:E9:19:65:A8:09:D1:AC:5A:A0:F0:D0:55:06:AC:B0:DD:B0:2A:B8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/22cf8ba7-cb02-418b-be04-4d9f3a07e950/0/74E91965A809D1AC5AA0F0D05506ACB0DDB02AB8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dOkZZagJ0axaoPDQVQassN2wKrg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/22cf8ba7-cb02-418b-be04-4d9f3a07e950/0/74E91965A809D1AC5AA0F0D05506ACB0DDB02AB8.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:ad:c6:78:6e:39:79:6d:1c:2a:03:d6:e9:2c:ba:f1:6f:c2:
         be:3d:2c:6d:81:4b:1a:c4:0d:d2:31:70:b7:1c:80:8b:dd:e1:
         03:ef:39:46:c8:96:00:ca:d2:6f:c5:25:da:fe:6c:f4:b4:7e:
         22:35:cb:68:90:b3:ef:0d:97:39:f3:f0:b4:b4:5a:1a:d8:37:
         2f:c3:d8:61:af:50:3c:4b:9e:0f:16:90:33:5a:68:43:09:24:
         b9:a9:17:80:3f:11:12:ed:1b:06:cc:f8:33:31:1f:cd:31:5d:
         0f:61:61:4f:89:11:7f:be:ce:0c:61:b8:c0:3f:f5:b8:6a:f2:
         6d:40:39:ea:42:ce:43:63:53:b6:58:57:12:8e:89:bf:5b:9d:
         62:4e:d2:65:0c:5a:f1:7f:dc:4b:c4:20:6f:f0:84:e1:cb:ce:
         e5:7f:ab:99:c1:37:c1:f9:d3:fa:07:21:63:cd:e1:e9:2a:c3:
         87:02:65:57:63:d9:94:46:d3:3f:8d:14:89:9c:fd:f7:f7:b8:
         9b:e1:a4:6f:92:c6:f1:35:2e:cd:62:55:25:f4:35:4c:9b:b6:
         b7:ff:b8:a6:24:ff:e0:4c:11:b3:ba:40:36:df:dc:93:ec:f7:
         c6:f9:c6:d4:7d:de:7f:01:ca:e8:12:a1:ab:a2:d0:4f:44:9d:
         56:98:f8:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----