Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/23cdf9ca-dd64-4f31-abf3-0f32b8e7fe79/0/AD7BDA1D05907A5FB9FA4E7E3CFB4B9AE21287C2.mft
File:                     AD7BDA1D05907A5FB9FA4E7E3CFB4B9AE21287C2.mft (raw, json)
Hash identifier:          ZOndU8w2vrs1kF2GkM+Oo4RcbBX+vt3+83kBEYv/oxY=
Subject key identifier:   7A:B4:59:83:C2:7D:98:AA:B4:9F:41:6B:71:80:C2:F0:15:1F:A6:39
Authority key identifier: AD:7B:DA:1D:05:90:7A:5F:B9:FA:4E:7E:3C:FB:4B:9A:E2:12:87:C2
Certificate issuer:       /CN=ad7bda1d05907a5fb9fa4e7e3cfb4b9ae21287c2
Certificate serial:       27AFDDE3FD5673A3A5BE08F402979E63BEC9887F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rXvaHQWQel-5-k5-PPtLmuISh8I.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/23cdf9ca-dd64-4f31-abf3-0f32b8e7fe79/0/AD7BDA1D05907A5FB9FA4E7E3CFB4B9AE21287C2.mft
Manifest number:          0120
Signing time:             Sun 13 Apr 2025 02:41:49 +0000
Manifest this update:     Sun 13 Apr 2025 02:36:49 +0000
Manifest next update:     Mon 14 Apr 2025 06:08:49 +0000
Files and hashes:         1: AD7BDA1D05907A5FB9FA4E7E3CFB4B9AE21287C2.crl (hash: vK0K0ebTHf6w9WZGAtsq3OO36gWIdYcDRusbz5VZ4+Q=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:af:dd:e3:fd:56:73:a3:a5:be:08:f4:02:97:9e:63:be:c9:88:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ad7bda1d05907a5fb9fa4e7e3cfb4b9ae21287c2
        Validity
            Not Before: Apr 13 02:36:49 2025 GMT
            Not After : Apr 14 06:08:49 2025 GMT
        Subject: CN=7AB45983C27D98AAB49F416B7180C2F0151FA639
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:e5:70:43:40:e6:c2:5b:98:4a:2c:ec:aa:d0:
                    10:5c:9a:9c:e1:45:e4:d1:3b:6f:f4:bf:6a:61:8d:
                    f0:54:48:33:84:a9:da:d8:8b:97:bd:1d:13:18:ef:
                    c9:78:73:62:9f:ee:93:c8:da:ec:4a:e5:39:76:76:
                    03:04:18:b5:11:c3:e1:b9:fc:a3:8b:5b:7a:99:4f:
                    a3:d0:c8:26:78:ee:cf:eb:be:99:b0:0f:2d:6a:68:
                    ce:c4:f2:14:20:69:8d:3b:9b:33:87:48:3c:56:a9:
                    ef:2c:74:7b:b9:45:d4:f7:81:5b:ed:c2:f2:60:5a:
                    b7:ab:3d:9e:12:34:4c:dd:31:51:6c:63:07:d7:01:
                    22:bc:3c:81:ff:72:b9:80:40:b2:5c:83:27:fe:fc:
                    3e:e5:a1:37:66:3f:a9:67:69:38:f9:a1:d9:63:f6:
                    bb:50:b1:52:b1:9f:f3:e0:8f:87:72:bd:94:c2:3a:
                    a8:64:31:91:3f:a4:54:b3:58:ee:b2:1e:64:24:fe:
                    33:98:be:e1:7b:14:36:15:43:78:77:13:e1:42:97:
                    be:a9:1a:c3:a3:0e:69:a8:ed:2c:00:fe:86:62:d7:
                    67:82:dd:f3:6f:05:64:7c:7e:ac:e2:ec:ce:77:3a:
                    28:85:7c:38:df:aa:8c:4d:7c:d4:a4:c7:fe:94:2f:
                    2f:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:B4:59:83:C2:7D:98:AA:B4:9F:41:6B:71:80:C2:F0:15:1F:A6:39
            X509v3 Authority Key Identifier:
                keyid:AD:7B:DA:1D:05:90:7A:5F:B9:FA:4E:7E:3C:FB:4B:9A:E2:12:87:C2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/23cdf9ca-dd64-4f31-abf3-0f32b8e7fe79/0/AD7BDA1D05907A5FB9FA4E7E3CFB4B9AE21287C2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rXvaHQWQel-5-k5-PPtLmuISh8I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/23cdf9ca-dd64-4f31-abf3-0f32b8e7fe79/0/AD7BDA1D05907A5FB9FA4E7E3CFB4B9AE21287C2.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:cb:48:4b:df:4e:3d:35:13:e9:a4:de:f1:c8:51:d6:9a:d0:
         16:0b:2e:b9:a6:f2:3a:db:e3:22:d8:b1:64:19:20:2e:a0:1a:
         0f:62:ba:52:e8:dc:14:1b:43:4e:7a:87:22:41:7f:2b:ba:53:
         a7:55:fa:00:51:30:ef:27:71:01:85:02:75:cd:24:fa:12:c0:
         42:ed:76:c3:09:e4:ce:9b:f1:c3:62:fb:d8:39:51:26:f5:f6:
         1b:69:c5:87:f4:d3:92:0d:c9:b1:88:22:03:15:cb:3e:14:29:
         a0:34:9b:8e:93:90:84:d4:75:f3:05:2e:2b:8d:70:b0:a7:6a:
         86:f4:90:e3:9f:e1:37:cb:41:8c:9b:d3:df:74:fd:a3:ed:fb:
         e8:c5:82:86:2c:ec:77:99:d0:54:a2:e9:9d:cb:84:87:26:6e:
         86:f4:fd:a9:40:c7:3d:0b:3b:07:17:35:c9:0d:ac:dd:4f:cf:
         e2:45:f1:b9:e3:04:4b:68:ea:fb:01:4c:c5:f8:97:c8:fc:0d:
         1d:88:e5:bf:e4:a6:50:67:bb:e3:08:77:9f:b0:39:29:8e:d4:
         54:99:56:e5:cf:d1:99:b7:de:06:c6:9d:9a:f3:24:d3:19:8a:
         1d:54:1a:f6:05:2d:68:d0:d1:2d:d8:1c:7f:32:7f:bd:d0:80:
         7c:fc:ba:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----