Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/23d5f682-b51b-4812-b8b1-430e38683748/0/BB0F8437DE6BB251821A7A5FB8111376F1709023.mft
File:                     BB0F8437DE6BB251821A7A5FB8111376F1709023.mft (raw, json)
Hash identifier:          NWhdbK9yBQQ3wL6yFOSTFRSAwS9zTCyUMGRIyqnq25E=
Subject key identifier:   12:66:2D:7A:63:E3:B0:2C:67:15:84:EC:F3:FC:98:1F:F8:E0:71:25
Authority key identifier: BB:0F:84:37:DE:6B:B2:51:82:1A:7A:5F:B8:11:13:76:F1:70:90:23
Certificate issuer:       /CN=bb0f8437de6bb251821a7a5fb8111376f1709023
Certificate serial:       33FDB48A65C46853BC062198F078AA3A978FE8C1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uw-EN95rslGCGnpfuBETdvFwkCM.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/23d5f682-b51b-4812-b8b1-430e38683748/0/BB0F8437DE6BB251821A7A5FB8111376F1709023.mft
Manifest number:          039A
Signing time:             Sun 13 Apr 2025 09:53:21 +0000
Manifest this update:     Sun 13 Apr 2025 09:48:21 +0000
Manifest next update:     Mon 14 Apr 2025 10:14:21 +0000
Files and hashes:         1: BB0F8437DE6BB251821A7A5FB8111376F1709023.crl (hash: siwwZsGiT0etRR2xu8FWDqG7vufIQvKSQThzFI6qWv4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:fd:b4:8a:65:c4:68:53:bc:06:21:98:f0:78:aa:3a:97:8f:e8:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bb0f8437de6bb251821a7a5fb8111376f1709023
        Validity
            Not Before: Apr 13 09:48:21 2025 GMT
            Not After : Apr 14 10:14:21 2025 GMT
        Subject: CN=12662D7A63E3B02C671584ECF3FC981FF8E07125
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:76:49:1e:ff:0e:76:69:18:65:21:aa:4a:3f:
                    bb:1c:b6:47:3f:32:85:c0:d9:df:2e:34:2a:60:6c:
                    7d:91:22:cc:e5:9e:45:d9:e3:db:36:2d:32:f2:71:
                    b8:63:ef:b6:20:84:0c:dd:11:f3:0c:62:bb:1d:57:
                    4a:a4:c4:68:25:72:cf:4b:97:ae:92:43:d1:63:f6:
                    42:79:ea:f2:a3:31:13:43:94:9b:13:91:bc:df:fe:
                    53:b9:ce:0c:c9:5b:12:72:6b:73:ff:06:c0:40:06:
                    e9:66:28:d1:29:41:b2:e0:b1:17:e5:b4:1b:1d:1e:
                    db:3c:4a:14:04:c2:99:41:4d:54:61:21:bb:a9:88:
                    d7:2a:fc:c3:d1:94:b7:37:56:bb:7f:c3:c4:27:fb:
                    cc:70:0a:46:5e:08:2d:bb:f0:69:a8:e8:f4:9e:00:
                    aa:3a:87:86:af:7f:ec:7d:44:04:a4:bd:4c:44:a9:
                    31:4a:8a:8d:d5:47:85:ea:dc:e7:9f:10:ad:c5:85:
                    59:82:f3:c6:b8:7b:a0:11:78:ff:54:42:56:12:d0:
                    92:0f:25:b6:be:5e:73:b1:6e:93:0a:b0:34:04:e6:
                    c2:3b:32:cc:79:4d:f3:c0:f6:12:a8:83:53:b6:a9:
                    ef:db:c2:b2:aa:19:8e:d8:c1:db:68:38:c0:3b:58:
                    67:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:66:2D:7A:63:E3:B0:2C:67:15:84:EC:F3:FC:98:1F:F8:E0:71:25
            X509v3 Authority Key Identifier:
                keyid:BB:0F:84:37:DE:6B:B2:51:82:1A:7A:5F:B8:11:13:76:F1:70:90:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/23d5f682-b51b-4812-b8b1-430e38683748/0/BB0F8437DE6BB251821A7A5FB8111376F1709023.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uw-EN95rslGCGnpfuBETdvFwkCM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/23d5f682-b51b-4812-b8b1-430e38683748/0/BB0F8437DE6BB251821A7A5FB8111376F1709023.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:92:d3:7c:b6:46:82:1e:d2:09:98:ff:e0:e5:36:dc:ce:f4:
         53:07:02:7a:8b:d9:43:43:a7:70:a3:94:71:30:0e:47:78:11:
         50:60:58:de:52:ea:7a:94:c7:be:c8:77:a0:bf:8b:dd:1d:64:
         2f:92:e4:3c:e6:e4:f6:6c:76:1e:38:22:0f:a4:5b:04:8d:87:
         38:65:31:b3:7f:5d:ce:29:3b:17:57:3b:d2:8a:40:93:2f:c2:
         af:5d:f2:27:65:fd:6a:ba:a1:c0:01:51:8e:fb:de:b1:b7:d8:
         94:3b:2e:d9:05:61:7e:b4:11:a9:0b:7d:08:77:79:41:b1:82:
         03:5f:d5:14:22:1a:9e:be:aa:0c:80:3e:ee:75:b9:f9:44:da:
         3a:71:fe:ac:8c:56:8e:57:6d:7f:11:59:e4:45:c6:dd:4f:59:
         fc:85:96:91:3d:f4:f6:6c:34:d5:0d:02:22:62:2c:61:34:23:
         74:ab:ce:88:f7:34:dd:6a:cb:05:fd:b8:f5:49:99:05:68:4e:
         b8:ea:8e:e8:93:3b:09:38:e6:68:96:a8:83:b1:ff:56:c0:fc:
         ce:77:e1:9d:cc:7a:8d:12:9b:07:eb:2c:85:6e:ee:6b:1d:52:
         80:ff:d6:3e:d3:e7:d9:ae:51:8b:d5:68:c9:38:08:56:3f:b0:
         d0:a1:8d:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----