Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/24db6e0e-696c-4f89-8d48-274559700af5/1/A9DD9F6B65491D90C4E19E9C960252466C2C9D12.mft
File:                     A9DD9F6B65491D90C4E19E9C960252466C2C9D12.mft (raw, json)
Hash identifier:          M9v3VPYp9x8kGpY4nS04f5MuU00R4dj5tbnzioHahkk=
Subject key identifier:   CC:15:21:26:AD:75:85:87:DE:D4:1D:E9:E6:D0:32:34:FA:FF:42:06
Authority key identifier: A9:DD:9F:6B:65:49:1D:90:C4:E1:9E:9C:96:02:52:46:6C:2C:9D:12
Certificate issuer:       /CN=a9dd9f6b65491d90c4e19e9c960252466c2c9d12
Certificate serial:       15CF81C54562EC190A00F1335BE5A0009305462D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qd2fa2VJHZDE4Z6clgJSRmwsnRI.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/24db6e0e-696c-4f89-8d48-274559700af5/1/A9DD9F6B65491D90C4E19E9C960252466C2C9D12.mft
Manifest number:          019F
Signing time:             Sun 13 Apr 2025 13:14:18 +0000
Manifest this update:     Sun 13 Apr 2025 13:09:18 +0000
Manifest next update:     Mon 14 Apr 2025 14:31:18 +0000
Files and hashes:         1: A9DD9F6B65491D90C4E19E9C960252466C2C9D12.crl (hash: DK9g2kIVs4tsRnjlmCpi+LQtPTC4vMcmiFbCxdPTNk0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:cf:81:c5:45:62:ec:19:0a:00:f1:33:5b:e5:a0:00:93:05:46:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a9dd9f6b65491d90c4e19e9c960252466c2c9d12
        Validity
            Not Before: Apr 13 13:09:18 2025 GMT
            Not After : Apr 14 14:31:18 2025 GMT
        Subject: CN=CC152126AD758587DED41DE9E6D03234FAFF4206
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:57:12:d5:a1:7f:82:e3:9e:ba:e8:70:e6:5f:
                    c1:2c:03:12:34:1f:cd:53:1d:9a:68:7e:de:f1:7f:
                    38:af:f6:7b:e2:17:30:c7:6c:f4:14:ac:8e:15:8e:
                    09:c4:74:78:1a:3b:02:a5:9f:85:b0:3f:49:49:57:
                    d3:72:36:1a:b9:00:e7:e1:3d:fe:9d:be:98:20:48:
                    57:f3:df:72:40:ce:78:7e:a9:70:69:44:7a:7d:33:
                    da:16:52:55:b6:67:a8:5f:08:07:b9:f9:cd:e8:9a:
                    36:ad:6f:a4:15:03:6b:6c:ea:1e:a1:90:04:35:17:
                    1d:07:05:bc:46:a3:ef:09:bd:4b:84:ea:b8:0c:bf:
                    29:1c:89:11:e9:8b:1f:21:20:6e:b9:d7:90:8e:4a:
                    ca:ca:1e:54:2a:3b:25:e4:44:52:93:84:e4:85:cb:
                    7b:e3:68:2b:00:a8:82:2a:90:92:a7:26:be:a1:bb:
                    8e:38:98:6c:26:75:b5:78:00:68:14:6f:fd:49:ff:
                    7c:89:97:66:5d:5c:75:75:06:84:f1:d7:04:0c:5c:
                    66:55:fa:4d:60:97:8d:b8:be:4b:84:bd:90:99:54:
                    31:76:b3:89:f5:b6:78:ae:91:c0:08:58:49:f9:64:
                    4c:64:22:c0:65:6e:5b:ac:b2:7d:46:75:a7:51:9a:
                    1c:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:15:21:26:AD:75:85:87:DE:D4:1D:E9:E6:D0:32:34:FA:FF:42:06
            X509v3 Authority Key Identifier:
                keyid:A9:DD:9F:6B:65:49:1D:90:C4:E1:9E:9C:96:02:52:46:6C:2C:9D:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/24db6e0e-696c-4f89-8d48-274559700af5/1/A9DD9F6B65491D90C4E19E9C960252466C2C9D12.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qd2fa2VJHZDE4Z6clgJSRmwsnRI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/24db6e0e-696c-4f89-8d48-274559700af5/1/A9DD9F6B65491D90C4E19E9C960252466C2C9D12.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:10:96:b7:a9:d4:59:00:47:1c:a5:7d:b3:db:f8:49:92:3e:
         b5:32:7a:fd:3e:ec:54:5d:ff:a1:4f:cc:93:61:6d:1c:65:46:
         ad:63:7a:2e:4b:18:1f:f1:59:51:d3:b0:1f:57:b2:33:1e:3a:
         d1:1c:8b:c2:f8:d5:fa:08:f7:7d:ab:0c:2e:ab:62:21:66:f0:
         33:99:2d:8d:25:c6:da:ef:27:2d:6b:a8:12:59:4d:03:66:b5:
         ac:0e:a8:f9:5c:83:2d:f1:ff:38:d4:12:f4:61:66:ee:7e:b0:
         12:80:5b:90:ad:1c:2d:f3:f3:4d:5d:bd:a3:9a:aa:14:c9:a9:
         4a:2a:f6:99:18:fb:80:13:04:a2:c8:dd:a2:3c:e9:09:a1:a9:
         68:a0:d9:ac:78:72:91:22:6a:e5:4e:ca:7e:b8:57:10:12:9d:
         d7:cd:7f:9d:dd:36:40:ac:b4:49:68:d8:d0:02:32:ae:2f:80:
         55:ec:d9:81:9e:89:4a:b4:bf:d9:80:d6:45:bc:82:63:21:ce:
         d9:50:8a:b1:45:d8:41:ea:f4:c0:d7:b2:f9:98:d9:92:19:7a:
         11:41:e1:98:d1:76:94:b9:f7:a1:9f:bb:e8:b4:20:19:6e:de:
         93:e9:d4:58:05:35:6a:a0:22:a0:d2:33:9f:ab:dc:46:c2:d6:
         ba:ad:a2:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----