Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/2f0d4b4e-9f74-4df4-bf5e-0929096dbe04/0/B5703F6700E832900122BBE6A5086441EB37BD2C.mft
File:                     B5703F6700E832900122BBE6A5086441EB37BD2C.mft (raw, json)
Hash identifier:          9ZO2IjvehteO9Js3gbHUWw5u0B5FDiSuVFbpjcNEaQs=
Subject key identifier:   B9:36:D5:33:45:C4:D7:9C:37:49:D7:05:4D:E9:D5:24:85:4C:01:7F
Authority key identifier: B5:70:3F:67:00:E8:32:90:01:22:BB:E6:A5:08:64:41:EB:37:BD:2C
Certificate issuer:       /CN=b5703f6700e832900122bbe6a5086441eb37bd2c
Certificate serial:       7EA660DAEF92C276C8017D8CB46D8A511A683501
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tXA_ZwDoMpABIrvmpQhkQes3vSw.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/2f0d4b4e-9f74-4df4-bf5e-0929096dbe04/0/B5703F6700E832900122BBE6A5086441EB37BD2C.mft
Manifest number:          CE
Signing time:             Sat 12 Apr 2025 22:48:22 +0000
Manifest this update:     Sat 12 Apr 2025 22:43:22 +0000
Manifest next update:     Mon 14 Apr 2025 01:41:22 +0000
Files and hashes:         1: B5703F6700E832900122BBE6A5086441EB37BD2C.crl (hash: 2BU0E6O2fC9r6TkkZ6k0aXXHylmObdMkl+lkIeQYMPM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:a6:60:da:ef:92:c2:76:c8:01:7d:8c:b4:6d:8a:51:1a:68:35:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b5703f6700e832900122bbe6a5086441eb37bd2c
        Validity
            Not Before: Apr 12 22:43:22 2025 GMT
            Not After : Apr 14 01:41:22 2025 GMT
        Subject: CN=B936D53345C4D79C3749D7054DE9D524854C017F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:8d:1e:4c:84:63:3e:94:43:1d:13:ab:1e:47:
                    e3:2e:8b:21:88:2b:03:c1:d6:d7:36:27:2e:2c:25:
                    c5:62:e5:55:b8:65:70:1f:55:e4:83:59:fd:b2:d1:
                    01:aa:31:79:53:1e:de:45:7f:7c:07:1c:9f:a8:6d:
                    31:73:d7:79:e1:2b:28:d8:30:00:e7:a7:1a:28:8d:
                    8a:cd:66:bd:a1:18:04:0b:d6:16:fe:0b:a6:ec:8e:
                    b9:90:91:93:93:52:f5:4d:91:2e:6e:29:f6:48:cb:
                    0b:7b:00:0f:3e:f8:95:d1:f6:fd:24:6b:a8:5c:a4:
                    bf:e8:bb:4d:23:fc:df:61:62:d8:55:41:db:42:c2:
                    4d:a5:5c:78:8f:72:9c:36:bd:5e:d4:d1:a6:df:df:
                    4a:a1:da:28:96:2b:3f:ef:ee:f3:ba:f1:c5:95:46:
                    5c:db:bd:43:a0:32:df:ff:1b:9b:f0:1f:3a:15:c5:
                    6f:37:69:eb:b8:03:c7:50:1d:b4:63:d0:68:20:43:
                    8a:e3:3e:4e:16:9c:16:4a:8d:28:e6:76:e8:3c:d0:
                    4f:e2:9c:cc:d9:b9:eb:39:8a:d4:f8:f3:4b:72:02:
                    84:6d:66:9b:1c:e1:de:ae:d1:b8:2f:22:d6:62:c6:
                    da:b6:75:3a:59:c1:c5:f3:5c:ad:cf:33:15:10:f2:
                    65:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:36:D5:33:45:C4:D7:9C:37:49:D7:05:4D:E9:D5:24:85:4C:01:7F
            X509v3 Authority Key Identifier:
                keyid:B5:70:3F:67:00:E8:32:90:01:22:BB:E6:A5:08:64:41:EB:37:BD:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/2f0d4b4e-9f74-4df4-bf5e-0929096dbe04/0/B5703F6700E832900122BBE6A5086441EB37BD2C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tXA_ZwDoMpABIrvmpQhkQes3vSw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/2f0d4b4e-9f74-4df4-bf5e-0929096dbe04/0/B5703F6700E832900122BBE6A5086441EB37BD2C.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:e8:c7:14:49:76:76:83:dc:d3:09:90:a5:12:64:3b:9b:c3:
         66:70:5c:d8:f2:17:1f:3c:3d:e1:68:ae:c5:8d:51:41:72:aa:
         f4:4a:3c:ba:09:8e:49:2e:f8:77:e0:08:8e:2e:93:26:a6:98:
         19:fe:93:f6:a4:ad:60:16:b8:b7:7b:2e:f5:44:a9:33:07:b9:
         8a:63:7f:a1:d8:82:1f:e9:7f:0d:ea:9e:9d:91:ea:bc:6b:52:
         10:84:c0:e7:9d:d3:af:75:73:95:fb:89:4d:14:a6:08:b5:ee:
         68:55:0e:ca:79:ac:38:b5:ad:ea:1d:94:a1:d2:b5:3f:4f:e2:
         61:32:5d:5b:64:a1:75:18:ae:fd:03:54:0d:68:f6:ff:ac:9c:
         05:77:a4:e1:3b:ab:dc:1f:7d:fd:22:dd:51:23:bf:0d:22:57:
         83:df:86:34:30:ed:58:a5:ec:b5:9d:ff:02:dc:4d:fb:aa:c3:
         9b:f7:77:df:d2:00:96:2d:8e:a9:c4:b1:72:25:e3:fc:21:32:
         85:5c:78:73:08:e3:a0:10:90:5e:c1:d6:0f:c6:f7:07:b4:61:
         86:75:9c:71:04:5c:e0:b7:ad:99:dc:40:f2:ea:97:ce:00:f6:
         6b:a5:7a:3e:18:a5:22:9f:fb:38:a0:68:88:d8:2b:65:4f:6d:
         76:7b:bc:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----