Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/5/53A2AA1601CC09214461D03CA771ED50EC1D6325.mft
File:                     53A2AA1601CC09214461D03CA771ED50EC1D6325.mft (raw, json)
Hash identifier:          SBY5AP8HJX8DSUCg7OJ8WhG5eSByno7KL3W2Lx1g9ZI=
Subject key identifier:   89:C5:5E:CF:C4:56:61:BD:06:3C:D5:E4:06:DC:24:FC:4E:26:54:B0
Authority key identifier: 53:A2:AA:16:01:CC:09:21:44:61:D0:3C:A7:71:ED:50:EC:1D:63:25
Certificate issuer:       /CN=53a2aa1601cc09214461d03ca771ed50ec1d6325
Certificate serial:       47EDEC02D06A7FC1E0E6679DFBE0F4B1E0544907
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/U6KqFgHMCSFEYdA8p3HtUOwdYyU.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/5/53A2AA1601CC09214461D03CA771ED50EC1D6325.mft
Manifest number:          01C5
Signing time:             Sun 13 Apr 2025 13:56:39 +0000
Manifest this update:     Sun 13 Apr 2025 13:51:39 +0000
Manifest next update:     Mon 14 Apr 2025 15:51:39 +0000
Files and hashes:         1: 53A2AA1601CC09214461D03CA771ED50EC1D6325.crl (hash: uoRegMR8Xw8JFyBEJ0lXaZ80B6FnV0ygucyGJA1+bXc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:ed:ec:02:d0:6a:7f:c1:e0:e6:67:9d:fb:e0:f4:b1:e0:54:49:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=53a2aa1601cc09214461d03ca771ed50ec1d6325
        Validity
            Not Before: Apr 13 13:51:39 2025 GMT
            Not After : Apr 14 15:51:39 2025 GMT
        Subject: CN=89C55ECFC45661BD063CD5E406DC24FC4E2654B0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:34:ce:19:74:f6:d7:f3:ee:f3:ac:ac:2f:fe:
                    df:9c:db:71:d7:d1:59:27:4c:95:15:24:24:da:c0:
                    7a:cc:f6:07:82:36:c0:8b:f5:bf:de:14:cc:07:ac:
                    b7:f0:c8:b2:43:ab:15:a9:f6:9f:44:03:10:63:05:
                    c0:b7:f1:fe:ae:08:fb:89:22:e4:e9:51:4d:f7:d2:
                    e5:07:e2:6a:50:66:2e:c9:ad:97:f0:20:be:a2:fd:
                    eb:c9:21:2a:8e:66:c7:b6:65:9d:02:aa:b2:6a:5a:
                    b0:39:69:31:b2:d0:d5:f0:b8:7d:b1:75:4e:4a:32:
                    78:4a:84:a6:af:1d:91:1c:e7:fa:50:a4:bd:02:87:
                    4e:95:2b:6e:86:35:a8:fb:ee:f6:f2:cc:7b:7f:5c:
                    bb:04:c2:a5:9c:7f:12:d3:d1:f0:e4:d2:35:13:17:
                    1a:36:3b:9c:57:85:7c:f7:ad:2c:14:d4:1a:93:68:
                    8d:df:f7:4e:0b:67:25:a2:49:30:4c:5d:9b:9c:b8:
                    30:ed:95:66:1d:82:e5:42:e5:ed:42:58:61:83:63:
                    3d:5e:a2:d7:cf:b2:af:62:41:17:14:24:66:a7:63:
                    fe:85:8f:c0:67:99:00:db:8f:98:a7:e0:2a:92:5f:
                    41:5d:39:bf:09:43:b4:36:6c:e5:b4:a1:a4:74:b4:
                    50:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:C5:5E:CF:C4:56:61:BD:06:3C:D5:E4:06:DC:24:FC:4E:26:54:B0
            X509v3 Authority Key Identifier:
                keyid:53:A2:AA:16:01:CC:09:21:44:61:D0:3C:A7:71:ED:50:EC:1D:63:25

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/5/53A2AA1601CC09214461D03CA771ED50EC1D6325.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U6KqFgHMCSFEYdA8p3HtUOwdYyU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/5/53A2AA1601CC09214461D03CA771ED50EC1D6325.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:e6:3b:70:7c:87:78:87:df:b6:1e:28:44:ce:7c:5c:50:06:
         21:c5:27:1d:85:5d:34:38:f2:60:03:dc:14:f1:b9:c8:1f:f9:
         79:ec:97:74:95:bb:02:b8:75:c5:02:19:98:9b:2c:bc:67:04:
         2d:fd:f7:ef:f1:79:00:14:d4:80:37:e7:8c:35:b0:18:44:fa:
         1b:7c:cd:6d:2c:a7:7e:57:31:ee:91:e5:95:75:40:28:5b:f0:
         f2:c7:93:df:d9:25:af:fd:9f:e9:c2:76:d5:14:15:bd:f5:e0:
         b1:fe:d0:a9:86:f0:dc:06:59:1b:12:6f:e0:33:93:96:b4:6e:
         3b:84:57:93:50:c7:3a:39:1c:75:72:93:dc:74:90:7f:03:ae:
         30:dc:cb:a6:8e:77:7d:73:ad:6c:df:51:92:8f:fd:95:11:ac:
         86:ef:48:32:00:63:19:7b:6f:8a:ce:bb:b3:2d:42:cf:84:08:
         a5:41:4a:de:76:4e:2b:4f:1e:76:5a:b5:fd:6d:dc:54:88:e0:
         0e:1f:4a:5f:e9:14:a2:fc:92:2e:b1:5e:6a:43:ed:c3:6c:2d:
         1e:30:4e:9f:7c:30:59:a3:69:f6:a3:ad:44:5e:d7:fa:e7:5c:
         d7:ca:b5:aa:a1:fa:6f:2c:b7:9a:6d:84:7d:04:34:02:48:d2:
         ec:8c:f3:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----