Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/2/CDC014669D381152AFB94B76936268BFF73E7D50.mft
File:                     CDC014669D381152AFB94B76936268BFF73E7D50.mft (raw, json)
Hash identifier:          FpQPHFfrIZTRSWMVLRFXgtCKLU+L0G9b2U3a6/XDilo=
Subject key identifier:   31:8B:28:3A:A0:E6:6B:A6:6E:04:74:4F:70:88:7C:6B:7A:1E:6B:81
Authority key identifier: CD:C0:14:66:9D:38:11:52:AF:B9:4B:76:93:62:68:BF:F7:3E:7D:50
Certificate issuer:       /CN=CDC014669D381152AFB94B76936268BFF73E7D50
Certificate serial:       31FED0C93882CC5AE95D37E0B756333323FCA6EA
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/CDC014669D381152AFB94B76936268BFF73E7D50.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/2/CDC014669D381152AFB94B76936268BFF73E7D50.mft
Manifest number:          04BC
Signing time:             Thu 23 Jan 2025 07:44:24 +0000
Manifest this update:     Thu 23 Jan 2025 07:39:24 +0000
Manifest next update:     Fri 24 Jan 2025 10:39:24 +0000
Files and hashes:         1: CDC014669D381152AFB94B76936268BFF73E7D50.crl (hash: GLq34llaXj241T9kuK2gjySxGrhAtoUe6wTS9d8ZA/k=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:fe:d0:c9:38:82:cc:5a:e9:5d:37:e0:b7:56:33:33:23:fc:a6:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CDC014669D381152AFB94B76936268BFF73E7D50
        Validity
            Not Before: Jan 23 07:39:24 2025 GMT
            Not After : Jan 24 10:39:24 2025 GMT
        Subject: CN=318B283AA0E66BA66E04744F70887C6B7A1E6B81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:89:28:d0:58:75:bb:2b:47:2b:0d:6f:49:71:
                    49:16:b2:37:e0:e2:e6:12:2c:ba:1d:cb:54:a4:38:
                    69:53:c2:07:ab:41:c7:c2:78:22:7e:f3:6b:8f:64:
                    5d:2f:87:30:0b:d1:8a:7c:36:a7:9e:81:d2:d1:50:
                    e9:6d:46:4a:e2:12:b7:60:c1:9e:39:85:07:52:2d:
                    9b:43:19:ff:f4:ab:05:11:01:bd:8b:ee:46:6e:42:
                    6c:76:06:2c:32:cc:ef:de:cd:63:f0:b6:61:73:93:
                    be:8e:1f:e8:72:bf:8b:8b:0e:0c:38:60:95:cd:a4:
                    01:7b:5b:91:c2:22:bd:94:05:8e:94:bb:d1:7a:05:
                    1f:df:d4:c9:1a:98:54:61:cb:aa:ed:9a:ef:e6:a1:
                    76:be:7b:fe:db:ce:75:f9:31:da:2f:0c:5e:03:b0:
                    e3:da:18:d1:b7:d9:6c:54:75:77:55:20:d7:f7:37:
                    08:c6:74:c7:d2:ef:3e:0b:f5:92:76:20:68:57:95:
                    30:46:40:66:bf:f4:bd:7a:0c:70:e9:57:ce:3a:16:
                    17:48:73:9a:41:7e:eb:76:77:57:2b:85:03:9e:2a:
                    fc:f4:2a:96:7b:88:e7:9c:fa:fe:ea:da:3f:9f:81:
                    a5:ba:1d:4c:ba:6f:de:e8:ca:43:a0:f0:5c:77:d6:
                    62:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:8B:28:3A:A0:E6:6B:A6:6E:04:74:4F:70:88:7C:6B:7A:1E:6B:81
            X509v3 Authority Key Identifier:
                keyid:CD:C0:14:66:9D:38:11:52:AF:B9:4B:76:93:62:68:BF:F7:3E:7D:50

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/2/CDC014669D381152AFB94B76936268BFF73E7D50.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/CDC014669D381152AFB94B76936268BFF73E7D50.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/2/CDC014669D381152AFB94B76936268BFF73E7D50.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:e3:bc:e9:63:7e:fb:6f:b5:fd:1c:e5:d7:3c:ca:5c:11:1b:
         22:bd:fb:4a:4b:8c:b1:64:85:e1:eb:cc:86:f3:59:29:a7:62:
         c3:e4:f2:61:1e:ac:24:7e:4e:45:f1:ac:58:72:87:2b:1a:2e:
         70:33:c7:22:18:9f:c0:47:a6:14:24:4c:36:9f:3b:0c:55:71:
         1e:3a:ce:79:0a:ff:3f:2c:0f:14:c3:67:04:dd:55:4d:eb:a4:
         e0:50:18:7c:b7:93:85:ed:98:15:41:5e:9c:01:7b:37:21:d6:
         ff:a0:6b:69:ca:99:36:04:0a:0a:7a:df:bf:a4:fb:1a:9b:8e:
         60:d1:ce:f7:19:f6:65:28:72:b8:3a:ef:e6:21:5c:20:37:bc:
         a3:98:a2:51:7f:59:ef:22:7d:f0:f4:66:88:25:56:29:89:5a:
         f2:1b:ec:47:e0:2a:dc:6e:83:d2:0a:44:90:af:cd:86:73:d4:
         e4:91:df:c1:b0:50:74:f9:c8:e8:53:76:8b:b7:f8:a2:70:1a:
         95:85:9d:9b:44:4b:18:53:9e:df:b2:e7:cb:59:82:30:6e:f2:
         b7:9a:f3:fc:24:3c:ae:14:b7:02:8e:f8:df:0e:17:3b:9a:f7:
         b3:ee:a4:c8:c2:73:f3:70:fc:17:14:7c:76:36:94:2e:13:9c:
         db:c0:03:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----