Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/4e650b54-abc4-4418-aeb6-088a50d1d5f1/1/D7B42D8A567C7905A57C26B0BBACEA84833B5998.mft
File:                     D7B42D8A567C7905A57C26B0BBACEA84833B5998.mft (raw, json)
Hash identifier:          KPS/XaRkmOutxR0kIU5JlD2efnXYSv8R6EkloQAv/us=
Subject key identifier:   7E:F6:5C:0B:21:53:AD:D9:F3:FC:95:AF:F4:38:54:DF:69:27:2D:7F
Authority key identifier: D7:B4:2D:8A:56:7C:79:05:A5:7C:26:B0:BB:AC:EA:84:83:3B:59:98
Certificate issuer:       /CN=d7b42d8a567c7905a57c26b0bbacea84833b5998
Certificate serial:       239F58A42B4D5CE0DDFA82A684D251559576E620
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/17QtilZ8eQWlfCawu6zqhIM7WZg.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/4e650b54-abc4-4418-aeb6-088a50d1d5f1/1/D7B42D8A567C7905A57C26B0BBACEA84833B5998.mft
Manifest number:          11
Signing time:             Sun 13 Apr 2025 09:43:50 +0000
Manifest this update:     Sun 13 Apr 2025 09:38:50 +0000
Manifest next update:     Mon 14 Apr 2025 12:45:50 +0000
Files and hashes:         1: D7B42D8A567C7905A57C26B0BBACEA84833B5998.crl (hash: 5AvlWVjWt5xzd6WcEUhnfDDaFkQGo1jFh8tCUFOYYDY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:9f:58:a4:2b:4d:5c:e0:dd:fa:82:a6:84:d2:51:55:95:76:e6:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7b42d8a567c7905a57c26b0bbacea84833b5998
        Validity
            Not Before: Apr 13 09:38:50 2025 GMT
            Not After : Apr 14 12:45:50 2025 GMT
        Subject: CN=7EF65C0B2153ADD9F3FC95AFF43854DF69272D7F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:d8:3e:67:90:b4:74:14:2d:6c:9c:92:a0:23:
                    ef:50:24:c7:d5:06:0c:5c:c0:e5:ad:df:61:55:ff:
                    b9:9e:a7:5b:14:47:87:e3:99:31:08:fa:9e:9b:c9:
                    ef:8b:3b:b6:cf:a6:53:f3:91:45:55:51:f7:1d:c5:
                    f2:8c:0a:a8:db:c3:f9:25:27:61:45:2c:96:85:9d:
                    82:57:35:37:1d:30:0a:d6:d0:80:26:09:e4:57:44:
                    92:5a:a2:41:ae:a8:ca:28:21:c7:f5:86:32:69:25:
                    9c:a5:67:22:fb:44:3b:b3:a9:41:b3:27:61:da:83:
                    06:73:20:15:4c:2a:c8:f6:da:ad:06:ab:cc:65:cf:
                    25:22:d3:fa:5d:16:b0:fe:de:23:90:86:27:f1:56:
                    0b:d9:2a:ba:94:1a:99:90:de:c3:a9:59:44:58:1e:
                    d8:a9:bb:66:8b:43:38:f9:4b:f4:ee:e1:01:9e:71:
                    a6:79:9e:c2:eb:78:b4:b3:58:8b:78:6f:24:9c:bb:
                    5b:0e:2f:0f:01:8d:f1:80:50:93:23:20:48:e1:66:
                    73:e8:37:a4:37:44:c0:f1:a1:a9:33:94:cd:09:b6:
                    70:16:2f:8f:d4:db:e8:d3:7e:b7:4b:ad:bb:11:e4:
                    92:72:c5:40:ee:b4:d8:dd:2b:1a:ec:18:d2:77:51:
                    ce:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:F6:5C:0B:21:53:AD:D9:F3:FC:95:AF:F4:38:54:DF:69:27:2D:7F
            X509v3 Authority Key Identifier:
                keyid:D7:B4:2D:8A:56:7C:79:05:A5:7C:26:B0:BB:AC:EA:84:83:3B:59:98

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/4e650b54-abc4-4418-aeb6-088a50d1d5f1/1/D7B42D8A567C7905A57C26B0BBACEA84833B5998.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/17QtilZ8eQWlfCawu6zqhIM7WZg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/4e650b54-abc4-4418-aeb6-088a50d1d5f1/1/D7B42D8A567C7905A57C26B0BBACEA84833B5998.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ae:e0:59:ce:3a:83:5c:9a:82:a3:94:a1:29:cd:4b:60:5c:bb:
         6c:12:ff:6f:15:8f:b1:40:3e:0b:2c:ab:17:f8:84:99:89:84:
         a9:dd:ba:63:fc:40:c2:46:2d:5f:94:19:19:8f:cb:89:90:0a:
         f2:8c:21:1b:1e:6c:b5:98:4c:b8:54:31:8a:b4:4e:e9:bf:e9:
         b9:48:8b:39:a4:5f:4e:47:24:8d:52:3a:fe:bd:17:9a:59:8f:
         8d:3b:87:54:4e:21:4c:31:26:46:20:39:66:8f:ad:e8:97:a8:
         a8:9a:cf:9c:97:82:68:8d:f7:a9:bc:00:b5:8c:eb:4f:6c:00:
         3b:fd:66:72:cb:be:3a:10:14:5a:4c:a4:76:3c:fb:b0:13:b2:
         29:ea:a7:86:00:d9:e0:95:e2:02:8d:54:ce:ed:a5:97:fb:d6:
         09:70:b6:84:1a:13:1c:82:2a:35:d5:97:0e:ae:da:3f:12:73:
         aa:77:94:c4:1d:74:80:78:c9:e1:37:67:32:c6:d9:15:a7:47:
         80:a4:36:5c:be:84:5a:d1:95:cf:9f:91:16:71:c7:ee:c2:5b:
         ab:8e:57:a0:21:95:47:96:1b:d1:2c:77:24:dd:d7:95:bf:d2:
         77:6f:72:ca:da:6a:00:b8:b1:ec:ff:d0:e6:b4:31:ba:8b:c8:
         3c:31:6f:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----