Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/65eae745-8ac9-4e71-bc94-fcb261703f96/0/5DBF811E504A4FA2C29D3B4F11DFB713642873D3.mft
File:                     5DBF811E504A4FA2C29D3B4F11DFB713642873D3.mft (raw, json)
Hash identifier:          Rwiq/5tf05mdnPzZaa9qnV2ac26afturHgUkQbJLk0w=
Subject key identifier:   4A:77:D5:9C:88:12:DB:D7:11:73:E2:A5:72:78:F0:48:5A:BA:F0:2C
Authority key identifier: 5D:BF:81:1E:50:4A:4F:A2:C2:9D:3B:4F:11:DF:B7:13:64:28:73:D3
Certificate issuer:       /CN=5dbf811e504a4fa2c29d3b4f11dfb713642873d3
Certificate serial:       2095C263D1EB27D1A54D14EACDE204E56E25F59A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Xb-BHlBKT6LCnTtPEd-3E2Qoc9M.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/65eae745-8ac9-4e71-bc94-fcb261703f96/0/5DBF811E504A4FA2C29D3B4F11DFB713642873D3.mft
Manifest number:          0155
Signing time:             Sun 13 Apr 2025 08:34:16 +0000
Manifest this update:     Sun 13 Apr 2025 08:29:16 +0000
Manifest next update:     Mon 14 Apr 2025 10:11:16 +0000
Files and hashes:         1: 5DBF811E504A4FA2C29D3B4F11DFB713642873D3.crl (hash: lPSQuvPz+Js6G2aY22K5QPSTBMHPKft65LZMcWhGQxI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:95:c2:63:d1:eb:27:d1:a5:4d:14:ea:cd:e2:04:e5:6e:25:f5:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5dbf811e504a4fa2c29d3b4f11dfb713642873d3
        Validity
            Not Before: Apr 13 08:29:16 2025 GMT
            Not After : Apr 14 10:11:16 2025 GMT
        Subject: CN=4A77D59C8812DBD71173E2A57278F0485ABAF02C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:a7:5d:26:0c:06:fe:68:33:32:4e:0a:41:99:
                    9e:97:a9:f6:f2:bd:74:c5:7f:55:05:60:c4:ec:99:
                    58:9d:e3:28:f2:73:d5:50:ce:11:c3:29:58:68:36:
                    45:90:55:95:5c:50:9a:48:7f:81:d8:0d:12:7a:d1:
                    54:03:cc:18:d8:64:28:f4:ab:87:2a:8b:77:03:5b:
                    b3:5f:94:7f:8d:23:a0:29:8d:fc:ab:81:d6:1b:33:
                    83:32:87:86:aa:48:60:80:92:f9:ae:c4:95:27:24:
                    da:1b:e5:bc:81:74:97:32:7f:46:09:7b:f7:9d:af:
                    1e:1e:1f:d3:d6:24:5c:f9:cb:6a:ae:af:d7:5b:7b:
                    05:e4:16:f9:a6:8b:25:02:84:72:93:c8:ef:eb:ed:
                    c3:06:48:58:19:8c:06:ae:dd:60:1d:ef:1f:b8:e5:
                    5d:ec:14:76:0e:f6:fb:e6:58:70:d9:20:5d:e5:cb:
                    21:e8:cf:2d:7b:7a:39:ea:f0:87:69:b8:f3:17:94:
                    06:da:5d:36:dc:21:8d:76:20:a9:a5:69:ae:95:9b:
                    0b:9f:d6:84:bc:20:2d:dc:ed:10:56:73:91:ec:41:
                    f6:ff:cd:7b:b3:8b:b4:b5:96:1d:17:17:34:37:5d:
                    93:9d:7e:ec:8f:f5:ad:84:20:a7:0f:00:71:d5:5a:
                    fd:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:77:D5:9C:88:12:DB:D7:11:73:E2:A5:72:78:F0:48:5A:BA:F0:2C
            X509v3 Authority Key Identifier:
                keyid:5D:BF:81:1E:50:4A:4F:A2:C2:9D:3B:4F:11:DF:B7:13:64:28:73:D3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/65eae745-8ac9-4e71-bc94-fcb261703f96/0/5DBF811E504A4FA2C29D3B4F11DFB713642873D3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xb-BHlBKT6LCnTtPEd-3E2Qoc9M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/65eae745-8ac9-4e71-bc94-fcb261703f96/0/5DBF811E504A4FA2C29D3B4F11DFB713642873D3.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:7e:da:77:5d:fd:1a:ba:84:c3:49:a3:e4:7b:04:23:c8:df:
         b1:60:cf:d4:c9:f9:86:fe:69:db:25:aa:39:ca:f8:61:3f:c8:
         ce:5e:a0:fa:e3:f3:40:c5:0e:f3:f4:fd:28:67:de:7a:dd:52:
         65:d1:c8:dd:5c:75:58:36:64:ba:bd:f0:3b:22:d3:3e:18:81:
         7f:8d:72:fd:8f:d1:31:50:17:78:d3:55:af:d4:44:60:2f:74:
         5d:a3:6e:af:20:9e:1f:43:37:cb:61:bd:c7:55:88:a7:71:34:
         20:ca:94:b7:b0:aa:47:3e:fc:14:1f:bf:c5:d2:e5:d2:19:8f:
         f6:4a:c6:b1:4f:95:50:3d:8e:8e:f2:72:ac:cf:77:53:80:94:
         50:04:35:5d:ec:11:9b:01:39:78:5c:91:f0:8c:96:e1:62:9e:
         c1:c5:1e:9a:b5:49:03:31:00:2f:6d:5d:a3:af:38:3d:7b:75:
         99:c5:37:f3:0f:20:85:cd:a8:06:98:2a:9a:3b:e5:de:6f:03:
         63:c3:ed:5c:0d:ce:69:ea:92:4f:b3:2a:31:05:7d:99:da:91:
         f1:60:e3:d5:99:92:f4:ba:33:8d:74:68:e6:f6:f1:c8:e4:d8:
         44:1d:a8:70:3d:c0:d9:84:2a:55:94:35:c0:04:52:e5:e6:43:
         96:bf:67:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----