Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/71476d62-9cfa-4871-a2d9-fadf5781c11b/0/E8BC9876174D9A7385FCE9343E2BB7D98F523B11.mft
File:                     E8BC9876174D9A7385FCE9343E2BB7D98F523B11.mft (raw, json)
Hash identifier:          a8+AfEX2Q+aLE8pbz/c8yGG54RT2GEWCocdx/nSC99M=
Subject key identifier:   EE:1B:DE:B1:DD:48:11:B0:8D:D7:61:B7:41:B1:70:77:86:FB:21:32
Authority key identifier: E8:BC:98:76:17:4D:9A:73:85:FC:E9:34:3E:2B:B7:D9:8F:52:3B:11
Certificate issuer:       /CN=e8bc9876174d9a7385fce9343e2bb7d98f523b11
Certificate serial:       129DA23919517A94DB4638E55406EA7934E03FB6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6LyYdhdNmnOF_Ok0Piu32Y9SOxE.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/71476d62-9cfa-4871-a2d9-fadf5781c11b/0/E8BC9876174D9A7385FCE9343E2BB7D98F523B11.mft
Manifest number:          03B9
Signing time:             Sun 13 Apr 2025 11:59:30 +0000
Manifest this update:     Sun 13 Apr 2025 11:54:30 +0000
Manifest next update:     Mon 14 Apr 2025 15:18:30 +0000
Files and hashes:         1: E8BC9876174D9A7385FCE9343E2BB7D98F523B11.crl (hash: 3qazYT/aTzYNSfC83BNaghHxOnQze5J7McRWgKrHf80=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:9d:a2:39:19:51:7a:94:db:46:38:e5:54:06:ea:79:34:e0:3f:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e8bc9876174d9a7385fce9343e2bb7d98f523b11
        Validity
            Not Before: Apr 13 11:54:30 2025 GMT
            Not After : Apr 14 15:18:30 2025 GMT
        Subject: CN=EE1BDEB1DD4811B08DD761B741B1707786FB2132
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:c4:08:51:65:63:dd:8d:35:49:4a:59:f2:ff:
                    0b:b5:19:6c:7f:d3:82:dd:1c:3e:2c:5b:d8:46:c1:
                    d0:63:f5:77:d8:d0:74:4f:cf:43:61:4e:f7:62:4d:
                    d4:f4:a4:53:f9:4b:e4:eb:d6:fa:20:23:09:d3:fd:
                    97:58:c6:ee:28:72:33:eb:f8:d8:ff:3c:d2:b5:b3:
                    c8:bb:2e:ce:61:b8:ca:e1:21:d0:0d:53:1f:18:f0:
                    cb:b1:56:d5:fa:e5:41:4a:dc:5c:9a:d0:f0:75:0b:
                    d7:5b:f4:6c:77:d2:a9:8b:9a:49:0c:c0:ce:13:e1:
                    77:f2:9f:fc:b0:2e:e5:c2:40:79:f5:16:19:23:02:
                    59:c1:84:0e:31:85:04:cb:09:15:2f:33:ed:c7:c6:
                    ef:3e:44:8c:f4:5b:38:7d:14:f2:44:ef:a1:b1:df:
                    06:e3:2a:44:b0:23:2a:27:68:a2:fa:61:a4:ed:c4:
                    ed:43:da:37:ae:2b:b1:f6:dc:56:c9:82:f6:ef:fd:
                    f0:7d:60:05:28:48:75:9d:6f:1f:42:06:b3:ee:b0:
                    4d:a3:a3:d7:5f:1a:c5:c0:62:35:23:d2:03:c0:ca:
                    0a:e7:35:29:d4:99:2b:a1:ae:67:4a:cf:f0:96:ec:
                    e6:2b:eb:0d:19:22:34:b5:f1:94:c8:b7:7b:04:48:
                    1f:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:1B:DE:B1:DD:48:11:B0:8D:D7:61:B7:41:B1:70:77:86:FB:21:32
            X509v3 Authority Key Identifier:
                keyid:E8:BC:98:76:17:4D:9A:73:85:FC:E9:34:3E:2B:B7:D9:8F:52:3B:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/71476d62-9cfa-4871-a2d9-fadf5781c11b/0/E8BC9876174D9A7385FCE9343E2BB7D98F523B11.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6LyYdhdNmnOF_Ok0Piu32Y9SOxE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/71476d62-9cfa-4871-a2d9-fadf5781c11b/0/E8BC9876174D9A7385FCE9343E2BB7D98F523B11.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:28:ae:33:0f:26:20:a3:75:04:19:1d:52:47:b3:87:e0:f3:
         92:5f:91:d8:2a:a5:10:3b:19:10:1c:cf:21:b0:76:21:16:21:
         e5:4e:f6:95:c4:9b:7b:3e:0a:06:1a:4b:1a:ce:55:6f:2b:b8:
         a3:8a:65:9d:34:07:84:68:37:88:64:b5:9b:80:b1:fc:f5:d0:
         4f:77:4a:7a:36:1d:e6:9b:65:e9:be:e4:9e:7e:a0:71:74:44:
         c7:58:69:dc:65:3c:08:0b:d2:d2:6f:cb:9d:1a:cf:6c:45:71:
         b7:e9:bd:40:ef:4a:52:3a:2b:74:b5:1e:f7:0d:d1:5e:06:58:
         0d:9b:2d:08:4a:55:ab:a5:02:4f:80:a4:14:64:c1:7e:81:09:
         7a:59:f1:42:c5:81:92:9e:5e:ba:14:ee:88:11:cf:e5:e2:10:
         ad:5a:5c:84:11:03:e5:22:ee:2c:e3:e3:e2:14:e9:b7:f9:26:
         81:d4:08:9d:4c:9a:a0:7b:1d:3f:a6:2d:5d:f6:f0:3f:46:0a:
         d3:31:48:de:ca:09:20:5e:36:05:c4:bf:71:f9:fe:ec:72:90:
         49:f1:5e:4f:f5:39:7e:e2:92:3e:0c:81:94:0a:a9:53:99:76:
         9c:d6:58:c0:1b:4d:14:e2:3d:e5:2d:5a:bd:23:f4:d5:fd:3e:
         76:08:e6:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----