Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/72c405f1-c32d-47ce-8943-0752ed13d8ef/0/193B972646653C886D4001CDAD73EC4E473DA173.mft
File:                     193B972646653C886D4001CDAD73EC4E473DA173.mft (raw, json)
Hash identifier:          UkUMp7vm1G62Ueg2CH1gGH7HHv+2lq+XMDtq/lVK1c8=
Subject key identifier:   42:58:EE:32:79:49:BC:AA:73:37:E8:E6:4E:48:94:36:E9:6E:FC:60
Authority key identifier: 19:3B:97:26:46:65:3C:88:6D:40:01:CD:AD:73:EC:4E:47:3D:A1:73
Certificate issuer:       /CN=193b972646653c886d4001cdad73ec4e473da173
Certificate serial:       3FDB9633CD682463C96177094A8998609B8F0D88
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GTuXJkZlPIhtQAHNrXPsTkc9oXM.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/72c405f1-c32d-47ce-8943-0752ed13d8ef/0/193B972646653C886D4001CDAD73EC4E473DA173.mft
Manifest number:          0150
Signing time:             Sun 13 Apr 2025 06:11:10 +0000
Manifest this update:     Sun 13 Apr 2025 06:06:10 +0000
Manifest next update:     Mon 14 Apr 2025 08:34:10 +0000
Files and hashes:         1: 193B972646653C886D4001CDAD73EC4E473DA173.crl (hash: 3Ssj0T8TDSWavrCS90QXajPEMa5IE66tpYgk4XGgswE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:db:96:33:cd:68:24:63:c9:61:77:09:4a:89:98:60:9b:8f:0d:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=193b972646653c886d4001cdad73ec4e473da173
        Validity
            Not Before: Apr 13 06:06:10 2025 GMT
            Not After : Apr 14 08:34:10 2025 GMT
        Subject: CN=4258EE327949BCAA7337E8E64E489436E96EFC60
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:97:bd:71:d7:a9:5f:ac:ee:9a:c4:65:49:82:
                    a3:49:5e:c4:db:68:a6:9d:ae:67:1b:89:dd:06:78:
                    65:b4:14:04:81:39:17:21:52:27:3f:e5:39:aa:95:
                    a0:42:5d:a9:33:43:a6:0a:f3:50:63:d4:0e:72:8c:
                    13:e0:5d:c0:bb:33:1a:e5:1a:52:4a:ff:65:3b:ff:
                    62:b8:19:76:8e:2b:bf:cc:aa:2c:d4:fc:5c:1d:a8:
                    62:3a:b9:6e:d6:74:06:12:08:ae:56:58:2a:10:a6:
                    d8:86:b0:e5:0f:5a:ba:4b:50:37:ce:6d:66:95:ea:
                    d1:ae:43:97:56:51:45:b2:c9:82:cc:7f:c7:19:2c:
                    63:0a:31:0f:34:9c:53:a6:1e:1b:8e:7c:32:c8:4f:
                    a6:c1:95:66:40:aa:22:a8:04:f6:b7:f9:31:35:97:
                    34:3b:75:01:a9:da:43:41:64:8c:ad:35:b1:99:7f:
                    a8:c6:e0:ff:21:d7:09:03:76:f9:fd:3b:4d:10:b6:
                    22:8f:38:ea:cf:bc:23:ba:5c:ca:3f:26:71:27:ed:
                    63:63:3e:ee:37:36:ea:7d:d1:2d:33:b5:d6:bd:1a:
                    b9:15:3f:10:90:7c:e8:1f:4a:f7:33:85:41:55:5c:
                    d8:ab:85:47:64:7a:c1:fd:e0:ff:d0:6d:17:e4:46:
                    89:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:58:EE:32:79:49:BC:AA:73:37:E8:E6:4E:48:94:36:E9:6E:FC:60
            X509v3 Authority Key Identifier:
                keyid:19:3B:97:26:46:65:3C:88:6D:40:01:CD:AD:73:EC:4E:47:3D:A1:73

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/72c405f1-c32d-47ce-8943-0752ed13d8ef/0/193B972646653C886D4001CDAD73EC4E473DA173.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GTuXJkZlPIhtQAHNrXPsTkc9oXM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/72c405f1-c32d-47ce-8943-0752ed13d8ef/0/193B972646653C886D4001CDAD73EC4E473DA173.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:e9:75:b4:1a:38:86:4d:0c:5f:51:ac:be:33:7f:ff:9b:3f:
         96:1a:c0:ef:e0:b8:b2:8a:65:50:b2:df:31:57:01:af:a0:82:
         be:31:97:c4:58:bc:5f:54:39:d2:74:ca:ba:a4:5d:73:96:c1:
         9b:d1:7b:03:e9:5a:6c:14:85:6b:ea:2d:fc:2b:04:67:2a:06:
         44:e0:4f:fa:11:0a:df:6b:ea:01:d6:d3:f6:77:c4:8a:2d:ac:
         fa:d3:2a:73:3c:8b:ff:39:4f:b4:12:e5:94:16:7b:65:9c:7e:
         32:fb:86:56:3a:27:0f:a7:fb:62:bd:e0:4e:1f:b0:88:fe:ca:
         5a:8c:82:01:69:e7:3b:2f:70:1e:ea:d8:d5:72:15:44:46:ac:
         9f:87:dd:58:e6:28:91:46:dc:af:10:b7:75:28:b3:6b:35:a1:
         19:37:28:68:ce:99:05:47:3b:a0:c8:a0:41:b2:eb:30:e7:8f:
         14:a0:e1:37:da:cc:a4:ce:ab:12:6b:c6:29:36:d4:c8:8e:17:
         a3:3d:be:c5:e0:dc:a8:74:59:bf:0b:88:50:3e:f8:af:44:57:
         9b:b9:e5:e7:d3:52:6a:55:31:db:e6:be:a3:4b:ec:fa:46:4d:
         e5:34:8c:f2:6c:e1:88:a3:97:d5:cc:40:f9:ac:d1:ca:06:bd:
         0b:b3:00:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----