Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/b54fd736-bbc0-4882-84e9-44cc86795dad/0/8FBAB13DB123C5D63DBBC550D214B3E10C091998.mft
File:                     8FBAB13DB123C5D63DBBC550D214B3E10C091998.mft (raw, json)
Hash identifier:          nBxpRMlwlseJndRWI7BEoyriH8vxeN/cOTCNJIz8Gt0=
Subject key identifier:   58:42:52:09:EC:9C:91:7A:79:58:E8:6E:E2:93:CD:62:A5:A5:4A:25
Authority key identifier: 8F:BA:B1:3D:B1:23:C5:D6:3D:BB:C5:50:D2:14:B3:E1:0C:09:19:98
Certificate issuer:       /CN=8fbab13db123c5d63dbbc550d214b3e10c091998
Certificate serial:       2CEEE298DEB62BBDD42BAA78DA6ABF52262C4AA5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/j7qxPbEjxdY9u8VQ0hSz4QwJGZg.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/b54fd736-bbc0-4882-84e9-44cc86795dad/0/8FBAB13DB123C5D63DBBC550D214B3E10C091998.mft
Manifest number:          1E
Signing time:             Sun 13 Apr 2025 09:56:11 +0000
Manifest this update:     Sun 13 Apr 2025 09:51:11 +0000
Manifest next update:     Mon 14 Apr 2025 10:24:11 +0000
Files and hashes:         1: 8FBAB13DB123C5D63DBBC550D214B3E10C091998.crl (hash: O+mDN3l3a+CM/LYwRnPO/mqW7OLkyEV/zyIIyie4Xew=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:ee:e2:98:de:b6:2b:bd:d4:2b:aa:78:da:6a:bf:52:26:2c:4a:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8fbab13db123c5d63dbbc550d214b3e10c091998
        Validity
            Not Before: Apr 13 09:51:11 2025 GMT
            Not After : Apr 14 10:24:11 2025 GMT
        Subject: CN=58425209EC9C917A7958E86EE293CD62A5A54A25
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:fc:4b:02:54:81:b7:36:ec:0a:cf:66:c1:bd:
                    7b:ab:9e:27:b9:db:8e:35:e2:52:30:c3:8b:05:10:
                    da:27:91:7c:e7:3c:04:5f:89:09:51:41:dc:37:09:
                    d8:fd:17:d9:f5:07:8c:1d:0e:f1:20:12:a8:b2:fc:
                    d2:75:12:3c:ce:27:d9:c0:ac:32:5e:3c:0a:b6:7b:
                    ce:66:be:88:3e:29:86:2d:e4:7c:b7:45:06:bc:a6:
                    59:6c:ed:28:fc:9d:bd:ff:d4:91:b8:aa:59:20:c7:
                    87:4b:40:f7:9e:a1:88:cc:b9:5b:d1:dc:e6:73:0a:
                    7f:ae:06:dc:87:1a:f6:b4:36:99:5c:f0:e1:a2:7d:
                    7c:46:ea:e3:90:6d:b1:f0:f7:fa:68:01:6c:19:b2:
                    36:c5:45:cb:06:c4:bc:30:e8:22:8c:df:5d:ba:97:
                    3d:d8:b6:09:f2:71:f6:28:ba:7f:3c:c2:96:25:04:
                    e7:08:32:d5:51:7a:47:6a:aa:bd:54:97:5a:bb:25:
                    f4:d7:8a:41:80:91:47:38:a6:d0:6a:15:32:07:4b:
                    d1:9a:5b:1c:00:a4:26:47:e7:33:16:50:3e:b0:5a:
                    90:b8:0a:85:6d:1e:9e:b7:c3:e6:12:68:bf:6b:98:
                    01:e0:68:9e:44:a3:0c:95:85:b3:02:20:ad:e6:7c:
                    18:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:42:52:09:EC:9C:91:7A:79:58:E8:6E:E2:93:CD:62:A5:A5:4A:25
            X509v3 Authority Key Identifier:
                keyid:8F:BA:B1:3D:B1:23:C5:D6:3D:BB:C5:50:D2:14:B3:E1:0C:09:19:98

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/b54fd736-bbc0-4882-84e9-44cc86795dad/0/8FBAB13DB123C5D63DBBC550D214B3E10C091998.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j7qxPbEjxdY9u8VQ0hSz4QwJGZg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/b54fd736-bbc0-4882-84e9-44cc86795dad/0/8FBAB13DB123C5D63DBBC550D214B3E10C091998.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:7c:15:91:f9:18:a7:cb:04:72:4f:85:9d:d7:42:85:74:10:
         f3:af:91:2e:62:11:15:17:be:f6:2b:27:8d:85:19:be:a2:3e:
         d2:0d:58:40:b8:fc:4c:04:b4:17:a7:f1:2c:39:17:1b:ee:1e:
         43:43:23:df:69:81:1e:79:ba:ac:d0:78:7c:ac:9c:dc:b2:d0:
         45:57:cf:f5:ee:a0:8a:f8:25:ac:79:21:d6:ab:3e:8d:e1:83:
         62:47:a4:d0:cb:3f:1e:a9:37:2a:5e:1d:a8:3e:b6:ca:04:68:
         3b:93:32:aa:0f:21:9c:17:d7:06:04:e0:af:dd:a7:dd:cb:18:
         48:30:26:16:b1:f2:e5:2d:2e:cd:b1:d8:48:75:dd:04:9c:62:
         d4:fa:87:8a:cd:96:a7:c5:70:a7:d1:f2:1b:f1:97:7e:ae:f8:
         c5:6d:c3:f7:b5:6c:e5:30:41:4a:62:5b:f7:81:c3:91:23:16:
         fb:a3:4b:8f:4a:3c:7e:bd:d9:4e:4b:df:f3:61:21:45:37:6a:
         b0:c4:dd:27:40:31:71:16:b3:61:a1:0e:2f:84:58:a2:b0:ac:
         e1:36:9a:86:54:ac:cc:3f:59:49:97:20:78:c7:35:7f:21:d4:
         c0:90:5c:ac:88:f5:59:cb:56:39:78:07:23:2e:38:4e:a3:28:
         7d:7b:fe:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----