Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c128271e-c269-4954-87db-d184df17f85c/0/0EED1B7B26C35D22B50C5D0CD85544BE88DD8F23.mft
File:                     0EED1B7B26C35D22B50C5D0CD85544BE88DD8F23.mft (raw, json)
Hash identifier:          yDwcX7kpGHNuBTqOcjzr1Thzza+oeatR4OdkGIoAsLg=
Subject key identifier:   13:07:AB:DB:A2:BB:83:E3:77:B1:D8:63:A9:83:59:82:FC:0D:EF:81
Authority key identifier: 0E:ED:1B:7B:26:C3:5D:22:B5:0C:5D:0C:D8:55:44:BE:88:DD:8F:23
Certificate issuer:       /CN=0eed1b7b26c35d22b50c5d0cd85544be88dd8f23
Certificate serial:       15EB333468591BE4AC3498F43E5A2791CE553C34
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Du0beybDXSK1DF0M2FVEvojdjyM.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/c128271e-c269-4954-87db-d184df17f85c/0/0EED1B7B26C35D22B50C5D0CD85544BE88DD8F23.mft
Manifest number:          0388
Signing time:             Sun 13 Apr 2025 09:16:56 +0000
Manifest this update:     Sun 13 Apr 2025 09:11:56 +0000
Manifest next update:     Mon 14 Apr 2025 12:14:56 +0000
Files and hashes:         1: 0EED1B7B26C35D22B50C5D0CD85544BE88DD8F23.crl (hash: 9xfw4gKJTqVHBNv1gJ9RS+ts8Ebzrz6uo6CfqIiWiWQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:eb:33:34:68:59:1b:e4:ac:34:98:f4:3e:5a:27:91:ce:55:3c:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0eed1b7b26c35d22b50c5d0cd85544be88dd8f23
        Validity
            Not Before: Apr 13 09:11:56 2025 GMT
            Not After : Apr 14 12:14:56 2025 GMT
        Subject: CN=1307ABDBA2BB83E377B1D863A9835982FC0DEF81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:ed:a5:e7:3f:3c:9d:0c:e1:8b:c9:bc:10:6a:
                    5d:fd:12:2c:64:b2:79:6d:33:39:da:21:56:0d:cc:
                    8b:b1:82:7a:ab:f3:1d:69:db:a3:66:7d:92:19:24:
                    24:76:3e:c5:00:91:b0:37:6b:3b:14:de:a5:de:f2:
                    84:69:55:c2:c8:41:84:98:3d:4d:aa:9a:c3:69:b9:
                    09:28:8f:91:57:f0:59:02:de:5a:27:81:5b:f7:35:
                    f4:77:b4:82:3d:9f:19:42:78:00:d8:a3:39:6d:27:
                    65:34:1b:27:64:51:40:a7:4d:1d:99:56:e2:18:6e:
                    0f:9e:08:60:d6:65:cd:ed:d7:03:49:ae:86:4f:7a:
                    32:da:18:66:3f:7a:fa:68:1d:d2:4c:9b:ab:24:a7:
                    5f:bd:1f:4c:35:a1:bb:31:a7:80:4e:52:7d:82:4d:
                    b4:2a:66:64:ed:53:2a:f3:43:7e:68:f3:2a:0f:98:
                    9a:34:96:92:d4:73:18:aa:ac:7e:61:53:fc:dd:1c:
                    47:27:27:b9:49:cd:ba:9d:8d:1a:d9:0d:1a:10:45:
                    71:e0:fa:24:3a:62:84:3b:05:1f:ae:14:a0:a5:c4:
                    6c:f5:ec:3d:07:06:29:6a:25:0b:a4:a5:a3:9b:75:
                    73:29:30:8b:d0:35:18:de:63:e6:73:28:a4:cc:91:
                    95:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:07:AB:DB:A2:BB:83:E3:77:B1:D8:63:A9:83:59:82:FC:0D:EF:81
            X509v3 Authority Key Identifier:
                keyid:0E:ED:1B:7B:26:C3:5D:22:B5:0C:5D:0C:D8:55:44:BE:88:DD:8F:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/c128271e-c269-4954-87db-d184df17f85c/0/0EED1B7B26C35D22B50C5D0CD85544BE88DD8F23.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Du0beybDXSK1DF0M2FVEvojdjyM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c128271e-c269-4954-87db-d184df17f85c/0/0EED1B7B26C35D22B50C5D0CD85544BE88DD8F23.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:0a:21:f9:63:d4:3e:59:7b:89:b3:59:0c:81:27:67:5b:34:
         6b:c8:64:1d:06:f7:5f:0a:d2:0e:74:f8:ec:57:f6:b2:dd:4b:
         93:2d:8f:1f:40:db:a3:a7:cb:af:1f:5c:a9:d8:e4:15:07:6b:
         3c:11:c3:79:83:85:78:fe:f7:14:30:51:64:b3:0e:d7:59:12:
         cb:ba:37:6d:8d:d4:71:eb:37:14:f3:10:7b:6d:2a:d3:0a:31:
         f3:68:cc:85:e4:63:a2:ab:61:3f:06:6e:52:cb:23:c8:d4:b1:
         40:71:7c:33:59:de:12:8a:fa:67:fb:f1:a6:8a:18:83:55:df:
         a7:ee:b2:f6:bd:82:c6:01:9b:71:33:85:8d:90:82:04:03:61:
         bc:fa:75:e2:1d:6d:d4:68:c7:d1:ba:a9:ce:bf:60:7a:5f:79:
         17:5a:7e:77:99:54:41:83:65:d7:50:a2:76:e3:da:6b:68:26:
         1e:02:37:26:ca:f8:5b:05:1c:25:ae:0b:d8:4b:a3:61:f6:5c:
         59:ea:44:35:71:fa:71:9d:79:f8:20:03:2c:4c:a7:39:80:7e:
         74:d7:8b:5d:4b:f5:df:0d:8c:7c:39:67:8a:0c:02:99:7a:a9:
         8a:2d:26:cb:56:73:a4:70:c0:dc:f7:f1:a5:83:59:b1:9a:a3:
         5e:7e:d9:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----