Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c86b65b1-45e9-4fb2-adc5-87ba711e21b7/0/7FD1DD522F6134F070195C5C0E2D4C11CFA6A97D.mft
File:                     7FD1DD522F6134F070195C5C0E2D4C11CFA6A97D.mft (raw, json)
Hash identifier:          facF7uGZfZolHHp/V5kf7oj8NWNhYiBsrlsdT7U6g8c=
Subject key identifier:   5D:9D:8D:B7:60:6F:44:D8:30:1B:45:E1:8B:B2:19:42:D9:87:44:04
Authority key identifier: 7F:D1:DD:52:2F:61:34:F0:70:19:5C:5C:0E:2D:4C:11:CF:A6:A9:7D
Certificate issuer:       /CN=7fd1dd522f6134f070195c5c0e2d4c11cfa6a97d
Certificate serial:       281A83C96B1E0BCF86E1D368567D2653AF8E9AC3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/f9HdUi9hNPBwGVxcDi1MEc-mqX0.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/c86b65b1-45e9-4fb2-adc5-87ba711e21b7/0/7FD1DD522F6134F070195C5C0E2D4C11CFA6A97D.mft
Manifest number:          C0
Signing time:             Sun 13 Apr 2025 09:36:08 +0000
Manifest this update:     Sun 13 Apr 2025 09:31:08 +0000
Manifest next update:     Mon 14 Apr 2025 12:00:08 +0000
Files and hashes:         1: 7FD1DD522F6134F070195C5C0E2D4C11CFA6A97D.crl (hash: WXYU+2X4fpvlJOJXztdCC2R7L6Gya3bOwzuwtXfExTE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:1a:83:c9:6b:1e:0b:cf:86:e1:d3:68:56:7d:26:53:af:8e:9a:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7fd1dd522f6134f070195c5c0e2d4c11cfa6a97d
        Validity
            Not Before: Apr 13 09:31:08 2025 GMT
            Not After : Apr 14 12:00:08 2025 GMT
        Subject: CN=5D9D8DB7606F44D8301B45E18BB21942D9874404
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:df:ba:c7:d8:bd:09:4c:c3:55:02:29:fe:58:
                    62:32:d3:79:6a:64:d8:e0:63:d8:9d:d9:c0:0a:9b:
                    2a:a8:c0:ba:c2:b1:39:c2:f1:29:77:49:42:4a:e8:
                    0b:ee:38:0b:6c:e6:d1:5c:79:2d:c4:f6:b5:14:ea:
                    4b:4e:f8:f9:51:08:40:77:08:99:f2:62:87:36:60:
                    dc:5d:cc:94:07:53:01:bf:ab:5b:05:6f:e1:7b:71:
                    8b:79:a0:2e:c1:53:f9:ba:49:4c:06:86:48:09:14:
                    fd:32:ad:ba:30:0e:9e:48:1e:3c:7a:a7:4e:e3:d4:
                    df:2a:35:57:5e:f3:09:c9:17:fa:5e:f5:b0:27:c6:
                    ca:b6:86:94:e6:86:6a:8e:09:e2:64:b6:d5:e6:a5:
                    da:cb:97:df:fb:5b:e7:8b:d8:09:bb:2c:01:6a:36:
                    4c:f2:96:2e:e6:b4:98:d0:39:26:88:5a:cd:6d:8e:
                    c0:41:96:32:65:d0:6b:08:a6:4c:7c:7b:b2:40:12:
                    92:33:23:d7:8e:32:df:b4:0a:26:8d:57:b9:66:a2:
                    2a:d9:72:63:45:e9:79:a1:cf:d3:0a:05:49:33:c8:
                    5d:ed:c2:4f:e3:2e:1e:0e:df:87:4f:4c:4e:dd:a1:
                    a2:1f:4f:3a:dd:ff:e6:4b:32:e2:ae:18:76:59:b4:
                    dc:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:9D:8D:B7:60:6F:44:D8:30:1B:45:E1:8B:B2:19:42:D9:87:44:04
            X509v3 Authority Key Identifier:
                keyid:7F:D1:DD:52:2F:61:34:F0:70:19:5C:5C:0E:2D:4C:11:CF:A6:A9:7D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/c86b65b1-45e9-4fb2-adc5-87ba711e21b7/0/7FD1DD522F6134F070195C5C0E2D4C11CFA6A97D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9HdUi9hNPBwGVxcDi1MEc-mqX0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c86b65b1-45e9-4fb2-adc5-87ba711e21b7/0/7FD1DD522F6134F070195C5C0E2D4C11CFA6A97D.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:2d:6f:fe:4e:c7:a1:35:b7:75:45:54:22:14:6f:f4:1e:69:
         9a:8b:43:2b:38:77:6a:63:da:63:1d:c8:5a:d3:fa:6a:ae:17:
         11:3e:e2:66:d7:af:b9:c7:4c:5b:c0:b7:a7:24:25:da:ff:ce:
         c7:89:e5:84:ae:8d:9c:0b:29:34:dc:cb:d6:d8:3e:17:b9:88:
         1e:59:d5:8e:4d:e3:67:a9:22:c6:40:93:fc:e6:27:22:7a:d2:
         ad:e9:97:de:bd:1b:98:0c:c1:81:6b:d3:9e:08:96:03:97:63:
         09:4f:c5:c4:bd:98:d6:86:05:7d:a3:42:d5:c3:4b:88:f0:2b:
         ca:57:b3:66:99:16:a7:81:6a:6f:52:95:9e:bc:af:82:c2:0b:
         8b:92:81:14:29:75:49:2c:4c:a1:89:50:a1:f9:04:45:65:36:
         f1:34:76:a5:36:53:52:9e:c2:85:e4:b0:0d:87:04:f6:0e:f8:
         f7:4e:b2:15:5a:79:a9:bb:e4:2a:8d:0b:1e:f5:3e:a3:a8:53:
         c7:4f:a4:ab:a3:6e:4e:ff:25:51:5d:d1:36:c9:f0:87:86:a5:
         2a:83:a0:bb:18:37:46:3a:8b:ab:11:1d:8c:fd:e3:65:58:be:
         a0:74:b7:0f:cd:6a:7a:76:de:7d:3c:5c:3f:ff:18:66:43:fa:
         41:e8:4c:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----